$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096686730825760771/0/34332e3234322e3230362e302f32332d3233203d3e20313334373731.roa File: 34332e3234322e3230362e302f32332d3233203d3e20313334373731.roa (raw, json) Hash identifier: 6pmdbQz11vFkS0CJLqy0QbyoWZZ3v+k2AmIQQDroATo= Subject key identifier: 37:B8:D8:DB:13:6B:1F:DE:88:AC:A1:C5:45:65:6F:4B:39:89:D4:B8 Certificate issuer: /CN=69D8917902AD24A5AC6751655C29BB7E9171C796 Certificate serial: 2D4E3680D0CD5FF79A748E333F28C211FBB9DCE1 Authority key identifier: 69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/34332e3234322e3230362e302f32332d3233203d3e20313334373731.roa Signing time: Thu 28 May 2026 02:44:58 +0000 ROA not before: Thu 28 May 2026 02:39:58 +0000 ROA not after: Thu 27 May 2027 02:44:58 +0000 asID: 134771 IP address blocks: 43.242.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 12:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:4e:36:80:d0:cd:5f:f7:9a:74:8e:33:3f:28:c2:11:fb:b9:dc:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69D8917902AD24A5AC6751655C29BB7E9171C796 Validity Not Before: May 28 02:39:58 2026 GMT Not After : May 27 02:44:58 2027 GMT Subject: CN=37B8D8DB136B1FDE88ACA1C545656F4B3989D4B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:05:8a:a6:74:f7:df:0b:2e:c5:84:4c:41:bb: 68:4d:21:4d:18:91:3f:22:b3:f8:95:f0:0d:24:00: a3:16:27:76:cd:20:30:a1:ca:23:44:00:66:36:ac: 9b:27:ff:25:ff:f1:b4:cc:c0:d7:f9:ba:a5:38:50: fe:e4:e4:c4:0c:b9:62:c7:ae:3e:a3:01:ac:de:b5: 15:40:27:9e:88:9f:fa:09:c2:c9:36:18:92:db:6a: b1:05:5f:87:80:7e:24:fe:c1:9d:ee:a8:23:0c:20: 56:6d:10:f7:e5:78:f5:dd:2a:78:16:f9:1a:7e:7d: 08:5f:36:b6:ba:60:3a:20:1d:61:93:a2:63:bb:c4: a3:56:bd:00:82:09:61:b3:05:0b:3e:bc:d9:f8:1e: b3:fa:df:c1:0f:86:05:76:50:8a:e8:85:2d:b4:28: 91:f3:8d:01:ae:4f:ca:45:bb:71:4a:3a:b5:99:05: 04:0d:8c:72:be:12:05:71:ac:4f:9c:d9:5a:40:58: 59:ec:ec:39:34:b4:61:28:70:7b:cf:14:9a:65:36: 04:87:d8:8c:61:f8:c1:3e:fb:8d:a3:4a:e3:e8:03: 57:d6:7c:31:82:30:68:34:32:05:57:17:06:28:db: 5c:e7:5a:ae:8b:bb:fb:3f:da:53:cc:07:e3:d9:16: 50:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B8:D8:DB:13:6B:1F:DE:88:AC:A1:C5:45:65:6F:4B:39:89:D4:B8 X509v3 Authority Key Identifier: keyid:69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/34332e3234322e3230362e302f32332d3233203d3e20313334373731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.242.206.0/23 Signature Algorithm: sha256WithRSAEncryption 28:dc:d0:c0:e3:b1:6e:41:b9:4b:19:e9:5b:5a:fa:21:c9:b6: