$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096686730825760771/0/34332e3234302e37322e302f32322d3232203d3e2034383337.roa File: 34332e3234302e37322e302f32322d3232203d3e2034383337.roa (raw, json) Hash identifier: uOi29mW77Ft4ORuWZDkSBvHEaj/KYo7tPfD7St6Q+FA= Subject key identifier: C3:D0:3E:CB:83:1C:6E:CB:98:DF:B3:8E:86:3D:39:F2:F1:03:F5:C6 Certificate issuer: /CN=69D8917902AD24A5AC6751655C29BB7E9171C796 Certificate serial: 1D2933C6FA7D13E2068D18B59AEE3113FCDA8CC0 Authority key identifier: 69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/34332e3234302e37322e302f32322d3232203d3e2034383337.roa Signing time: Thu 28 May 2026 02:36:45 +0000 ROA not before: Thu 28 May 2026 02:31:45 +0000 ROA not after: Thu 27 May 2027 02:36:45 +0000 asID: 4837 IP address blocks: 43.240.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 12:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:29:33:c6:fa:7d:13:e2:06:8d:18:b5:9a:ee:31:13:fc:da:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69D8917902AD24A5AC6751655C29BB7E9171C796 Validity Not Before: May 28 02:31:45 2026 GMT Not After : May 27 02:36:45 2027 GMT Subject: CN=C3D03ECB831C6ECB98DFB38E863D39F2F103F5C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:59:37:20:8d:9f:d6:39:5b:2d:ee:2c:17:4a: 39:af:14:f9:0f:bd:e1:92:d3:c9:5f:00:03:d2:3e: 4b:55:b3:08:81:2c:03:ed:8e:b8:8a:28:e5:42:ac: a8:a4:d5:33:72:be:c3:df:70:6f:1c:fc:a7:12:c4: d0:e2:7b:b7:f0:07:93:16:18:51:2b:62:6e:52:9d: 52:09:32:e1:8b:4d:11:76:7c:70:5e:94:a5:2b:a3: d1:3d:3f:8f:5e:ad:89:b3:c5:7a:60:5f:fd:ee:7d: 6e:2f:f7:45:aa:d4:a3:8f:e9:9b:81:8d:4a:de:24: ee:5a:19:20:68:3f:8c:94:47:a6:66:c2:98:3b:df: 9e:78:62:f6:40:ee:2c:b8:96:2a:96:0a:8a:62:14: a7:35:57:cf:ea:e5:8a:fd:dc:32:56:1c:08:bd:49: fe:17:01:cc:e9:3f:3e:10:76:31:26:7a:35:da:0a: 48:d1:b5:f4:98:bd:6e:c6:1f:20:7e:51:1d:46:5f: 82:d3:e4:30:56:17:e0:7d:58:1b:89:52:89:1c:3b: 6a:f8:28:47:86:f5:8d:1c:bb:32:81:d2:a5:45:42: ce:70:09:d6:96:62:4b:52:49:2f:9f:33:8c:76:35: 3b:94:cf:e5:56:85:47:9c:a1:dc:60:dc:e0:a3:08: be:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D0:3E:CB:83:1C:6E:CB:98:DF:B3:8E:86:3D:39:F2:F1:03:F5:C6 X509v3 Authority Key Identifier: keyid:69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/34332e3234302e37322e302f32322d3232203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.72.0/22 Signature Algorithm: sha256WithRSAEncryption 08:bb:4e:9a:1e:3b:f0:df:80:3e:db:61:cf:fd:08:45:c1:78: 