$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136302e302f32342d3234203d3e203233373234.roa File: 34332e3233312e3136302e302f32342d3234203d3e203233373234.roa (raw, json) Hash identifier: 24FDnRvLCzn0ANWhhM/3WAQ1SR667x669CQVFjAXkT8= Subject key identifier: 71:B1:4D:B8:51:EC:EB:3C:FD:B6:F1:48:08:EA:FE:DA:F6:28:5E:2A Certificate issuer: /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Certificate serial: 056D411A7285BBDDD2633A35790DFE8B669EA70C Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136302e302f32342d3234203d3e203233373234.roa Signing time: Wed 20 May 2026 02:59:51 +0000 ROA not before: Wed 20 May 2026 02:54:51 +0000 ROA not after: Wed 19 May 2027 02:59:51 +0000 asID: 23724 IP address blocks: 43.231.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 07:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:6d:41:1a:72:85:bb:dd:d2:63:3a:35:79:0d:fe:8b:66:9e:a7:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Validity Not Before: May 20 02:54:51 2026 GMT Not After : May 19 02:59:51 2027 GMT Subject: CN=71B14DB851ECEB3CFDB6F14808EAFEDAF6285E2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ce:4f:89:d9:7b:0c:af:f1:a5:9f:5b:61:f2: f8:8d:32:37:d1:4f:7b:b4:71:2c:35:5a:b5:72:a4: 5f:89:a7:71:a2:56:fc:9b:88:3f:e9:71:25:3f:de: d9:04:f8:87:f3:88:20:09:5b:e2:84:3f:dd:12:64: 05:9d:f4:1d:5f:40:6a:cb:f7:57:77:bd:11:12:e0: 9c:05:a1:f8:b1:00:5b:af:b9:e4:ef:68:42:ae:9b: dd:42:34:47:ed:15:1f:cd:e2:82:97:90:0a:71:4f: e5:46:2e:57:fa:f3:30:57:61:e0:a7:60:06:34:5a: e4:ae:93:2c:58:6f:85:16:6c:1d:d3:ac:e6:54:41: f1:85:c6:1f:65:98:97:12:c2:e6:72:10:6a:34:15: 0b:d2:eb:d5:ef:a0:4e:95:c6:e7:af:eb:b3:6a:59: 4d:70:59:40:4f:98:1c:e0:0a:e6:95:9f:ad:72:87: a4:2a:60:36:9d:10:13:41:ce:d5:60:fb:50:ec:e3: 79:49:f7:b4:c8:b6:9d:b7:80:26:b8:48:79:5e:ac: 6d:c9:50:b7:8a:da:86:40:2d:a8:8e:21:06:95:8e: ab:d6:11:dd:cf:ec:40:d1:69:34:00:b7:57:62:fb: 19:5e:0b:55:9b:30:e6:98:23:b2:7d:86:70:4b:fa: a7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B1:4D:B8:51:EC:EB:3C:FD:B6:F1:48:08:EA:FE:DA:F6:28:5E:2A X509v3 Authority Key Identifier: keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136302e302f32342d3234203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.231.160.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:2e:1d:2b:24:15:ee:d8:46:88:ba:e0:29:47:34:bc:8a:03: 41:33:e9:0b:11:85:d3:ef:5b:db:3c:d3:4f:a0:44:e9:21:5a: d2:48:bc:28:c4:47:01:eb:a8:ea:ff:c6:b5:0a:da:32:f7:c2: 82:74:33:f9:ad:fe:f7:37:d7:6c:b0:01:35:12:ba:dc:54:ab: 1b:9f:4c:81:57:95:66:81:d5:47:2a:4d:89:35:fe:5a:f9:cf: 37:a5:22:96:74:53:6e:e0:43:dc:66:6d:4b:2a:69:13:89:65: 2e:69:07:d5:44:92:e9:71:78:5e:94:4a:db:2a:11:a7:59:d1: 14:64:e0:c9:65:55:b6:74:3b:8c:99:e0:f0:4a:d8:15:6d:a8: c5:1e:8a:94:a2:f2:52:30:4e:73:31:2c:57:c6:eb:b0:78:6c: fd:06:e0:92:6f:74:57:5b:f1:df:6e:55:e6:95:09:6f:5c:bb: 19:aa:90:17:51:c5:c2:19:66:d2:cd:e2:74:76:dc:a0:4f:23: cb:be:81:6d:a5:7a:c7:c7:90:16:00:cc:fb:6a:f3:12:fd:7a: 18:eb:de:33:89:39:1c:e0:ce:73:ec:e0:45:c1:07:f8:4a:3e: 0e:76:84:31:a0:94:9f:ed:82:dd:cb:2f:b8:8d:10:47:cf:87: 28:89:a4:72 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUBW1BGnKFu93SYzo1eQ3+i2aepwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4 N0FCQ0E4OTAeFw0yNjA1MjAwMjU0NTFaFw0yNzA1MTkwMjU5NTFaMDMxMTAvBgNV BAMTKDcxQjE0REI4NTFFQ0VCM0NGREI2RjE0ODA4RUFGRURBRjYyODVFMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2zk+J2XsMr/Gln1th8viNMjfR T3u0cSw1WrVypF+Jp3GiVvybiD/pcSU/3tkE+IfziCAJW+KEP90SZAWd9B1fQGrL 91d3vRES4JwFofixAFuvueTvaEKum91CNEftFR/N4oKXkApxT+VGLlf68zBXYeCn YAY0WuSukyxYb4UWbB3TrOZUQfGFxh9lmJcSwuZyEGo0FQvS69XvoE6Vxuev67Nq WU1wWUBPmBzgCuaVn61yh6QqYDadEBNBztVg+1Ds43lJ97TItp23gCa4SHlerG3J ULeK2oZALaiOIQaVjqvWEd3P7EDRaTQAt1di+xleC1WbMOaYI7J9hnBL+qf7AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUcbFNuFHs6zz9tvFICOr+2vYoXiowHwYDVR0j BBgwFoAUtojoD4nK7GqMhKflGDhCQoeryokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0NzQzMDc0ODE3NjM4Ny8wL0I2ODhFODBGODlDQUVDNkE4Qzg0QTdFNTE4Mzg0 MjQyODdBQkNBODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4N0FCQ0E4OS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NzA0NzQzMDc0ODE3NjM4Ny8wLzM0MzMyZTMyMzMz MTJlMzEzNjMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM3MzIzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEACvnoDANBgkqhkiG9w0BAQsFAAOCAQEASy4dKyQV7thGiLrgKUc0vIoD QTPpCxGF0+9b2zzTT6BE6SFa0ki8KMRHAeuo6v/GtQraMvfCgnQz+a3+9zfXbLAB NRK63FSrG59MgVeVZoHVRypNiTX+WvnPN6UilnRTbuBD3GZtSyppE4llLmkH1USS 6XF4XpRK2yoRp1nRFGTgyWVVtnQ7jJng8ErYFW2oxR6KlKLyUjBOczEsV8brsHhs /Qbgkm90V1vx325V5pUJb1y7GaqQF1HFwhlm0s3idHbcoE8jy76BbaV6x8eQFgDM +2rzEv16GOveM4k5HODOc+zgRcEH+Eo+DnaEMaCUn+2C3csvuI0QR8+HKImkcg== -----END CERTIFICATE-----Generated at Sat May 30 00:42:54 2026 by rpki-client