$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096686730825760771/0/34332e3234302e3135382e302f32332d3233203d3e20313334373731.roa File: 34332e3234302e3135382e302f32332d3233203d3e20313334373731.roa (raw, json) Hash identifier: qSvESqSS+8/NGX/IiUay4iIZHDU9Cvfs4uU4IgIpKOc= Subject key identifier: 3D:E4:FE:8E:D2:10:E9:EE:36:3D:C0:24:A0:11:86:3A:8F:08:AA:46 Certificate issuer: /CN=69D8917902AD24A5AC6751655C29BB7E9171C796 Certificate serial: 08966D27E9C2AC49812F3D1007F7E8CC773969DD Authority key identifier: 69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/34332e3234302e3135382e302f32332d3233203d3e20313334373731.roa Signing time: Thu 28 May 2026 02:37:20 +0000 ROA not before: Thu 28 May 2026 02:32:20 +0000 ROA not after: Thu 27 May 2027 02:37:20 +0000 asID: 134771 IP address blocks: 43.240.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 12:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:96:6d:27:e9:c2:ac:49:81:2f:3d:10:07:f7:e8:cc:77:39:69:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69D8917902AD24A5AC6751655C29BB7E9171C796 Validity Not Before: May 28 02:32:20 2026 GMT Not After : May 27 02:37:20 2027 GMT Subject: CN=3DE4FE8ED210E9EE363DC024A011863A8F08AA46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d3:76:f9:e5:7f:04:1e:a0:2d:23:c7:c1:4c: fd:c6:d4:57:7f:81:1a:8f:fe:71:ee:4c:a1:cc:69: 93:ce:b0:7b:d8:5c:4d:22:32:6e:aa:b4:e8:e1:b0: c6:3f:43:a2:92:c3:e8:e6:c0:7d:e6:86:6f:ef:c9: 5a:6d:83:de:c1:0d:ac:a8:20:0c:8e:fb:43:ad:fe: dc:f0:ab:dc:55:4f:15:86:20:d0:35:43:a0:a3:0f: 52:86:84:a4:7b:70:d7:d2:a0:17:57:5e:9d:52:f9: fe:bc:db:9f:76:2d:a0:fa:f5:88:b6:8d:01:28:f2: 52:73:46:c3:33:ff:44:e5:18:a0:ca:b2:a2:b9:0e: 8e:84:c6:66:a9:77:aa:d7:ef:15:20:9f:dc:ee:e9: 87:58:e7:2b:a3:4e:dd:06:09:4f:d8:d8:e7:b3:c4: 1d:bd:7a:86:39:27:4b:ed:7e:bc:ee:72:95:ce:f4: 92:86:0b:12:67:92:16:50:54:ae:ed:01:69:20:1f: ac:db:a7:fd:44:f4:07:3e:82:af:f6:b2:e2:f4:ae: 3e:e7:95:78:7b:11:c2:29:9e:75:a1:f8:49:20:60: 32:ec:f1:ac:56:d2:f1:c6:09:c4:37:8e:15:e7:a6: 5f:bf:c5:e6:69:6b:43:82:9c:bd:db:94:c2:d2:0c: 03:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E4:FE:8E:D2:10:E9:EE:36:3D:C0:24:A0:11:86:3A:8F:08:AA:46 X509v3 Authority Key Identifier: keyid:69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/34332e3234302e3135382e302f32332d3233203d3e20313334373731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.158.0/23 Signature Algorithm: sha256WithRSAEncryption a0:e8:40:86:82:d7:98:bb:71:10:cc:6f:00:44:bf:3c:6a:21: 