$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096686730825760771/0/34332e3234302e3135362e302f32332d3233203d3e20313334373731.roa File: 34332e3234302e3135362e302f32332d3233203d3e20313334373731.roa (raw, json) Hash identifier: TeSDWKBTe4EvIUkm0+5J0aWmiTxbYu2DsR4+kBNZ4Mw= Subject key identifier: EC:B6:6D:75:EC:0C:19:28:24:75:9E:D5:57:6B:4C:A9:86:A3:2E:A7 Certificate issuer: /CN=69D8917902AD24A5AC6751655C29BB7E9171C796 Certificate serial: 789276A910D9307E01C8FF147FEE80C316306AAF Authority key identifier: 69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/34332e3234302e3135362e302f32332d3233203d3e20313334373731.roa Signing time: Thu 28 May 2026 02:38:10 +0000 ROA not before: Thu 28 May 2026 02:33:10 +0000 ROA not after: Thu 27 May 2027 02:38:10 +0000 asID: 134771 IP address blocks: 43.240.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 12:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:92:76:a9:10:d9:30:7e:01:c8:ff:14:7f:ee:80:c3:16:30:6a:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69D8917902AD24A5AC6751655C29BB7E9171C796 Validity Not Before: May 28 02:33:10 2026 GMT Not After : May 27 02:38:10 2027 GMT Subject: CN=ECB66D75EC0C192824759ED5576B4CA986A32EA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:91:ec:c5:9d:b7:58:5d:a6:ad:81:5f:11:42: 2c:08:e8:fc:87:0b:e4:f4:3a:cd:fc:55:67:5c:1a: 9c:30:01:38:0e:22:9a:c4:cf:8e:10:94:1a:e0:73: 7c:62:fe:ee:47:c9:52:78:ae:3a:23:15:84:58:37: a1:7b:69:e1:f8:81:76:57:de:04:4a:7a:3b:57:de: 4f:dd:72:99:dd:4c:cd:88:ae:2a:26:f4:79:60:3f: 51:b1:72:93:71:7f:99:47:03:e0:65:04:56:5a:2f: fa:55:82:95:10:11:2d:72:65:5e:58:79:d0:96:91: fa:01:25:3f:f0:69:57:39:54:d7:14:38:bf:1d:5e: cc:63:d6:1f:f3:38:c8:2f:83:d6:f6:29:4c:32:a7: b9:59:c9:54:4d:42:28:0d:04:c1:4b:72:b8:5b:86: 6f:dd:dd:4e:91:77:73:62:05:bb:4f:f9:2b:8e:5c: ca:36:f5:0e:0f:75:78:3f:5c:8c:dd:a7:4c:5c:3a: 86:0d:7d:24:d2:94:8b:9b:4b:e3:a0:d4:38:dc:21: 72:a2:fc:d0:1b:9e:7e:51:3c:fb:79:9d:64:f9:8f: 41:dd:db:6b:ab:ab:41:0b:17:85:44:25:18:7b:63: 50:61:7a:15:a4:d0:85:4c:b5:93:13:aa:90:78:11: 7a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B6:6D:75:EC:0C:19:28:24:75:9E:D5:57:6B:4C:A9:86:A3:2E:A7 X509v3 Authority Key Identifier: keyid:69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/34332e3234302e3135362e302f32332d3233203d3e20313334373731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.156.0/23 Signature Algorithm: sha256WithRSAEncryption 28:26:b6:84:54:3c:bb:40:1a:c3:c3:92:1c:1b:9a:16:18:e6: