$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096686730825760771/0/34332e3234312e31362e302f32332d3233203d3e203536303431.roa File: 34332e3234312e31362e302f32332d3233203d3e203536303431.roa (raw, json) Hash identifier: 12W96oCbuu0szupwn4XkrjUDqJyp17nRLxlI8P3vNVg= Subject key identifier: 69:9A:70:21:B4:CF:FD:7F:08:73:3C:E6:86:A9:4E:5A:EB:50:A7:FB Certificate issuer: /CN=69D8917902AD24A5AC6751655C29BB7E9171C796 Certificate serial: 2D9E4FD2BB1ECD22A49F963251DFDCC8ED67FE8B Authority key identifier: 69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/34332e3234312e31362e302f32332d3233203d3e203536303431.roa Signing time: Wed 20 May 2026 07:04:19 +0000 ROA not before: Wed 20 May 2026 06:59:19 +0000 ROA not after: Wed 19 May 2027 07:04:19 +0000 asID: 56041 IP address blocks: 43.241.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 12:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:9e:4f:d2:bb:1e:cd:22:a4:9f:96:32:51:df:dc:c8:ed:67:fe:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69D8917902AD24A5AC6751655C29BB7E9171C796 Validity Not Before: May 20 06:59:19 2026 GMT Not After : May 19 07:04:19 2027 GMT Subject: CN=699A7021B4CFFD7F08733CE686A94E5AEB50A7FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c1:de:38:13:64:fc:74:00:86:53:44:fc:48: de:61:20:04:21:56:aa:9b:92:ed:4d:54:37:b5:c5: e1:2b:10:0d:99:28:7d:fd:48:0f:41:70:f2:66:8e: 8d:a2:d9:e6:93:59:aa:9a:7a:64:03:55:01:4a:f6: 90:9d:26:9b:f7:74:89:3d:11:c9:b1:d2:2b:aa:af: 5c:a3:d1:16:fb:fa:03:da:45:ac:ba:4b:09:08:16: 65:86:1e:ee:b2:6a:25:59:6b:8f:de:60:1f:6c:5f: b6:fc:e4:f4:59:d3:1c:ab:a3:0a:72:8d:9e:2c:65: 13:1d:5b:cf:41:30:39:c5:55:e3:66:40:15:f7:8d: 90:b1:9e:cc:95:d4:49:d1:9b:cb:92:2b:cc:af:d9: 45:37:29:6a:52:20:72:4d:14:1a:c2:42:4d:98:a3: a1:d3:cb:08:9f:3f:c7:44:6f:db:a1:61:97:01:45: f1:eb:f6:4b:98:15:74:4b:b2:06:62:8e:2f:ef:80: 29:77:a4:3d:75:68:98:dc:8a:b5:3b:69:95:b1:83: 48:52:67:65:ba:5f:93:bc:4b:91:6b:cb:0c:08:dd: 0d:f1:96:93:69:a1:97:8f:ed:4f:c7:5a:a3:b3:f7: de:0d:06:59:dc:03:da:6f:49:a6:21:da:48:bc:01: 16:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9A:70:21:B4:CF:FD:7F:08:73:3C:E6:86:A9:4E:5A:EB:50:A7:FB X509v3 Authority Key Identifier: keyid:69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/34332e3234312e31362e302f32332d3233203d3e203536303431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.241.16.0/23 Signature Algorithm: sha256WithRSAEncryption cc:02:88:85:1f:84:ad:65:fb:93:4d:6c:ab:3e:2a:76:ff:21: 