$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e39362e302f32312d3234203d3e203536303436.roa File: 34332e3234382e39362e302f32312d3234203d3e203536303436.roa (raw, json) Hash identifier: zxVKAQFHx7Vh+p8IAolDZmw8BrqIiGprwXg+isARhNg= Subject key identifier: BA:5F:3B:28:20:85:82:47:EB:B2:38:20:ED:9C:E4:B9:03:CE:51:CF Certificate issuer: /CN=96E9344F9168341F216708A437FB9801FEBBBBB6 Certificate serial: 025EB6AD5A55AE6BED7467BB81FAB55DF1972EE5 Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e39362e302f32312d3234203d3e203536303436.roa Signing time: Mon 20 Apr 2026 05:44:34 +0000 ROA not before: Mon 20 Apr 2026 05:39:34 +0000 ROA not after: Mon 19 Apr 2027 05:44:34 +0000 asID: 56046 IP address blocks: 43.248.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:5e:b6:ad:5a:55:ae:6b:ed:74:67:bb:81:fa:b5:5d:f1:97:2e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6 Validity Not Before: Apr 20 05:39:34 2026 GMT Not After : Apr 19 05:44:34 2027 GMT Subject: CN=BA5F3B2820858247EBB23820ED9CE4B903CE51CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:05:8c:cc:f8:7b:9a:69:fa:ba:d4:b7:0d:7f: 82:cf:2a:e0:a6:b6:22:33:04:90:56:35:0d:af:36: e0:e6:d8:7c:3e:e6:bb:59:24:57:12:68:d7:f9:4e: ab:9c:da:3c:4f:d7:e0:86:ed:10:3f:4e:16:c7:e6: c3:82:bc:1a:02:87:1f:de:33:fc:40:f3:7c:6c:01: 2e:17:7b:61:c3:58:0c:49:2b:87:9e:80:e7:38:9d: c5:48:b6:f8:a4:94:90:17:17:a5:dc:f8:9f:91:7f: ac:0c:75:8f:53:a1:c6:0b:8d:23:36:82:cb:24:93: 47:04:66:4d:74:68:3b:e9:fc:5e:ce:37:8a:9f:d6: 3d:17:82:43:0e:7d:44:4c:38:3f:08:02:93:a9:9e: 58:e5:85:60:ec:49:c8:6e:56:46:cb:54:36:75:f1: 12:81:6d:44:c5:14:4c:2f:83:25:2e:eb:0c:53:da: 0e:42:5c:9a:f1:4b:05:49:bb:ef:ca:cb:82:c5:08: 22:e6:ff:5b:bc:92:87:54:bd:1a:6f:4a:d0:98:8d: 9e:9c:5e:29:c0:a5:6e:5c:76:b9:17:db:4c:cd:c7: 07:d3:be:8c:83:1a:43:07:4b:19:f6:4d:94:1e:29: e2:0b:62:95:bc:bc:1c:e1:98:88:d8:6d:a6:8c:b2: 34:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:5F:3B:28:20:85:82:47:EB:B2:38:20:ED:9C:E4:B9:03:CE:51:CF X509v3 Authority Key Identifier: keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e39362e302f32312d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.96.0/21 Signature Algorithm: sha256WithRSAEncryption 1e:b8:0b:38:c9:35:2f:69:27:57:10:1c:47:a4:10:ef:de:f5: 3f:13:10:a5:6d:08:d5:28:a7:68:e6:78:2d:0a:f2:e5:3d:da: ea:50:03:79:f4:14:3c:e1:6e:b0:34:d7:80:e2:ed:2d:07:a2: 