$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099216366411448321/0/34332e3234372e36382e302f32322d3232203d3e20313334313936.roa File: 34332e3234372e36382e302f32322d3232203d3e20313334313936.roa (raw, json) Hash identifier: BOrnJuBQWWbSNEwWS9msbaKMlsq7KEpqAJujOnLFNU8= Subject key identifier: E2:1A:C2:C8:86:C1:A8:09:9F:27:1A:89:35:25:3B:66:76:9F:5D:F8 Certificate issuer: /CN=158B95F55D548B072B42C2C2820ACE7D9908E60F Certificate serial: 22C6068FF4900E566264732FA616E06D64B17763 Authority key identifier: 15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/34332e3234372e36382e302f32322d3232203d3e20313334313936.roa Signing time: Wed 22 Apr 2026 06:18:52 +0000 ROA not before: Wed 22 Apr 2026 06:13:52 +0000 ROA not after: Wed 21 Apr 2027 06:18:52 +0000 asID: 134196 IP address blocks: 43.247.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:c6:06:8f:f4:90:0e:56:62:64:73:2f:a6:16:e0:6d:64:b1:77:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158B95F55D548B072B42C2C2820ACE7D9908E60F Validity Not Before: Apr 22 06:13:52 2026 GMT Not After : Apr 21 06:18:52 2027 GMT Subject: CN=E21AC2C886C1A8099F271A8935253B66769F5DF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:68:c5:4f:ae:54:af:ed:f5:58:11:44:ae:a9: 8d:c0:3d:d0:5f:0d:0e:17:7a:9c:78:69:14:de:b0: 19:9a:ca:55:03:e8:6c:76:80:2c:93:d0:89:35:1f: 5a:74:bc:c1:c1:6b:87:c1:52:43:1a:04:1c:66:03: f4:d2:27:cd:8d:eb:da:0e:4b:30:a7:a4:97:d4:8c: 27:31:d6:98:73:40:fb:7b:48:91:33:e5:0c:9b:89: f6:57:b3:5d:9d:d3:3b:1f:21:7d:a9:ec:98:91:12: 35:df:74:b4:ca:08:65:44:02:57:67:4b:67:a6:5f: e9:b4:dc:97:b5:be:fd:fa:3a:97:bc:09:2b:99:90: 35:a3:bc:d9:b7:1e:f5:58:16:49:bc:37:b6:2e:29: ac:cf:2c:85:2a:da:5c:0c:2a:df:f1:e5:1b:4d:63: 38:e2:14:51:42:5e:b9:55:0f:a8:be:67:26:26:30: 03:fc:61:f5:8e:44:94:13:cc:3f:36:68:9a:39:07: c8:ad:fb:13:da:3a:44:78:d5:8d:9a:5a:91:88:be: d8:9a:7a:76:75:2b:15:d7:9c:99:43:a6:94:0c:a0: a4:32:95:52:da:99:00:3c:98:cf:89:cc:e6:53:ea: 63:8a:25:a2:39:05:5f:3a:3b:1a:27:cd:5a:df:1f: 4c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1A:C2:C8:86:C1:A8:09:9F:27:1A:89:35:25:3B:66:76:9F:5D:F8 X509v3 Authority Key Identifier: keyid:15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/34332e3234372e36382e302f32322d3232203d3e20313334313936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.247.68.0/22 Signature Algorithm: sha256WithRSAEncryption ae:2e:73:83:2d:80:52:d5:7e:2d:88:8b:b8:c0:92:a1:14:37: 3b:f0:cc:e2:44:f3:49:46:6f:97:a8:99:69:30:c6:48:73:22: 