$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3133342e302f32342d3234203d3e20313531333032.roa File: 34332e3234382e3133342e302f32342d3234203d3e20313531333032.roa (raw, json) Hash identifier: 4XwmqFPrtk/JTpTo7xczg1VTr/y+AnAZhQ62vWMrg7Y= Subject key identifier: E8:C0:7E:F6:5B:9B:1A:A3:0A:22:3F:C2:68:62:5D:BB:3C:45:0E:BA Certificate issuer: /CN=96E9344F9168341F216708A437FB9801FEBBBBB6 Certificate serial: 6A720EEFA3960DEDBFF71471167CBADC110414E5 Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3133342e302f32342d3234203d3e20313531333032.roa Signing time: Mon 20 Apr 2026 07:34:13 +0000 ROA not before: Mon 20 Apr 2026 07:29:13 +0000 ROA not after: Mon 19 Apr 2027 07:34:13 +0000 asID: 151302 IP address blocks: 43.248.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:72:0e:ef:a3:96:0d:ed:bf:f7:14:71:16:7c:ba:dc:11:04:14:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6 Validity Not Before: Apr 20 07:29:13 2026 GMT Not After : Apr 19 07:34:13 2027 GMT Subject: CN=E8C07EF65B9B1AA30A223FC268625DBB3C450EBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8e:b2:0d:61:69:aa:3a:89:23:1c:83:67:7e: c3:b1:74:d8:b8:7e:b6:00:05:7c:2a:04:98:d8:c9: 5f:01:b8:61:d7:59:64:0a:2a:d8:41:e2:30:38:2a: a5:f8:e1:f8:cd:4d:f0:e3:ea:46:c6:94:79:56:48: b3:4e:eb:11:43:98:c9:17:e9:02:e6:c3:a9:5b:de: 02:ff:02:3b:6c:54:fd:87:e4:3e:0e:d1:63:e1:ff: 30:22:1e:d6:c7:ab:95:f5:b7:38:69:b8:23:c9:b7: 88:1a:30:f1:f7:01:37:66:49:0d:f5:0f:aa:b1:4a: 47:6a:46:8e:2b:4c:20:2f:4c:d3:ea:03:a4:81:60: a5:fa:01:51:45:da:be:ae:d2:0d:e9:3f:20:01:80: b6:26:6b:62:02:ae:09:70:2b:bd:63:b4:8b:43:3b: ae:39:58:ce:c1:b8:d9:04:1e:83:c6:a3:79:23:d3: dd:9b:47:50:55:fd:0b:6b:bd:0b:55:a4:9a:1f:be: ba:5d:51:54:5a:20:88:38:ca:c0:9b:e7:37:ae:23: fb:be:03:68:93:6f:1a:1e:dc:44:90:59:46:bf:32: 16:6a:de:37:15:74:09:74:1e:98:44:fb:3b:c2:15: d3:f2:64:d5:ef:75:8d:c2:cd:82:e0:95:1c:1c:18: a9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C0:7E:F6:5B:9B:1A:A3:0A:22:3F:C2:68:62:5D:BB:3C:45:0E:BA X509v3 Authority Key Identifier: keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3133342e302f32342d3234203d3e20313531333032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.134.0/24 Signature Algorithm: sha256WithRSAEncryption 06:6c:bd:bf:25:31:51:a9:51:0e:c8:ce:b7:51:b1:0b:24:c1: 94:86:63:cc:96:3c:53:8a:da:d5:49:5d:d6:47:f2:86:22:25: a1:d2:9d:11:ff:7d:8b:0c:cb:0a:61:1a:37:46:5e:93:c4:41: 