$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136332e302f32342d3234203d3e203539303435.roa File: 34332e3233312e3136332e302f32342d3234203d3e203539303435.roa (raw, json) Hash identifier: HlBnZJtRyN9WWrXETRSPEzDLZRrvouzm35CF758gaP0= Subject key identifier: B0:09:D5:8D:1B:16:14:5D:19:1D:27:10:00:81:E8:4B:72:CB:9A:E8 Certificate issuer: /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Certificate serial: 6249DD0BC5B18417441EDD8ADBFE5446F0E8A866 Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136332e302f32342d3234203d3e203539303435.roa Signing time: Wed 20 May 2026 03:00:57 +0000 ROA not before: Wed 20 May 2026 02:55:57 +0000 ROA not after: Wed 19 May 2027 03:00:57 +0000 asID: 59045 IP address blocks: 43.231.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 20:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:49:dd:0b:c5:b1:84:17:44:1e:dd:8a:db:fe:54:46:f0:e8:a8:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Validity Not Before: May 20 02:55:57 2026 GMT Not After : May 19 03:00:57 2027 GMT Subject: CN=B009D58D1B16145D191D27100081E84B72CB9AE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:76:88:7f:9c:09:a9:4f:27:79:c4:fd:91:3f: 00:f3:ff:14:91:49:e0:e5:54:6c:8c:0d:47:cd:93: 50:35:92:dc:05:ae:e6:22:02:29:e9:e3:0c:49:aa: 1c:53:af:e7:af:23:3f:ac:31:9e:fb:12:f5:55:79: b6:f9:9d:e4:4d:a9:6b:98:cc:bb:d0:1c:b7:1c:9e: 84:68:3b:53:ff:1e:a9:68:e1:ef:9e:40:c1:e1:4e: 93:e2:d9:13:2c:8e:25:6d:9c:9f:e9:1d:08:bb:ec: ea:eb:06:6f:24:e9:d3:7d:c2:50:c4:5f:9c:65:0a: 33:52:83:75:69:c1:69:a4:71:ac:0f:e9:c8:9f:e4: 22:2a:39:9e:9d:cd:33:94:e1:95:d2:05:b5:6d:5b: 76:f6:98:8c:90:0c:c6:ad:7f:05:8b:59:78:7e:ac: df:16:aa:43:b4:bc:62:4f:f7:39:1d:c6:ee:c9:a4: 08:8c:66:d2:c0:cd:2a:7d:6d:f7:f0:e5:53:c2:e5: 1f:65:c1:84:c9:21:fb:13:c0:fd:8b:7b:f9:62:3b: 1c:2a:33:d1:49:05:9c:46:03:13:72:20:8d:39:35: 79:59:01:5d:52:64:a4:5d:36:e3:a2:c7:ba:35:9e: 37:95:7a:81:16:51:06:76:73:91:18:77:9b:d4:6d: 54:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:09:D5:8D:1B:16:14:5D:19:1D:27:10:00:81:E8:4B:72:CB:9A:E8 X509v3 Authority Key Identifier: keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136332e302f32342d3234203d3e203539303435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.231.163.0/24 Signature Algorithm: sha256WithRSAEncryption 27:44:f3:1d:4c:90:a6:0c:6a:74:d6:2d:55:ff:e5:b9:40:37: a0:3b:13:da:6c:69:38:9f:05:8b:fd:96:4b:b4:98:ee:a5:f5: 9a:3c:02:53:02:36:99:a7:83:e3:8d:57:bd:af:b0:49:0c:38: c6:8d:2b:a3:4d:d7:3b:26:e1:4c:5c:11:52:be:b5:95:e1:2c: ab:24:af:be:0b:75:8f:a9:81:20:11:be:cc:7d:67:2d:8f:71: 63:e7:34:07:0d:3b:a7:0b:a5:f3:df:57:86:3b:f8:f6:4d:d8: 75:53:24:a8:46:f3:3c:16:3c:cb:85:4e:18:5e:8c:ed:5d:f8: 8c:bc:4e:6a:e9:44:bb:b2:7d:6d:91:44:a2:18:34:c9:ac:27: c7:f4:f4:1d:e4:57:a0:34:cc:79:26:4a:94:74:82:10:20:82: 3a:25:c6:d0:86:ff:96:62:ed:3d:48:9f:84:7d:94:8e:40:77: cf:75:31:5b:f2:95:99:5b:19:aa:b6:61:ef:11:5e:d3:5a:48: 05:b2:5c:0f:ff:a0:c5:ff:91:e5:24:6c:52:85:f8:a7:81:9e: d1:d0:6b:2c:c7:27:80:20:a3:d8:95:34:90:a2:5d:b3:20:8c: ef:5e:80:a3:45:ae:73:16:c6:85:bc:85:3e:d2:0d:00:cf:08: ca:89:67:1d -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUYkndC8WxhBdEHt2K2/5URvDoqGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4 N0FCQ0E4OTAeFw0yNjA1MjAwMjU1NTdaFw0yNzA1MTkwMzAwNTdaMDMxMTAvBgNV BAMTKEIwMDlENThEMUIxNjE0NUQxOTFEMjcxMDAwODFFODRCNzJDQjlBRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDdoh/nAmpTyd5xP2RPwDz/xSR SeDlVGyMDUfNk1A1ktwFruYiAinp4wxJqhxTr+evIz+sMZ77EvVVebb5neRNqWuY zLvQHLccnoRoO1P/Hqlo4e+eQMHhTpPi2RMsjiVtnJ/pHQi77OrrBm8k6dN9wlDE X5xlCjNSg3VpwWmkcawP6cif5CIqOZ6dzTOU4ZXSBbVtW3b2mIyQDMatfwWLWXh+ rN8WqkO0vGJP9zkdxu7JpAiMZtLAzSp9bffw5VPC5R9lwYTJIfsTwP2Le/liOxwq M9FJBZxGAxNyII05NXlZAV1SZKRdNuOix7o1njeVeoEWUQZ2c5EYd5vUbVTlAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUsAnVjRsWFF0ZHScQAIHoS3LLmugwHwYDVR0j BBgwFoAUtojoD4nK7GqMhKflGDhCQoeryokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0NzQzMDc0ODE3NjM4Ny8wL0I2ODhFODBGODlDQUVDNkE4Qzg0QTdFNTE4Mzg0 MjQyODdBQkNBODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4N0FCQ0E4OS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NzA0NzQzMDc0ODE3NjM4Ny8wLzM0MzMyZTMyMzMz MTJlMzEzNjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTMwMzQzNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEACvnozANBgkqhkiG9w0BAQsFAAOCAQEAJ0TzHUyQpgxqdNYtVf/luUA3 oDsT2mxpOJ8Fi/2WS7SY7qX1mjwCUwI2maeD441Xva+wSQw4xo0ro03XOybhTFwR Ur61leEsqySvvgt1j6mBIBG+zH1nLY9xY+c0Bw07pwul899Xhjv49k3YdVMkqEbz PBY8y4VOGF6M7V34jLxOaulEu7J9bZFEohg0yawnx/T0HeRXoDTMeSZKlHSCECCC OiXG0Ib/lmLtPUifhH2UjkB3z3UxW/KVmVsZqrZh7xFe01pIBbJcD/+gxf+R5SRs UoX4p4Ge0dBrLMcngCCj2JU0kKJdsyCM716Ao0WucxbGhbyFPtINAM8IyolnHQ== -----END CERTIFICATE-----Generated at Fri Jun 12 04:48:34 2026 by rpki-client