$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136312e302f32342d3234203d3e203539303435.roa File: 34332e3233312e3136312e302f32342d3234203d3e203539303435.roa (raw, json) Hash identifier: 358nj2S4xIzsoF5ZCAuIBT3be/At+L9A5PxfyFNWokY= Subject key identifier: B5:66:18:56:FF:BD:0C:43:56:69:92:84:94:A4:07:1F:96:7B:A9:7F Certificate issuer: /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Certificate serial: 2AA3F5D894FE4A1F71EEFE122F5A8CBCD6B4038E Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136312e302f32342d3234203d3e203539303435.roa Signing time: Wed 20 May 2026 03:00:57 +0000 ROA not before: Wed 20 May 2026 02:55:57 +0000 ROA not after: Wed 19 May 2027 03:00:57 +0000 asID: 59045 IP address blocks: 43.231.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 20:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:a3:f5:d8:94:fe:4a:1f:71:ee:fe:12:2f:5a:8c:bc:d6:b4:03:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Validity Not Before: May 20 02:55:57 2026 GMT Not After : May 19 03:00:57 2027 GMT Subject: CN=B5661856FFBD0C435669928494A4071F967BA97F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d1:00:ba:5e:cf:8d:7b:78:4e:13:2a:f8:ca: 8d:b2:46:f5:a7:66:85:82:9c:99:87:ca:5c:51:13: eb:0e:01:e1:69:d3:b2:a1:a3:c3:81:25:9c:06:1c: 9d:35:4a:2c:ef:64:39:f7:d0:36:7c:c7:43:49:78: 4d:21:bf:10:72:76:db:aa:12:01:59:90:eb:0e:69: a5:75:4b:c7:a3:f0:05:63:2e:97:c9:4b:f6:63:c9: c7:bf:77:ee:8c:b3:21:08:79:88:ed:f5:18:40:1b: b3:55:d3:f7:95:f2:b5:06:31:b7:ee:15:2d:84:66: ea:25:ce:22:cd:64:15:46:fc:d6:3a:be:16:a6:08: 45:50:a3:6a:a0:86:5d:23:38:c4:b0:13:4c:bf:6d: 6c:8e:d4:fd:2c:fc:df:03:5a:58:5b:43:4e:bb:b1: 82:33:a8:26:de:3c:c4:3b:a0:ac:e6:2d:1a:37:fe: 2a:02:7a:2d:5d:dd:e0:a5:96:2a:5d:d1:f4:db:04: 9f:8c:62:ac:ed:05:c8:2b:b8:b8:f0:cb:ad:1e:0c: 87:8d:89:96:06:95:43:9e:05:41:64:63:b6:66:b2: c3:56:5d:f5:0f:e9:42:fb:6f:c5:18:cb:87:40:77: c2:cd:f8:4c:4e:ae:22:e3:8b:93:9d:8b:c7:d7:2e: c4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:66:18:56:FF:BD:0C:43:56:69:92:84:94:A4:07:1F:96:7B:A9:7F X509v3 Authority Key Identifier: keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136312e302f32342d3234203d3e203539303435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.231.161.0/24 Signature Algorithm: sha256WithRSAEncryption 64:15:6f:00:26:e2:f5:74:60:48:e5:73:d3:36:f7:18:d4:53: ec:20:e6:b7:c8:eb:fc:09:9c:dc:66:a1:38:bb:91:6c:bd:e6: b4:7b:f5:f2:a6:1d:76:34:8c:d6:28:a4:42:55:8b:1a:32:a1: 61:a1:73:57:6f:68:ea:e9:b3:2c:ec:55:cd:9c:0f:18:6e:06: 65:45:eb:da:6a:43:5f:cf:0c:72:51:18:7f:ce:cf:ce:ef:d0: 7d:40:f1:c6:bf:9b:15:b0:64:a8:84:b9:e5:e9:f1:76:58:ef: 06:fa:f2:81:92:98:74:26:22:c1:77:7f:02:02:db:01:af:3e: 01:6e:80:2c:c9:e0:e6:58:75:82:59:72:b4:37:a8:03:de:78: 66:e9:b8:2d:81:8a:95:6e:91:fd:92:a5:22:f2:70:6f:62:34: 84:9e:1c:cf:bd:6d:a5:28:d6:36:8e:1c:dd:58:0d:24:df:71: f8:ba:90:95:dc:fd:47:bc:55:72:c9:14:f7:66:65:68:f1:79: fa:59:ba:35:30:e9:0e:3d:e7:aa:4a:12:ff:74:db:34:c3:09: d9:0e:c6:b2:26:c8:86:3f:6a:24:81:3f:c1:1f:31:58:ff:d5: 7a:f9:07:63:58:1d:9d:62:e4:25:53:07:56:07:ee:8c:32:7b: a3:d2:32:54 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUKqP12JT+Sh9x7v4SL1qMvNa0A44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4 N0FCQ0E4OTAeFw0yNjA1MjAwMjU1NTdaFw0yNzA1MTkwMzAwNTdaMDMxMTAvBgNV BAMTKEI1NjYxODU2RkZCRDBDNDM1NjY5OTI4NDk0QTQwNzFGOTY3QkE5N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC60QC6Xs+Ne3hOEyr4yo2yRvWn ZoWCnJmHylxRE+sOAeFp07Kho8OBJZwGHJ01SizvZDn30DZ8x0NJeE0hvxBydtuq EgFZkOsOaaV1S8ej8AVjLpfJS/Zjyce/d+6MsyEIeYjt9RhAG7NV0/eV8rUGMbfu FS2EZuolziLNZBVG/NY6vhamCEVQo2qghl0jOMSwE0y/bWyO1P0s/N8DWlhbQ067 sYIzqCbePMQ7oKzmLRo3/ioCei1d3eCllipd0fTbBJ+MYqztBcgruLjwy60eDIeN iZYGlUOeBUFkY7ZmssNWXfUP6UL7b8UYy4dAd8LN+ExOriLji5Odi8fXLsQ3AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUtWYYVv+9DENWaZKElKQHH5Z7qX8wHwYDVR0j BBgwFoAUtojoD4nK7GqMhKflGDhCQoeryokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0NzQzMDc0ODE3NjM4Ny8wL0I2ODhFODBGODlDQUVDNkE4Qzg0QTdFNTE4Mzg0 MjQyODdBQkNBODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4N0FCQ0E4OS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NzA0NzQzMDc0ODE3NjM4Ny8wLzM0MzMyZTMyMzMz MTJlMzEzNjMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTMwMzQzNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEACvnoTANBgkqhkiG9w0BAQsFAAOCAQEAZBVvACbi9XRgSOVz0zb3GNRT 7CDmt8jr/Amc3GahOLuRbL3mtHv18qYddjSM1iikQlWLGjKhYaFzV29o6umzLOxV zZwPGG4GZUXr2mpDX88MclEYf87Pzu/QfUDxxr+bFbBkqIS55enxdljvBvrygZKY dCYiwXd/AgLbAa8+AW6ALMng5lh1gllytDeoA954Zum4LYGKlW6R/ZKlIvJwb2I0 hJ4cz71tpSjWNo4c3VgNJN9x+LqQldz9R7xVcskU92ZlaPF5+lm6NTDpDj3nqkoS /3TbNMMJ2Q7GsibIhj9qJIE/wR8xWP/VevkHY1gdnWLkJVMHVgfujDJ7o9IyVA== -----END CERTIFICATE-----Generated at Fri Jun 12 04:48:34 2026 by rpki-client