$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3131362e302f32322d3234203d3e203536303436.roa File: 34332e3234382e3131362e302f32322d3234203d3e203536303436.roa (raw, json) Hash identifier: gVicYA8wg3kSPKxeAjr55EyVpnpxdbSptzxhI8LjYZc= Subject key identifier: 94:2F:C1:9F:8B:2A:1C:B1:E5:53:3A:EC:6B:FE:9D:AF:F2:86:5E:7B Certificate issuer: /CN=96E9344F9168341F216708A437FB9801FEBBBBB6 Certificate serial: 1ABC709F25F3473AB02472EDE0C8EBE36C5FC6F9 Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3131362e302f32322d3234203d3e203536303436.roa Signing time: Mon 20 Apr 2026 05:49:16 +0000 ROA not before: Mon 20 Apr 2026 05:44:16 +0000 ROA not after: Mon 19 Apr 2027 05:49:16 +0000 asID: 56046 IP address blocks: 43.248.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:bc:70:9f:25:f3:47:3a:b0:24:72:ed:e0:c8:eb:e3:6c:5f:c6:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6 Validity Not Before: Apr 20 05:44:16 2026 GMT Not After : Apr 19 05:49:16 2027 GMT Subject: CN=942FC19F8B2A1CB1E5533AEC6BFE9DAFF2865E7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:89:f1:a3:f7:fa:1d:68:e8:99:41:fa:e1:7a: 52:fe:25:d1:97:59:f6:d6:8f:81:5a:5c:36:a8:07: 46:9d:9b:8a:33:06:63:92:1a:87:ea:15:5a:94:31: b3:19:4e:ae:61:ae:5c:91:d2:88:ac:2e:db:6a:ff: 24:f3:1b:d0:c4:7d:c3:eb:14:b3:e6:af:22:65:04: 0b:3f:6c:b7:3c:7e:55:c7:47:69:8e:be:6a:70:50: 26:0b:55:1a:35:44:54:4d:66:15:e1:28:b7:a1:f1: c9:bf:4d:48:9d:c4:74:c1:2f:18:dd:4c:0a:f3:42: 86:c0:23:32:cd:c3:31:d9:80:64:2e:93:1b:cc:ac: 72:7a:d0:23:fb:c9:97:fe:cc:4f:a7:7f:ae:5f:bc: d8:0c:94:11:e0:da:ab:f7:7f:28:c4:f9:3e:ce:02: fa:1e:a7:09:30:50:3a:b6:a4:2f:6f:57:ce:46:28: 49:11:2b:95:36:b8:81:a2:b9:ee:07:97:89:4a:51: f5:ee:b6:5a:85:2e:03:be:0e:f5:1f:cb:7f:6f:94: 21:b0:f6:ce:27:c1:c1:2e:b6:24:f4:1d:41:63:8d: b6:9e:2c:a9:e8:c0:05:c2:ad:78:e1:b7:2e:7b:48: a7:ab:dc:e3:c9:be:58:31:ad:f2:bc:18:57:e0:d3: b0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:2F:C1:9F:8B:2A:1C:B1:E5:53:3A:EC:6B:FE:9D:AF:F2:86:5E:7B X509v3 Authority Key Identifier: keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3131362e302f32322d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.116.0/22 Signature Algorithm: sha256WithRSAEncryption 95:d3:4e:79:1f:03:e0:f4:c3:56:7d:73:68:ed:94:78:a7:0b: 4f:a4:71:77:01:21:d6:11:94:26:c1:23:18:1f:4b:bc:2b:b5: c3:c3:03:43:7f:21:39:fc:ce:41:1e:66:6c:bb:ae:82:7e:d7: 