$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3137302e302f32342d3234203d3e203233373234.roa File: 34332e3233312e3137302e302f32342d3234203d3e203233373234.roa (raw, json) Hash identifier: DQqP/JMnMTlVRUIOIfUyrIq2HzHGNivtyoIhGcE1fgU= Subject key identifier: 2A:2B:5A:39:30:34:D4:49:78:8A:B1:2B:34:94:19:C6:1A:C7:E5:87 Certificate issuer: /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Certificate serial: 3F1C34744B20EE1F9A08CBB11585EDFC0BEA9CEA Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3137302e302f32342d3234203d3e203233373234.roa Signing time: Wed 20 May 2026 02:59:51 +0000 ROA not before: Wed 20 May 2026 02:54:51 +0000 ROA not after: Wed 19 May 2027 02:59:51 +0000 asID: 23724 IP address blocks: 43.231.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 07:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:1c:34:74:4b:20:ee:1f:9a:08:cb:b1:15:85:ed:fc:0b:ea:9c:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Validity Not Before: May 20 02:54:51 2026 GMT Not After : May 19 02:59:51 2027 GMT Subject: CN=2A2B5A393034D449788AB12B349419C61AC7E587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fd:d8:20:0c:a3:48:b6:66:32:56:09:47:5b: 10:bc:60:1c:b5:0a:26:b0:a5:a4:5c:4e:dc:f3:6c: 52:84:13:ae:ab:68:42:12:b3:21:bc:31:81:30:c4: 88:c9:c3:7a:09:9d:63:d0:05:25:d0:a3:fa:8f:c7: c0:a4:72:5b:c9:af:00:c4:4c:7c:31:fb:74:26:2a: a3:56:19:53:b6:24:00:51:70:9c:2e:b0:70:24:7f: 6b:f9:7b:53:d2:00:97:2e:f3:c5:5c:7e:3b:95:1b: d4:c7:fe:85:d3:7d:dc:5a:9b:8c:45:76:06:45:6f: 33:7c:61:47:88:45:1d:a8:4a:95:b3:13:55:82:e9: 11:88:73:af:ef:49:06:09:d0:8a:39:00:63:61:eb: ff:3c:e6:03:9c:58:c7:15:b9:ca:13:40:3f:e0:9f: 49:01:2d:3a:d3:2c:ec:65:ef:a7:80:35:7a:ec:55: b0:99:1d:fd:dc:52:db:6f:dd:ca:f2:f3:51:33:5c: ce:da:fb:a5:c2:4e:c7:7b:1f:52:32:1f:5f:de:21: 90:8c:a9:7b:33:61:e9:19:c5:3e:af:bf:d6:4c:70: 65:91:04:76:a0:15:92:d2:07:2d:a8:c0:73:1a:28: 2d:6c:29:c9:ef:9b:68:6f:59:36:42:68:11:ab:11: d3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2B:5A:39:30:34:D4:49:78:8A:B1:2B:34:94:19:C6:1A:C7:E5:87 X509v3 Authority Key Identifier: keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3137302e302f32342d3234203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.231.170.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:0a:89:af:97:92:5c:3a:23:95:6b:d3:67:26:b1:00:6b:1d: b5:c3:22:3e:f7:3b:c9:e0:53:b5:08:86:07:c2:5c:1f:71:a7: 7e:90:84:e9:8c:ac:0b:2e:19:3f:b0:b3:13:66:49:5b:c6:a7: 83:8c:83:28:98:6d:63:54:03:4b:b3:54:8c:3c:8e:c7:4f:20: a6:86:0f:cd:61:10:8b:18:b5:b6:e4:e2:9b:38:45:f0:58:47: 54:a2:5d:cb:58:18:fa:4c:0c:66:d3:1a:07:cb:9d:a1:0c:d6: c8:b1:5b:27:90:67:68:13:5f:90:60:9b:db:b1:6d:e6:6e:7b: 65:f1:34:cd:71:6e:d7:3e:24:49:a9:34:83:52:30:24:8e:03: ad:97:3f:64:91:cb:97:b2:99:b2:42:db:76:2b:e3:75:07:03: 49:9c:b3:55:35:32:81:b5:fc:51:68:3c:ed:01:bc:e8:4d:00: f1:2d:af:a1:eb:f2:f7:67:b9:c9:fb:35:a9:2a:9d:3a:42:62: 0d:37:10:a8:18:d6:99:9f:65:f7:e7:dc:0f:22:53:06:f9:5f: a6:2a:6e:e6:82:5b:e1:b3:5f:63:6d:03:90:59:46:cb:11:b6: 13:5c:cd:29:34:58:54:eb:6a:36:a9:9b:42:e9:f8:15:88:ef: 3d:4e:be:96 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUPxw0dEsg7h+aCMuxFYXt/AvqnOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4 N0FCQ0E4OTAeFw0yNjA1MjAwMjU0NTFaFw0yNzA1MTkwMjU5NTFaMDMxMTAvBgNV BAMTKDJBMkI1QTM5MzAzNEQ0NDk3ODhBQjEyQjM0OTQxOUM2MUFDN0U1ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw/dggDKNItmYyVglHWxC8YBy1 CiawpaRcTtzzbFKEE66raEISsyG8MYEwxIjJw3oJnWPQBSXQo/qPx8CkclvJrwDE THwx+3QmKqNWGVO2JABRcJwusHAkf2v5e1PSAJcu88VcfjuVG9TH/oXTfdxam4xF dgZFbzN8YUeIRR2oSpWzE1WC6RGIc6/vSQYJ0Io5AGNh6/885gOcWMcVucoTQD/g n0kBLTrTLOxl76eANXrsVbCZHf3cUttv3cry81EzXM7a+6XCTsd7H1IyH1/eIZCM qXszYekZxT6vv9ZMcGWRBHagFZLSBy2owHMaKC1sKcnvm2hvWTZCaBGrEdP5AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUKitaOTA01El4irErNJQZxhrH5YcwHwYDVR0j BBgwFoAUtojoD4nK7GqMhKflGDhCQoeryokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0NzQzMDc0ODE3NjM4Ny8wL0I2ODhFODBGODlDQUVDNkE4Qzg0QTdFNTE4Mzg0 MjQyODdBQkNBODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4N0FCQ0E4OS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NzA0NzQzMDc0ODE3NjM4Ny8wLzM0MzMyZTMyMzMz MTJlMzEzNzMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM3MzIzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEACvnqjANBgkqhkiG9w0BAQsFAAOCAQEAnwqJr5eSXDojlWvTZyaxAGsd tcMiPvc7yeBTtQiGB8JcH3GnfpCE6YysCy4ZP7CzE2ZJW8ang4yDKJhtY1QDS7NU jDyOx08gpoYPzWEQixi1tuTimzhF8FhHVKJdy1gY+kwMZtMaB8udoQzWyLFbJ5Bn aBNfkGCb27Ft5m57ZfE0zXFu1z4kSak0g1IwJI4DrZc/ZJHLl7KZskLbdivjdQcD SZyzVTUygbX8UWg87QG86E0A8S2voevy92e5yfs1qSqdOkJiDTcQqBjWmZ9l9+fc DyJTBvlfpipu5oJb4bNfY20DkFlGyxG2E1zNKTRYVOtqNqmbQun4FYjvPU6+lg== -----END CERTIFICATE-----Generated at Sat May 30 00:42:53 2026 by rpki-client