$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3136382e302f32312d3231203d3e20313430323932.roa File: 34322e3135372e3136382e302f32312d3231203d3e20313430323932.roa (raw, json) Hash identifier: MWudgipqSrlTHzFjDQmH+fNeplumbIfKaQJVSedxOL8= Subject key identifier: 26:3C:89:41:6F:E5:AA:BF:95:96:53:44:6A:7E:8F:73:1D:14:2A:22 Certificate issuer: /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA Certificate serial: 21BE712E17780627C989BA08FD3EF5DF0FCF3B17 Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3136382e302f32312d3231203d3e20313430323932.roa Signing time: Wed 27 May 2026 08:15:04 +0000 ROA not before: Wed 27 May 2026 08:10:04 +0000 ROA not after: Wed 26 May 2027 08:15:04 +0000 asID: 140292 IP address blocks: 42.157.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:be:71:2e:17:78:06:27:c9:89:ba:08:fd:3e:f5:df:0f:cf:3b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA Validity Not Before: May 27 08:10:04 2026 GMT Not After : May 26 08:15:04 2027 GMT Subject: CN=263C89416FE5AABF959653446A7E8F731D142A22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:32:b3:30:0b:c4:72:94:20:d4:c7:e3:c4:0d: bb:a4:73:f8:c7:81:ad:52:a5:fd:83:1f:06:56:0a: 03:7d:68:f5:98:ab:dc:b7:b8:89:29:b3:0c:50:d7: bc:07:47:c4:7a:07:3a:8c:e5:d4:dd:37:f6:05:bb: e9:9e:25:75:6c:60:71:8b:f1:6a:69:08:bd:e2:ba: 0f:3b:d3:b5:58:60:f1:35:19:8a:51:33:59:9e:64: c6:69:ef:fa:a6:76:b3:df:ce:54:72:f8:ed:77:de: b8:17:32:4d:e9:25:43:ad:a2:07:7e:9b:7d:9c:f0: 6e:bf:b3:e2:38:61:eb:59:fe:10:0f:bb:ed:58:01: 1f:b5:45:2f:71:b5:d5:f0:9d:ab:dd:0f:7c:7b:b6: ee:26:b3:fc:6d:ad:42:3e:3b:6b:87:a5:b1:3d:99: 73:5c:9d:be:db:a2:f1:0a:91:bd:52:57:f4:7e:75: 3e:ff:2a:35:a5:a5:ac:97:94:e2:94:d5:12:f2:b2: 8e:e3:83:11:60:a3:59:89:c1:5e:c1:89:cc:a6:7d: 93:0b:b9:05:60:e8:4d:a8:41:fa:d1:2a:48:76:0c: e6:86:a4:b0:7d:5d:50:a5:66:43:d5:7d:dc:71:81: 13:23:2d:c9:cd:c6:ca:7e:f8:c5:39:f0:10:54:e1: 47:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:3C:89:41:6F:E5:AA:BF:95:96:53:44:6A:7E:8F:73:1D:14:2A:22 X509v3 Authority Key Identifier: keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3136382e302f32312d3231203d3e20313430323932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.157.168.0/21 Signature Algorithm: sha256WithRSAEncryption 5c:75:e4:5f:6a:42:46:e9:c3:e4:12:41:7a:a3:f7:a7:90:db: 0d:b4:8f:f4:ee:3b:2f:e4:62:77:4d:71:6f:ad:4d:b1:62:aa: d8:4b:50:6e:af:8e:3b:b4:be:31:e8:6a:87:b6:3a:c6:b2:2e: 5f:d7:29:b3:d2:98:ce:ee:13:2d:1a:fd:e6:61:a8:9d:84:f2: 28:38:e9:ca:fd:9e:70:4d:b8:2c:5e:36:c0:89:8e:e9:87:63: 0d:b1:0e:f1:5c:3d:70:ee:98:2c:bc:9c:3e:71:5a:75:77:0b: ce:99:42:07:ea:88:4d:11:35:bb:ba:5f:ae:3c:40:40:7b:00: 8e:88:44:1d:d3:82:97:25:a7:24:cc:29:46:6b:e0:ff:d3:91: 73:67:7b:41:83:7a:10:f6:9d:9f:57:b2:44:8d:d1:28:d1:b9: 19:39:2a:d6:8b:55:c6:dd:0c:cc:eb:12:04:d5:22:e0:a0:25: 45:23:a5:1c:c8:a8:b5:e7:96:00:48:6e:9f:0c:64:f2:0e:ee: 24:88:c8:93:3f:36:54:a0:11:43:4b:63:82:c3:20:25:65:62: f8:8d:b6:3d:78:e7:1d:6d:df:4e:1e:e2:58:a3:d1:10:75:0b: 63:13:80:a8:42:86:a6:6c:c8:3f:93:70:f7:19:14:8d:b4:7e: d8:dc:8b:32 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUIb5xLhd4BifJiboI/T713w/POxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5 NUJFMDBBQTAeFw0yNjA1MjcwODEwMDRaFw0yNzA1MjYwODE1MDRaMDMxMTAvBgNV BAMTKDI2M0M4OTQxNkZFNUFBQkY5NTk2NTM0NDZBN0U4RjczMUQxNDJBMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXMrMwC8RylCDUx+PEDbukc/jH ga1Spf2DHwZWCgN9aPWYq9y3uIkpswxQ17wHR8R6BzqM5dTdN/YFu+meJXVsYHGL 8WppCL3iug8707VYYPE1GYpRM1meZMZp7/qmdrPfzlRy+O133rgXMk3pJUOtogd+ m32c8G6/s+I4YetZ/hAPu+1YAR+1RS9xtdXwnavdD3x7tu4ms/xtrUI+O2uHpbE9 mXNcnb7bovEKkb1SV/R+dT7/KjWlpayXlOKU1RLyso7jgxFgo1mJwV7BicymfZML uQVg6E2oQfrRKkh2DOaGpLB9XVClZkPVfdxxgRMjLcnNxsp++MU58BBU4UfTAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUJjyJQW/lqr+VllNEan6Pcx0UKiIwHwYDVR0j BBgwFoAUU4FOLN+VzJdH2R47WgFHhpW+AKowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTkwOTMzNDMxNDM4NTQyNy8wLzUzODE0RTJDREY5NUNDOTc0N0Q5MUUzQjVBMDE0 Nzg2OTVCRTAwQUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5NUJFMDBBQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMTE5MDkzMzQzMTQzODU0MjcvMC8zNDMyMmUzMTM1 MzcyZTMxMzYzODJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMxMzQzMDMyMzkzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAyqdqDANBgkqhkiG9w0BAQsFAAOCAQEAXHXkX2pCRunD5BJBeqP3 p5DbDbSP9O47L+Rid01xb61NsWKq2EtQbq+OO7S+Mehqh7Y6xrIuX9cps9KYzu4T LRr95mGonYTyKDjpyv2ecE24LF42wImO6YdjDbEO8Vw9cO6YLLycPnFadXcLzplC B+qITRE1u7pfrjxAQHsAjohEHdOClyWnJMwpRmvg/9ORc2d7QYN6EPadn1eyRI3R KNG5GTkq1otVxt0MzOsSBNUi4KAlRSOlHMioteeWAEhunwxk8g7uJIjIkz82VKAR Q0tjgsMgJWVi+I22PXjnHW3fTh7iWKPREHULYxOAqEKGpmzIP5Nw9xkUjbR+2NyL Mg== -----END CERTIFICATE-----Generated at Fri May 29 23:54:52 2026 by rpki-client