$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e37362e302f32322d3234203d3e20313331343833.roa File: 34332e3234382e37362e302f32322d3234203d3e20313331343833.roa (raw, json) Hash identifier: UKLAmnW4UxMRrBgW0MT4omcrnDzgslUpaFRlpWwslLI= Subject key identifier: 0D:1D:30:2B:A5:08:A3:59:08:6F:B1:53:F3:AB:55:F6:D5:4B:F1:D8 Certificate issuer: /CN=96E9344F9168341F216708A437FB9801FEBBBBB6 Certificate serial: 376FBC440A39B120F9A0DFFD3D71F44D1E71039B Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e37362e302f32322d3234203d3e20313331343833.roa Signing time: Mon 20 Apr 2026 05:41:44 +0000 ROA not before: Mon 20 Apr 2026 05:36:44 +0000 ROA not after: Mon 19 Apr 2027 05:41:44 +0000 asID: 131483 IP address blocks: 43.248.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:6f:bc:44:0a:39:b1:20:f9:a0:df:fd:3d:71:f4:4d:1e:71:03:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6 Validity Not Before: Apr 20 05:36:44 2026 GMT Not After : Apr 19 05:41:44 2027 GMT Subject: CN=0D1D302BA508A359086FB153F3AB55F6D54BF1D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1a:36:8c:8b:df:c5:48:5a:0a:3a:0a:0c:e7: 42:0f:7f:c5:5a:bd:2b:d1:47:6c:08:1a:70:9f:bd: df:27:8e:a4:04:a2:2b:9d:16:d3:3e:68:47:00:d6: f4:09:90:65:96:b8:ce:a7:06:40:68:19:4b:b3:71: f6:0d:7a:2d:41:67:55:f8:ad:ac:d0:d0:56:3e:aa: 36:ac:10:3d:12:67:cb:81:35:41:7c:2d:51:5f:be: 5c:24:95:a5:a3:4c:e1:42:73:e4:4f:f3:55:35:48: f9:6e:eb:ba:66:41:0b:02:9c:59:96:b4:21:d2:5e: 72:7d:07:2e:62:5b:9a:ae:5a:8b:a1:23:9b:7a:89: 5e:f4:b7:f1:59:0d:0f:ac:a5:77:c9:72:b7:90:d6: 99:13:d6:2f:d1:ca:d4:ca:ce:9b:2a:a4:df:49:ab: cc:6d:d3:34:66:4f:83:34:d2:96:6a:5d:54:28:32: 65:59:84:c7:cd:5d:f6:94:75:5c:57:ae:a7:f3:15: 7f:f5:2e:02:6b:fc:fe:07:85:15:be:2a:84:2e:a6: 75:7e:dd:65:0c:c7:3e:32:34:4b:59:54:41:e3:cd: d4:9d:a1:f4:a5:57:10:4d:9f:d8:99:0c:fb:b3:73: 9a:f3:83:1c:e2:68:1c:95:3e:7f:03:2b:40:1f:5b: fb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:1D:30:2B:A5:08:A3:59:08:6F:B1:53:F3:AB:55:F6:D5:4B:F1:D8 X509v3 Authority Key Identifier: keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e37362e302f32322d3234203d3e20313331343833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.76.