$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e39362e302f32312d3234203d3e2034383337.roa File: 34332e3234382e39362e302f32312d3234203d3e2034383337.roa (raw, json) Hash identifier: 3oBmRp7hQ3jAIokrCEPb4m5hzF6M4+MEZU+Jmm/7qMM= Subject key identifier: FC:9C:C3:8D:7B:36:13:5E:58:29:85:47:12:1E:B4:60:52:69:C4:00 Certificate issuer: /CN=96E9344F9168341F216708A437FB9801FEBBBBB6 Certificate serial: 44D61A2F2ACED89AA1FB837283BFA3EEF965BF29 Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e39362e302f32312d3234203d3e2034383337.roa Signing time: Mon 20 Apr 2026 05:44:34 +0000 ROA not before: Mon 20 Apr 2026 05:39:34 +0000 ROA not after: Mon 19 Apr 2027 05:44:34 +0000 asID: 4837 IP address blocks: 43.248.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:d6:1a:2f:2a:ce:d8:9a:a1:fb:83:72:83:bf:a3:ee:f9:65:bf:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6 Validity Not Before: Apr 20 05:39:34 2026 GMT Not After : Apr 19 05:44:34 2027 GMT Subject: CN=FC9CC38D7B36135E58298547121EB4605269C400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cc:83:9f:db:9b:cb:97:de:41:83:46:ab:0a: 77:55:b2:a0:16:67:ee:f3:48:a8:e8:58:63:38:0a: 73:b5:f9:ff:2e:af:7a:12:28:2b:09:08:c5:87:a3: c7:50:db:4d:32:ac:b6:01:bb:1e:1c:05:54:e7:41: ac:2f:4a:eb:8e:93:f0:f7:a9:b5:81:5f:76:40:17: 20:06:a4:19:b1:81:0b:1d:b0:a7:b0:9c:b7:18:d0: d7:f2:ff:61:e0:f2:41:b6:d3:57:d3:7d:ca:47:53: ce:3d:2f:af:56:ed:80:dd:01:49:2d:5b:0c:4e:bb: 82:1d:2b:d5:57:27:78:d5:e8:de:a3:3b:ea:0b:db: 51:a2:29:44:04:5c:5f:8f:f2:ac:b5:1f:2e:7b:1b: 25:f1:87:ab:a9:c3:df:2b:ca:74:79:a5:e9:5b:63: d3:65:23:39:ff:3b:a6:4d:bf:64:4f:fc:43:00:39: 82:27:e0:49:38:40:1f:53:52:aa:a8:63:8b:c1:fc: f5:39:bc:07:0f:b5:71:5f:1b:b2:05:64:50:0d:b5: 36:05:e9:7a:2e:3f:dc:1c:b8:14:33:2e:ca:b1:90: 9b:a6:62:22:a1:d5:a4:4b:56:2a:42:9d:46:1b:2f: b9:86:f3:2c:94:22:4c:66:10:a4:62:0d:94:9c:8e: 83:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9C:C3:8D:7B:36:13:5E:58:29:85:47:12:1E:B4:60:52:69:C4:00 X509v3 Authority Key Identifier: keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e39362e302f32312d3234203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.96.0/21 Signature Algorithm: sha256WithRSAEncryption 1b:a5:c7:fe:4e:7b:a3:75:4a:81:4e:ef:e9:64:fb:e1:2a:df: 5e:66:29:75:96:b8:cf:86:c9:8c:42:9f:ad:16:3f:3f:8a:c4: ba:b3:25:8a:fb:48:43:a0:ba:84:51:de:f4:0f:dc:e5:46:3e: 