$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136332e302f32342d3234203d3e2034383038.roa File: 34332e3233312e3136332e302f32342d3234203d3e2034383038.roa (raw, json) Hash identifier: DcHKH8AMXCvgpm186lSssTzK4qmxlvaVy6ZMdS2SLbo= Subject key identifier: 65:F3:A4:DF:0B:AB:61:86:06:10:90:22:20:9E:E1:CF:9E:A9:B9:CD Certificate issuer: /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Certificate serial: 60BE80A2FCE9727BF3B2AE4DFC4FE23C8C3C7A2D Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136332e302f32342d3234203d3e2034383038.roa Signing time: Wed 20 May 2026 02:59:51 +0000 ROA not before: Wed 20 May 2026 02:54:51 +0000 ROA not after: Wed 19 May 2027 02:59:51 +0000 asID: 4808 IP address blocks: 43.231.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:be:80:a2:fc:e9:72:7b:f3:b2:ae:4d:fc:4f:e2:3c:8c:3c:7a:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Validity Not Before: May 20 02:54:51 2026 GMT Not After : May 19 02:59:51 2027 GMT Subject: CN=65F3A4DF0BAB618606109022209EE1CF9EA9B9CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d2:91:1f:f1:39:f9:59:d6:79:f0:67:23:66: 40:0d:c4:58:53:a2:4c:c7:06:9e:6b:cf:07:c4:a3: ca:58:99:95:48:83:d0:4c:6e:69:0a:0a:94:68:72: 51:7b:3e:ef:68:d0:eb:79:54:a5:29:e5:5d:6a:29: df:e4:4f:b3:32:4a:fa:ac:32:2b:9f:26:ae:c8:31: 58:ab:36:c6:0f:42:1a:d2:d1:fd:10:6f:d1:c3:52: 6a:88:5b:f0:aa:80:27:68:32:a9:4a:2f:5a:a1:1e: a1:46:83:f3:70:40:3f:68:ff:d4:b5:e0:9e:50:e5: ea:4c:8d:a5:83:8b:a1:e3:79:3c:28:6c:90:10:75: cf:9e:a6:39:ff:ea:01:89:47:e1:f0:22:c7:75:b6: 8b:0c:2a:72:42:48:93:a5:29:4d:a7:25:a8:fd:33: ed:86:31:70:35:52:15:74:da:22:9a:1a:3e:07:1f: cf:70:93:93:d1:7d:d0:3c:13:e5:6e:9e:30:0d:92: 77:9f:a1:38:78:c6:46:28:c8:e3:e3:ac:61:89:c2: 03:f1:a4:61:c4:47:4a:11:75:a3:9a:7e:6f:23:fa: e2:2e:63:ac:75:54:b3:69:b0:9d:80:c3:e3:4d:08: 77:41:dc:91:d1:7a:44:8c:c3:27:86:17:6b:af:e8: b8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F3:A4:DF:0B:AB:61:86:06:10:90:22:20:9E:E1:CF:9E:A9:B9:CD X509v3 Authority Key Identifier: keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136332e302f32342d3234203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.231.163.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:f9:29:78:73:6f:ae:d4:42:c7:00:40:58:85:71:91:50:5f: 4d:2e:1b:84:55:29:8e:1f:54:b5:df:7c:7a:e8:00:9b:02:e2: 52:07:0f:ff:eb:96:99:d6:ae:16:66:8d:01:01:3c:bb:b7:8b: b7:e1:72:bd:4e:94:01:d7:3e:bc:02:ae:c6:b5:05:8a:f1:55: b6:45:56:52:da:34:8b:ec:33:2b:51:c5:cf:6a:36:f8:0d:3f: fc:f7:2c:4c:db:94:47:4d:96:62:ca:0f:b2:ee:dd:6a:b1:94: b8:42:a2:9d:2a:69:d5:75:91:d0:c9:76:d9:2b:b8:d9:e9:38: bc:8b:a7:6b:26:79:64:2c:3a:e3:e1:c0:21:15:b6:b4:f4:87: 11:21:0b:1e:94:dd:ba:d3:1d:81:38:46:c8:c5:76:f3:64:fb: 10:75:df:6a:77:35:53:63:59:ea:0f:92:7f:1c:7b:49:3d:9d: cd:b3:7c:58:d1:d0:9b:6d:82:3d:40:f8:da:04:f4:d9:33:1a: 67:7b:06:0d:fd:07:fe:a5:68:b7:21:50:a9:2d:b7:6b:5b:29: df:67:d9:41:8d:45:96:09:70:bd:70:f2:e0:98:be:af:e3:23: 7b:b0:be:21:47:16:7b:fb:6b:bc:25:ae:f1:d1:bc:03:a3:43: 8f:3f:c7:cc -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUYL6Aovzpcnvzsq5N/E/iPIw8ei0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4 N0FCQ0E4OTAeFw0yNjA1MjAwMjU0NTFaFw0yNzA1MTkwMjU5NTFaMDMxMTAvBgNV BAMTKDY1RjNBNERGMEJBQjYxODYwNjEwOTAyMjIwOUVFMUNGOUVBOUI5Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc0pEf8Tn5WdZ58GcjZkANxFhT okzHBp5rzwfEo8pYmZVIg9BMbmkKCpRoclF7Pu9o0Ot5VKUp5V1qKd/kT7MySvqs MiufJq7IMVirNsYPQhrS0f0Qb9HDUmqIW/CqgCdoMqlKL1qhHqFGg/NwQD9o/9S1 4J5Q5epMjaWDi6HjeTwobJAQdc+epjn/6gGJR+HwIsd1tosMKnJCSJOlKU2nJaj9 M+2GMXA1UhV02iKaGj4HH89wk5PRfdA8E+VunjANknefoTh4xkYoyOPjrGGJwgPx pGHER0oRdaOafm8j+uIuY6x1VLNpsJ2Aw+NNCHdB3JHRekSMwyeGF2uv6Lj3AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUZfOk3wurYYYGEJAiIJ7hz56puc0wHwYDVR0j BBgwFoAUtojoD4nK7GqMhKflGDhCQoeryokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0NzQzMDc0ODE3NjM4Ny8wL0I2ODhFODBGODlDQUVDNkE4Qzg0QTdFNTE4Mzg0 MjQyODdBQkNBODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4N0FCQ0E4OS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3MDQ3NDMwNzQ4MTc2Mzg3LzAvMzQzMzJlMzIzMzMx MmUzMTM2MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEACvnozANBgkqhkiG9w0BAQsFAAOCAQEAL/kpeHNvrtRCxwBAWIVxkVBfTS4b hFUpjh9Utd98eugAmwLiUgcP/+uWmdauFmaNAQE8u7eLt+FyvU6UAdc+vAKuxrUF ivFVtkVWUto0i+wzK1HFz2o2+A0//PcsTNuUR02WYsoPsu7darGUuEKinSpp1XWR 0Ml22Su42ek4vIunayZ5ZCw64+HAIRW2tPSHESELHpTdutMdgThGyMV282T7EHXf anc1U2NZ6g+Sfxx7ST2dzbN8WNHQm22CPUD42gT02TMaZ3sGDf0H/qVotyFQqS23 a1sp32fZQY1FlglwvXDy4Ji+r+Mje7C+IUcWe/trvCWu8dG8A6NDjz/HzA== -----END CERTIFICATE-----Generated at Fri Jun 12 02:25:14 2026 by rpki-client