$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3132382e302f32302d3234203d3e2034383337.roa File: 34332e3234382e3132382e302f32302d3234203d3e2034383337.roa (raw, json) Hash identifier: p/j36UhZgj1I4OTOgHOWv28ZKKwaM9MsHPW0cCr8u7M= Subject key identifier: A0:EA:3C:CD:02:E6:88:CE:6C:33:CC:3A:CF:12:DE:68:3B:BA:E2:09 Certificate issuer: /CN=96E9344F9168341F216708A437FB9801FEBBBBB6 Certificate serial: 53001C29097111CA4F94F3DB5D72283ECADF0D3A Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3132382e302f32302d3234203d3e2034383337.roa Signing time: Mon 20 Apr 2026 05:46:15 +0000 ROA not before: Mon 20 Apr 2026 05:41:15 +0000 ROA not after: Mon 19 Apr 2027 05:46:15 +0000 asID: 4837 IP address blocks: 43.248.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:00:1c:29:09:71:11:ca:4f:94:f3:db:5d:72:28:3e:ca:df:0d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6 Validity Not Before: Apr 20 05:41:15 2026 GMT Not After : Apr 19 05:46:15 2027 GMT Subject: CN=A0EA3CCD02E688CE6C33CC3ACF12DE683BBAE209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:53:2b:ba:f2:1f:6a:0f:82:1b:c2:e7:3d:4a: fd:94:d6:29:a6:6c:ae:d7:4e:8d:9e:a1:63:aa:de: 01:f5:d6:ce:26:d2:19:62:7f:bc:47:5b:75:9b:2a: 20:97:28:39:a7:0c:2c:90:5d:32:4b:2a:93:0a:3c: 6b:9b:e0:ce:54:4b:9b:77:e1:93:0e:7c:f8:12:aa: 25:77:70:31:ec:39:46:fd:bb:5b:03:e0:6d:fe:81: ba:91:7c:95:e2:f9:ba:b5:0d:af:1a:e9:2a:9d:a5: ba:b4:2f:80:42:ac:08:91:4b:19:ce:a2:28:ac:20: b0:1e:2d:e3:87:74:6e:12:ba:91:0a:6a:f4:b5:fc: 02:0e:07:24:91:f5:b1:9c:89:c3:28:d8:b2:ad:cd: 4b:a8:56:45:22:04:f9:52:8d:c6:65:90:f9:04:6c: a1:d5:2a:3f:f5:aa:35:a3:7d:66:e1:7f:84:59:0f: 01:94:e0:40:b4:86:31:4b:04:bb:a0:d3:c0:99:f9: 11:d2:fa:af:64:a4:96:df:e2:58:b1:34:bc:ef:f5: 15:6d:ad:61:90:d0:ee:8e:92:69:7f:89:98:fc:51: a0:38:fa:d6:3b:11:86:bc:19:b4:32:36:ef:dd:06: 6f:c2:b3:d8:80:ab:a6:f9:a2:83:e3:df:1c:d2:db: d3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:EA:3C:CD:02:E6:88:CE:6C:33:CC:3A:CF:12:DE:68:3B:BA:E2:09 X509v3 Authority Key Identifier: keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3132382e302f32302d3234203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.128.0/20 Signature Algorithm: sha256WithRSAEncryption 62:b2:cf:01:b7:b3:64:6d:bf:35:17:0d:4c:87:52:b6:5c:a8: 50:c1:97:7e:c2:a9:86:2c:fa:eb:83:1c:8e:8b:f0:24:ac:b2: f3:aa:96:73:01:4a:0a:78:ce:7d:5b:74:10:c1:6d:0b:71:e1: 