$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/34332e3232352e3132312e302f32342d3234203d3e20313339313732.roa File: 34332e3232352e3132312e302f32342d3234203d3e20313339313732.roa (raw, json) Hash identifier: M8ikiN3mxU+0NhFiDj03dZ4TABoGNdHNuhqbEuxn6EM= Subject key identifier: 62:FB:29:8B:40:89:A1:A3:AA:A7:C1:02:11:6E:6B:E0:47:BE:B9:E4 Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Certificate serial: 211EE9CAF463AEA10D3FF455B17454344D780A63 Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/34332e3232352e3132312e302f32342d3234203d3e20313339313732.roa Signing time: Mon 01 Jun 2026 07:26:08 +0000 ROA not before: Mon 01 Jun 2026 07:21:08 +0000 ROA not after: Mon 31 May 2027 07:26:08 +0000 asID: 139172 IP address blocks: 43.225.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 23:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:1e:e9:ca:f4:63:ae:a1:0d:3f:f4:55:b1:74:54:34:4d:78:0a:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Validity Not Before: Jun 1 07:21:08 2026 GMT Not After : May 31 07:26:08 2027 GMT Subject: CN=62FB298B4089A1A3AAA7C102116E6BE047BEB9E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:14:6c:45:b4:1c:00:8d:17:8b:d6:14:10:e9: 13:0b:59:69:7f:82:55:30:b2:61:60:19:7f:5d:67: 1d:ba:14:0a:3a:84:f7:dd:1d:59:b0:8e:fc:2a:b5: 80:e2:d6:59:01:93:d5:da:2c:a8:7a:23:ba:c8:7a: 29:89:31:2c:b5:a9:d5:e9:85:36:e9:4c:d4:78:f8: 92:aa:21:6e:f0:eb:40:9a:58:28:aa:b9:8d:17:96: 42:9d:1e:02:44:fc:b6:bd:42:cd:0f:37:7d:94:f2: c5:f5:13:89:9f:a7:cd:b0:b9:ce:2c:4f:55:b9:28: 4d:75:c7:35:78:fe:7d:e8:34:f7:5d:ea:56:65:be: 84:9e:81:26:70:af:20:a7:a8:bf:4c:ff:40:9e:a1: 00:26:9c:ad:a5:8d:ac:c0:60:c6:ea:ec:61:97:83: bd:89:1d:d4:36:23:ae:25:2d:8f:44:30:00:bb:f8: de:b7:bb:54:80:fd:00:60:40:67:74:0a:4d:0f:b8: db:f8:ce:22:27:10:7f:7b:bb:6f:17:ac:34:3b:e4: 15:a0:7f:15:5b:da:90:9b:b3:f9:01:f1:63:a7:91: c1:5e:51:03:2b:8c:a9:cc:b3:6f:fd:af:df:3e:34: bb:6c:20:a2:0e:f6:b9:28:e2:1a:21:57:09:60:00: 6e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FB:29:8B:40:89:A1:A3:AA:A7:C1:02:11:6E:6B:E0:47:BE:B9:E4 X509v3 Authority Key Identifier: keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/34332e3232352e3132312e302f32342d3234203d3e20313339313732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.225.121.0/24 Signature Algorithm: sha256WithRSAEncryption bd:8e:82:77:f7:20:0c:79:fe:d2:cd:0b:0f:6f:d5:14:f4:d8: ac:b8:f9:30:57:26:b5:16:23:50:80:d2:30:7b:91:0b:4f:da: 66:ae:1e:ec:97:b2:7b:dc:57:40:33:1b:ee:f2:ba:1e:0a:47: 53:db:03:6a:98:55:d3:43:c9:4d:71:57:e5:6d:22:80:20:b1: 59:6c:43:d5:b7:61:5e:ef:38:23:cd:3a:36:be:f8:ae:d2:8e: 88:d6:29:af:60:4b:9f:00:17:25:f6:b0:7e:96:ad:28:6d:69: 1f:8d:ff:d6:62:b5:6d:d6:02:26:46:ff:3c:44:2a:a1:09:b9: ea:6e:71:70:cc:ab:fd:cb:a9:15:90:ed:b1:30:a0:65:bc:83: 75:b2:28:28:7d:2f:fa:f7:53:cb:05:bf:6f:4f:80:0c:33:41: 99:fa:2a:8d:d3:db:69:70:66:d0:2d:fa:0c:bc:66:f6:fa:17: 26:f1:2f:e9:c7:a5:9a:c2:bf:39:8c:2b:19:f5:a0:32:2f:11: 90:07:92:cb:f8:c4:43:4d:c8:a2:a4:ab:08:82:d3:2c:b1:97: 0b:dc:da:65:81:bc:b7:1d:e9:07:50:d1:88:6b:7a:98:77:85: 74:94:91:ae:15:2d:89:3d:63:db:b7:7c:00:1a:da:d5:a1:74: 8c:ea:24:6d -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUIR7pyvRjrqENP/RVsXRUNE14CmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2 RUZERDAwRjAeFw0yNjA2MDEwNzIxMDhaFw0yNzA1MzEwNzI2MDhaMDMxMTAvBgNV BAMTKDYyRkIyOThCNDA4OUExQTNBQUE3QzEwMjExNkU2QkUwNDdCRUI5RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQFGxFtBwAjReL1hQQ6RMLWWl/ glUwsmFgGX9dZx26FAo6hPfdHVmwjvwqtYDi1lkBk9XaLKh6I7rIeimJMSy1qdXp hTbpTNR4+JKqIW7w60CaWCiquY0XlkKdHgJE/La9Qs0PN32U8sX1E4mfp82wuc4s T1W5KE11xzV4/n3oNPdd6lZlvoSegSZwryCnqL9M/0CeoQAmnK2ljazAYMbq7GGX g72JHdQ2I64lLY9EMAC7+N63u1SA/QBgQGd0Ck0PuNv4ziInEH97u28XrDQ75BWg fxVb2pCbs/kB8WOnkcFeUQMrjKnMs2/9r98+NLtsIKIO9rko4hohVwlgAG6XAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUYvspi0CJoaOqp8ECEW5r4Ee+ueQwHwYDVR0j BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5 MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTY3Mjc3NTIzNTE5NDA2MDkvMC8zNDMzMmUzMjMy MzUyZTMxMzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzOTMxMzczMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEACvheTANBgkqhkiG9w0BAQsFAAOCAQEAvY6Cd/cgDHn+0s0LD2/V FPTYrLj5MFcmtRYjUIDSMHuRC0/aZq4e7Jeye9xXQDMb7vK6HgpHU9sDaphV00PJ TXFX5W0igCCxWWxD1bdhXu84I806Nr74rtKOiNYpr2BLnwAXJfawfpatKG1pH43/ 1mK1bdYCJkb/PEQqoQm56m5xcMyr/cupFZDtsTCgZbyDdbIoKH0v+vdTywW/b0+A DDNBmfoqjdPbaXBm0C36DLxm9voXJvEv6celmsK/OYwrGfWgMi8RkAeSy/jEQ03I oqSrCILTLLGXC9zaZYG8tx3pB1DRiGt6mHeFdJSRrhUtiT1j27d8ABra1aF0jOok bQ== -----END CERTIFICATE-----Generated at Fri Jun 12 04:48:58 2026 by rpki-client