7f:a0:0f:24:cf:ba:83:a8:c8:19:3d:9d:0b:29:ed:53:0c:74: ee:94:ab:f0:70:dc:7e:06:a6:9c:30:ba:e6:9e:b8:aa:35:2b: cd:82:b3:65:e2:46:11:f1:6f:0c:bd:07:66:43:69:32:2f:33: 83:30:06:2d:0e:74:fa:ca:ff:85:c5:6e:94:5c:25:df:36:d7: ba:c4:13:c4:72:c9:89:0e:b7:8f:6f:e1:3c:da:2f:ef:3a:b5: 5b:44:3a:30:26:69:b1:50:f2:bf:be:87:50:0e:72:a0:f1:ab: 71:b5:74:89:cc:7b:f3:7d:09:7b:d8:54:28:b7:61:d7:e2:38: 52:30:a2:47:47:9f:67:92:15:8d:f4:a3:91:9e:da:5d:93:b3: bb:39:44:c3:e7:b7:43:f6:ec:2a:77:68:04:cd:68:67:60:38: 10:66:0a:5c:21:46:5a:b7:3d:4f:26:e3:38:ad:29:54:4f:bb: 17:e8:ff:75:2e:99:f9:00:5f:3b:ad:3f:a1:cf:51:95:ec:cf: 09:26:d9:57 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUanIO76OWDe2/9xRxFny63BEEFOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZFOTM0NEY5MTY4MzQxRjIxNjcwOEE0MzdGQjk4MDFG RUJCQkJCNjAeFw0yNjA0MjAwNzI5MTNaFw0yNzA0MTkwNzM0MTNaMDMxMTAvBgNV BAMTKEU4QzA3RUY2NUI5QjFBQTMwQTIyM0ZDMjY4NjI1REJCM0M0NTBFQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGjrINYWmqOokjHINnfsOxdNi4 frYABXwqBJjYyV8BuGHXWWQKKthB4jA4KqX44fjNTfDj6kbGlHlWSLNO6xFDmMkX 6QLmw6lb3gL/AjtsVP2H5D4O0WPh/zAiHtbHq5X1tzhpuCPJt4gaMPH3ATdmSQ31 D6qxSkdqRo4rTCAvTNPqA6SBYKX6AVFF2r6u0g3pPyABgLYma2ICrglwK71jtItD O645WM7BuNkEHoPGo3kj092bR1BV/QtrvQtVpJofvrpdUVRaIIg4ysCb5zeuI/u+ A2iTbxoe3ESQWUa/MhZq3jcVdAl0HphE+zvCFdPyZNXvdY3CzYLglRwcGKlFAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU6MB+9lubGqMKIj/CaGJduzxFDrowHwYDVR0j BBgwFoAUluk0T5FoNB8hZwikN/uYAf67u7YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQzMzc4OTc4Njc1MDk3Ny8wLzk2RTkzNDRGOTE2ODM0MUYyMTY3MDhBNDM3RkI5 ODAxRkVCQkJCQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTZFOTM0NEY5MTY4MzQxRjIxNjcwOEE0MzdGQjk4MDFGRUJCQkJCNi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTc0MzM3ODk3ODY3NTA5NzcvMC8zNDMzMmUzMjM0 MzgyZTMxMzMzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMzMzAzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEACv4hjANBgkqhkiG9w0BAQsFAAOCAQEABmy9vyUxUalRDsjOt1Gx CyTBlIZjzJY8U4ra1Uld1kfyhiIlodKdEf99iwzLCmEaN0Zek8RBf6APJM+6g6jI GT2dCyntUwx07pSr8HDcfgamnDC65p64qjUrzYKzZeJGEfFvDL0HZkNpMi8zgzAG LQ50+sr/hcVulFwl3zbXusQTxHLJiQ63j2/hPNov7zq1W0Q6MCZpsVDyv76HUA5y oPGrcbV0icx7830Je9hUKLdh1+I4UjCiR0efZ5IVjfSjkZ7aXZOzuzlEw+e3Q/bs KndoBM1oZ2A4EGYKXCFGWrc9TybjOK0pVE+7F+j/dS6Z+QBfO60/oc9RlezPCSbZ Vw== -----END CERTIFICATE-----Generated at Wed Apr 22 02:53:54 2026 by rpki-client