$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136302e302f32342d3234203d3e2034383038.roa File: 34332e3233312e3136302e302f32342d3234203d3e2034383038.roa (raw, json) Hash identifier: eMSzssgVCrnjIF6VL8PSJ+HoJtZ3e3YyeZ8hFIcqN/Y= Subject key identifier: C2:C5:5B:D9:27:30:96:34:A6:B6:43:40:3D:E1:D3:24:7F:30:B8:D3 Certificate issuer: /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Certificate serial: 405EA1C0BBF4732F1112A51D64748681AD264094 Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136302e302f32342d3234203d3e2034383038.roa Signing time: Wed 20 May 2026 02:59:51 +0000 ROA not before: Wed 20 May 2026 02:54:51 +0000 ROA not after: Wed 19 May 2027 02:59:51 +0000 asID: 4808 IP address blocks: 43.231.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:5e:a1:c0:bb:f4:73:2f:11:12:a5:1d:64:74:86:81:ad:26:40:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Validity Not Before: May 20 02:54:51 2026 GMT Not After : May 19 02:59:51 2027 GMT Subject: CN=C2C55BD927309634A6B643403DE1D3247F30B8D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:de:80:2a:74:ab:a2:22:44:59:ee:ab:77:5e: cc:a8:00:9a:a3:ea:29:b2:4a:32:a6:88:a8:e0:92: 53:19:ec:1d:f9:e0:04:65:ca:38:97:52:a4:22:d5: 39:96:4e:1b:dc:57:9b:5d:6d:68:40:d6:0f:f6:b2: ec:c1:75:8d:02:32:ed:00:66:6d:8e:b0:b0:74:f2: 70:2e:c6:a5:fe:30:07:ea:cf:e0:3a:49:87:db:ac: bb:91:fe:b9:bf:ce:08:a2:9a:93:92:56:3c:b5:5b: 51:36:4d:f3:0e:56:11:ba:74:e1:9b:7d:41:59:f8: fe:c0:b4:0d:c9:31:89:c7:41:c4:c4:16:fd:f8:0d: a8:69:5b:64:82:1a:4e:29:76:eb:d9:b0:e6:8c:67: 1b:63:55:2d:26:cf:7f:10:95:57:cd:4a:f8:b8:6b: d0:bc:00:b8:e0:a5:ab:8d:ef:72:45:c7:f4:ea:0d: 66:bf:5c:7e:10:2f:83:e9:e5:19:4d:e9:0c:ab:c5: 0e:8c:d4:63:25:f1:a8:c4:e0:48:6d:06:e8:19:25: c4:86:a4:c9:ef:46:e6:4b:42:56:b1:9d:57:6b:e6: be:5e:97:31:5a:04:45:10:a3:c9:d4:12:6f:a6:db: 07:04:17:a5:b1:e2:c3:7a:4e:0e:a6:e6:f1:2a:98: f4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C5:5B:D9:27:30:96:34:A6:B6:43:40:3D:E1:D3:24:7F:30:B8:D3 X509v3 Authority Key Identifier: keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136302e302f32342d3234203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.231.160.0/24 Signature Algorithm: sha256WithRSAEncryption 75:b3:7e:ca:0d:37:3e:41:89:29:93:17:f9:50:a8:31:88:47: 60:76:9e:38:6e:96:52:97:6d:dc:1c:2b:22:2f:e2:4b:34:3d: 3b:77:38:9f:8b:56:00:b6:f0:7c:c3:91:af:29:b5:6c:92:21: ed:35:69:5c:a4:ea:c6:6d:d1:58:69:d3:e6:96:fa:23:8b:72: 2d:71:fd:e7:69:08:16:25:47:a0:d0:f7:bc:97:e1:14:67:3a: da:96:d0:a2:25:e8:8c:dc:d1:d6:5d:7c:05:3c:2c:af:5d:5c: 17:57:97:d0:fe:85:c3:ed:ca:27:e4:0e:2f:33:22:b6:7a:39: 7d:78:ac:70:ca:e0:31:8e:35:9e:66:15:d2:fe:ad:ff:29:c4: f6:60:5e:ec:4a:7d:d7:8a:34:7b:5c:b1:56:e7:e9:4a:69:75: 70:f0:bf:2c:99:1b:a4:77:8c:82:fe:04:9d:9b:40:68:3c:0a: 48:e6:36:dd:ab:96:a6:84:1e:76:88:cc:34:19:8d:ad:e9:24: 2d:18:35:86:d6:3c:13:6a:73:d2:98:49:48:3a:df:04:16:66: 2d:2d:96:40:d3:53:5d:ea:0b:91:1b:0b:96:cc:cf:f6:04:53: 87:dc:15:00:2d:77:22:75:ea:7c:8a:db:17:19:4c:b0:12:f8: 5e:00:98:52 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUQF6hwLv0cy8REqUdZHSGga0mQJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4 N0FCQ0E4OTAeFw0yNjA1MjAwMjU0NTFaFw0yNzA1MTkwMjU5NTFaMDMxMTAvBgNV BAMTKEMyQzU1QkQ5MjczMDk2MzRBNkI2NDM0MDNERTFEMzI0N0YzMEI4RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO3oAqdKuiIkRZ7qt3XsyoAJqj 6imySjKmiKjgklMZ7B354ARlyjiXUqQi1TmWThvcV5tdbWhA1g/2suzBdY0CMu0A Zm2OsLB08nAuxqX+MAfqz+A6SYfbrLuR/rm/zgiimpOSVjy1W1E2TfMOVhG6dOGb fUFZ+P7AtA3JMYnHQcTEFv34DahpW2SCGk4pduvZsOaMZxtjVS0mz38QlVfNSvi4 a9C8ALjgpauN73JFx/TqDWa/XH4QL4Pp5RlN6QyrxQ6M1GMl8ajE4EhtBugZJcSG pMnvRuZLQlaxnVdr5r5elzFaBEUQo8nUEm+m2wcEF6Wx4sN6Tg6m5vEqmPSdAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUwsVb2ScwljSmtkNAPeHTJH8wuNMwHwYDVR0j BBgwFoAUtojoD4nK7GqMhKflGDhCQoeryokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0NzQzMDc0ODE3NjM4Ny8wL0I2ODhFODBGODlDQUVDNkE4Qzg0QTdFNTE4Mzg0 MjQyODdBQkNBODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4N0FCQ0E4OS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3MDQ3NDMwNzQ4MTc2Mzg3LzAvMzQzMzJlMzIzMzMx MmUzMTM2MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEACvnoDANBgkqhkiG9w0BAQsFAAOCAQEAdbN+yg03PkGJKZMX+VCoMYhHYHae OG6WUpdt3BwrIi/iSzQ9O3c4n4tWALbwfMORrym1bJIh7TVpXKTqxm3RWGnT5pb6 I4tyLXH952kIFiVHoND3vJfhFGc62pbQoiXojNzR1l18BTwsr11cF1eX0P6Fw+3K J+QOLzMitno5fXiscMrgMY41nmYV0v6t/ynE9mBe7Ep914o0e1yxVufpSml1cPC/ LJkbpHeMgv4EnZtAaDwKSOY23auWpoQedojMNBmNrekkLRg1htY8E2pz0phJSDrf BBZmLS2WQNNTXeoLkRsLlszP9gRTh9wVAC13InXqfIrbFxlMsBL4XgCYUg== -----END CERTIFICATE-----Generated at Fri Jun 12 02:25:16 2026 by rpki-client