$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096689320682586114/0/34332e3233392e3132302e302f32322d3232203d3e2034383337.roa File: 34332e3233392e3132302e302f32322d3232203d3e2034383337.roa (raw, json) Hash identifier: +pyEGxsxJlmP0xnipvGwK3GS+xyc85YePa3acnQ6Uic= Subject key identifier: 81:57:7B:23:AE:B1:17:6F:68:72:75:C1:C2:CB:3E:EB:5B:FF:48:11 Certificate issuer: /CN=526198C6FEC4729E2A08209CDB07E7BD6537198F Certificate serial: 67B897E5BAB00E734B1DE8499D04A469EC48D0A8 Authority key identifier: 52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/34332e3233392e3132302e302f32322d3232203d3e2034383337.roa Signing time: Wed 03 Jun 2026 01:59:16 +0000 ROA not before: Wed 03 Jun 2026 01:54:16 +0000 ROA not after: Wed 02 Jun 2027 01:59:16 +0000 asID: 4837 IP address blocks: 43.239.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 04:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:b8:97:e5:ba:b0:0e:73:4b:1d:e8:49:9d:04:a4:69:ec:48:d0:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=526198C6FEC4729E2A08209CDB07E7BD6537198F Validity Not Before: Jun 3 01:54:16 2026 GMT Not After : Jun 2 01:59:16 2027 GMT Subject: CN=81577B23AEB1176F687275C1C2CB3EEB5BFF4811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d3:78:ea:2e:a0:7f:a8:af:09:63:3e:2f:ee: 8a:2b:bf:e3:84:a5:d0:29:84:c1:7d:74:d3:98:c8: d1:84:1a:6e:67:25:a6:30:bc:fe:1a:89:df:2c:ac: a4:e2:07:cb:3b:2f:1f:34:1e:11:f5:d3:e1:96:86: 94:ab:5a:58:15:50:9f:a0:77:55:ab:6c:6e:13:09: 2f:cc:f0:45:bb:71:f5:3f:e2:af:c5:ef:80:d3:a4: aa:a9:17:22:4d:ac:e3:2b:75:fc:13:84:d3:b2:40: 2f:ce:ad:20:63:3d:f8:ea:aa:96:b8:e0:cc:b8:31: f0:de:81:3d:6f:e0:3b:f7:27:72:79:82:29:4d:19: f0:2d:79:de:78:c6:22:4e:02:58:88:e6:ff:5c:cc: 9f:11:0c:45:99:45:07:be:ba:6f:c5:5b:db:e4:10: b6:b2:fe:75:bc:78:d0:94:42:bb:af:23:c2:93:24: 52:c6:9f:b9:db:45:f5:f7:20:4b:9d:e1:4a:23:e7: 33:82:0d:ec:27:bb:82:f4:e2:3c:21:e1:d7:98:df: d1:35:18:04:30:3e:7c:01:7f:09:bf:47:c5:af:c6: 2f:03:ea:bc:ca:f3:40:88:9b:7e:e3:28:26:18:05: 10:4f:1b:ac:7b:ed:2b:b2:60:2e:e7:bf:39:7d:3f: a2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:57:7B:23:AE:B1:17:6F:68:72:75:C1:C2:CB:3E:EB:5B:FF:48:11 X509v3 Authority Key Identifier: keyid:52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/34332e3233392e3132302e302f32322d3232203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.239.120.0/22 Signature Algorithm: sha256WithRSAEncryption 09:11:32:e3:d4:62:01:b6:d7:9e:df:63:0a:86:98:d0:72:50: b6:6a:cc:90:f3:88:3e:ee:5e:40:2d:e1:4c:d0:5f:6a:3f:2d: 12:6a:be:f6:f4:d1:2e:a9:bc:67:f0:62:53:e5:57:fc:2f:66: 00:50:21:96:6c:28:5e:dd:59:98:aa:d6:02:09:7e:8d:51:36: bb:63:ce:e5:9b:51:d9:2e:59:c0:0c:7e:53:71:4f:e5:3a:db: ff:fe:80:39:24:ac:34:91:e9:f7:13:ed:05:79:25:e6:6c:d5: 5d:3b:6d:f4:e5:95:94:a8:f3:a0:6f:df:55:da:cb:6d:d5:df: bc:3c:30:9d:24:56:cf:62:1f:2c:70:1f:bf:fd:e0:b6:02:02: a0:37:cd:54:e3:42:aa:31:f6:46:e3:86:9e:7c:b1:d1:84:02: 1a:16:73:d6:9b:c3:09:e8:fa:e7:9b:20:0d:44:3e:c3:10:58: ed:b3:2d:eb:7f:e4:5f:4d:f3:54:7d:e8:48:57:9f:2e:29:aa: 34:1e:86:60:ab:8e:35:c7:18:fe:a2:c2:7d:41:e5:ad:3b:5e: 92:18:d4:b6:b1:b1:78:7c:6b:b0:e8:0b:33:c7:b4:6e:4b:02: b2:e7:f8:a0:82:d6:60:be:50:82:64:89:af:da:92:83:f1:9c: f2:87:2d:36 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUZ7iX5bqwDnNLHehJnQSkaexI0KgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI2MTk4QzZGRUM0NzI5RTJBMDgyMDlDREIwN0U3QkQ2 NTM3MTk4RjAeFw0yNjA2MDMwMTU0MTZaFw0yNzA2MDIwMTU5MTZaMDMxMTAvBgNV BAMTKDgxNTc3QjIzQUVCMTE3NkY2ODcyNzVDMUMyQ0IzRUVCNUJGRjQ4MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK03jqLqB/qK8JYz4v7oorv+OE pdAphMF9dNOYyNGEGm5nJaYwvP4aid8srKTiB8s7Lx80HhH10+GWhpSrWlgVUJ+g d1WrbG4TCS/M8EW7cfU/4q/F74DTpKqpFyJNrOMrdfwThNOyQC/OrSBjPfjqqpa4 4My4MfDegT1v4Dv3J3J5gilNGfAted54xiJOAliI5v9czJ8RDEWZRQe+um/FW9vk ELay/nW8eNCUQruvI8KTJFLGn7nbRfX3IEud4Uoj5zOCDewnu4L04jwh4deY39E1 GAQwPnwBfwm/R8Wvxi8D6rzK80CIm37jKCYYBRBPG6x77SuyYC7nvzl9P6JFAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUgVd7I66xF29ocnXBwss+61v/SBEwHwYDVR0j BBgwFoAUUmGYxv7Ecp4qCCCc2wfnvWU3GY8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY4OTMyMDY4MjU4NjExNC8wLzUyNjE5OEM2RkVDNDcyOUUyQTA4MjA5Q0RCMDdF N0JENjUzNzE5OEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTI2MTk4QzZGRUM0NzI5RTJBMDgyMDlDREIwN0U3QkQ2NTM3MTk4Ri5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2Njg5MzIwNjgyNTg2MTE0LzAvMzQzMzJlMzIzMzM5 MmUzMTMyMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAivveDANBgkqhkiG9w0BAQsFAAOCAQEACREy49RiAbbXnt9jCoaY0HJQtmrM kPOIPu5eQC3hTNBfaj8tEmq+9vTRLqm8Z/BiU+VX/C9mAFAhlmwoXt1ZmKrWAgl+ jVE2u2PO5ZtR2S5ZwAx+U3FP5Trb//6AOSSsNJHp9xPtBXkl5mzVXTtt9OWVlKjz oG/fVdrLbdXfvDwwnSRWz2IfLHAfv/3gtgICoDfNVONCqjH2RuOGnnyx0YQCGhZz 1pvDCej655sgDUQ+wxBY7bMt63/kX03zVH3oSFefLimqNB6GYKuONccY/qLCfUHl rTtekhjUtrGxeHxrsOgLM8e0bksCsuf4oILWYL5QgmSJr9qSg/Gc8octNg== -----END CERTIFICATE-----Generated at Fri Jun 12 06:44:29 2026 by rpki-client