d5:c9:9c:4d:04:55:87:03:c2:5d:07:5c:9e:e7:20:93:78:4a: d2:0c:5f:d0:44:28:34:f0:77:db:fb:60:37:02:b4:5e:fc:e2: 91:ac:39:16:9c:80:bd:0d:44:cf:e3:b2:f7:19:bb:48:e5:16: 5c:05:da:f8:a3:a7:22:07:c0:4a:a0:75:fb:16:c5:cf:a0:dd: e0:c4:b0:6c:bd:98:42:9b:10:6b:2f:d5:c8:06:2a:85:5d:6b: a5:a2:c6:20:90:79:ff:53:17:55:f4:df:8e:d0:82:c7:55:be: 79:3a:d9:7c:8d:88:8a:21:be:94:49:41:9e:67:54:4a:46:da: 14:31:e8:de:3e:65:58:b3:51:67:ba:b3:c5:43:6f:33:5a:c6: 7d:ed:c7:6f:3f:f3:38:3b:39:a2:44:cd:13:f1:78:77:83:84: 72:e7:51:ed:e5:3a:2d:e9:74:5d:e9:e2:cc:ed:37:a8:02:9b: cb:31:e7:6a:02:0e:4c:fd:07:64:0f:35:de:4a:56:a0:de:9f: 26:0b:04:bd:47:f2:05:91:53:01:29:c9:4e:d1:bd:c8:15:8b: 22:b3:35:42:ff:09:04:6a:f0:6d:e4:e4:67:25:bf:b9:38:67: 00:85:65:3c -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUeJJ2qRDZMH4ByP8Uf+6AwxYwaq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlEODkxNzkwMkFEMjRBNUFDNjc1MTY1NUMyOUJCN0U5 MTcxQzc5NjAeFw0yNjA1MjgwMjMzMTBaFw0yNzA1MjcwMjM4MTBaMDMxMTAvBgNV BAMTKEVDQjY2RDc1RUMwQzE5MjgyNDc1OUVENTU3NkI0Q0E5ODZBMzJFQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRkezFnbdYXaatgV8RQiwI6PyH C+T0Os38VWdcGpwwATgOIprEz44QlBrgc3xi/u5HyVJ4rjojFYRYN6F7aeH4gXZX 3gRKejtX3k/dcpndTM2Iriom9HlgP1GxcpNxf5lHA+BlBFZaL/pVgpUQES1yZV5Y edCWkfoBJT/waVc5VNcUOL8dXsxj1h/zOMgvg9b2KUwyp7lZyVRNQigNBMFLcrhb hm/d3U6Rd3NiBbtP+SuOXMo29Q4PdXg/XIzdp0xcOoYNfSTSlIubS+Og1DjcIXKi /NAbnn5RPPt5nWT5j0Hd22urq0ELF4VEJRh7Y1BhehWk0IVMtZMTqpB4EXrnAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU7LZtdewMGSgkdZ7VV2tMqYajLqcwHwYDVR0j BBgwFoAUadiReQKtJKWsZ1FlXCm7fpFxx5YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY4NjczMDgyNTc2MDc3MS8wLzY5RDg5MTc5MDJBRDI0QTVBQzY3NTE2NTVDMjlC QjdFOTE3MUM3OTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjlEODkxNzkwMkFEMjRBNUFDNjc1MTY1NUMyOUJCN0U5MTcxQzc5Ni5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTY2ODY3MzA4MjU3NjA3NzEvMC8zNDMzMmUzMjM0 MzAyZTMxMzUzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzMzNDM3MzczMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEASvwnDANBgkqhkiG9w0BAQsFAAOCAQEAKCa2hFQ8u0Aaw8OSHBua Fhjm1cmcTQRVhwPCXQdcnucgk3hK0gxf0EQoNPB32/tgNwK0Xvzikaw5FpyAvQ1E z+Oy9xm7SOUWXAXa+KOnIgfASqB1+xbFz6Dd4MSwbL2YQpsQay/VyAYqhV1rpaLG IJB5/1MXVfTfjtCCx1W+eTrZfI2IiiG+lElBnmdUSkbaFDHo3j5lWLNRZ7qzxUNv M1rGfe3Hbz/zODs5okTNE/F4d4OEcudR7eU6Lel0XenizO03qAKbyzHnagIOTP0H ZA813kpWoN6fJgsEvUfyBZFTASnJTtG9yBWLIrM1Qv8JBGrwbeTkZyW/uThnAIVl PA== -----END CERTIFICATE-----Generated at Fri May 29 23:53:12 2026 by rpki-client