$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136382e302f32342d3234203d3e203539303435.roa File: 34332e3233312e3136382e302f32342d3234203d3e203539303435.roa (raw, json) Hash identifier: B4/9VepgzCAqS2VDHVYZOohdO8xJ6CFEpvbnisx0SuY= Subject key identifier: BF:7D:94:DF:74:A5:39:03:21:77:34:07:F5:48:35:94:A3:1A:D5:DD Certificate issuer: /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Certificate serial: 0BAF626FA87BEED476A0CDB65FDED27E6FC16479 Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136382e302f32342d3234203d3e203539303435.roa Signing time: Wed 20 May 2026 03:00:57 +0000 ROA not before: Wed 20 May 2026 02:55:57 +0000 ROA not after: Wed 19 May 2027 03:00:57 +0000 asID: 59045 IP address blocks: 43.231.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 20:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:af:62:6f:a8:7b:ee:d4:76:a0:cd:b6:5f:de:d2:7e:6f:c1:64:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Validity Not Before: May 20 02:55:57 2026 GMT Not After : May 19 03:00:57 2027 GMT Subject: CN=BF7D94DF74A5390321773407F5483594A31AD5DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b3:37:d4:e9:72:ff:c4:72:e2:52:3d:80:bd: 7b:4c:fc:9b:95:b1:f2:c9:a3:ef:84:63:19:11:8a: f5:d5:37:ca:81:fc:d8:5b:91:1e:0b:09:9b:4a:0e: 0b:8f:94:4e:e0:48:7b:bf:b8:59:21:a3:a7:44:91: 55:8c:1a:25:b9:75:bc:c4:e2:b8:3e:7c:bd:05:72: 5d:fd:a7:0f:9a:3e:88:2e:29:d1:0e:a0:02:57:18: 4d:d7:b8:d9:22:fa:8a:89:ec:95:20:ee:41:9e:80: f4:b3:dc:9c:69:7e:41:ae:c4:88:7b:51:2f:dd:6a: e7:5a:7b:ef:9e:04:61:bb:49:8c:fd:9f:d9:59:6a: 86:2a:d2:3a:e9:11:89:db:ad:13:d0:e8:54:b2:60: a9:65:d0:23:72:67:0b:4a:d0:38:db:16:7f:45:a3: 75:8b:49:63:81:de:be:8f:05:07:6f:eb:1c:e2:14: 9e:bf:43:61:a4:84:ea:d3:d1:90:6f:9e:ea:d6:2f: 0e:2c:b5:e9:7d:37:84:e6:82:83:e8:8a:05:75:5c: 80:a9:48:cc:96:ac:7c:60:e2:1f:cb:9a:53:72:2a: 2f:92:5c:d0:6c:ce:df:66:5d:88:b7:b3:90:ac:a2: 51:39:3f:49:c6:8e:db:51:93:a1:d7:14:ea:8f:51: 26:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7D:94:DF:74:A5:39:03:21:77:34:07:F5:48:35:94:A3:1A:D5:DD X509v3 Authority Key Identifier: keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136382e302f32342d3234203d3e203539303435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.231.168.0/24 Signature Algorithm: sha256WithRSAEncryption 63:12:91:38:62:69:22:82:28:50:a0:ea:e0:80:5a:15:06:c9: f0:4c:8e:15:c4:6b:ae:92:87:c5:41:e5:e6:5b:3a:70:63:c4: ac:1d:3e:d6:a3:8a:e4:d6:5b:4c:33:6d:a4:57:f8:f8:c9:35: 62:2b:88:cf:50:84:2d:9c:ee:18:4d:cf:17:0f:19:e5:fa:12: 32:aa:02:00:07:53:44:4f:ea:9e:0c:20:4f:55:02:05:bf:04: de:53:ac:40:b1:3e:53:1e:00:15:0b:66:cf:ca:74:52:04:d6: c4:3a:ea:ea:54:bc:78:f7:4c:5c:7e:bc:34:0d:e6:3f:30:51: d2:99:9f:32:be:6e:1b:a6:8e:0c:2a:21:92:e3:9e:14:ac:61: f7:45:2e:86:66:eb:fc:67:5c:41:f3:6d:aa:63:7e:38:28:03: f7:9f:9f:23:ae:5d:ae:17:3d:09:b8:2d:31:62:82:02:09:5a: 1f:15:b2:15:c1:dc:28:16:b2:c7:4c:c4:7b:63:2b:ae:06:e3: 55:d4:f0:c4:cd:1b:83:03:2a:f4:57:c0:17:64:47:9d:f4:7b: 09:b1:cb:9f:a7:7b:70:9e:b0:ac:2f:c4:ea:e2:5e:bb:f8:66: 07:78:8c:f9:41:f4:bd:68:cc:9a:25:50:1e:41:21:6e:3b:d8: e6:ee:f7:d0 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUC69ib6h77tR2oM22X97Sfm/BZHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4 N0FCQ0E4OTAeFw0yNjA1MjAwMjU1NTdaFw0yNzA1MTkwMzAwNTdaMDMxMTAvBgNV BAMTKEJGN0Q5NERGNzRBNTM5MDMyMTc3MzQwN0Y1NDgzNTk0QTMxQUQ1REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSszfU6XL/xHLiUj2AvXtM/JuV sfLJo++EYxkRivXVN8qB/NhbkR4LCZtKDguPlE7gSHu/uFkho6dEkVWMGiW5dbzE 4rg+fL0Fcl39pw+aPoguKdEOoAJXGE3XuNki+oqJ7JUg7kGegPSz3JxpfkGuxIh7 US/daudae++eBGG7SYz9n9lZaoYq0jrpEYnbrRPQ6FSyYKll0CNyZwtK0DjbFn9F o3WLSWOB3r6PBQdv6xziFJ6/Q2GkhOrT0ZBvnurWLw4stel9N4TmgoPoigV1XICp SMyWrHxg4h/LmlNyKi+SXNBszt9mXYi3s5CsolE5P0nGjttRk6HXFOqPUSbbAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUv32U33SlOQMhdzQH9Ug1lKMa1d0wHwYDVR0j BBgwFoAUtojoD4nK7GqMhKflGDhCQoeryokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0NzQzMDc0ODE3NjM4Ny8wL0I2ODhFODBGODlDQUVDNkE4Qzg0QTdFNTE4Mzg0 MjQyODdBQkNBODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4N0FCQ0E4OS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NzA0NzQzMDc0ODE3NjM4Ny8wLzM0MzMyZTMyMzMz MTJlMzEzNjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTMwMzQzNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEACvnqDANBgkqhkiG9w0BAQsFAAOCAQEAYxKROGJpIoIoUKDq4IBaFQbJ 8EyOFcRrrpKHxUHl5ls6cGPErB0+1qOK5NZbTDNtpFf4+Mk1YiuIz1CELZzuGE3P Fw8Z5foSMqoCAAdTRE/qngwgT1UCBb8E3lOsQLE+Ux4AFQtmz8p0UgTWxDrq6lS8 ePdMXH68NA3mPzBR0pmfMr5uG6aODCohkuOeFKxh90Uuhmbr/GdcQfNtqmN+OCgD 95+fI65drhc9CbgtMWKCAglaHxWyFcHcKBayx0zEe2MrrgbjVdTwxM0bgwMq9FfA F2RHnfR7CbHLn6d7cJ6wrC/E6uJeu/hmB3iM+UH0vWjMmiVQHkEhbjvY5u730A== -----END CERTIFICATE-----Generated at Fri Jun 12 04:48:59 2026 by rpki-client