$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111857844975566867/0/34332e3232342e38302e302f32322d3232203d3e2034383337.roa File: 34332e3232342e38302e302f32322d3232203d3e2034383337.roa (raw, json) Hash identifier: bXqT1q3Xi8uEtR2DeZe8yD99M07BG3eez7vSwEaf0iI= Subject key identifier: B2:71:FB:18:FF:B8:75:C7:B2:DA:DB:4E:9A:60:CB:31:D7:77:46:E9 Certificate issuer: /CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C Certificate serial: 30DE87C6FA7A6DCB8DCC1BE97444E14ED07C5FAA Authority key identifier: 30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/34332e3232342e38302e302f32322d3232203d3e2034383337.roa Signing time: Thu 25 Jun 2026 05:57:29 +0000 ROA not before: Thu 25 Jun 2026 05:52:29 +0000 ROA not after: Thu 24 Jun 2027 05:57:29 +0000 asID: 4837 IP address blocks: 43.224.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 11:13:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:de:87:c6:fa:7a:6d:cb:8d:cc:1b:e9:74:44:e1:4e:d0:7c:5f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C Validity Not Before: Jun 25 05:52:29 2026 GMT Not After : Jun 24 05:57:29 2027 GMT Subject: CN=B271FB18FFB875C7B2DADB4E9A60CB31D77746E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f0:00:70:fd:ef:25:bd:54:7e:b6:f3:c0:1e: 1c:25:78:53:52:1c:99:5a:7b:1c:27:a7:78:e1:1a: 8e:03:71:d8:52:7d:c0:49:68:b3:14:06:ef:48:26: e8:5c:b3:52:f2:63:6e:e8:e8:b4:5d:cb:62:ee:eb: 6d:54:c4:31:5a:f3:80:15:39:eb:a2:e0:ee:3e:e5: 45:c3:66:64:f1:87:c5:a3:96:3c:5e:58:bf:26:44: 12:df:4a:d5:01:f2:b5:58:5a:21:99:b6:b9:fa:2e: 4a:43:3b:e2:5d:10:0d:52:ab:49:5e:58:fa:e5:4a: a4:76:7c:a7:63:fd:03:b8:8a:ed:4b:71:a3:30:f7: 88:4f:40:c8:bb:d3:f3:a1:73:b9:2e:4a:e7:63:a2: 0b:b3:18:53:34:db:1f:db:eb:60:43:db:7f:cc:0e: 03:b5:de:ff:1f:c3:a7:9a:9c:61:bd:32:af:36:53: 32:d5:2e:ff:81:73:5b:2d:44:6a:7b:80:44:fc:2a: 9d:c8:e7:c3:7f:4d:35:99:7a:5d:9b:da:b4:71:d7: dd:bc:31:50:15:6f:ae:52:09:9d:f0:56:69:e2:cf: 80:86:43:6d:2c:3a:3a:b9:06:97:fa:8c:e0:4a:ab: d0:27:6b:82:7d:27:5d:96:f7:e9:42:0d:79:a4:95: 12:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:71:FB:18:FF:B8:75:C7:B2:DA:DB:4E:9A:60:CB:31:D7:77:46:E9 X509v3 Authority Key Identifier: keyid:30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/34332e3232342e38302e302f32322d3232203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.224.80.