$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111857844975566867/0/34332e3232342e38332e302f32342d3234203d3e2034383337.roa File: 34332e3232342e38332e302f32342d3234203d3e2034383337.roa (raw, json) Hash identifier: s9n48nIoaQYE7kYFEdZycok3rB7tsRN2hC/vaOMUzNE= Subject key identifier: 0B:98:CB:B2:6A:FF:D0:90:03:52:BA:24:A6:0C:C6:C4:9C:EA:63:BD Certificate issuer: /CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C Certificate serial: 377E1CC11A9CE56FB607717F5BCFCF570F72FB95 Authority key identifier: 30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/34332e3232342e38332e302f32342d3234203d3e2034383337.roa Signing time: Wed 27 May 2026 03:29:46 +0000 ROA not before: Wed 27 May 2026 03:24:46 +0000 ROA not after: Wed 26 May 2027 03:29:46 +0000 asID: 4837 IP address blocks: 43.224.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 09:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:7e:1c:c1:1a:9c:e5:6f:b6:07:71:7f:5b:cf:cf:57:0f:72:fb:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C Validity Not Before: May 27 03:24:46 2026 GMT Not After : May 26 03:29:46 2027 GMT Subject: CN=0B98CBB26AFFD0900352BA24A60CC6C49CEA63BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:49:06:0f:56:ac:ce:1e:53:c2:bd:b9:e5:9a: a2:60:41:64:2b:ff:25:39:97:65:cf:b5:02:53:f9: 14:53:44:99:6b:6e:79:48:81:13:7c:4e:30:69:4f: de:36:d7:40:42:a3:33:c1:a7:13:fc:59:57:b9:85: 12:20:b1:ea:95:13:86:76:93:19:2d:58:a4:f5:98: 80:45:5b:ff:a8:4e:23:45:59:31:94:5e:ef:c7:95: 68:77:92:08:ac:7c:42:d4:cc:91:b9:91:9c:13:c5: 70:0a:ed:1b:50:6c:b4:17:93:79:14:e4:0f:93:b1: 53:f4:67:24:d8:eb:a6:55:38:42:2e:45:7e:f9:a0: ca:ae:23:df:25:cd:cb:79:9a:44:dd:5d:d5:85:44: 8d:20:15:0d:42:d0:d9:b0:d2:b1:77:39:f2:04:3f: 17:08:58:90:80:21:b7:bf:e3:a3:95:af:c5:3a:64: 2e:35:01:b9:f8:8c:6b:32:7c:20:66:60:4e:6e:26: dc:42:2d:4a:76:3d:1e:aa:e6:30:a7:c0:c5:97:8b: a1:c1:25:d5:6d:aa:44:b1:d8:48:52:db:f7:c1:90: 58:82:94:ce:81:88:a2:ee:82:cc:89:c1:5e:20:5a: 33:a4:35:80:8a:b2:1a:9e:da:6b:65:11:00:3f:cd: a4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:98:CB:B2:6A:FF:D0:90:03:52:BA:24:A6:0C:C6:C4:9C:EA:63:BD X509v3 Authority Key Identifier: keyid:30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/34332e3232342e38332e302f32342d3234203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.224.83.0/24 Signature Algorithm: sha256WithRSAEncryption ab:8b:fd:5a:8b:52:05:d7:18:b9:4d:0f:b7:4e:f2:64:04:43: 