$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097412865305870337/1/34332e3232352e3235352e302f32342d3234203d3e20313332353336.roa File: 34332e3232352e3235352e302f32342d3234203d3e20313332353336.roa (raw, json) Hash identifier: BVS2a/X5NQmZC7/sD8th4r8X74J2ksK0WEPs3GaNK6g= Subject key identifier: 56:9E:C5:58:67:16:99:EF:DD:68:E1:93:15:0E:9D:93:A9:44:47:1E Certificate issuer: /CN=E806B187EFD214F2E1BEFE61EF956FD5C9405E64 Certificate serial: 31880404F933585F5B013D82816FFD8F92E0D0B1 Authority key identifier: E8:06:B1:87:EF:D2:14:F2:E1:BE:FE:61:EF:95:6F:D5:C9:40:5E:64 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/34332e3232352e3235352e302f32342d3234203d3e20313332353336.roa Signing time: Mon 22 Jun 2026 02:33:48 +0000 ROA not before: Mon 22 Jun 2026 02:28:48 +0000 ROA not after: Mon 21 Jun 2027 02:33:48 +0000 asID: 132536 IP address blocks: 43.225.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.crl rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 11:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:88:04:04:f9:33:58:5f:5b:01:3d:82:81:6f:fd:8f:92:e0:d0:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E806B187EFD214F2E1BEFE61EF956FD5C9405E64 Validity Not Before: Jun 22 02:28:48 2026 GMT Not After : Jun 21 02:33:48 2027 GMT Subject: CN=569EC558671699EFDD68E193150E9D93A944471E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:61:d0:a0:5e:8f:01:ec:3d:d3:80:4e:8d:82: b6:1e:86:08:01:5b:ee:56:7c:d8:3b:95:2a:9b:a8: ab:0f:05:f0:35:90:a9:58:68:b5:81:83:13:5b:59: d7:80:29:33:db:7f:1d:fa:e3:3a:9c:86:d9:5b:c6: f7:12:e0:bb:29:2d:69:25:99:53:07:22:c7:ab:b9: a5:19:a3:7c:1d:eb:dc:7b:e5:e2:b3:ad:71:bd:da: 08:8f:25:bd:8a:41:74:3c:19:7d:be:b1:de:d6:2c: ee:b7:d5:f2:f8:04:1d:3b:82:42:58:48:ec:d2:ba: 07:6c:ec:40:ef:22:4c:b6:53:36:34:81:b6:e6:c5: b2:62:15:0d:67:b2:a1:2a:1c:0d:96:27:80:7f:f9: 47:cf:7e:01:4c:40:af:5f:49:3f:5f:c4:84:f5:d3: db:de:e1:b4:d0:48:16:0f:57:7a:96:be:1e:ef:8f: 83:dd:26:dd:e1:fa:68:cc:01:75:47:86:f7:a6:14: 3a:af:13:d4:e2:b9:a1:8d:dd:1d:50:d6:be:65:c0: b2:cb:1d:27:ed:a5:8c:0c:cb:a0:61:17:57:f6:99: 3b:c9:bc:0e:b8:71:f5:85:c1:e4:d4:8a:f4:8e:3a: 50:46:2b:84:d4:06:1d:bb:09:09:c2:9a:f5:33:69: f5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:9E:C5:58:67:16:99:EF:DD:68:E1:93:15:0E:9D:93:A9:44:47:1E X509v3 Authority Key Identifier: keyid:E8:06:B1:87:EF:D2:14:F2:E1:BE:FE:61:EF:95:6F:D5:C9:40:5E:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/34332e3232352e3235352e302f32342d3234203d3e20313332353336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.225.255.