04:94:bd:69:a8:a5:3a:4e:68:f2:1c:9e:88:7c:0d:7b:d0:f5: 65:f1:9b:fd:af:76:95:22:fd:4e:38:fc:2e:89:9d:92:36:b3: 35:3c:ef:38:ca:24:af:a3:7a:69:9c:15:93:0b:cd:a6:59:0c: b9:31:11:1f:33:3b:2b:b2:3e:36:3e:e8:2f:a7:e6:9c:b3:15: cc:88:47:22:65:12:84:fb:6b:90:54:56:0e:41:ee:aa:5a:6c: 7a:ee:c1:31:d8:e2:ac:48:ab:75:5e:ea:ab:2f:6e:a3:ee:0f: 4f:9c:01:9f:cc:c5:81:7d:be:18:df:41:6f:e4:92:2e:d0:32: f4:ad:7c:52:48:ad:2f:74:05:2c:df:e9:34:50:28:e8:e5:ad: 66:ce:08:92:5a:86:c9:bf:70:2f:37:c3:f6:5e:04:a2:6a:d8: 0b:9f:04:c1:0c:d7:ce:cf:5d:cb:6e:4e:79:c3:d1:2a:6d:cc: f3:4a:bc:94:a8:37:90:34:21:59:98:91:e0:eb:a5:aa:09:d9: b1:73:3c:6b:b9:3d:5f:d0:e6:6b:dc:5b:7e:62:65:a5:85:d4: 9d:e5:e8:af -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUIsYGj/SQDlZiZHMvphbgbWSxd2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU4Qjk1RjU1RDU0OEIwNzJCNDJDMkMyODIwQUNFN0Q5 OTA4RTYwRjAeFw0yNjA0MjIwNjEzNTJaFw0yNzA0MjEwNjE4NTJaMDMxMTAvBgNV BAMTKEUyMUFDMkM4ODZDMUE4MDk5RjI3MUE4OTM1MjUzQjY2NzY5RjVERjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWaMVPrlSv7fVYEUSuqY3APdBf DQ4Xepx4aRTesBmaylUD6Gx2gCyT0Ik1H1p0vMHBa4fBUkMaBBxmA/TSJ82N69oO SzCnpJfUjCcx1phzQPt7SJEz5QybifZXs12d0zsfIX2p7JiREjXfdLTKCGVEAldn S2emX+m03Je1vv36Ope8CSuZkDWjvNm3HvVYFkm8N7YuKazPLIUq2lwMKt/x5RtN YzjiFFFCXrlVD6i+ZyYmMAP8YfWORJQTzD82aJo5B8it+xPaOkR41Y2aWpGIvtia enZ1KxXXnJlDppQMoKQylVLamQA8mM+JzOZT6mOKJaI5BV86OxonzVrfH0yzAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU4hrCyIbBqAmfJxqJNSU7ZnafXfgwHwYDVR0j BBgwFoAUFYuV9V1UiwcrQsLCggrOfZkI5g8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTIxNjM2NjQxMTQ0ODMyMS8wLzE1OEI5NUY1NUQ1NDhCMDcyQjQyQzJDMjgyMEFD RTdEOTkwOEU2MEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTU4Qjk1RjU1RDU0OEIwNzJCNDJDMkMyODIwQUNFN0Q5OTA4RTYwRi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5OTIxNjM2NjQxMTQ0ODMyMS8wLzM0MzMyZTMyMzQz NzJlMzYzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzNDMxMzkzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAiv3RDANBgkqhkiG9w0BAQsFAAOCAQEAri5zgy2AUtV+LYiLuMCSoRQ3 O/DM4kTzSUZvl6iZaTDGSHMiBJS9aailOk5o8hyeiHwNe9D1ZfGb/a92lSL9Tjj8 LomdkjazNTzvOMokr6N6aZwVkwvNplkMuTERHzM7K7I+Nj7oL6fmnLMVzIhHImUS hPtrkFRWDkHuqlpseu7BMdjirEirdV7qqy9uo+4PT5wBn8zFgX2+GN9Bb+SSLtAy 9K18UkitL3QFLN/pNFAo6OWtZs4IklqGyb9wLzfD9l4EomrYC58EwQzXzs9dy25O ecPRKm3M80q8lKg3kDQhWZiR4OulqgnZsXM8a7k9X9Dma9xbfmJlpYXUneXorw== -----END CERTIFICATE-----Generated at Mon Apr 27 19:27:15 2026 by rpki-client