25:74:20:c1:70:25:13:ae:15:36:f6:a5:25:08:24:cf:71:fe: 2a:06:f9:bb:54:f4:e9:4a:d6:86:5e:00:71:5d:17:af:d6:40: 3f:a5:90:37:22:9d:8b:b8:e4:e5:95:ee:55:92:64:07:71:5e: fd:22:5e:15:08:a3:b0:97:5a:e7:a2:32:ea:fb:58:dd:f9:8a: 64:24:a8:64:68:fd:76:9c:5b:a1:6c:09:4f:46:08:2d:39:51: 4c:84:cd:d8:7d:49:2c:23:ac:23:c2:87:52:ed:51:5a:57:02: 34:1a:49:f8:24:68:d1:08:5e:5d:b3:c5:da:27:62:f7:fa:1a: 4b:85:af:06:b7:b4:ad:fb:d9:ac:3c:b5:c3:77:2e:02:6f:d5: bb:69:cf:87:38:dc:37:b1:c1:36:e8:b6:1d:18:46:3a:7d:79: a2:bb:78:f1:67:f0:f9:37:bd:0e:e5:19:7e:6b:58:73:87:2e: 87:eb:8d:fb:e6:30:b9:c6:67:d2:2c:36:aa:25:18:2a:cc:ce: a9:d9:11:7b:da:a4:97:fd:91:37:76:ec:97:94:ca:b0:a9:06: 32:3a:1f:65:6c:01:5c:2e:0c:24:7b:9e:b6:5e:21:bc:c9:6f: c2:26:21:2b -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUN34cwRqc5W+2B3F/W8/PVw9y+5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA1Q0Y5QTQxRENDNkUwNkNFOUNBNzMzNTIzMjVFRkM0 RDM0MzMxQzAeFw0yNjA1MjcwMzI0NDZaFw0yNzA1MjYwMzI5NDZaMDMxMTAvBgNV BAMTKDBCOThDQkIyNkFGRkQwOTAwMzUyQkEyNEE2MENDNkM0OUNFQTYzQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtSQYPVqzOHlPCvbnlmqJgQWQr /yU5l2XPtQJT+RRTRJlrbnlIgRN8TjBpT94210BCozPBpxP8WVe5hRIgseqVE4Z2 kxktWKT1mIBFW/+oTiNFWTGUXu/HlWh3kgisfELUzJG5kZwTxXAK7RtQbLQXk3kU 5A+TsVP0ZyTY66ZVOEIuRX75oMquI98lzct5mkTdXdWFRI0gFQ1C0Nmw0rF3OfIE PxcIWJCAIbe/46OVr8U6ZC41Abn4jGsyfCBmYE5uJtxCLUp2PR6q5jCnwMWXi6HB JdVtqkSx2EhS2/fBkFiClM6BiKLugsyJwV4gWjOkNYCKshqe2mtlEQA/zaQHAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUC5jLsmr/0JADUrokpgzGxJzqY70wHwYDVR0j BBgwFoAUMFz5pB3MbgbOnKczUjJe/E00MxwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTg1Nzg0NDk3NTU2Njg2Ny8wLzMwNUNGOUE0MURDQzZFMDZDRTlDQTczMzUyMzI1 RUZDNEQzNDMzMUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA1Q0Y5QTQxRENDNkUwNkNFOUNBNzMzNTIzMjVFRkM0RDM0MzMxQy5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTExODU3ODQ0OTc1NTY2ODY3LzAvMzQzMzJlMzIzMjM0 MmUzODMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAr4FMwDQYJKoZIhvcNAQELBQADggEBAKuL/VqLUgXXGLlND7dO8mQEQyV0IMFw JROuFTb2pSUIJM9x/ioG+btU9OlK1oZeAHFdF6/WQD+lkDcinYu45OWV7lWSZAdx Xv0iXhUIo7CXWueiMur7WN35imQkqGRo/XacW6FsCU9GCC05UUyEzdh9SSwjrCPC h1LtUVpXAjQaSfgkaNEIXl2zxdonYvf6GkuFrwa3tK372aw8tcN3LgJv1btpz4c4 3DexwTboth0YRjp9eaK7ePFn8Pk3vQ7lGX5rWHOHLofrjfvmMLnGZ9IsNqolGCrM zqnZEXvapJf9kTd27JeUyrCpBjI6H2VsAVwuDCR7nrZeIbzJb8ImISs= -----END CERTIFICATE-----Generated at Fri May 29 23:50:49 2026 by rpki-client