$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136382e302f32342d3234203d3e2034383038.roa File: 34332e3233312e3136382e302f32342d3234203d3e2034383038.roa (raw, json) Hash identifier: eO91F7hb156INMh0wkLF9i4co0ne3A8qbTScqpey0H8= Subject key identifier: 8E:79:70:D6:F7:CF:DE:FB:43:9A:FF:CC:0C:73:07:31:4A:BE:9C:1B Certificate issuer: /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Certificate serial: 76B47C8D83D62781C23DFD7FCE84DF966B9F8B2B Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136382e302f32342d3234203d3e2034383038.roa Signing time: Wed 20 May 2026 02:59:51 +0000 ROA not before: Wed 20 May 2026 02:54:51 +0000 ROA not after: Wed 19 May 2027 02:59:51 +0000 asID: 4808 IP address blocks: 43.231.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:b4:7c:8d:83:d6:27:81:c2:3d:fd:7f:ce:84:df:96:6b:9f:8b:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Validity Not Before: May 20 02:54:51 2026 GMT Not After : May 19 02:59:51 2027 GMT Subject: CN=8E7970D6F7CFDEFB439AFFCC0C7307314ABE9C1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:a9:75:88:de:d1:75:97:24:56:0c:7c:d5:30: f4:03:8c:aa:c5:57:8f:b7:0a:57:c3:11:1d:85:3e: 79:04:4b:48:84:ed:fb:46:de:8c:ba:d6:2c:d3:ac: 20:8b:e2:be:07:b6:da:bd:99:fe:25:72:65:47:60: f1:c9:06:c4:3b:5d:ae:18:c4:cd:4d:02:44:9a:1a: 93:34:51:cd:26:bb:50:47:2b:4d:91:a1:44:0a:4a: 50:39:bf:92:53:1d:a3:dc:c2:bf:8c:3a:ca:62:37: c0:82:88:80:85:48:9a:9c:18:88:e2:7e:61:1f:44: 3b:e4:4e:b6:c4:91:fb:e5:d7:1c:e5:3c:9a:31:6d: cd:a6:81:cb:85:a0:af:de:1c:17:62:c5:a1:73:55: a1:20:b0:7e:8c:5f:96:e2:2f:a3:06:69:02:06:9a: 5b:4a:a3:59:7d:49:dc:cd:f7:7e:fd:03:a8:18:46: 80:22:36:95:0b:2e:53:f4:7c:50:8a:c3:fc:38:e2: 38:b4:a6:36:33:14:ba:89:94:6b:c4:3d:8c:bd:e6: 3d:3b:18:1f:f5:e3:39:c7:2e:ce:f7:17:92:3d:4d: cc:83:ca:de:e5:47:d6:21:70:db:fc:09:1a:fc:ad: 7c:d5:ad:7f:fc:65:33:df:60:d1:c0:ce:65:55:2b: c3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:79:70:D6:F7:CF:DE:FB:43:9A:FF:CC:0C:73:07:31:4A:BE:9C:1B X509v3 Authority Key Identifier: keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136382e302f32342d3234203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.231.168.0/24 Signature Algorithm: sha256WithRSAEncryption 68:8b:a8:6d:eb:1e:ea:83:8d:05:6b:7e:d5:91:63:14:ed:9b: 45:b7:f5:de:7c:a6:11:39:fb:6e:3e:e1:41:34:66:4a:04:20: 87:9b:22:3a:99:9e:05:6c:04:f4:b2:44:36:09:4b:3f:27:db: 04:d2:60:75:d5:2d:9d:d3:db:56:92:e3:15:7d:1a:14:b3:86: ee:1c:b9:43:c4:7b:a6:dc:45:7c:fc:1b:99:d2:51:dc:25:b4: f8:18:60:8e:e3:c5:ba:96:76:3b:60:31:3a:ca:7c:e7:28:be: c1:3d:b5:0c:d3:3a:28:32:dc:0f:34:e7:d7:b0:c8:21:af:a0: 8e:95:eb:86:21:56:3f:59:2d:2f:a0:aa:cb:37:8d:9f:20:d3: 59:c3:df:5d:14:bd:e1:ef:8a:c3:f0:08:a7:10:a1:55:e8:76: 60:f5:62:db:cb:d6:0e:34:88:b8:68:2a:c6:84:b5:c6:1a:8c: 41:b4:48:ca:67:d8:fe:28:3c:8c:ab:58:55:27:39:5f:fe:80: c1:d7:38:ee:3a:07:d5:cb:08:45:0a:3c:25:8f:14:af:61:26: 4b:d6:c7:4d:d3:ab:18:bc:5b:54:4f:21:ba:81:e4:40:4e:c6: 87:e5:0f:e5:2a:4a:98:c3:b6:d1:aa:e4:13:11:7f:3c:c9:6d: 06:7d:de:84 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUdrR8jYPWJ4HCPf1/zoTflmufiyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4 N0FCQ0E4OTAeFw0yNjA1MjAwMjU0NTFaFw0yNzA1MTkwMjU5NTFaMDMxMTAvBgNV BAMTKDhFNzk3MEQ2RjdDRkRFRkI0MzlBRkZDQzBDNzMwNzMxNEFCRTlDMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8qXWI3tF1lyRWDHzVMPQDjKrF V4+3ClfDER2FPnkES0iE7ftG3oy61izTrCCL4r4Httq9mf4lcmVHYPHJBsQ7Xa4Y xM1NAkSaGpM0Uc0mu1BHK02RoUQKSlA5v5JTHaPcwr+MOspiN8CCiICFSJqcGIji fmEfRDvkTrbEkfvl1xzlPJoxbc2mgcuFoK/eHBdixaFzVaEgsH6MX5biL6MGaQIG mltKo1l9SdzN9379A6gYRoAiNpULLlP0fFCKw/w44ji0pjYzFLqJlGvEPYy95j07 GB/14znHLs73F5I9TcyDyt7lR9YhcNv8CRr8rXzVrX/8ZTPfYNHAzmVVK8O5AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUjnlw1vfP3vtDmv/MDHMHMUq+nBswHwYDVR0j BBgwFoAUtojoD4nK7GqMhKflGDhCQoeryokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0NzQzMDc0ODE3NjM4Ny8wL0I2ODhFODBGODlDQUVDNkE4Qzg0QTdFNTE4Mzg0 MjQyODdBQkNBODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4N0FCQ0E4OS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3MDQ3NDMwNzQ4MTc2Mzg3LzAvMzQzMzJlMzIzMzMx MmUzMTM2MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEACvnqDANBgkqhkiG9w0BAQsFAAOCAQEAaIuobese6oONBWt+1ZFjFO2bRbf1 3nymETn7bj7hQTRmSgQgh5siOpmeBWwE9LJENglLPyfbBNJgddUtndPbVpLjFX0a FLOG7hy5Q8R7ptxFfPwbmdJR3CW0+BhgjuPFupZ2O2AxOsp85yi+wT21DNM6KDLc DzTn17DIIa+gjpXrhiFWP1ktL6CqyzeNnyDTWcPfXRS94e+Kw/AIpxChVeh2YPVi 28vWDjSIuGgqxoS1xhqMQbRIymfY/ig8jKtYVSc5X/6Awdc47joH1csIRQo8JY8U r2EmS9bHTdOrGLxbVE8huoHkQE7Gh+UP5SpKmMO20arkExF/PMltBn3ehA== -----END CERTIFICATE-----Generated at Fri Jun 12 02:25:11 2026 by rpki-client