$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3132392e302f32342d3234203d3e20313334373633.roa File: 34322e3135372e3132392e302f32342d3234203d3e20313334373633.roa (raw, json) Hash identifier: VgFywuz9SYL3DpMZhrTf0ZTtc/zOKMZ4Lm9BvgcijWI= Subject key identifier: A2:8E:76:43:D4:51:58:A5:D4:3E:68:8D:82:FC:C5:A5:59:FC:6D:8E Certificate issuer: /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA Certificate serial: 11773C3F885B37D93BF82081AFD0364FE85380B2 Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3132392e302f32342d3234203d3e20313334373633.roa Signing time: Wed 27 May 2026 08:12:14 +0000 ROA not before: Wed 27 May 2026 08:07:14 +0000 ROA not after: Wed 26 May 2027 08:12:14 +0000 asID: 134763 IP address blocks: 42.157.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:77:3c:3f:88:5b:37:d9:3b:f8:20:81:af:d0:36:4f:e8:53:80:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA Validity Not Before: May 27 08:07:14 2026 GMT Not After : May 26 08:12:14 2027 GMT Subject: CN=A28E7643D45158A5D43E688D82FCC5A559FC6D8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:aa:a0:a6:ee:4a:7b:de:18:62:2a:9b:85:7f: 69:fe:a2:09:9c:f4:7c:14:7a:2e:22:54:07:33:50: 7b:29:56:ea:9c:ea:ca:e4:e2:f1:c9:48:15:ce:86: e0:54:f1:7a:b7:54:ee:c3:98:03:a8:56:b1:a1:6a: 57:20:1d:5d:41:08:61:b1:43:6f:b0:de:f1:6f:51: 26:cb:f3:61:b3:e9:26:d7:ef:26:13:e9:ea:09:59: 74:e1:e5:06:d5:ea:4c:91:c9:79:bb:af:30:b5:e5: 58:84:b9:85:cf:e7:e4:ba:39:29:64:9f:b5:66:9d: fc:df:c1:ec:7e:3e:48:e5:9c:85:e9:70:b9:b5:a9: 83:24:6b:24:5d:4f:2b:81:7d:6f:e5:48:da:94:6c: b9:90:59:6a:b7:42:31:02:cb:a7:b0:cf:83:5e:00: a1:e9:3b:31:58:91:99:b2:cb:21:1a:f9:92:15:03: f8:0c:1e:b3:24:71:b7:16:d2:51:d6:03:06:9b:88: 38:af:31:87:91:26:53:6d:82:a3:45:f0:56:86:90: 96:b6:b2:1f:f3:b4:8e:52:6d:5a:19:0e:8d:5a:05: 96:c9:c1:b6:f7:7a:bc:0c:08:cb:4f:e5:e3:7c:ef: 81:04:4e:b3:ae:75:ec:c5:b3:17:48:8f:f5:fc:aa: 32:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8E:76:43:D4:51:58:A5:D4:3E:68:8D:82:FC:C5:A5:59:FC:6D:8E X509v3 Authority Key Identifier: keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3132392e302f32342d3234203d3e20313334373633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.157.129.0/24 Signature Algorithm: sha256WithRSAEncryption 93:4e:86:e9:e7:42:76:f0:38:b2:39:ba:e6:41:c2:f6:eb:73: 6a:93:b6:e3:a3:78:38:11:89:62:17:a5:dc:a8:1e:ab:0f:08: 29:54:5b:77:dd:78:1d:94:15:43:37:a1:63:7c:b5:eb:cd:a0: 2a:94:08:65:65:a6:62:9b:ee:d0:56:31:37:d7:f2:35:a2:cb: ee:d1:64:64:06:8c:57:5e:2c:1b:ae:2a:66:24:50:85:4d:66: 0d:ff:95:e0:49:87:5f:ff:0d:3b:5c:81:6f:3b:46:ff:4b:6b: 28:73:15:9a:f2:e0:27:e2:ff:53:8d:69:80:fa:3c:68:49:27: b8:de:be:12:9e:ff:5c:91:c8:03:01:f9:ea:10:15:b9:5f:31: ef:4e:c6:0c:cb:62:ee:e0:ad:80:a7:e9:c5:76:b5:04:38:9b: 3d:bc:e5:34:e6:d1:73:cc:48:03:69:38:b3:60:1b:a2:55:98: 07:86:7c:bf:1f:01:96:cc:5a:1a:bd:2f:a0:50:5b:d3:b9:16: 15:03:f3:7a:c2:64:24:fe:1c:7d:c1:78:a6:10:34:a4:e1:17: bc:7a:57:45:01:07:16:29:c5:94:08:79:01:ac:c7:18:59:20: bb:6e:77:fc:ca:ee:bb:fe:79:1f:8d:ea:8c:1c:3c:56:67:9c: f5:5f:58:f8 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUEXc8P4hbN9k7+CCBr9A2T+hTgLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5 NUJFMDBBQTAeFw0yNjA1MjcwODA3MTRaFw0yNzA1MjYwODEyMTRaMDMxMTAvBgNV BAMTKEEyOEU3NjQzRDQ1MTU4QTVENDNFNjg4RDgyRkNDNUE1NTlGQzZEOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdqqCm7kp73hhiKpuFf2n+ogmc 9HwUei4iVAczUHspVuqc6srk4vHJSBXOhuBU8Xq3VO7DmAOoVrGhalcgHV1BCGGx Q2+w3vFvUSbL82Gz6SbX7yYT6eoJWXTh5QbV6kyRyXm7rzC15ViEuYXP5+S6OSlk n7Vmnfzfwex+PkjlnIXpcLm1qYMkayRdTyuBfW/lSNqUbLmQWWq3QjECy6ewz4Ne AKHpOzFYkZmyyyEa+ZIVA/gMHrMkcbcW0lHWAwabiDivMYeRJlNtgqNF8FaGkJa2 sh/ztI5SbVoZDo1aBZbJwbb3erwMCMtP5eN874EETrOudezFsxdIj/X8qjKVAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUoo52Q9RRWKXUPmiNgvzFpVn8bY4wHwYDVR0j BBgwFoAUU4FOLN+VzJdH2R47WgFHhpW+AKowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTkwOTMzNDMxNDM4NTQyNy8wLzUzODE0RTJDREY5NUNDOTc0N0Q5MUUzQjVBMDE0 Nzg2OTVCRTAwQUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5NUJFMDBBQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMTE5MDkzMzQzMTQzODU0MjcvMC8zNDMyMmUzMTM1 MzcyZTMxMzIzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzYzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEACqdgTANBgkqhkiG9w0BAQsFAAOCAQEAk06G6edCdvA4sjm65kHC 9utzapO246N4OBGJYhel3Kgeqw8IKVRbd914HZQVQzehY3y1682gKpQIZWWmYpvu 0FYxN9fyNaLL7tFkZAaMV14sG64qZiRQhU1mDf+V4EmHX/8NO1yBbztG/0trKHMV mvLgJ+L/U41pgPo8aEknuN6+Ep7/XJHIAwH56hAVuV8x707GDMti7uCtgKfpxXa1 BDibPbzlNObRc8xIA2k4s2AbolWYB4Z8vx8BlsxaGr0voFBb07kWFQPzesJkJP4c fcF4phA0pOEXvHpXRQEHFinFlAh5AazHGFkgu253/Mruu/55H43qjBw8Vmec9V9Y +A== -----END CERTIFICATE-----Generated at Fri May 29 23:53:30 2026 by rpki-client