$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105017083869003783/0/34332e3234322e3135362e302f32322d3232203d3e2034383337.roa File: 34332e3234322e3135362e302f32322d3232203d3e2034383337.roa (raw, json) Hash identifier: DXIJ4z4EqslXGtRbFgprkrYQTOPQJTbi60YLp+rEd2s= Subject key identifier: 32:D2:C7:60:F9:5A:41:97:3D:15:13:85:4F:ED:A4:27:33:75:F4:63 Certificate issuer: /CN=CF709CC85A3788918F778EC5F4257016F4294457 Certificate serial: 78613A391D68162CBE5FBFD8135311696BC1912E Authority key identifier: CF:70:9C:C8:5A:37:88:91:8F:77:8E:C5:F4:25:70:16:F4:29:44:57 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/34332e3234322e3135362e302f32322d3232203d3e2034383337.roa Signing time: Wed 27 May 2026 02:03:49 +0000 ROA not before: Wed 27 May 2026 01:58:49 +0000 ROA not after: Wed 26 May 2027 02:03:49 +0000 asID: 4837 IP address blocks: 43.242.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.crl rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 07:31:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:61:3a:39:1d:68:16:2c:be:5f:bf:d8:13:53:11:69:6b:c1:91:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF709CC85A3788918F778EC5F4257016F4294457 Validity Not Before: May 27 01:58:49 2026 GMT Not After : May 26 02:03:49 2027 GMT Subject: CN=32D2C760F95A41973D1513854FEDA4273375F463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6b:de:79:ea:8a:5e:78:5e:2e:df:ac:e8:a2: 9d:0d:da:05:d5:62:83:7e:dc:5d:0b:8b:98:b7:e9: 6e:f2:9e:71:2f:a1:33:e4:68:de:05:a1:5e:ce:a1: 7a:5c:46:43:33:f7:fb:18:3a:7f:08:db:9e:1a:42: 2a:90:ed:31:c7:1a:2a:8a:0e:15:f9:e8:43:f2:f5: 38:33:b3:bb:a3:05:a3:99:17:0d:e0:e0:6c:10:3d: f5:28:38:c8:b3:13:83:cc:b9:8b:5e:44:11:77:e1: 18:6c:b1:11:4a:d5:04:c6:3e:f5:09:1e:36:a2:f7: 27:6c:93:ba:15:0b:0b:11:16:a6:a7:b4:97:64:f5: b0:90:13:0d:2d:6c:98:f2:f1:81:de:6f:7f:84:32: c8:5a:54:db:15:1a:d1:a4:4d:41:0d:1e:71:da:b7: 23:90:ce:ef:c0:fd:13:b8:35:46:4b:b5:78:e4:8a: a9:e0:32:d1:53:7e:0c:e2:d7:e4:19:8d:41:20:f7: 32:48:3d:ce:b6:8f:c5:cb:78:91:24:61:bc:11:6b: 79:1d:45:bc:a5:d8:a6:8a:83:c9:1e:a8:76:78:68: a1:47:ad:95:ea:ea:b5:07:f1:46:5b:cb:a3:5b:47: 48:fc:7f:cb:82:da:14:67:0f:c7:94:5a:6a:b1:f6: fc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D2:C7:60:F9:5A:41:97:3D:15:13:85:4F:ED:A4:27:33:75:F4:63 X509v3 Authority Key Identifier: keyid:CF:70:9C:C8:5A:37:88:91:8F:77:8E:C5:F4:25:70:16:F4:29:44:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/34332e3234322e3135362e302f32322d3232203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.242.156.0/22 