1e:f4:c4:21:9d:28:72:1b:ce:36:d2:33:d7:1b:c7:f7:b5:75: 15:81:b6:d7:28:1e:f6:3e:1a:90:c8:d9:a3:53:19:dd:71:11: 2c:8e:f5:4a:74:4b:4d:f1:67:04:07:74:c6:63:88:2e:d4:cd: c5:e3:54:b9:4d:84:c0:dd:e8:89:e1:be:d9:19:40:bf:09:b5: e6:bd:3f:4d:f9:85:af:77:27:6e:fd:64:8c:42:2e:5a:1d:ef: 53:78:db:f5:2a:66:87:bb:81:6e:20:5d:da:0a:42:bf:5d:58: 81:2e:a1:33:03:23:26:a2:c3:90:cf:b6:51:f0:78:f2:f3:2d: 65:a6:1f:6f:ac:27:ff:d2:f6:ed:be:d3:8b:19:2d:22:33:10: 65:39:75:2a:5d:cf:02:4c:6c:a3:ff:ee:09:d3:78:37:7a:42: 5a:ab:c2:7f:2e:c1:24:a8:02:50:67:7a:12:fb:88:5e:4e:b6: 58:79:46:55:e7:42:6e:1e:11:fd:7d:e7:41:3c:af:7d:5a:bf: c1:9d:35:94 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUAl62rVpVrmvtdGe7gfq1XfGXLuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZFOTM0NEY5MTY4MzQxRjIxNjcwOEE0MzdGQjk4MDFG RUJCQkJCNjAeFw0yNjA0MjAwNTM5MzRaFw0yNzA0MTkwNTQ0MzRaMDMxMTAvBgNV BAMTKEJBNUYzQjI4MjA4NTgyNDdFQkIyMzgyMEVEOUNFNEI5MDNDRTUxQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2BYzM+Huaafq61LcNf4LPKuCm tiIzBJBWNQ2vNuDm2Hw+5rtZJFcSaNf5Tquc2jxP1+CG7RA/ThbH5sOCvBoChx/e M/xA83xsAS4Xe2HDWAxJK4eegOc4ncVItviklJAXF6Xc+J+Rf6wMdY9TocYLjSM2 gsskk0cEZk10aDvp/F7ON4qf1j0XgkMOfURMOD8IApOpnljlhWDsSchuVkbLVDZ1 8RKBbUTFFEwvgyUu6wxT2g5CXJrxSwVJu+/Ky4LFCCLm/1u8kodUvRpvStCYjZ6c XinApW5cdrkX20zNxwfTvoyDGkMHSxn2TZQeKeILYpW8vBzhmIjYbaaMsjSLAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUul87KCCFgkfrsjgg7ZzkuQPOUc8wHwYDVR0j BBgwFoAUluk0T5FoNB8hZwikN/uYAf67u7YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQzMzc4OTc4Njc1MDk3Ny8wLzk2RTkzNDRGOTE2ODM0MUYyMTY3MDhBNDM3RkI5 ODAxRkVCQkJCQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTZFOTM0NEY5MTY4MzQxRjIxNjcwOEE0MzdGQjk4MDFGRUJCQkJCNi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3NDMzNzg5Nzg2NzUwOTc3LzAvMzQzMzJlMzIzNDM4 MmUzOTM2MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAyv4YDANBgkqhkiG9w0BAQsFAAOCAQEAHrgLOMk1L2knVxAcR6QQ7971PxMQ pW0I1SinaOZ4LQry5T3a6lADefQUPOFusDTXgOLtLQeiHvTEIZ0ochvONtIz1xvH 97V1FYG21yge9j4akMjZo1MZ3XERLI71SnRLTfFnBAd0xmOILtTNxeNUuU2EwN3o ieG+2RlAvwm15r0/TfmFr3cnbv1kjEIuWh3vU3jb9Spmh7uBbiBd2gpCv11YgS6h MwMjJqLDkM+2UfB48vMtZaYfb6wn/9L27b7TixktIjMQZTl1Kl3PAkxso//uCdN4 N3pCWqvCfy7BJKgCUGd6EvuIXk62WHlGVedCbh4R/X3nQTyvfVq/wZ01lA== -----END CERTIFICATE-----Generated at Tue Apr 21 22:52:32 2026 by rpki-client