85:9e:4f:bf:c9:01:8d:09:a9:32:62:1b:68:1a:ee:6b:ae:1d: 98:9b:87:d4:a1:4e:8a:71:c0:20:b0:f4:4c:f8:4f:d6:8e:a4: 40:c5:93:9b:81:86:c4:86:86:da:82:3f:71:67:c6:61:bd:18: 34:fb:22:f5:3a:60:7a:43:6f:c0:f1:7d:f7:0e:c9:3e:2e:6e: 1a:73:9e:75:ef:86:14:d9:fa:e5:fa:27:9a:33:66:09:4a:62: ad:91:a9:ca:0f:40:9e:37:7e:77:52:49:38:9d:2a:8b:11:5c: 69:1a:cc:d6:42:c2:f3:05:4d:82:cc:95:23:ee:a8:99:d5:1c: 91:ed:2c:16:ce:d8:9e:e1:0a:1a:6f:c4:b9:ee:2b:d2:c1:27: 2c:bf:36:50:0e:36:51:a4:67:89:78:52:86:8a:8c:b4:c4:5b: ea:ff:49:4c:3a:15:43:4d:f8:52:4a:ca:2d:ad:5c:36:74:43: 6e:f0:be:78:55:71:47:d4:60:e6:3a:fd:d6:5b:53:96:cb:b3: c7:ff:24:e1:cc:d7:ff:55:95:d2:cd:b5:66:00:d5:78:36:da: 01:c7:b1:69:09:c6:7c:a8:be:db:55:e0:93:dd:a9:4e:d5:15: 6c:18:fa:40 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUCJZtJ+nCrEmBLz0QB/fozHc5ad0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlEODkxNzkwMkFEMjRBNUFDNjc1MTY1NUMyOUJCN0U5 MTcxQzc5NjAeFw0yNjA1MjgwMjMyMjBaFw0yNzA1MjcwMjM3MjBaMDMxMTAvBgNV BAMTKDNERTRGRThFRDIxMEU5RUUzNjNEQzAyNEEwMTE4NjNBOEYwOEFBNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV03b55X8EHqAtI8fBTP3G1Fd/ gRqP/nHuTKHMaZPOsHvYXE0iMm6qtOjhsMY/Q6KSw+jmwH3mhm/vyVptg97BDayo IAyO+0Ot/tzwq9xVTxWGINA1Q6CjD1KGhKR7cNfSoBdXXp1S+f682592LaD69Yi2 jQEo8lJzRsMz/0TlGKDKsqK5Do6Exmapd6rX7xUgn9zu6YdY5yujTt0GCU/Y2Oez xB29eoY5J0vtfrzucpXO9JKGCxJnkhZQVK7tAWkgH6zbp/1E9Ac+gq/2suL0rj7n lXh7EcIpnnWh+EkgYDLs8axW0vHGCcQ3jhXnpl+/xeZpa0OCnL3blMLSDAMxAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUPeT+jtIQ6e42PcAkoBGGOo8IqkYwHwYDVR0j BBgwFoAUadiReQKtJKWsZ1FlXCm7fpFxx5YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY4NjczMDgyNTc2MDc3MS8wLzY5RDg5MTc5MDJBRDI0QTVBQzY3NTE2NTVDMjlC QjdFOTE3MUM3OTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjlEODkxNzkwMkFEMjRBNUFDNjc1MTY1NUMyOUJCN0U5MTcxQzc5Ni5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTY2ODY3MzA4MjU3NjA3NzEvMC8zNDMzMmUzMjM0 MzAyZTMxMzUzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzMzNDM3MzczMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEASvwnjANBgkqhkiG9w0BAQsFAAOCAQEAoOhAhoLXmLtxEMxvAES/ PGohhZ5Pv8kBjQmpMmIbaBrua64dmJuH1KFOinHAILD0TPhP1o6kQMWTm4GGxIaG 2oI/cWfGYb0YNPsi9TpgekNvwPF99w7JPi5uGnOede+GFNn65fonmjNmCUpirZGp yg9Anjd+d1JJOJ0qixFcaRrM1kLC8wVNgsyVI+6omdUcke0sFs7YnuEKGm/Eue4r 0sEnLL82UA42UaRniXhShoqMtMRb6v9JTDoVQ034UkrKLa1cNnRDbvC+eFVxR9Rg 5jr91ltTlsuzx/8k4czX/1WV0s21ZgDVeDbaAcexaQnGfKi+21Xgk92pTtUVbBj6 QA== -----END CERTIFICATE-----Generated at Fri May 29 23:53:20 2026 by rpki-client