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:70:83:22:e3:e4:8a:b0:85:89:ba:fd:7e:16:0e:bb:6b:e4: 66:88:c1:ce:37:3c:8a:e9:d4:8c:b2:df:4a:87:11:c7:68:bd: 28:9a:29:28:03:e4:63:af:d3:45:07:cc:b8:10:69:4b:8b:4d: 3b:9d:44:3a:b4:83:31:9b:1c:24:c3:f2:4a:73:19:6a:53:0c: f3:14:6c:36:6a:56:ce:5c:5d:ff:b6:69:b7:e4:ef:c6:fc:fd: 19:47:69:16:45:5c:e4:7a:dc:64:16:82:83:67:40:76:c4:f1: 71:05:f6:e5:77:07:ce:a4:25:b1:8c:7d:32:33:fa:f8:bc:36: 44:7f:bd:20:57:95:90:99:4d:76:f2:86:a2:13:1a:52:c1:70: 84:ee:39:45:d2:f8:63:08:5d:0b:19:80:12:9f:82:c4:dc:6f: f0:05:16:12:e0:b3:03:52:12:b4:17:bc:8a:5b:57:7c:9b:d6: 47:1c:6a:18:08:18:7d:6c:15:72:9a:a1:de:d8:a5:1b:17:49: 89:bc:93:49:5e:75:48:89:1c:47:dd:6b:14:dc:b0:27:7f:ed: 48:89:00:7f:08:01:7a:c3:80:0a:bc:dd:be:8c:6b:82:d7:8f: 0d:77:87:4d:be:a2:32:9a:6f:6e:c7:fe:b8:90:6a:c2:ec:41: bb:ce:dc:67 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUMYgEBPkzWF9bAT2CgW/9j5Lg0LEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTgwNkIxODdFRkQyMTRGMkUxQkVGRTYxRUY5NTZGRDVD OTQwNUU2NDAeFw0yNjA2MjIwMjI4NDhaFw0yNzA2MjEwMjMzNDhaMDMxMTAvBgNV BAMTKDU2OUVDNTU4NjcxNjk5RUZERDY4RTE5MzE1MEU5RDkzQTk0NDQ3MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGYdCgXo8B7D3TgE6NgrYehggB W+5WfNg7lSqbqKsPBfA1kKlYaLWBgxNbWdeAKTPbfx364zqchtlbxvcS4LspLWkl mVMHIseruaUZo3wd69x75eKzrXG92giPJb2KQXQ8GX2+sd7WLO631fL4BB07gkJY SOzSugds7EDvIky2UzY0gbbmxbJiFQ1nsqEqHA2WJ4B/+UfPfgFMQK9fST9fxIT1 09ve4bTQSBYPV3qWvh7vj4PdJt3h+mjMAXVHhvemFDqvE9TiuaGN3R1Q1r5lwLLL HSftpYwMy6BhF1f2mTvJvA64cfWFweTUivSOOlBGK4TUBh27CQnCmvUzafWxAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUVp7FWGcWme/daOGTFQ6dk6lERx4wHwYDVR0j BBgwFoAU6Aaxh+/SFPLhvv5h75Vv1clAXmQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQxMjg2NTMwNTg3MDMzNy8xL0U4MDZCMTg3RUZEMjE0RjJFMUJFRkU2MUVGOTU2 RkQ1Qzk0MDVFNjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTgwNkIxODdFRkQyMTRGMkUxQkVGRTYxRUY5NTZGRDVDOTQwNUU2NC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTc0MTI4NjUzMDU4NzAzMzcvMS8zNDMzMmUzMjMy MzUyZTMyMzUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMjM1MzMzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEACvh/zANBgkqhkiG9w0BAQsFAAOCAQEAbHCDIuPkirCFibr9fhYO u2vkZojBzjc8iunUjLLfSocRx2i9KJopKAPkY6/TRQfMuBBpS4tNO51EOrSDMZsc JMPySnMZalMM8xRsNmpWzlxd/7Zpt+Tvxvz9GUdpFkVc5HrcZBaCg2dAdsTxcQX2 5XcHzqQlsYx9MjP6+Lw2RH+9IFeVkJlNdvKGohMaUsFwhO45RdL4YwhdCxmAEp+C xNxv8AUWEuCzA1IStBe8iltXfJvWRxxqGAgYfWwVcpqh3tilGxdJibyTSV51SIkc R91rFNywJ3/tSIkAfwgBesOACrzdvoxrgtePDXeHTb6iMppvbsf+uJBqwuxBu87c Zw== -----END CERTIFICATE-----Generated at Tue Jul 14 21:56:31 2026 by rpki-client