$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/34332e3232352e3132302e302f32342d3234203d3e20313339313732.roa File: 34332e3232352e3132302e302f32342d3234203d3e20313339313732.roa (raw, json) Hash identifier: uWIjf3wfJryf9vcOvZuxBkunw32uX2t3sxNJD4oNF8c= Subject key identifier: 27:8A:07:2F:22:AC:FB:BD:7F:94:52:98:33:56:A7:B4:6B:4E:39:05 Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Certificate serial: 31B34718A8C41B801489C1B02FB187079B960F40 Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/34332e3232352e3132302e302f32342d3234203d3e20313339313732.roa Signing time: Mon 01 Jun 2026 07:26:07 +0000 ROA not before: Mon 01 Jun 2026 07:21:07 +0000 ROA not after: Mon 31 May 2027 07:26:07 +0000 asID: 139172 IP address blocks: 43.225.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 23:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b3:47:18:a8:c4:1b:80:14:89:c1:b0:2f:b1:87:07:9b:96:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Validity Not Before: Jun 1 07:21:07 2026 GMT Not After : May 31 07:26:07 2027 GMT Subject: CN=278A072F22ACFBBD7F9452983356A7B46B4E3905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:96:78:1b:7d:26:1d:66:ef:19:a8:a3:8e:ba: 95:c8:24:d1:2b:64:05:22:3f:02:61:e2:a8:1f:49: cd:bf:cd:38:17:ed:5e:f4:6f:f3:0a:07:64:df:de: 73:3b:30:3e:9d:66:66:21:8d:d9:eb:42:da:7f:e3: 69:50:e4:a6:c1:03:ca:63:27:d7:54:95:24:6b:ca: 0e:77:67:eb:36:06:a7:e5:0d:ee:16:b6:05:a0:f8: de:5f:80:95:f6:8a:06:79:fd:7d:7f:1b:6e:6a:f5: 25:21:a1:0e:f7:52:ad:36:1b:d9:4b:74:41:99:7d: 18:6a:99:46:ad:43:38:17:ae:b7:2a:dd:72:ea:8b: 13:9b:5a:d5:21:22:19:79:08:a5:51:f0:48:d9:61: b4:83:f4:57:24:64:51:f6:df:8c:7b:49:09:d5:a5: f6:93:2c:1c:c7:1b:7f:99:c0:91:8f:b5:27:06:ab: 86:7a:57:47:88:f6:5b:9c:55:bf:79:5a:97:26:08: c1:7a:09:e5:45:10:bf:a7:10:6f:6b:79:e0:2d:1c: 76:ae:31:2e:93:1c:29:46:d2:eb:4b:d7:98:3f:83: ca:23:0c:0f:81:84:2d:00:4c:2b:65:01:a7:bb:9f: 44:d4:63:fe:60:31:a5:9c:7b:f8:5b:6b:21:e1:cf: 76:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8A:07:2F:22:AC:FB:BD:7F:94:52:98:33:56:A7:B4:6B:4E:39:05 X509v3 Authority Key Identifier: keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/34332e3232352e3132302e302f32342d3234203d3e20313339313732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.225.120.0/24 Signature Algorithm: sha256WithRSAEncryption 01:dd:d8:f4:43:8f:d2:7a:e5:7d:8f:65:d9:01:ee:0e:d8:2d: 94:54:fc:f7:f3:e6:8b:52:8d:5c:e2:2a:2a:2a:ae:03:de:d6: 75:7d:9f:0b:32:3e:c4:b6:90:33:98:6c:31:00:d0:a0:de:c9: 4c:b7:bf:b1:0e:9a:66:0e:36:2b:72:9f:64:fb:7e:e4:e4:78: f4:fe:a9:da:63:96:53:7f:f1:11:f3:81:6c:6c:f1:14:10:62: 25:e4:71:bf:b6:25:1d:33:01:cb:43:dd:3e:79:b9:88:c7:66: 21:cd:9e:54:cd:41:09:ec:6d:7a:a6:79:cc:44:28:53:8f:b4: 02:ea:b9:35:b5:b5:bf:4c:d8:b9:ec:2a:b9:80:d9:bb:e8:13: 62:39:8e:30:f2:c5:71:7d:55:15:c6:52:6f:8f:92:89:97:40: 99:37:0d:46:bc:7d:03:d4:c6:ff:01:9c:59:46:02:26:70:26: 76:31:71:e7:95:79:74:1e:c6:ec:c0:86:c4:88:37:d5:54:89: f0:28:bc:cb:af:15:77:03:12:be:8c:79:11:0e:f7:59:16:85: b4:75:ad:3a:91:ff:6b:06:56:c9:85:d6:40:c7:ec:ec:96:34: 26:73:5c:8b:f9:1a:bf:ab:4b:e7:53:ad:ee:2a:1a:7e:8e:8a: a0:ea:40:00 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUMbNHGKjEG4AUicGwL7GHB5uWD0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2 RUZERDAwRjAeFw0yNjA2MDEwNzIxMDdaFw0yNzA1MzEwNzI2MDdaMDMxMTAvBgNV BAMTKDI3OEEwNzJGMjJBQ0ZCQkQ3Rjk0NTI5ODMzNTZBN0I0NkI0RTM5MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUlngbfSYdZu8ZqKOOupXIJNEr ZAUiPwJh4qgfSc2/zTgX7V70b/MKB2Tf3nM7MD6dZmYhjdnrQtp/42lQ5KbBA8pj J9dUlSRryg53Z+s2BqflDe4WtgWg+N5fgJX2igZ5/X1/G25q9SUhoQ73Uq02G9lL dEGZfRhqmUatQzgXrrcq3XLqixObWtUhIhl5CKVR8EjZYbSD9FckZFH234x7SQnV pfaTLBzHG3+ZwJGPtScGq4Z6V0eI9lucVb95WpcmCMF6CeVFEL+nEG9reeAtHHau MS6THClG0utL15g/g8ojDA+BhC0ATCtlAae7n0TUY/5gMaWce/hbayHhz3b5AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUJ4oHLyKs+71/lFKYM1antGtOOQUwHwYDVR0j BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5 MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTY3Mjc3NTIzNTE5NDA2MDkvMC8zNDMzMmUzMjMy MzUyZTMxMzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzOTMxMzczMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEACvheDANBgkqhkiG9w0BAQsFAAOCAQEAAd3Y9EOP0nrlfY9l2QHu DtgtlFT89/Pmi1KNXOIqKiquA97WdX2fCzI+xLaQM5hsMQDQoN7JTLe/sQ6aZg42 K3KfZPt+5OR49P6p2mOWU3/xEfOBbGzxFBBiJeRxv7YlHTMBy0PdPnm5iMdmIc2e VM1BCexteqZ5zEQoU4+0Auq5NbW1v0zYuewquYDZu+gTYjmOMPLFcX1VFcZSb4+S iZdAmTcNRrx9A9TG/wGcWUYCJnAmdjFx55V5dB7G7MCGxIg31VSJ8Ci8y68VdwMS vox5EQ73WRaFtHWtOpH/awZWyYXWQMfs7JY0JnNci/kav6tL51Ot7ioafo6KoOpA AA== -----END CERTIFICATE-----Generated at Fri Jun 12 04:48:58 2026 by rpki-client