$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e37362e302f32322d3234203d3e20313533393131.roa File: 34332e3234382e37362e302f32322d3234203d3e20313533393131.roa (raw, json) Hash identifier: +i7jUNHa8/+Kuz9bDzcMfl+CPgHoeQnPoVQjZJw80XA= Subject key identifier: 4A:73:73:1C:CB:81:32:C1:16:63:8D:E8:15:5A:4E:77:B9:31:D8:0A Certificate issuer: /CN=96E9344F9168341F216708A437FB9801FEBBBBB6 Certificate serial: 1B33CE52D99C162353AB8F64165378406DE77FC2 Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e37362e302f32322d3234203d3e20313533393131.roa Signing time: Mon 20 Apr 2026 05:41:44 +0000 ROA not before: Mon 20 Apr 2026 05:36:44 +0000 ROA not after: Mon 19 Apr 2027 05:41:44 +0000 asID: 153911 IP address blocks: 43.248.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:33:ce:52:d9:9c:16:23:53:ab:8f:64:16:53:78:40:6d:e7:7f:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6 Validity Not Before: Apr 20 05:36:44 2026 GMT Not After : Apr 19 05:41:44 2027 GMT Subject: CN=4A73731CCB8132C116638DE8155A4E77B931D80A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9c:72:00:84:cd:ae:61:56:99:65:f7:a6:83: 3a:46:bf:80:16:af:f5:33:bc:f5:df:31:a6:74:a4: ff:0b:49:ba:e7:ec:f3:37:bd:d7:02:a4:45:ff:8e: 0c:32:d7:04:a6:7f:87:d4:4e:7d:d8:f4:0f:d0:3e: 8b:8d:69:cc:af:d1:ea:71:4c:78:e1:ea:cd:3a:11: 2b:9b:05:1e:31:45:20:c5:ee:ec:c3:4f:3c:d5:5e: 73:73:44:d0:8d:c6:64:bd:2c:48:b5:97:15:1f:e3: f5:df:ef:7b:26:0c:93:c4:5d:65:85:8b:49:02:96: 49:48:d7:a1:12:71:32:0f:d7:58:b0:a2:44:67:10: 7c:8b:6e:45:fe:7f:22:ec:44:b4:0f:bd:a3:79:db: 52:a5:90:a1:47:08:e3:0b:67:d6:ff:3b:9c:62:87: ff:61:68:3f:f1:69:6b:b9:11:b6:8c:cf:99:f3:7b: fd:a0:f0:db:fb:5a:f1:16:65:91:39:20:39:49:53: b7:df:db:1d:db:6d:98:28:98:8f:86:db:d2:e0:75: 17:0d:f1:eb:da:0c:60:a8:a0:95:5f:46:ff:6e:07: 14:75:25:a5:b1:8b:ba:51:49:44:61:df:55:85:30: 39:ff:93:71:f2:77:85:09:d5:77:00:5e:49:be:67: a2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:73:73:1C:CB:81:32:C1:16:63:8D:E8:15:5A:4E:77:B9:31:D8:0A X509v3 Authority Key Identifier: keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e37362e302f32322d3234203d3e20313533393131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.76.0/22 Signature Algorithm: sha256WithRSAEncryption 72:a8:23:90:63:96:11:99:76:6d:ff:73:cf:fb:13:eb:88:66: fd:b8:dc:ee:de:20:6b:80:5d:de:97:4b:99:69:96:92:e3:44: 1c:19:2a:83:45:56:4f:d4:cb:d2:e1:5c:68:0c:42:40:e4:33: e5:fd:d9:73:af:dc:2e:8c:59:d7:b6:b4:6c:ce:b4:a0:d8:fa: da:a9:68:d8:ff:8b:65:45:f0:19:4d:f1:e7:4e:8e:aa:d3:6e: 29:e2:8a:87:40:8e:fe:e3:4c:7f:31:c9:47:95:3f:fe:4d:5c: 4c:9a:c0:32:19:a6:de:57:c1:32:9d:c0:06:4c:0b:5c:f8:91: 95:66:a4:f4:cb:40:69:90:38:db:04:e2:b7:ce:57:25:8b:a4: c3:1b:1a:35:28:36:a1:78:f4:78:ac:96:b0:ae:c4:f8:f9:82: 6d:eb:62:46:d4:72:4d:67:f7:55:64:76:00:d4:fa:54:40:65: 7c:c2:e1:8a:52:c1:62:5e:2e:a4:3d:6f:c9:c2:06:79:16:a0: 89:0a:eb:2e:7c:80:2c:01:03:3d:a6:3e:37:81:bb:eb:8e:c0: 09:23:19:00:d9:97:c7:1d:67:15:df:c5:60:00:c7:33:2a:5c: 5f:49:5a:95:1f:8e:9f:44:e4:df:5b:17:9d:be:53:8b:a0:fb: 48:7e:76:86 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUGzPOUtmcFiNTq49kFlN4QG3nf8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZFOTM0NEY5MTY4MzQxRjIxNjcwOEE0MzdGQjk4MDFG RUJCQkJCNjAeFw0yNjA0MjAwNTM2NDRaFw0yNzA0MTkwNTQxNDRaMDMxMTAvBgNV BAMTKDRBNzM3MzFDQ0I4MTMyQzExNjYzOERFODE1NUE0RTc3QjkzMUQ4MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtnHIAhM2uYVaZZfemgzpGv4AW r/UzvPXfMaZ0pP8LSbrn7PM3vdcCpEX/jgwy1wSmf4fUTn3Y9A/QPouNacyv0epx THjh6s06ESubBR4xRSDF7uzDTzzVXnNzRNCNxmS9LEi1lxUf4/Xf73smDJPEXWWF i0kClklI16EScTIP11iwokRnEHyLbkX+fyLsRLQPvaN521KlkKFHCOMLZ9b/O5xi h/9haD/xaWu5EbaMz5nze/2g8Nv7WvEWZZE5IDlJU7ff2x3bbZgomI+G29LgdRcN 8evaDGCooJVfRv9uBxR1JaWxi7pRSURh31WFMDn/k3Hyd4UJ1XcAXkm+Z6IHAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUSnNzHMuBMsEWY43oFVpOd7kx2AowHwYDVR0j BBgwFoAUluk0T5FoNB8hZwikN/uYAf67u7YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQzMzc4OTc4Njc1MDk3Ny8wLzk2RTkzNDRGOTE2ODM0MUYyMTY3MDhBNDM3RkI5 ODAxRkVCQkJCQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTZFOTM0NEY5MTY4MzQxRjIxNjcwOEE0MzdGQjk4MDFGRUJCQkJCNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NzQzMzc4OTc4Njc1MDk3Ny8wLzM0MzMyZTMyMzQz ODJlMzczNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzUzMzM5MzEzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAiv4TDANBgkqhkiG9w0BAQsFAAOCAQEAcqgjkGOWEZl2bf9zz/sT64hm /bjc7t4ga4Bd3pdLmWmWkuNEHBkqg0VWT9TL0uFcaAxCQOQz5f3Zc6/cLoxZ17a0 bM60oNj62qlo2P+LZUXwGU3x506OqtNuKeKKh0CO/uNMfzHJR5U//k1cTJrAMhmm 3lfBMp3ABkwLXPiRlWak9MtAaZA42wTit85XJYukwxsaNSg2oXj0eKyWsK7E+PmC betiRtRyTWf3VWR2ANT6VEBlfMLhilLBYl4upD1vycIGeRagiQrrLnyALAEDPaY+ N4G7647ACSMZANmXxx1nFd/FYADHMypcX0lalR+On0Tk31sXnb5Ti6D7SH52hg== -----END CERTIFICATE-----Generated at Wed Apr 22 02:54:46 2026 by rpki-client