Signature Algorithm: sha256WithRSAEncryption 23:34:9e:24:8c:c2:4b:01:0a:ed:5c:67:d5:ac:db:b8:03:cf: 58:1c:66:a2:1a:8b:6c:d0:60:f3:aa:2e:24:ea:d8:9d:97:ea: 39:50:37:56:9d:86:41:a9:49:4f:4e:42:90:52:aa:aa:71:44: ec:d4:7b:27:ee:27:ac:85:1f:7f:a5:93:8f:b2:5c:a8:7a:08: 58:51:07:df:5f:b4:8f:8c:ff:10:1b:22:f8:7e:7f:2f:98:34: 42:ba:f5:92:ff:37:7e:78:f1:9e:b7:94:cd:cd:48:d9:f9:0e: a4:90:7f:11:c4:2b:ce:52:ef:2f:40:b1:c4:7e:89:67:3f:9b: d2:9a:e0:fb:9e:91:f2:20:a5:c7:cb:65:46:15:c1:2c:87:0c: 3c:5a:bb:b9:0a:58:d0:b6:71:7e:11:0b:64:38:ff:c7:8e:2e: 55:4b:72:4a:15:e0:f7:c1:4e:ef:37:ab:f4:0a:de:ec:7c:1f: b3:4d:cb:e2:f4:b9:2d:3d:a2:80:0e:49:f0:9b:db:71:79:ba: 27:f6:d9:45:b4:b0:70:15:a4:78:b3:8c:0b:6d:1d:a4:30:2d: fa:0f:ee:d0:bf:59:e2:f1:b8:47:40:65:76:89:6e:78:32:2d: 2c:d6:ca:20:3c:1d:ed:95:b0:25:0d:c5:3e:96:16:23:6e:5e: 43:b4:1b:a6 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUeGE6OR1oFiy+X7/YE1MRaWvBkS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y3MDlDQzg1QTM3ODg5MThGNzc4RUM1RjQyNTcwMTZG NDI5NDQ1NzAeFw0yNjA1MjcwMTU4NDlaFw0yNzA1MjYwMjAzNDlaMDMxMTAvBgNV BAMTKDMyRDJDNzYwRjk1QTQxOTczRDE1MTM4NTRGRURBNDI3MzM3NUY0NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCya9556opeeF4u36zoop0N2gXV YoN+3F0Li5i36W7ynnEvoTPkaN4FoV7OoXpcRkMz9/sYOn8I254aQiqQ7THHGiqK DhX56EPy9Tgzs7ujBaOZFw3g4GwQPfUoOMizE4PMuYteRBF34RhssRFK1QTGPvUJ Hjai9ydsk7oVCwsRFqantJdk9bCQEw0tbJjy8YHeb3+EMshaVNsVGtGkTUENHnHa tyOQzu/A/RO4NUZLtXjkiqngMtFTfgzi1+QZjUEg9zJIPc62j8XLeJEkYbwRa3kd Rbyl2KaKg8keqHZ4aKFHrZXq6rUH8UZby6NbR0j8f8uC2hRnD8eUWmqx9vzLAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUMtLHYPlaQZc9FROFT+2kJzN19GMwHwYDVR0j BBgwFoAUz3CcyFo3iJGPd47F9CVwFvQpRFcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTAxNzA4Mzg2OTAwMzc4My8wL0NGNzA5Q0M4NUEzNzg4OTE4Rjc3OEVDNUY0MjU3 MDE2RjQyOTQ0NTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0Y3MDlDQzg1QTM3ODg5MThGNzc4RUM1RjQyNTcwMTZGNDI5NDQ1Ny5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA1MDE3MDgzODY5MDAzNzgzLzAvMzQzMzJlMzIzNDMy MmUzMTM1MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAivynDANBgkqhkiG9w0BAQsFAAOCAQEAIzSeJIzCSwEK7Vxn1azbuAPPWBxm ohqLbNBg86ouJOrYnZfqOVA3Vp2GQalJT05CkFKqqnFE7NR7J+4nrIUff6WTj7Jc qHoIWFEH31+0j4z/EBsi+H5/L5g0Qrr1kv83fnjxnreUzc1I2fkOpJB/EcQrzlLv L0CxxH6JZz+b0prg+56R8iClx8tlRhXBLIcMPFq7uQpY0LZxfhELZDj/x44uVUty ShXg98FO7zer9Are7Hwfs03L4vS5LT2igA5J8JvbcXm6J/bZRbSwcBWkeLOMC20d pDAt+g/u0L9Z4vG4R0BldolueDItLNbKIDwd7ZWwJQ3FPpYWI25eQ7Qbpg== -----END CERTIFICATE-----Generated at Fri May 29 22:56:19 2026 by rpki-client