$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34332e3235342e32342e302f32342d3234203d3e2034383038.roa File: 34332e3235342e32342e302f32342d3234203d3e2034383038.roa (raw, json) Hash identifier: ZAMX0/tAb+nwZhAw4xAuQz3sFyhvrglPoAtPXFxaiOA= Subject key identifier: 31:DD:D4:10:DF:57:F6:4A:EA:05:3F:71:3D:51:FE:DF:4E:9D:FC:3F Certificate issuer: /CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E Certificate serial: 787A718D8CEE74D680356E2341FB54BB1E2E3FDF Authority key identifier: EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34332e3235342e32342e302f32342d3234203d3e2034383038.roa Signing time: Sat 20 Jun 2026 17:09:48 +0000 ROA not before: Sat 20 Jun 2026 17:04:48 +0000 ROA not after: Sat 19 Jun 2027 17:09:48 +0000 asID: 4808 IP address blocks: 43.254.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 13:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:7a:71:8d:8c:ee:74:d6:80:35:6e:23:41:fb:54:bb:1e:2e:3f:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E Validity Not Before: Jun 20 17:04:48 2026 GMT Not After : Jun 19 17:09:48 2027 GMT Subject: CN=31DDD410DF57F64AEA053F713D51FEDF4E9DFC3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:10:4f:b7:8a:a0:9d:5f:6a:39:40:8b:f9:78: 20:fa:d3:f6:f1:27:aa:43:bc:a0:0c:2e:51:0b:c7: e0:06:de:33:d3:7e:a2:cf:05:35:e8:17:34:a0:3a: 6c:8e:38:3e:85:75:48:9b:33:7e:05:76:77:ea:5e: b3:2b:11:f9:d9:dd:24:d3:85:a8:21:51:a5:56:44: 9f:8d:38:ff:98:5a:9f:13:80:72:36:b7:c9:83:d2: 36:92:da:5e:51:a8:43:3a:82:22:b5:30:83:10:31: 88:64:f1:bd:1d:7e:45:e5:a2:62:8f:3c:86:93:c1: 8e:02:2e:27:58:98:b8:3c:0c:02:e7:38:de:5d:ec: 54:f4:a3:51:9b:91:41:d2:ee:71:90:e4:74:df:f4: d9:8a:e0:d6:89:8b:c0:a1:0c:9a:e0:21:1f:ea:db: 5d:26:c2:ef:99:71:88:9e:f5:f5:bc:e0:f5:c1:5a: be:d0:e4:e9:10:c7:94:20:1e:9d:98:ba:16:85:78: 95:ad:c7:93:c9:55:22:fe:63:18:5c:6d:6a:87:3b: d7:36:9a:fa:54:86:1a:5e:36:46:ec:a6:e3:1f:32: a6:4c:02:9a:0b:f9:d9:49:d7:3b:55:5f:44:3f:82: e0:92:1f:9b:13:bc:02:b5:a2:cc:5a:f7:b8:e0:c3: 23:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DD:D4:10:DF:57:F6:4A:EA:05:3F:71:3D:51:FE:DF:4E:9D:FC:3F X509v3 Authority Key Identifier: keyid:EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34332e3235342e32342e302f32342d3234203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.254.24.0/24 Signature Algorithm: sha256WithRSAEncryption 17:88:06:af:3c:be:6b:87:a7:6f:49:d2:89:44:56:08:da:9a: 