$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136372e302f32342d3234203d3e203539303435.roa File: 34332e3233312e3136372e302f32342d3234203d3e203539303435.roa (raw, json) Hash identifier: /9Rp3paE32Mb7xbU1V9yI0KtWtVbueQdmeDgHK5tXtQ= Subject key identifier: 4D:2F:C4:62:B2:70:48:79:B3:27:6A:72:30:D5:B1:EE:C8:8C:45:49 Certificate issuer: /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Certificate serial: 4AD5E77E5AA6B2F696A936FDE0D1678A2EB7E526 Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136372e302f32342d3234203d3e203539303435.roa Signing time: Wed 20 May 2026 03:00:57 +0000 ROA not before: Wed 20 May 2026 02:55:57 +0000 ROA not after: Wed 19 May 2027 03:00:57 +0000 asID: 59045 IP address blocks: 43.231.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 20:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d5:e7:7e:5a:a6:b2:f6:96:a9:36:fd:e0:d1:67:8a:2e:b7:e5:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Validity Not Before: May 20 02:55:57 2026 GMT Not After : May 19 03:00:57 2027 GMT Subject: CN=4D2FC462B2704879B3276A7230D5B1EEC88C4549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6e:50:02:82:85:87:6f:5f:11:fc:8f:2b:61: 1b:0f:4c:2c:22:02:4f:40:c3:d8:dc:42:f9:04:8e: 77:a4:68:25:03:24:6a:d3:97:bd:9f:08:77:85:0c: d2:42:b3:86:42:62:0a:52:27:98:25:89:cd:ba:4c: a3:f6:1e:0e:72:63:69:0f:48:d8:a8:d8:5c:74:2a: c9:11:3d:38:d0:fd:ed:e7:21:c9:1d:31:20:05:ee: 02:e7:c5:2a:db:0c:48:e7:5a:7d:97:6e:b7:e6:45: 19:6b:1b:b6:76:c9:ec:78:05:0c:1b:c3:25:fd:80: 9f:31:dd:00:d5:d6:2f:fd:c1:64:bc:6b:80:13:e1: e9:02:33:cc:5c:62:88:bb:9f:dc:16:0a:09:84:4a: 67:64:47:78:c6:4d:89:8b:82:1f:a0:81:db:28:eb: c2:43:2e:4a:d7:d7:8f:b5:87:2f:b1:27:a5:5c:63: 98:79:a7:e6:41:d5:14:79:1c:e5:bf:33:b9:10:f2: 05:ed:d1:ca:f5:79:05:67:ef:0d:fe:62:fb:58:93: 15:9d:65:64:65:18:ad:0e:94:4d:fd:d7:c8:21:45: fc:19:85:c4:11:6f:27:ee:71:b6:91:9e:7e:1a:f6: e6:20:e6:d1:7b:fb:b0:8f:8b:db:36:ff:ff:f5:11: 77:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:2F:C4:62:B2:70:48:79:B3:27:6A:72:30:D5:B1:EE:C8:8C:45:49 X509v3 Authority Key Identifier: keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136372e302f32342d3234203d3e203539303435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.231.167.0/24 Signature Algorithm: sha256WithRSAEncryption 38:b4:da:b8:e6:33:18:3c:7f:84:5c:b5:a7:d1:3e:ba:e3:32: 6a:81:c2:25:7b:ed:89:44:ed:b7:de:bd:7d:2b:57:2f:a2:dc: 61:09:d7:48:70:50:2e:f0:69:e5:f9:ba:f9:d4:fb:81:e4:89: fa:de:b5:3f:23:ba:ef:5e:84:2d:ed:da:3d:ba:32:ee:c6:93: 75:a4:2e:90:6f:66:0a:a5:f8:7d:aa:be:15:61:76:9b:af:de: 0d:71:d8:5d:e2:e7:a5:ee:d5:c9:5a:a6:fa:7a:66:7b:b4:61: 86:6c:bb:71:c8:48:97:5b:a8:78:6b:13:d3:98:b1:a4:92:54: c2:d8:d4:59:a7:75:eb:30:43:6b:2d:81:fb:87:9e:6c:c9:12: 59:28:39:cb:12:b1:22:e8:cb:6d:86:34:69:e5:83:21:f8:fe: 08:c1:13:0f:5f:59:63:a2:e7:c9:34:fe:3e:d6:44:e0:d2:f6: d6:d4:69:ba:a6:84:8a:e0:7c:6c:bb:ee:87:2b:1c:07:6a:f6: 2a:9e:69:f7:42:5a:a5:6f:fe:32:f9:12:9e:14:50:42:bb:c6: 0b:ec:c3:65:c6:e7:b5:7a:05:28:9a:c3:8b:55:52:cb:e9:3c: 7e:ad:0e:e7:b8:ac:74:6b:69:d5:2a:e4:3c:c4:4b:56:6e:9b: 0c:9f:7e:4b -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUStXnflqmsvaWqTb94NFnii635SYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4 N0FCQ0E4OTAeFw0yNjA1MjAwMjU1NTdaFw0yNzA1MTkwMzAwNTdaMDMxMTAvBgNV BAMTKDREMkZDNDYyQjI3MDQ4NzlCMzI3NkE3MjMwRDVCMUVFQzg4QzQ1NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4blACgoWHb18R/I8rYRsPTCwi Ak9Aw9jcQvkEjnekaCUDJGrTl72fCHeFDNJCs4ZCYgpSJ5glic26TKP2Hg5yY2kP SNio2Fx0KskRPTjQ/e3nIckdMSAF7gLnxSrbDEjnWn2XbrfmRRlrG7Z2yex4BQwb wyX9gJ8x3QDV1i/9wWS8a4AT4ekCM8xcYoi7n9wWCgmESmdkR3jGTYmLgh+ggdso 68JDLkrX14+1hy+xJ6VcY5h5p+ZB1RR5HOW/M7kQ8gXt0cr1eQVn7w3+YvtYkxWd ZWRlGK0OlE3918ghRfwZhcQRbyfucbaRnn4a9uYg5tF7+7CPi9s2///1EXcLAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUTS/EYrJwSHmzJ2pyMNWx7siMRUkwHwYDVR0j BBgwFoAUtojoD4nK7GqMhKflGDhCQoeryokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0NzQzMDc0ODE3NjM4Ny8wL0I2ODhFODBGODlDQUVDNkE4Qzg0QTdFNTE4Mzg0 MjQyODdBQkNBODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4N0FCQ0E4OS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NzA0NzQzMDc0ODE3NjM4Ny8wLzM0MzMyZTMyMzMz MTJlMzEzNjM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTMwMzQzNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEACvnpzANBgkqhkiG9w0BAQsFAAOCAQEAOLTauOYzGDx/hFy1p9E+uuMy aoHCJXvtiUTtt969fStXL6LcYQnXSHBQLvBp5fm6+dT7geSJ+t61PyO6716ELe3a Pboy7saTdaQukG9mCqX4faq+FWF2m6/eDXHYXeLnpe7VyVqm+npme7Rhhmy7cchI l1uoeGsT05ixpJJUwtjUWad16zBDay2B+4eebMkSWSg5yxKxIujLbYY0aeWDIfj+ CMETD19ZY6LnyTT+PtZE4NL21tRpuqaEiuB8bLvuhyscB2r2Kp5p90JapW/+MvkS nhRQQrvGC+zDZcbntXoFKJrDi1VSy+k8fq0O57isdGtp1SrkPMRLVm6bDJ9+Sw== -----END CERTIFICATE-----Generated at Fri Jun 12 04:48:34 2026 by rpki-client