46:28:1e:42:b8:31:4e:c6:a3:d2:8e:35:17:98:69:94:f8:a2: 55:a4:87:8c:bb:df:ce:a4:1a:96:c1:c8:22:22:c5:9e:aa:cb: 37:ae:98:4c:d5:6f:69:56:ea:75:df:20:93:3f:22:80:04:e7: ea:cf:f7:f5:d0:f8:dd:63:d4:52:b3:b7:2b:9d:ca:b9:1b:9f: 53:c1:85:b0:e3:d4:1f:a5:6e:35:e6:a4:ab:86:51:3c:ba:e7: e1:4f:b0:08:a8:4f:57:92:7c:56:da:1f:e1:c0:96:e1:b1:d2: 03:a4:d8:4f:db:43:e9:66:41:ae:e6:a5:af:0a:56:4f:b9:02: 9a:52:7f:4b:db:6f:2e:8b:11:2b:e5:54:83:7d:9e:6d:36:2a: 4e:29:55:2f:9e:04:57:8d:f0:8c:ef:b4:d2:ce:79:92:4c:d9: a6:c4:40:51:f7:fa:70:e4:55:f2:60:e0:00:3b:3f:87:29:96: 92:10:91:4d:a5:01:56:de:d2:53:93:44:92:3f:e2:9d:a0:81: 03:7b:70:bf:37:a8:73:2e:a1:22:68:6d:d4:b3:67:6b:70:84: d7:03:32:4e:d1:05:11:f6:03:1d:f1:92:f9:46:53:b8:5b:8f: 7b:7e:10:b5 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUHSkzxvp9E+IGjRi1mu4xE/zajMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlEODkxNzkwMkFEMjRBNUFDNjc1MTY1NUMyOUJCN0U5 MTcxQzc5NjAeFw0yNjA1MjgwMjMxNDVaFw0yNzA1MjcwMjM2NDVaMDMxMTAvBgNV BAMTKEMzRDAzRUNCODMxQzZFQ0I5OERGQjM4RTg2M0QzOUYyRjEwM0Y1QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTWTcgjZ/WOVst7iwXSjmvFPkP veGS08lfAAPSPktVswiBLAPtjriKKOVCrKik1TNyvsPfcG8c/KcSxNDie7fwB5MW GFErYm5SnVIJMuGLTRF2fHBelKUro9E9P49erYmzxXpgX/3ufW4v90Wq1KOP6ZuB jUreJO5aGSBoP4yUR6Zmwpg73554YvZA7iy4liqWCopiFKc1V8/q5Yr93DJWHAi9 Sf4XAczpPz4QdjEmejXaCkjRtfSYvW7GHyB+UR1GX4LT5DBWF+B9WBuJUokcO2r4 KEeG9Y0cuzKB0qVFQs5wCdaWYktSSS+fM4x2NTuUz+VWhUecodxg3OCjCL6bAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUw9A+y4McbsuY37OOhj058vED9cYwHwYDVR0j BBgwFoAUadiReQKtJKWsZ1FlXCm7fpFxx5YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY4NjczMDgyNTc2MDc3MS8wLzY5RDg5MTc5MDJBRDI0QTVBQzY3NTE2NTVDMjlC QjdFOTE3MUM3OTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjlEODkxNzkwMkFEMjRBNUFDNjc1MTY1NUMyOUJCN0U5MTcxQzc5Ni5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2Njg2NzMwODI1NzYwNzcxLzAvMzQzMzJlMzIzNDMw MmUzNzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIr8EgwDQYJKoZIhvcNAQELBQADggEBAAi7TpoeO/DfgD7bYc/9CEXBeEYoHkK4 MU7Go9KONReYaZT4olWkh4y7386kGpbByCIixZ6qyzeumEzVb2lW6nXfIJM/IoAE 5+rP9/XQ+N1j1FKztyudyrkbn1PBhbDj1B+lbjXmpKuGUTy65+FPsAioT1eSfFba H+HAluGx0gOk2E/bQ+lmQa7mpa8KVk+5AppSf0vbby6LESvlVIN9nm02Kk4pVS+e BFeN8IzvtNLOeZJM2abEQFH3+nDkVfJg4AA7P4cplpIQkU2lAVbe0lOTRJI/4p2g gQN7cL83qHMuoSJobdSzZ2twhNcDMk7RBRH2Ax3xkvlGU7hbj3t+ELU= -----END CERTIFICATE-----Generated at Fri May 29 22:56:24 2026 by rpki-client