$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111857844975566867/0/34332e3232342e38302e302f32342d3234203d3e2030.roa File: 34332e3232342e38302e302f32342d3234203d3e2030.roa (raw, json) Hash identifier: DydeEBLvTFBni6sap3dOQebSJ8YoD801483ECqfgdmE= Subject key identifier: A4:86:65:BA:6F:06:66:E0:79:6F:32:D7:58:12:A5:A2:D3:43:C5:B6 Certificate issuer: /CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C Certificate serial: 413316809804BD5B81BBB5E3A93A56415421D926 Authority key identifier: 30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/34332e3232342e38302e302f32342d3234203d3e2030.roa Signing time: Wed 27 May 2026 03:29:46 +0000 ROA not before: Wed 27 May 2026 03:24:46 +0000 ROA not after: Wed 26 May 2027 03:29:46 +0000 asID: 0 IP address blocks: 43.224.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 09:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:33:16:80:98:04:bd:5b:81:bb:b5:e3:a9:3a:56:41:54:21:d9:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C Validity Not Before: May 27 03:24:46 2026 GMT Not After : May 26 03:29:46 2027 GMT Subject: CN=A48665BA6F0666E0796F32D75812A5A2D343C5B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1f:4d:a0:83:db:b4:10:e5:23:9c:db:32:c0: f3:c1:c9:40:aa:13:16:77:ea:34:cf:b9:6a:98:4e: 3c:6a:f6:a7:3c:5e:39:26:2e:74:04:12:20:88:e9: 39:dc:d0:9f:59:a3:06:a5:94:a7:60:69:ce:53:ba: eb:b0:1f:c8:4d:76:8c:d8:92:85:7e:5c:7b:c0:63: b6:be:ec:2d:d9:eb:0a:4a:6f:18:96:a6:dd:9a:84: ea:fc:04:87:69:9a:23:6b:e6:af:ca:53:6e:7c:a6: 7e:76:d8:71:e4:a9:b7:48:a9:73:6e:b3:70:13:c1: 08:f3:33:75:e2:28:23:0a:c5:aa:f5:6a:d5:6b:65: 28:92:41:94:47:63:94:0e:18:d0:28:c7:6b:16:cb: 27:cd:2b:d4:25:84:87:b5:17:6b:89:01:79:e7:ae: 82:9c:6e:3f:c4:db:f4:54:81:ff:f8:0e:d2:ef:f5: e4:5c:74:0b:84:27:9c:3a:f2:68:e9:55:f3:2e:5b: 07:dc:45:d9:f9:aa:05:3e:98:43:af:81:2d:b8:8a: 69:ef:7c:01:a7:ed:c9:e0:2f:7a:a3:d6:0d:b9:6e: 61:2b:6b:f8:98:7d:62:36:b0:8d:23:ed:03:40:30: d6:22:9b:ca:18:22:ba:f4:e7:0c:a0:18:d9:d7:6f: 2f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:86:65:BA:6F:06:66:E0:79:6F:32:D7:58:12:A5:A2:D3:43:C5:B6 X509v3 Authority Key Identifier: keyid:30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/34332e3232342e38302e302f32342d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.224.80.