27:c2:05:19:59:f4:4c:81:15:93:85:b7:e6:7d:64:59:bd:95: 43:d6:b4:7c:99:bf:ad:1c:81:43:6a:61:ae:eb:25:2d:63:ce: 39:6c:b8:3f:c4:bc:41:7a:f3:9f:f5:17:1f:4a:0f:aa:8a:75: 20:80:5e:bf:df:8a:f2:27:81:d4:1b:ea:d8:33:03:6d:5c:06: 98:08:d0:d4:9a:2a:36:6c:a5:22:b7:23:e8:5c:cf:22:c9:ad: 26:8d:61:aa:1b:83:0c:b7:71:f8:a3:6d:54:c4:7f:50:87:54: f8:b6:7a:5b:0b:93:17:14:2b:0b:ab:35:de:be:b8:0a:b2:98: 29:a2:a8:38:ca:fe:5b:d9:66:ce:0f:8c:6d:ae:d9:e9:fe:6e: f1:41:7d:3d:d1:ea:36:70:49:88:8e:29:d9:52:bc:ce:1c:f5: 7e:a7:f2:f8:b3:3f:c2:14:62:6e:ae:85:4b:25:2c:24:a0:10: 50:17:11:dd:b5:1e:6b:ff:e5:78:2f:2d:1d:1c:30:67:0f:14: fe:22:3b:b1 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIURNYaLyrO2Jqh+4Nyg7+j7vllvykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZFOTM0NEY5MTY4MzQxRjIxNjcwOEE0MzdGQjk4MDFG RUJCQkJCNjAeFw0yNjA0MjAwNTM5MzRaFw0yNzA0MTkwNTQ0MzRaMDMxMTAvBgNV BAMTKEZDOUNDMzhEN0IzNjEzNUU1ODI5ODU0NzEyMUVCNDYwNTI2OUM0MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8zIOf25vLl95Bg0arCndVsqAW Z+7zSKjoWGM4CnO1+f8ur3oSKCsJCMWHo8dQ200yrLYBux4cBVTnQawvSuuOk/D3 qbWBX3ZAFyAGpBmxgQsdsKewnLcY0Nfy/2Hg8kG201fTfcpHU849L69W7YDdAUkt WwxOu4IdK9VXJ3jV6N6jO+oL21GiKUQEXF+P8qy1Hy57GyXxh6upw98rynR5pelb Y9NlIzn/O6ZNv2RP/EMAOYIn4Ek4QB9TUqqoY4vB/PU5vAcPtXFfG7IFZFANtTYF 6XouP9wcuBQzLsqxkJumYiKh1aRLVipCnUYbL7mG8yyUIkxmEKRiDZScjoOhAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQU/JzDjXs2E15YKYVHEh60YFJpxAAwHwYDVR0j BBgwFoAUluk0T5FoNB8hZwikN/uYAf67u7YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQzMzc4OTc4Njc1MDk3Ny8wLzk2RTkzNDRGOTE2ODM0MUYyMTY3MDhBNDM3RkI5 ODAxRkVCQkJCQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTZFOTM0NEY5MTY4MzQxRjIxNjcwOEE0MzdGQjk4MDFGRUJCQkJCNi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3NDMzNzg5Nzg2NzUwOTc3LzAvMzQzMzJlMzIzNDM4 MmUzOTM2MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAMr+GAwDQYJKoZIhvcNAQELBQADggEBABulx/5Oe6N1SoFO7+lk++Eq315mKXWW uM+GyYxCn60WPz+KxLqzJYr7SEOguoRR3vQP3OVGPifCBRlZ9EyBFZOFt+Z9ZFm9 lUPWtHyZv60cgUNqYa7rJS1jzjlsuD/EvEF685/1Fx9KD6qKdSCAXr/fivIngdQb 6tgzA21cBpgI0NSaKjZspSK3I+hczyLJrSaNYaobgwy3cfijbVTEf1CHVPi2elsL kxcUKwurNd6+uAqymCmiqDjK/lvZZs4PjG2u2en+bvFBfT3R6jZwSYiOKdlSvM4c 9X6n8vizP8IUYm6uhUslLCSgEFAXEd21Hmv/5XgvLR0cMGcPFP4iO7E= -----END CERTIFICATE-----Generated at Wed Apr 22 02:53:53 2026 by rpki-client