$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3136302e302f32312d3231203d3e20313430323932.roa File: 34322e3135372e3136302e302f32312d3231203d3e20313430323932.roa (raw, json) Hash identifier: I6BbUJ66Qc6tj7iFfRUD7HXuUY1w1bM8H+RNddeIDw4= Subject key identifier: 8D:5C:69:24:36:FA:68:B7:E7:D7:F0:42:72:E7:05:4B:74:43:0B:1A Certificate issuer: /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA Certificate serial: 38AAAACE42EEF2DF9527E7CB4EE7CC2A7F1D097B Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3136302e302f32312d3231203d3e20313430323932.roa Signing time: Wed 27 May 2026 08:15:05 +0000 ROA not before: Wed 27 May 2026 08:10:05 +0000 ROA not after: Wed 26 May 2027 08:15:05 +0000 asID: 140292 IP address blocks: 42.157.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:aa:aa:ce:42:ee:f2:df:95:27:e7:cb:4e:e7:cc:2a:7f:1d:09:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA Validity Not Before: May 27 08:10:05 2026 GMT Not After : May 26 08:15:05 2027 GMT Subject: CN=8D5C692436FA68B7E7D7F04272E7054B74430B1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:88:e6:2a:e3:c4:af:46:c8:4a:93:81:b6:0b: 6a:8b:ae:9b:62:e1:3a:d1:93:e1:bc:f2:4f:7b:c7: 55:94:ea:9c:23:fa:d2:65:bb:58:c6:89:72:2d:7f: 39:cb:04:c4:48:b0:ba:78:98:24:85:52:53:bb:10: 96:fd:99:9e:b2:23:fe:f6:ca:e5:32:34:86:34:51: 71:46:21:c7:38:43:7a:f5:c0:27:22:c7:64:0f:78: 8c:c6:86:cf:21:76:09:b8:19:49:48:6a:d8:15:b8: 6b:dc:ee:ba:e7:60:66:75:1b:a1:4a:c7:43:ce:da: 49:35:de:ca:87:e2:69:70:e1:50:72:f5:d2:2b:f9: 98:ec:fd:7b:c9:98:09:1a:4c:61:9b:ae:df:e8:04: 8d:28:45:29:42:7a:c2:2e:10:82:99:7c:d2:78:0e: d0:e6:3c:cc:7c:85:00:fe:9c:ea:61:e6:ac:97:99: ad:d4:73:c2:ca:11:dc:a7:6e:53:46:82:04:ca:9f: 7c:60:3f:36:85:b4:6c:39:9e:9b:2b:4f:48:74:59: ab:4c:9c:f4:80:70:26:84:9a:86:00:5c:26:93:3e: 91:6a:5e:f9:7e:ef:ac:4c:4c:e4:ab:58:88:a4:00: 8c:d6:01:08:48:db:f2:93:ba:0d:f5:bd:13:4f:ec: 7c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5C:69:24:36:FA:68:B7:E7:D7:F0:42:72:E7:05:4B:74:43:0B:1A X509v3 Authority Key Identifier: keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3136302e302f32312d3231203d3e20313430323932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.157.160.0/21 Signature Algorithm: sha256WithRSAEncryption 2c:34:20:41:79:57:54:aa:ef:c2:85:b8:94:e4:8c:8d:41:61: bd:68:9f:ad:04:09:4e:f0:9e:b6:dc:67:77:8d:61:2f:c9:d0: 1f:fb:54:15:16:9c:46:82:a0:a6:14:14:c4:43:92:5b:32:9a: 4f:bf:e5:d8:71:8e:90:97:99:79:c0:be:f7:ac:77:7f:2c:6d: cf:c3:98:0c:ed:c5:3d:69:17:54:76:9d:ea:89:35:e7:a9:de: 99:15:30:49:37:48:7b:98:0a:83:0f:e1:7d:40:b5:7e:12:26: b6:0d:bd:42:41:6f:22:85:21:fb:b5:43:a0:07:87:74:70:87: c3:b6:21:34:cd:81:b8:0d:15:26:c3:66:0e:e7:10:df:01:48: 43:31:dc:f2:de:da:db:97:f0:2d:d2:85:98:d3:85:cc:dd:43: 78:04:23:d7:f3:7c:1a:49:3a:e3:56:89:0e:ec:80:5b:57:66: 30:87:cf:8d:52:bc:eb:6b:6d:be:5f:48:4d:c5:4b:f6:a1:27: 77:72:af:bc:f5:67:de:b5:eb:61:cd:41:db:52:d6:54:e0:12: 6a:19:fa:59:d9:5a:61:8f:85:ff:58:2e:05:6b:00:ef:8a:0c: e1:5f:53:e8:62:79:fb:87:28:4b:7b:6e:11:04:3d:71:ff:bd: 09:00:52:d1 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUOKqqzkLu8t+VJ+fLTufMKn8dCXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5 NUJFMDBBQTAeFw0yNjA1MjcwODEwMDVaFw0yNzA1MjYwODE1MDVaMDMxMTAvBgNV BAMTKDhENUM2OTI0MzZGQTY4QjdFN0Q3RjA0MjcyRTcwNTRCNzQ0MzBCMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOiOYq48SvRshKk4G2C2qLrpti 4TrRk+G88k97x1WU6pwj+tJlu1jGiXItfznLBMRIsLp4mCSFUlO7EJb9mZ6yI/72 yuUyNIY0UXFGIcc4Q3r1wCcix2QPeIzGhs8hdgm4GUlIatgVuGvc7rrnYGZ1G6FK x0PO2kk13sqH4mlw4VBy9dIr+Zjs/XvJmAkaTGGbrt/oBI0oRSlCesIuEIKZfNJ4 DtDmPMx8hQD+nOph5qyXma3Uc8LKEdynblNGggTKn3xgPzaFtGw5npsrT0h0WatM nPSAcCaEmoYAXCaTPpFqXvl+76xMTOSrWIikAIzWAQhI2/KTug31vRNP7HwpAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUjVxpJDb6aLfn1/BCcucFS3RDCxowHwYDVR0j BBgwFoAUU4FOLN+VzJdH2R47WgFHhpW+AKowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTkwOTMzNDMxNDM4NTQyNy8wLzUzODE0RTJDREY5NUNDOTc0N0Q5MUUzQjVBMDE0 Nzg2OTVCRTAwQUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5NUJFMDBBQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMTE5MDkzMzQzMTQzODU0MjcvMC8zNDMyMmUzMTM1 MzcyZTMxMzYzMDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMxMzQzMDMyMzkzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAyqdoDANBgkqhkiG9w0BAQsFAAOCAQEALDQgQXlXVKrvwoW4lOSM jUFhvWifrQQJTvCettxnd41hL8nQH/tUFRacRoKgphQUxEOSWzKaT7/l2HGOkJeZ ecC+96x3fyxtz8OYDO3FPWkXVHad6ok156nemRUwSTdIe5gKgw/hfUC1fhImtg29 QkFvIoUh+7VDoAeHdHCHw7YhNM2BuA0VJsNmDucQ3wFIQzHc8t7a25fwLdKFmNOF zN1DeAQj1/N8Gkk641aJDuyAW1dmMIfPjVK862ttvl9ITcVL9qEnd3KvvPVn3rXr Yc1B21LWVOASahn6WdlaYY+F/1guBWsA74oM4V9T6GJ5+4coS3tuEQQ9cf+9CQBS 0Q== -----END CERTIFICATE-----Generated at Fri May 29 23:54:32 2026 by rpki-client