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:84:82:f2:70:cb:dd:fc:a3:7e:18:04:e2:af:4d:3a:e8:74: bd:07:d7:89:5e:93:9b:de:d2:df:4f:0b:d2:07:cc:2f:11:d1: ea:4b:e8:2d:a8:37:f9:96:cd:cd:d6:d9:d8:ba:90:27:9a:92: 83:cd:86:cb:15:f8:ab:a9:5f:01:08:5e:12:53:19:56:07:50: 03:99:b5:29:d8:d7:fd:ef:85:ab:c3:18:1b:51:dd:85:de:26: c4:60:9c:8e:25:7c:71:22:30:ee:8e:5a:75:33:f3:59:80:60: 9e:c6:ed:3d:6d:34:99:0c:f5:52:ce:ea:7c:d9:f8:12:8f:09: 3c:93:43:54:c5:06:5a:a7:12:ac:be:3f:31:37:e2:f1:4a:69: da:6c:85:a8:d9:52:9f:99:f0:bf:a4:3e:38:eb:e9:47:29:ed: e8:6b:72:19:1e:45:37:d2:f9:a1:f1:33:b0:fe:2f:da:5f:bb: 06:bb:40:3d:5c:a6:5b:b6:0f:f5:20:89:fc:f6:9e:9d:d0:4c: b9:23:01:c8:af:1d:1d:0a:8a:5a:ec:4b:3a:3f:49:6b:d0:10: 9a:07:32:96:94:27:2c:0b:83:30:bd:57:f6:26:78:d8:7b:f9: ee:d1:75:a0:74:8b:d1:9d:be:79:ab:a9:92:46:85:d4:a7:ba: 64:78:e3:a7 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUQTMWgJgEvVuBu7XjqTpWQVQh2SYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA1Q0Y5QTQxRENDNkUwNkNFOUNBNzMzNTIzMjVFRkM0 RDM0MzMxQzAeFw0yNjA1MjcwMzI0NDZaFw0yNzA1MjYwMzI5NDZaMDMxMTAvBgNV BAMTKEE0ODY2NUJBNkYwNjY2RTA3OTZGMzJENzU4MTJBNUEyRDM0M0M1QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCH02gg9u0EOUjnNsywPPByUCq ExZ36jTPuWqYTjxq9qc8XjkmLnQEEiCI6Tnc0J9ZowallKdgac5TuuuwH8hNdozY koV+XHvAY7a+7C3Z6wpKbxiWpt2ahOr8BIdpmiNr5q/KU258pn522HHkqbdIqXNu s3ATwQjzM3XiKCMKxar1atVrZSiSQZRHY5QOGNAox2sWyyfNK9QlhIe1F2uJAXnn roKcbj/E2/RUgf/4DtLv9eRcdAuEJ5w68mjpVfMuWwfcRdn5qgU+mEOvgS24imnv fAGn7cngL3qj1g25bmEra/iYfWI2sI0j7QNAMNYim8oYIrr05wygGNnXby9lAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUpIZlum8GZuB5bzLXWBKlotNDxbYwHwYDVR0j BBgwFoAUMFz5pB3MbgbOnKczUjJe/E00MxwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTg1Nzg0NDk3NTU2Njg2Ny8wLzMwNUNGOUE0MURDQzZFMDZDRTlDQTczMzUyMzI1 RUZDNEQzNDMzMUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA1Q0Y5QTQxRENDNkUwNkNFOUNBNzMzNTIzMjVFRkM0RDM0MzMxQy5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTExODU3ODQ0OTc1NTY2ODY3LzAvMzQzMzJlMzIzMjM0 MmUzODMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAr4FAw DQYJKoZIhvcNAQELBQADggEBAHyEgvJwy938o34YBOKvTTrodL0H14lek5ve0t9P C9IHzC8R0epL6C2oN/mWzc3W2di6kCeakoPNhssV+KupXwEIXhJTGVYHUAOZtSnY 1/3vhavDGBtR3YXeJsRgnI4lfHEiMO6OWnUz81mAYJ7G7T1tNJkM9VLO6nzZ+BKP CTyTQ1TFBlqnEqy+PzE34vFKadpshajZUp+Z8L+kPjjr6Ucp7ehrchkeRTfS+aHx M7D+L9pfuwa7QD1cplu2D/Ugifz2np3QTLkjAcivHR0KilrsSzo/SWvQEJoHMpaU JywLgzC9V/YmeNh7+e7RdaB0i9GdvnmrqZJGhdSnumR446c= -----END CERTIFICATE-----Generated at Fri May 29 22:55:58 2026 by rpki-client