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:f5:10:e9:a8:35:36:74:b3:74:71:46:a5:44:6b:a3:92:fb: e3:69:13:eb:61:a6:9b:d8:4d:8d:62:d3:f9:09:5b:a9:e3:a6: ee:58:c6:82:71:a8:b8:44:5b:5d:6c:c9:3d:18:41:c6:07:65: 3d:7a:c9:4f:7d:aa:00:7d:47:d3:2e:5a:74:c0:46:6e:1b:61: c6:fa:32:68:0f:80:c3:85:b1:58:5c:8b:1a:7c:70:25:22:bc: 02:fc:74:d4:7d:11:1e:4b:55:83:06:ed:bb:33:40:f5:45:cb: 6d:37:0d:57:2e:63:73:a5:f6:51:02:3d:97:27:ef:29:31:9f: 76:b8:89:5b:d0:e8:52:81:fc:9e:b3:a1:ef:f3:a0:d9:88:e5: 34:80:cd:f2:e0:bf:46:96:89:bc:d8:51:5c:d0:d2:ca:d7:23: 29:33:e5:be:c6:ab:3b:fb:e2:53:6e:39:0d:aa:f1:d9:96:eb: 7f:85:47:5b:70:d0:74:f0:9d:cb:5b:b2:51:ab:7e:e6:92:2c: 2a:4a:dd:ea:16:ba:2f:f9:98:95:9a:25:60:2d:1d:1e:9b:b6: 25:c4:b1:1e:85:53:c3:79:77:15:06:7c:2c:63:ef:7d:a0:3b: df:30:32:41:74:fc:51:7d:bf:ba:f4:33:1b:2b:cd:7a:19:ed: b8:12:97:16 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUN2+8RAo5sSD5oN/9PXH0TR5xA5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZFOTM0NEY5MTY4MzQxRjIxNjcwOEE0MzdGQjk4MDFG RUJCQkJCNjAeFw0yNjA0MjAwNTM2NDRaFw0yNzA0MTkwNTQxNDRaMDMxMTAvBgNV BAMTKDBEMUQzMDJCQTUwOEEzNTkwODZGQjE1M0YzQUI1NUY2RDU0QkYxRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUGjaMi9/FSFoKOgoM50IPf8Va vSvRR2wIGnCfvd8njqQEoiudFtM+aEcA1vQJkGWWuM6nBkBoGUuzcfYNei1BZ1X4 razQ0FY+qjasED0SZ8uBNUF8LVFfvlwklaWjTOFCc+RP81U1SPlu67pmQQsCnFmW tCHSXnJ9By5iW5quWouhI5t6iV70t/FZDQ+spXfJcreQ1pkT1i/RytTKzpsqpN9J q8xt0zRmT4M00pZqXVQoMmVZhMfNXfaUdVxXrqfzFX/1LgJr/P4HhRW+KoQupnV+ 3WUMxz4yNEtZVEHjzdSdofSlVxBNn9iZDPuzc5rzgxziaByVPn8DK0AfW/utAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUDR0wK6UIo1kIb7FT86tV9tVL8dgwHwYDVR0j BBgwFoAUluk0T5FoNB8hZwikN/uYAf67u7YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQzMzc4OTc4Njc1MDk3Ny8wLzk2RTkzNDRGOTE2ODM0MUYyMTY3MDhBNDM3RkI5 ODAxRkVCQkJCQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTZFOTM0NEY5MTY4MzQxRjIxNjcwOEE0MzdGQjk4MDFGRUJCQkJCNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NzQzMzc4OTc4Njc1MDk3Ny8wLzM0MzMyZTMyMzQz ODJlMzczNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzMTM0MzgzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAiv4TDANBgkqhkiG9w0BAQsFAAOCAQEADPUQ6ag1NnSzdHFGpURro5L7 42kT62Gmm9hNjWLT+QlbqeOm7ljGgnGouERbXWzJPRhBxgdlPXrJT32qAH1H0y5a dMBGbhthxvoyaA+Aw4WxWFyLGnxwJSK8Avx01H0RHktVgwbtuzNA9UXLbTcNVy5j c6X2UQI9lyfvKTGfdriJW9DoUoH8nrOh7/Og2YjlNIDN8uC/RpaJvNhRXNDSytcj KTPlvsarO/viU245Darx2Zbrf4VHW3DQdPCdy1uyUat+5pIsKkrd6ha6L/mYlZol YC0dHpu2JcSxHoVTw3l3FQZ8LGPvfaA73zAyQXT8UX2/uvQzGyvNehntuBKXFg== -----END CERTIFICATE-----Generated at Wed Apr 22 01:39:10 2026 by rpki-client