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:be:06:47:d7:72:ee:d1:33:38:a4:fa:82:df:54:e3:12:e5: c2:82:5f:b5:8a:94:58:dd:58:07:b0:0b:f3:86:a9:88:e9:13: 86:a9:3d:25:5e:f0:74:00:9d:26:86:5f:de:9a:6d:43:96:a6: c6:8f:88:46:5c:0f:43:92:db:ec:7c:77:2a:b1:f2:e8:d7:bc: 92:ce:69:98:0d:a4:eb:7e:7b:13:f3:51:4c:1b:30:8a:f8:99: f6:29:e7:82:fa:6e:9d:ff:c5:1b:dc:cd:5b:d0:ef:ae:1e:6a: 14:d7:46:fc:e8:b0:5b:a0:d3:c0:8b:82:32:26:62:7b:c5:b5: cb:fd:f9:e1:fa:c6:16:dd:bf:6c:f9:fd:1f:3e:a5:fd:97:65: 81:73:4f:79:08:83:66:c3:11:3e:2b:6a:ee:02:48:f9:b6:e5: b1:86:94:7e:12:90:fb:d8:a1:73:ed:33:2d:97:5a:92:0a:4d: f9:ad:c9:17:46:24:97:fc:f2:73:3d:29:c3:3d:0a:a7:fd:63: fe:57:0d:70:0c:5b:e4:2e:5f:fe:22:1e:ae:01:80:c6:1b:7f: 2c:87:12:64:1d:59:2c:a5:ea:0d:fd:9c:fc:fe:06:e3:dc:e6: 45:3e:4e:db:a1:33:5a:51:af:1f:de:6c:25:b8:9d:91:b1:bf: 30:53:7d:8c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUMN6Hxvp6bcuNzBvpdEThTtB8X6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA1Q0Y5QTQxRENDNkUwNkNFOUNBNzMzNTIzMjVFRkM0 RDM0MzMxQzAeFw0yNjA2MjUwNTUyMjlaFw0yNzA2MjQwNTU3MjlaMDMxMTAvBgNV BAMTKEIyNzFGQjE4RkZCODc1QzdCMkRBREI0RTlBNjBDQjMxRDc3NzQ2RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy8ABw/e8lvVR+tvPAHhwleFNS HJlaexwnp3jhGo4DcdhSfcBJaLMUBu9IJuhcs1LyY27o6LRdy2Lu621UxDFa84AV Oeui4O4+5UXDZmTxh8WjljxeWL8mRBLfStUB8rVYWiGZtrn6LkpDO+JdEA1Sq0le WPrlSqR2fKdj/QO4iu1LcaMw94hPQMi70/Ohc7kuSudjoguzGFM02x/b62BD23/M DgO13v8fw6eanGG9Mq82UzLVLv+Bc1stRGp7gET8Kp3I58N/TTWZel2b2rRx1928 MVAVb65SCZ3wVmniz4CGQ20sOjq5Bpf6jOBKq9Ana4J9J12W9+lCDXmklRIXAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUsnH7GP+4dcey2ttOmmDLMdd3RukwHwYDVR0j BBgwFoAUMFz5pB3MbgbOnKczUjJe/E00MxwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTg1Nzg0NDk3NTU2Njg2Ny8wLzMwNUNGOUE0MURDQzZFMDZDRTlDQTczMzUyMzI1 RUZDNEQzNDMzMUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA1Q0Y5QTQxRENDNkUwNkNFOUNBNzMzNTIzMjVFRkM0RDM0MzMxQy5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTExODU3ODQ0OTc1NTY2ODY3LzAvMzQzMzJlMzIzMjM0 MmUzODMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIr4FAwDQYJKoZIhvcNAQELBQADggEBAFy+BkfXcu7RMzik+oLfVOMS5cKCX7WK lFjdWAewC/OGqYjpE4apPSVe8HQAnSaGX96abUOWpsaPiEZcD0OS2+x8dyqx8ujX vJLOaZgNpOt+exPzUUwbMIr4mfYp54L6bp3/xRvczVvQ764eahTXRvzosFug08CL gjImYnvFtcv9+eH6xhbdv2z5/R8+pf2XZYFzT3kIg2bDET4rau4CSPm25bGGlH4S kPvYoXPtMy2XWpIKTfmtyRdGJJf88nM9KcM9Cqf9Y/5XDXAMW+QuX/4iHq4BgMYb fyyHEmQdWSyl6g39nPz+BuPc5kU+TtuhM1pRrx/ebCW4nZGxvzBTfYw= -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:05 2026 by rpki-client