$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104977264086417417/0/34322e3135372e302e302f32312d3231203d3e2030.roa File: 34322e3135372e302e302f32312d3231203d3e2030.roa (raw, json) Hash identifier: bM7v9GLFz0UJuWkG/QHf07xfzcVdi+a9006fgSCnHjA= Subject key identifier: B3:F5:8B:0E:85:15:62:B1:F2:52:AD:11:D5:91:78:2E:02:67:B8:E5 Certificate issuer: /CN=128A765795FE2957B26881E441F8240B52742BED Certificate serial: 5CA06EEF54CBF525E12E62E3D54C090D5A7B187B Authority key identifier: 12:8A:76:57:95:FE:29:57:B2:68:81:E4:41:F8:24:0B:52:74:2B:ED Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/34322e3135372e302e302f32312d3231203d3e2030.roa Signing time: Thu 28 May 2026 02:11:00 +0000 ROA not before: Thu 28 May 2026 02:06:00 +0000 ROA not after: Thu 27 May 2027 02:11:00 +0000 asID: 0 IP address blocks: 42.157.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.crl rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:a0:6e:ef:54:cb:f5:25:e1:2e:62:e3:d5:4c:09:0d:5a:7b:18:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128A765795FE2957B26881E441F8240B52742BED Validity Not Before: May 28 02:06:00 2026 GMT Not After : May 27 02:11:00 2027 GMT Subject: CN=B3F58B0E851562B1F252AD11D591782E0267B8E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:98:c9:15:cc:2e:78:92:6f:0b:3b:68:c5:4a: 31:66:6a:ec:19:e3:5e:c4:b3:1c:10:bb:8b:de:17: c7:b7:1d:69:67:3a:b3:b7:70:70:9e:33:ef:34:bd: 52:c3:7e:46:09:db:96:a1:1e:a3:b1:de:34:91:63: d6:a2:7b:e7:50:4f:7c:b0:e6:12:2a:b9:d4:b8:b4: 10:81:e6:2a:58:54:97:72:34:a6:5a:9b:5f:6e:50: 1b:83:95:1f:3d:5a:0a:b9:98:be:16:c9:41:4d:09: 65:f0:35:da:61:89:12:2c:8e:60:b2:61:34:d3:1c: e6:89:3a:9a:8f:0a:64:75:42:d2:94:d9:b7:fb:f7: d1:bd:5e:91:10:12:af:fc:bf:fc:03:d4:c3:79:01: e5:d7:6c:42:ea:c8:78:f9:12:78:32:57:01:12:ab: e7:02:0a:9d:20:d7:c4:e1:76:01:62:68:1e:7b:79: fd:b1:0e:71:f8:cb:84:58:77:00:da:95:33:b5:6d: 1b:96:a6:6a:de:de:6e:92:50:c5:e8:04:91:ff:ec: a1:4a:36:89:83:2c:47:b7:2d:d4:28:18:72:16:26: e8:57:2c:e3:68:66:58:a6:0d:1c:10:c9:d5:e8:5f: 5c:59:43:34:d2:55:e6:19:4b:c7:96:04:e4:ba:20: 9c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F5:8B:0E:85:15:62:B1:F2:52:AD:11:D5:91:78:2E:02:67:B8:E5 X509v3 Authority Key Identifier: keyid:12:8A:76:57:95:FE:29:57:B2:68:81:E4:41:F8:24:0B:52:74:2B:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/34322e3135372e302e302f32312d3231203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.157.0.0/21 Signature Algorithm: sha256WithRSAEncryption 