87:65:ca:08:c4:0f:53:b1:62:fd:7e:1a:4d:46:d3:6b:34:25: fd:aa:56:3c:02:6d:d0:12:e9:78:eb:73:d3:94:49:e6:d3:f7: fe:95:aa:30:b1:4d:71:e5:0a:a3:34:98:bf:59:8d:36:90:9a: 17:1e:a8:0e:d4:12:2a:74:5d:9d:5c:88:d4:c8:c2:06:03:46: 28:ab:2b:03:5f:18:9d:bc:bb:dd:26:f5:25:b5:e2:e5:8e:7b: 78:4b:90:2a:59:3e:18:46:29:2e:32:e1:b4:da:6e:d2:bc:75: 1d:0f:6e:88:1c:64:c7:ed:ff:96:b9:97:3b:0a:b9:f3:cb:9d: 41:6f:d9:6c:8a:64:e6:3c:11:8f:70:8c:1e:5b:11:93:98:3e: be:47:27:1b:29:a5:f8:d2:d4:d5:43:f7:61:47:f5:d3:28:d7: 33:ff:cd:3d:a9:81:40:ca:0e:b4:9c:7c:06:57:ef:ac:47:24: 25:7e:a0:18:f5:e9:bd:80:94:4e:fe:e7:26:e3:ef:a4:e1:59: 1b:71:bd:41:fe:a4:08:cc:dd:c7:e5:08:95:ff:e8:ea:1f:67: 63:23:29:b5:e7:17:ca:0e:80:b6:76:2c:08:a6:82:83:03:0a: f6:52:46:44 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIULZ5P0rsezSKkn5YyUd/cyO1n/oswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlEODkxNzkwMkFEMjRBNUFDNjc1MTY1NUMyOUJCN0U5 MTcxQzc5NjAeFw0yNjA1MjAwNjU5MTlaFw0yNzA1MTkwNzA0MTlaMDMxMTAvBgNV BAMTKDY5OUE3MDIxQjRDRkZEN0YwODczM0NFNjg2QTk0RTVBRUI1MEE3RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKwd44E2T8dACGU0T8SN5hIAQh Vqqbku1NVDe1xeErEA2ZKH39SA9BcPJmjo2i2eaTWaqaemQDVQFK9pCdJpv3dIk9 Ecmx0iuqr1yj0Rb7+gPaRay6SwkIFmWGHu6yaiVZa4/eYB9sX7b85PRZ0xyrowpy jZ4sZRMdW89BMDnFVeNmQBX3jZCxnsyV1EnRm8uSK8yv2UU3KWpSIHJNFBrCQk2Y o6HTywifP8dEb9uhYZcBRfHr9kuYFXRLsgZiji/vgCl3pD11aJjcirU7aZWxg0hS Z2W6X5O8S5FrywwI3Q3xlpNpoZeP7U/HWqOz994NBlncA9pvSaYh2ki8ARarAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUaZpwIbTP/X8IczzmhqlOWutQp/swHwYDVR0j BBgwFoAUadiReQKtJKWsZ1FlXCm7fpFxx5YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY4NjczMDgyNTc2MDc3MS8wLzY5RDg5MTc5MDJBRDI0QTVBQzY3NTE2NTVDMjlC QjdFOTE3MUM3OTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjlEODkxNzkwMkFEMjRBNUFDNjc1MTY1NUMyOUJCN0U5MTcxQzc5Ni5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2Njg2NzMwODI1NzYwNzcxLzAvMzQzMzJlMzIzNDMx MmUzMTM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzNjMwMzQzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEASvxEDANBgkqhkiG9w0BAQsFAAOCAQEAzAKIhR+ErWX7k01sqz4qdv8hh2XK CMQPU7Fi/X4aTUbTazQl/apWPAJt0BLpeOtz05RJ5tP3/pWqMLFNceUKozSYv1mN NpCaFx6oDtQSKnRdnVyI1MjCBgNGKKsrA18Ynby73Sb1JbXi5Y57eEuQKlk+GEYp LjLhtNpu0rx1HQ9uiBxkx+3/lrmXOwq588udQW/ZbIpk5jwRj3CMHlsRk5g+vkcn Gyml+NLU1UP3YUf10yjXM//NPamBQMoOtJx8BlfvrEckJX6gGPXpvYCUTv7nJuPv pOFZG3G9Qf6kCMzdx+UIlf/o6h9nYyMptecXyg6AtnYsCKaCgwMK9lJGRA== -----END CERTIFICATE-----Generated at Fri May 29 23:51:58 2026 by rpki-client