$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111857844975566867/0/34332e3232342e38322e302f32342d3234203d3e2030.roa File: 34332e3232342e38322e302f32342d3234203d3e2030.roa (raw, json) Hash identifier: D39m87ASX2kc9MpoFjHVU2AueuSbGqJTzgTzZ/kReSU= Subject key identifier: F4:71:D6:28:C8:70:98:AC:6F:4A:AD:B8:1D:3B:F5:FD:41:96:81:87 Certificate issuer: /CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C Certificate serial: 45CFA8D44D1862CBE97960660CD94F4CC9190FEC Authority key identifier: 30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/34332e3232342e38322e302f32342d3234203d3e2030.roa Signing time: Wed 27 May 2026 03:29:46 +0000 ROA not before: Wed 27 May 2026 03:24:46 +0000 ROA not after: Wed 26 May 2027 03:29:46 +0000 asID: 0 IP address blocks: 43.224.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 09:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:cf:a8:d4:4d:18:62:cb:e9:79:60:66:0c:d9:4f:4c:c9:19:0f:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C Validity Not Before: May 27 03:24:46 2026 GMT Not After : May 26 03:29:46 2027 GMT Subject: CN=F471D628C87098AC6F4AADB81D3BF5FD41968187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1e:67:2e:84:10:7c:08:0b:25:96:33:13:26: 19:cf:d0:cf:04:e6:97:0f:2e:d7:5b:8f:2e:f6:cf: 4b:eb:de:42:5b:62:21:7a:a4:ac:6c:11:ca:c2:bb: d4:c2:52:db:f3:27:83:81:1c:21:87:2d:cc:96:db: 80:db:49:4e:f5:3a:dc:3e:ac:ab:25:81:33:fc:b8: 11:28:ec:c2:b2:a9:d0:b3:fd:32:3b:e7:ae:c8:1e: 46:b8:82:06:e1:e6:f6:a9:32:d0:f1:7d:46:9b:1e: 7b:b2:71:40:14:ff:81:5a:a5:ec:ef:c8:4a:c4:d8: f8:ed:33:06:3b:da:21:0a:bd:0d:32:70:62:cf:2c: c7:9e:37:7a:fa:da:eb:6e:29:c0:77:4e:b5:99:76: ba:1c:c0:47:4c:34:92:ee:95:42:d3:d9:09:6b:ed: 7d:e0:4b:2d:22:ca:a7:0f:88:8a:5f:ea:54:19:e0: 27:24:ea:a9:35:27:93:d5:ea:bf:65:32:d6:23:2a: a8:ee:b0:fa:97:69:ec:74:52:7f:f7:b1:db:09:45: e3:ac:44:d7:4e:82:e9:64:47:08:33:ea:00:f7:15: bc:61:70:ce:14:f2:15:a8:cc:8e:01:09:41:c4:c6: 8b:3d:ed:df:1d:b9:b6:04:bb:eb:7c:47:df:25:96: 89:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:71:D6:28:C8:70:98:AC:6F:4A:AD:B8:1D:3B:F5:FD:41:96:81:87 X509v3 Authority Key Identifier: keyid:30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/34332e3232342e38322e302f32342d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.224.82.0/24 Signature Algorithm: sha256WithRSAEncryption 21:65:d1:ff:51:0a:f5:3b:eb:ec:38:69:69:49:57:19:b1:93: 