60:bb:1f:ed:51:11:e6:0b:e6:e6:42:35:e6:49:6e:49:59:98: 60:44:72:68:16:c6:fb:eb:ee:07:f8:52:33:e9:f5:35:35:2c: 1f:a9:1c:91:f8:52:e9:5d:06:57:a9:8c:88:f2:b1:50:5a:29: 2a:78:f8:2e:56:bc:5e:40:5b:76:49:c9:27:9d:f2:72:e1:d9: 4e:28:dd:f6:bc:af:3f:5c:b7:ae:b3:27:96:3d:32:03:4c:cd: f3:e1:19:d2:bf:3a:eb:0b:85:71:3d:f7:ab:ff:d4:dd:5c:45: b1:7c:49:c1:8a:8b:8a:f5:6a:22:58:10:3c:0e:98:24:7f:15: 86:60:f0:29:35:ab:ba:d8:e4:3b:ff:73:e1:72:00:e3:4f:0e: 78:31:b5:61:7d:63:7e:c5:91:5a:97:95:9d:88:1e:0e:07:71: 47:df:c6:6b:c2:ae:21:64:c9:cd:c1:d5:04:23:35:4e:93:7a: 5b:f3:71:11:7a:e6:e0:2f:91:f6:5f:dd:e0:47:6f:8d:21:5d: b4:f5:ba:81:cb:25:eb:27:89:c9:92:bd:18:5a:31:9d:99:d7: ae:60:8d:0f:49:73:a5:d1:2a:1a:e9:48:92:be:4e:01:9e:64: c1:5a:ad:61:1e:49:20:ab:45:7a:4c:8b:97:2c:3a:66:0f:bd: bf:46:0d:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgIUXKBu71TL9SXhLmLj1UwJDVp7GHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI4QTc2NTc5NUZFMjk1N0IyNjg4MUU0NDFGODI0MEI1 Mjc0MkJFRDAeFw0yNjA1MjgwMjA2MDBaFw0yNzA1MjcwMjExMDBaMDMxMTAvBgNV BAMTKEIzRjU4QjBFODUxNTYyQjFGMjUyQUQxMUQ1OTE3ODJFMDI2N0I4RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2mMkVzC54km8LO2jFSjFmauwZ 417EsxwQu4veF8e3HWlnOrO3cHCeM+80vVLDfkYJ25ahHqOx3jSRY9aie+dQT3yw 5hIqudS4tBCB5ipYVJdyNKZam19uUBuDlR89Wgq5mL4WyUFNCWXwNdphiRIsjmCy YTTTHOaJOpqPCmR1QtKU2bf799G9XpEQEq/8v/wD1MN5AeXXbELqyHj5EngyVwES q+cCCp0g18ThdgFiaB57ef2xDnH4y4RYdwDalTO1bRuWpmre3m6SUMXoBJH/7KFK NomDLEe3LdQoGHIWJuhXLONoZlimDRwQydXoX1xZQzTSVeYZS8eWBOS6IJwRAgMB AAGjggIHMIICAzAdBgNVHQ4EFgQUs/WLDoUVYrHyUq0R1ZF4LgJnuOUwHwYDVR0j BBgwFoAUEop2V5X+KVeyaIHkQfgkC1J0K+0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDk3NzI2NDA4NjQxNzQxNy8wLzEyOEE3NjU3OTVGRTI5NTdCMjY4ODFFNDQxRjgy NDBCNTI3NDJCRUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTI4QTc2NTc5NUZFMjk1N0IyNjg4MUU0NDFGODI0MEI1Mjc0MkJFRC5jZXIw gYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA0OTc3MjY0MDg2NDE3NDE3LzAvMzQzMjJlMzEzNTM3 MmUzMDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKp0AMA0G CSqGSIb3DQEBCwUAA4IBAQBgux/tURHmC+bmQjXmSW5JWZhgRHJoFsb76+4H+FIz 6fU1NSwfqRyR+FLpXQZXqYyI8rFQWikqePguVrxeQFt2ScknnfJy4dlOKN32vK8/ XLeusyeWPTIDTM3z4RnSvzrrC4VxPfer/9TdXEWxfEnBiouK9WoiWBA8DpgkfxWG YPApNau62OQ7/3PhcgDjTw54MbVhfWN+xZFal5WdiB4OB3FH38Zrwq4hZMnNwdUE IzVOk3pb83EReubgL5H2X93gR2+NIV209bqByyXrJ4nJkr0YWjGdmdeuYI0PSXOl 0Soa6UiSvk4BnmTBWq1hHkkgq0V6TIuXLDpmD72/Rg1e -----END CERTIFICATE-----Generated at Fri May 29 22:55:59 2026 by rpki-client