$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/34332e3232352e3132312e302f32342d3234203d3e203538343631.roa File: 34332e3232352e3132312e302f32342d3234203d3e203538343631.roa (raw, json) Hash identifier: FfG1QEgwyR+GgTmcbGVUCY3E7J1ZOuTCsKJwBokWIu8= Subject key identifier: 7E:82:BD:50:DF:AD:9A:2A:E8:B8:B5:82:13:5B:1D:77:76:EC:15:58 Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Certificate serial: 58A5310B83C0ABDFFF44550DA12B6E9E2CDBA4BA Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/34332e3232352e3132312e302f32342d3234203d3e203538343631.roa Signing time: Thu 04 Jun 2026 06:28:42 +0000 ROA not before: Thu 04 Jun 2026 06:23:42 +0000 ROA not after: Thu 03 Jun 2027 06:28:42 +0000 asID: 58461 IP address blocks: 43.225.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a5:31:0b:83:c0:ab:df:ff:44:55:0d:a1:2b:6e:9e:2c:db:a4:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Validity Not Before: Jun 4 06:23:42 2026 GMT Not After : Jun 3 06:28:42 2027 GMT Subject: CN=7E82BD50DFAD9A2AE8B8B582135B1D7776EC1558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:88:d5:99:fe:e3:6e:a0:85:5d:22:5e:6a:fc: 02:bd:a4:9d:50:e7:24:9d:16:7f:b2:13:1f:96:87: ab:43:fa:da:e6:76:bf:b9:07:84:3f:f9:53:ea:42: 21:e0:4c:b5:b1:c2:4c:60:2f:8b:e0:af:19:40:26: da:05:33:60:4e:ff:0e:df:cd:4e:c3:33:e8:a2:ec: 39:8b:66:31:92:3f:79:14:c0:0d:6d:fc:7b:40:af: 21:f8:2d:2f:96:3c:87:72:ad:65:d5:d5:56:82:71: 88:d5:d7:58:84:19:75:e1:4e:78:81:b5:16:1d:7c: 48:2c:53:a5:97:35:6a:48:80:18:50:03:6f:b9:0a: 83:58:5c:bd:a4:bb:5e:31:7d:3b:9f:21:ec:a1:54: da:7f:5a:a5:24:5c:09:a2:0e:5d:b4:c5:16:30:3c: 0e:07:69:e4:34:c5:67:2b:a6:05:41:e2:45:e8:a3: 28:14:6b:6f:e5:62:4b:6e:d3:3b:01:ba:62:89:39: 9b:5d:e7:d1:9c:f1:3f:01:f8:11:39:40:f6:b5:8f: 0c:14:5d:9d:62:e9:30:e9:05:db:86:de:4f:c3:f3: 67:ff:80:85:66:b5:69:a4:1d:58:12:ac:52:0d:17: 35:a0:dc:c2:2f:3a:7e:0a:32:0a:04:00:c5:96:a4: 14:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:82:BD:50:DF:AD:9A:2A:E8:B8:B5:82:13:5B:1D:77:76:EC:15:58 X509v3 Authority Key Identifier: keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/34332e3232352e3132312e302f32342d3234203d3e203538343631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.225.121.0/24 Signature Algorithm: sha256WithRSAEncryption ac:bf:b5:c4:3e:cb:65:b6:d9:3e:c3:47:83:a3:72:b3:cf:ed: b2:dd:f8:dc:a7:81:74:ca:c9:95:ac:76:b4:27:02:8c:6c:18: 16:54:a0:1f:a6:c8:36:64:e8:95:2e:64:e7:85:ec:1a:23:9d: 0a:60:79:5d:84:7c:ca:7e:66:ad:57:20:97:11:81:e2:50:b5: a2:ca:ba:63:ef:e7:c4:a6:8b:3e:03:e2:a5:25:2a:80:d6:f3: ad:5f:0c:26:d5:45:c9:1e:32:db:70:7a:5d:5e:43:42:27:7f: 06:77:ac:5e:9c:bd:12:84:37:d8:2c:bc:f7:68:f6:05:97:70: d3:e2:06:ca:cc:42:95:20:fb:e5:0d:78:a9:24:f6:5f:13:a3: 4b:1f:2e:78:91:88:49:7f:32:11:cf:e9:70:69:e1:45:17:1c: c8:76:67:cd:63:6c:96:c9:71:e9:c2:da:5f:73:a7:25:35:60: a8:eb:87:3f:b8:16:d4:48:98:39:00:cb:d7:83:f7:dd:1d:01: 73:89:bc:ef:51:3b:c2:e1:da:e6:d0:6f:9b:39:c8:6e:3c:56: 72:c3:0f:d0:75:0f:2b:4b:bb:37:8e:2a:83:a6:ab:0d:95:fa: 7a:c4:39:7d:d1:d5:8b:7f:f8:6f:bd:b5:61:89:f5:d6:41:f0: 3a:a6:ab:6e -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUWKUxC4PAq9//RFUNoStunizbpLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2 RUZERDAwRjAeFw0yNjA2MDQwNjIzNDJaFw0yNzA2MDMwNjI4NDJaMDMxMTAvBgNV BAMTKDdFODJCRDUwREZBRDlBMkFFOEI4QjU4MjEzNUIxRDc3NzZFQzE1NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaiNWZ/uNuoIVdIl5q/AK9pJ1Q 5ySdFn+yEx+Wh6tD+trmdr+5B4Q/+VPqQiHgTLWxwkxgL4vgrxlAJtoFM2BO/w7f zU7DM+ii7DmLZjGSP3kUwA1t/HtAryH4LS+WPIdyrWXV1VaCcYjV11iEGXXhTniB tRYdfEgsU6WXNWpIgBhQA2+5CoNYXL2ku14xfTufIeyhVNp/WqUkXAmiDl20xRYw PA4HaeQ0xWcrpgVB4kXooygUa2/lYktu0zsBumKJOZtd59Gc8T8B+BE5QPa1jwwU XZ1i6TDpBduG3k/D82f/gIVmtWmkHVgSrFINFzWg3MIvOn4KMgoEAMWWpBRHAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUfoK9UN+tmirouLWCE1sdd3bsFVgwHwYDVR0j BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5 MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjcyNzc1MjM1MTk0MDYwOS8wLzM0MzMyZTMyMzIz NTJlMzEzMjMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzODM0MzYzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEACvheTANBgkqhkiG9w0BAQsFAAOCAQEArL+1xD7LZbbZPsNHg6Nys8/t st343KeBdMrJlax2tCcCjGwYFlSgH6bINmTolS5k54XsGiOdCmB5XYR8yn5mrVcg lxGB4lC1osq6Y+/nxKaLPgPipSUqgNbzrV8MJtVFyR4y23B6XV5DQid/BnesXpy9 EoQ32Cy892j2BZdw0+IGysxClSD75Q14qST2XxOjSx8ueJGISX8yEc/pcGnhRRcc yHZnzWNslslx6cLaX3OnJTVgqOuHP7gW1EiYOQDL14P33R0Bc4m871E7wuHa5tBv mznIbjxWcsMP0HUPK0u7N44qg6arDZX6esQ5fdHVi3/4b721YYn11kHwOqarbg== -----END CERTIFICATE-----Generated at Fri Jun 12 02:25:09 2026 by rpki-client