68:5e:66:01:1c:f7:3f:8e:ac:6e:d3:03:0e:17:f0:34:37:60: 7b:27:ad:50:7b:a3:c3:9d:5d:45:d8:3c:a2:33:66:ac:9b:39: b7:95:4a:a4:43:29:39:a9:98:c5:ff:b4:14:0c:73:f5:22:c6: fd:90:a9:67:8d:0f:f7:65:42:6b:7c:10:90:15:83:01:aa:ad: e3:f9:02:6e:25:ce:45:b3:70:a5:d6:38:87:94:f5:4e:43:7b: 53:3e:69:e3:df:76:b8:37:5d:ea:6a:27:ff:9b:89:78:b9:6b: 2e:4d:70:47:f1:14:a0:e7:01:3e:7a:bf:13:c4:7e:f4:29:3b: d2:d4:bc:a4:1f:97:50:11:5f:f7:fe:75:f7:38:34:79:47:cd: 86:0d:2d:c2:59:b4:cc:76:35:8b:af:33:2b:94:c5:79:4a:3b: 2c:73:83:25:d8:1e:b7:be:b4:dd:6e:18:95:1b:4d:08:49:7e: 49:c6:f7:f8:6c:80:70:da:11:7d:d4:8b:b7:ac:a1:56:bf:02: 8a:c2:b1:b4 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUGrxwnyXzRzqwJHLt4Mjr42xfxvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZFOTM0NEY5MTY4MzQxRjIxNjcwOEE0MzdGQjk4MDFG RUJCQkJCNjAeFw0yNjA0MjAwNTQ0MTZaFw0yNzA0MTkwNTQ5MTZaMDMxMTAvBgNV BAMTKDk0MkZDMTlGOEIyQTFDQjFFNTUzM0FFQzZCRkU5REFGRjI4NjVFN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWifGj9/odaOiZQfrhelL+JdGX WfbWj4FaXDaoB0adm4ozBmOSGofqFVqUMbMZTq5hrlyR0oisLttq/yTzG9DEfcPr FLPmryJlBAs/bLc8flXHR2mOvmpwUCYLVRo1RFRNZhXhKLeh8cm/TUidxHTBLxjd TArzQobAIzLNwzHZgGQukxvMrHJ60CP7yZf+zE+nf65fvNgMlBHg2qv3fyjE+T7O AvoepwkwUDq2pC9vV85GKEkRK5U2uIGiue4Hl4lKUfXutlqFLgO+DvUfy39vlCGw 9s4nwcEutiT0HUFjjbaeLKnowAXCrXjhty57SKer3OPJvlgxrfK8GFfg07DHAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUlC/Bn4sqHLHlUzrsa/6dr/KGXnswHwYDVR0j BBgwFoAUluk0T5FoNB8hZwikN/uYAf67u7YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQzMzc4OTc4Njc1MDk3Ny8wLzk2RTkzNDRGOTE2ODM0MUYyMTY3MDhBNDM3RkI5 ODAxRkVCQkJCQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTZFOTM0NEY5MTY4MzQxRjIxNjcwOEE0MzdGQjk4MDFGRUJCQkJCNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NzQzMzc4OTc4Njc1MDk3Ny8wLzM0MzMyZTMyMzQz ODJlMzEzMTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAiv4dDANBgkqhkiG9w0BAQsFAAOCAQEAldNOeR8D4PTDVn1zaO2UeKcL T6RxdwEh1hGUJsEjGB9LvCu1w8MDQ38hOfzOQR5mbLuugn7XaF5mARz3P46sbtMD DhfwNDdgeyetUHujw51dRdg8ojNmrJs5t5VKpEMpOamYxf+0FAxz9SLG/ZCpZ40P 92VCa3wQkBWDAaqt4/kCbiXORbNwpdY4h5T1TkN7Uz5p4992uDdd6mon/5uJeLlr Lk1wR/EUoOcBPnq/E8R+9Ck70tS8pB+XUBFf9/519zg0eUfNhg0twlm0zHY1i68z K5TFeUo7LHODJdget7603W4YlRtNCEl+Scb3+GyAcNoRfdSLt6yhVr8CisKxtA== -----END CERTIFICATE-----Generated at Tue Apr 21 22:52:28 2026 by rpki-client