15:e4:6d:54:0e:c7:85:08:32:c8:5b:51:93:24:d3:18:72:b8: 84:c4:79:2f:4a:cd:24:c3:e9:48:22:db:79:39:de:db:62:ae: 3e:65:c3:54:7b:39:cc:33:79:7b:19:07:2f:44:72:d0:4b:ac: 2c:44:0c:01:13:94:ac:4b:0f:00:7b:3d:1d:96:c7:02:39:d3: 61:ac:de:e3:f5:48:48:f5:07:21:41:97:f9:6b:fb:31:f4:d2: cb:76:d9:be:87:0a:34:f8:6a:fa:3d:6c:a2:0d:03:8b:ab:f0: e8:b7:60:28:ed:e5:55:cf:35:44:f2:1d:17:b6:7c:be:c8:00: 65:a3:48:01:78:92:87:1b:2c:4d:a1:3c:0b:c8:5c:10:1e:c2: c1:54:a1:59:d7:01:55:ba:ee:c3:bb:d8:9c:2e:31:aa:3f:41: 4e:f2:74:9b:8a:5b:61:c5:ab:e5:6e:4f:d8:3e:6d:b4:dd:c8: 26:fb:05:47:5a:74:56:08:1c:39:02:c5:4e:7d:8a:75:35:69: ee:00:8a:41:c6:db:d5:03:27:12:4f:bf:82:9b:22:ff:8a:56: c2:76:bb:ef:35:3d:d3:d7:2e:f6:8d:dd:f6:65:b5:42:31:ab: cb:bf:be:a3 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIURc+o1E0YYsvpeWBmDNlPTMkZD+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA1Q0Y5QTQxRENDNkUwNkNFOUNBNzMzNTIzMjVFRkM0 RDM0MzMxQzAeFw0yNjA1MjcwMzI0NDZaFw0yNzA1MjYwMzI5NDZaMDMxMTAvBgNV BAMTKEY0NzFENjI4Qzg3MDk4QUM2RjRBQURCODFEM0JGNUZENDE5NjgxODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChHmcuhBB8CAslljMTJhnP0M8E 5pcPLtdbjy72z0vr3kJbYiF6pKxsEcrCu9TCUtvzJ4OBHCGHLcyW24DbSU71Otw+ rKslgTP8uBEo7MKyqdCz/TI7567IHka4ggbh5vapMtDxfUabHnuycUAU/4Fapezv yErE2PjtMwY72iEKvQ0ycGLPLMeeN3r62utuKcB3TrWZdrocwEdMNJLulULT2Qlr 7X3gSy0iyqcPiIpf6lQZ4Cck6qk1J5PV6r9lMtYjKqjusPqXaex0Un/3sdsJReOs RNdOgulkRwgz6gD3FbxhcM4U8hWozI4BCUHExos97d8dubYEu+t8R98llokfAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQU9HHWKMhwmKxvSq24HTv1/UGWgYcwHwYDVR0j BBgwFoAUMFz5pB3MbgbOnKczUjJe/E00MxwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTg1Nzg0NDk3NTU2Njg2Ny8wLzMwNUNGOUE0MURDQzZFMDZDRTlDQTczMzUyMzI1 RUZDNEQzNDMzMUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA1Q0Y5QTQxRENDNkUwNkNFOUNBNzMzNTIzMjVFRkM0RDM0MzMxQy5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTExODU3ODQ0OTc1NTY2ODY3LzAvMzQzMzJlMzIzMjM0 MmUzODMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAr4FIw DQYJKoZIhvcNAQELBQADggEBACFl0f9RCvU76+w4aWlJVxmxkxXkbVQOx4UIMshb UZMk0xhyuITEeS9KzSTD6Ugi23k53ttirj5lw1R7OcwzeXsZBy9EctBLrCxEDAET lKxLDwB7PR2WxwI502Gs3uP1SEj1ByFBl/lr+zH00st22b6HCjT4avo9bKINA4ur 8Oi3YCjt5VXPNUTyHRe2fL7IAGWjSAF4kocbLE2hPAvIXBAewsFUoVnXAVW67sO7 2JwuMao/QU7ydJuKW2HFq+VuT9g+bbTdyCb7BUdadFYIHDkCxU59inU1ae4AikHG 29UDJxJPv4KbIv+KVsJ2u+81PdPXLvaN3fZltUIxq8u/vqM= -----END CERTIFICATE-----Generated at Fri May 29 22:55:53 2026 by rpki-client