49:11:0f:75:3e:f8:10:14:bf:ca:cd:b3:ed:85:ba:a1:b5:ef: ef:75:6d:ef:5f:3d:e0:98:ba:ad:87:ba:6d:bc:cd:af:3f:db: c5:0b:ce:63:ce:3c:46:d9:50:4b:63:de:47:c5:71:7b:b3:c8: 6d:1e:a4:90:4b:be:02:f8:3b:e5:f1:62:59:fe:82:de:56:80: e5:84:a6:84:59:37:cc:38:84:88:5a:cf:84:6c:22:04:a5:25: e8:c1:67:ef:a7:16:c3:4b:eb:14:de:87:75:5d:08:11:c5:a3: 68:d5:42:47:4f:72:3e:a3:95:8f:52:0b:f3:21:53:a5:c2:94: e5:17:aa:e9:2c:f8:92:6e:4b:2c:1c:5b:e6:e6:97:6c:72:92: 3b:df:86:b2:5a:c9:1a:2e:b6:31:15:ef:8b:ad:e4:e5:7b:0b: 75:98:ed:cf:9e:ce:04:7b:f4:c6:9c:c3:05:9e:0c:37:28:41: 2f:c4:b5:78:49:4d:00:e6:e3:7b:4a:56:da:72:80:c5:74:ca: d8:b0:48:ed -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUUwAcKQlxEcpPlPPbXXIoPsrfDTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZFOTM0NEY5MTY4MzQxRjIxNjcwOEE0MzdGQjk4MDFG RUJCQkJCNjAeFw0yNjA0MjAwNTQxMTVaFw0yNzA0MTkwNTQ2MTVaMDMxMTAvBgNV BAMTKEEwRUEzQ0NEMDJFNjg4Q0U2QzMzQ0MzQUNGMTJERTY4M0JCQUUyMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpUyu68h9qD4Ibwuc9Sv2U1imm bK7XTo2eoWOq3gH11s4m0hlif7xHW3WbKiCXKDmnDCyQXTJLKpMKPGub4M5US5t3 4ZMOfPgSqiV3cDHsOUb9u1sD4G3+gbqRfJXi+bq1Da8a6Sqdpbq0L4BCrAiRSxnO oiisILAeLeOHdG4SupEKavS1/AIOBySR9bGcicMo2LKtzUuoVkUiBPlSjcZlkPkE bKHVKj/1qjWjfWbhf4RZDwGU4EC0hjFLBLug08CZ+RHS+q9kpJbf4lixNLzv9RVt rWGQ0O6Okml/iZj8UaA4+tY7EYa8GbQyNu/dBm/Cs9iAq6b5ooPj3xzS29O1AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUoOo8zQLmiM5sM8w6zxLeaDu64gkwHwYDVR0j BBgwFoAUluk0T5FoNB8hZwikN/uYAf67u7YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQzMzc4OTc4Njc1MDk3Ny8wLzk2RTkzNDRGOTE2ODM0MUYyMTY3MDhBNDM3RkI5 ODAxRkVCQkJCQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTZFOTM0NEY5MTY4MzQxRjIxNjcwOEE0MzdGQjk4MDFGRUJCQkJCNi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3NDMzNzg5Nzg2NzUwOTc3LzAvMzQzMzJlMzIzNDM4 MmUzMTMyMzgyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBCv4gDANBgkqhkiG9w0BAQsFAAOCAQEAYrLPAbezZG2/NRcNTIdStlyoUMGX fsKphiz664McjovwJKyy86qWcwFKCnjOfVt0EMFtC3HhSREPdT74EBS/ys2z7YW6 obXv73Vt71894Ji6rYe6bbzNrz/bxQvOY848RtlQS2PeR8Vxe7PIbR6kkEu+Avg7 5fFiWf6C3laA5YSmhFk3zDiEiFrPhGwiBKUl6MFn76cWw0vrFN6HdV0IEcWjaNVC R09yPqOVj1IL8yFTpcKU5Req6Sz4km5LLBxb5uaXbHKSO9+GslrJGi62MRXvi63k 5XsLdZjtz57OBHv0xpzDBZ4MNyhBL8S1eElNAObje0pW2nKAxXTK2LBI7Q== -----END CERTIFICATE-----Generated at Wed Apr 22 02:53:53 2026 by rpki-client