b4:c0:1d:9a:63:e7:ed:e0:88:83:5a:88:0a:1f:95:04:52:07: 5a:18:03:87:ed:9c:13:35:36:4d:50:7e:07:9d:a6:77:b6:91: 3b:50:1f:65:d7:6a:19:e6:a4:9d:db:c7:aa:c4:22:ce:cd:1e: 96:2b:54:5f:9e:66:15:cf:78:1a:a7:57:0c:a7:57:43:c7:fd: c3:fe:76:b7:c7:21:52:69:0b:02:af:4a:3f:3c:a0:25:a8:c4: 96:cf:cc:9e:0d:53:9e:c4:1d:b1:c9:74:48:5f:f2:16:d0:1f: f8:4f:46:e9:64:d6:8c:a8:0d:44:14:fd:de:43:39:1f:ea:a9: d2:04:7b:fa:e9:66:7c:9d:73:17:84:8d:4e:02:9f:04:41:a0: f6:ed:16:d3:6d:80:39:e2:9a:ea:b1:3a:6f:8e:be:07:58:05: 25:86:a8:e6:e8:73:3f:8c:48:69:89:1b:b5:c4:f2:2b:88:db: cf:d8:87:7d:04:54:df:22:9d:76:c7:1b:24:04:25:6b:38:4d: ba:70:6b:5e:ec:4c:7d:ba:36:31:d4:ba:db:70:39:0b:bb:52: 1b:d6:1d:c4:fe:28:6d:09:15:c1:92:0b:c6:c3:a1:23:40:c2: 5c:5a:fc:50 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIULU42gNDNX/eadI4zPyjCEfu53OEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlEODkxNzkwMkFEMjRBNUFDNjc1MTY1NUMyOUJCN0U5 MTcxQzc5NjAeFw0yNjA1MjgwMjM5NThaFw0yNzA1MjcwMjQ0NThaMDMxMTAvBgNV BAMTKDM3QjhEOERCMTM2QjFGREU4OEFDQTFDNTQ1NjU2RjRCMzk4OUQ0QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtBYqmdPffCy7FhExBu2hNIU0Y kT8is/iV8A0kAKMWJ3bNIDChyiNEAGY2rJsn/yX/8bTMwNf5uqU4UP7k5MQMuWLH rj6jAazetRVAJ56In/oJwsk2GJLbarEFX4eAfiT+wZ3uqCMMIFZtEPflePXdKngW +Rp+fQhfNra6YDogHWGTomO7xKNWvQCCCWGzBQs+vNn4HrP638EPhgV2UIrohS20 KJHzjQGuT8pFu3FKOrWZBQQNjHK+EgVxrE+c2VpAWFns7Dk0tGEocHvPFJplNgSH 2Ixh+ME++42jSuPoA1fWfDGCMGg0MgVXFwYo21znWq6Lu/s/2lPMB+PZFlBrAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUN7jY2xNrH96IrKHFRWVvSzmJ1LgwHwYDVR0j BBgwFoAUadiReQKtJKWsZ1FlXCm7fpFxx5YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY4NjczMDgyNTc2MDc3MS8wLzY5RDg5MTc5MDJBRDI0QTVBQzY3NTE2NTVDMjlC QjdFOTE3MUM3OTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjlEODkxNzkwMkFEMjRBNUFDNjc1MTY1NUMyOUJCN0U5MTcxQzc5Ni5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTY2ODY3MzA4MjU3NjA3NzEvMC8zNDMzMmUzMjM0 MzIyZTMyMzAzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzMzNDM3MzczMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEASvyzjANBgkqhkiG9w0BAQsFAAOCAQEAKNzQwOOxbkG5SxnpW1r6 Icm2tMAdmmPn7eCIg1qICh+VBFIHWhgDh+2cEzU2TVB+B52md7aRO1AfZddqGeak ndvHqsQizs0elitUX55mFc94GqdXDKdXQ8f9w/52t8chUmkLAq9KPzygJajEls/M ng1TnsQdscl0SF/yFtAf+E9G6WTWjKgNRBT93kM5H+qp0gR7+ulmfJ1zF4SNTgKf BEGg9u0W022AOeKa6rE6b46+B1gFJYao5uhzP4xIaYkbtcTyK4jbz9iHfQRU3yKd dscbJAQlazhNunBrXuxMfbo2MdS623A5C7tSG9YdxP4obQkVwZILxsOhI0DCXFr8 UA== -----END CERTIFICATE-----Generated at Fri May 29 22:56:22 2026 by rpki-client