76:bd:70:9d:6c:71:80:d8:05:80:af:8d:8c:0d:2d:48:10:c6: cb:86:f6:38:83:65:8d:6e:54:c9:ba:9e:a4:83:19:ca:fc:c5: db:a7:3c:fd:9b:f6:1d:fb:09:d0:1d:9e:bf:27:d5:37:42:8c: 32:6e:14:56:b2:cf:bf:f9:8e:53:8b:2c:51:91:06:d0:ed:7d: e4:c2:92:c4:22:c6:81:93:fa:2d:3b:d6:0a:fc:24:8b:b8:0f: 1d:1b:8e:df:95:64:36:aa:b7:61:e6:9c:e7:5f:c5:dc:a4:3f: bb:71:d1:d8:1a:07:8b:24:15:77:c7:d9:75:a8:da:3a:fe:7a: e3:db:a6:1b:35:2b:bd:fd:44:ba:58:de:05:45:71:b1:ed:68: f6:52:cf:77:49:97:3b:f5:35:7c:2a:d2:d2:db:69:23:0d:98: e2:14:74:b2:b3:d6:60:7d:3b:70:1d:dc:bd:14:30:0f:fa:56: 2e:d3:0b:f1:dc:e0:40:53:77:77:89:10:d0:a3:4c:d5:ac:97: 6f:67:2b:40:9d:7f:18:f2:c4:d3:a9:c4:73:14:95:3b:42:61: af:18:51:15:81:b7:ac:83:9c:ad:6b:4c:7c:f4:55:4f:db:a4: e7:1c:d5:c6 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUeHpxjYzudNaANW4jQftUux4uP98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJFOEI0RTZFQTdDNThCMkU1NkUzQzU5OUY4NkExMzI2 MjlEMEYzRTAeFw0yNjA2MjAxNzA0NDhaFw0yNzA2MTkxNzA5NDhaMDMxMTAvBgNV BAMTKDMxRERENDEwREY1N0Y2NEFFQTA1M0Y3MTNENTFGRURGNEU5REZDM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8EE+3iqCdX2o5QIv5eCD60/bx J6pDvKAMLlELx+AG3jPTfqLPBTXoFzSgOmyOOD6FdUibM34FdnfqXrMrEfnZ3STT haghUaVWRJ+NOP+YWp8TgHI2t8mD0jaS2l5RqEM6giK1MIMQMYhk8b0dfkXlomKP PIaTwY4CLidYmLg8DALnON5d7FT0o1GbkUHS7nGQ5HTf9NmK4NaJi8ChDJrgIR/q 210mwu+ZcYie9fW84PXBWr7Q5OkQx5QgHp2YuhaFeJWtx5PJVSL+YxhcbWqHO9c2 mvpUhhpeNkbspuMfMqZMApoL+dlJ1ztVX0Q/guCSH5sTvAK1osxa97jgwyMRAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUMd3UEN9X9krqBT9xPVH+306d/D8wHwYDVR0j BBgwFoAU6+i05up8WLLlbjxZn4ahMmKdDz4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY1NjI3MTU1ODQ0MzAyNy8wL0VCRThCNEU2RUE3QzU4QjJFNTZFM0M1OTlGODZB MTMyNjI5RDBGM0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUJFOEI0RTZFQTdDNThCMkU1NkUzQzU5OUY4NkExMzI2MjlEMEYzRS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA4NjU2MjcxNTU4NDQzMDI3LzAvMzQzMzJlMzIzNTM0 MmUzMjM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAr/hgwDQYJKoZIhvcNAQELBQADggEBABeIBq88vmuHp29J0olEVgjamna9cJ1s cYDYBYCvjYwNLUgQxsuG9jiDZY1uVMm6nqSDGcr8xdunPP2b9h37CdAdnr8n1TdC jDJuFFayz7/5jlOLLFGRBtDtfeTCksQixoGT+i071gr8JIu4Dx0bjt+VZDaqt2Hm nOdfxdykP7tx0dgaB4skFXfH2XWo2jr+euPbphs1K739RLpY3gVFcbHtaPZSz3dJ lzv1NXwq0tLbaSMNmOIUdLKz1mB9O3Ad3L0UMA/6Vi7TC/Hc4EBTd3eJENCjTNWs l29nK0CdfxjyxNOpxHMUlTtCYa8YURWBt6yDnK1rTHz0VU/bpOcc1cY= -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:04 2026 by rpki-client