$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3139332e302f32342d3234203d3e20313334353433.roa File: 34322e3135372e3139332e302f32342d3234203d3e20313334353433.roa (raw, json) Hash identifier: mCU7Exxii69FTMMzIV/A/w5+JjoXMeXOq0ARw2cMzCw= Subject key identifier: 60:23:91:71:31:0C:B4:12:76:0A:D7:18:E5:D7:B6:A2:68:8E:98:8A Certificate issuer: /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA Certificate serial: 3D2EE7EAC33669A12C6E4C71AD23CAC39B2681C5 Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3139332e302f32342d3234203d3e20313334353433.roa Signing time: Wed 27 May 2026 07:56:18 +0000 ROA not before: Wed 27 May 2026 07:51:18 +0000 ROA not after: Wed 26 May 2027 07:56:18 +0000 asID: 134543 IP address blocks: 42.157.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:2e:e7:ea:c3:36:69:a1:2c:6e:4c:71:ad:23:ca:c3:9b:26:81:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA Validity Not Before: May 27 07:51:18 2026 GMT Not After : May 26 07:56:18 2027 GMT Subject: CN=60239171310CB412760AD718E5D7B6A2688E988A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:99:8e:19:4e:36:e3:05:9a:6d:8e:f9:74:47: 73:43:04:ac:59:c5:8c:5a:c1:09:a3:ac:97:86:35: 42:4a:7a:59:ce:84:df:d7:0a:1d:39:b6:1d:1e:78: b1:82:58:30:a2:e2:73:e6:ed:ee:f4:6e:2f:4a:9d: 3b:53:dd:61:08:1d:a1:4b:61:81:75:a0:04:f5:2c: f2:7f:28:9c:16:5e:d0:fd:7a:6b:1e:72:d2:a8:54: 11:44:1f:98:87:49:db:84:10:ca:7c:45:0f:3a:1e: 1f:0f:02:ae:c7:83:ef:c6:36:77:92:23:0a:02:42: d9:da:7c:db:ce:20:2d:a1:98:40:e6:d6:3d:c1:02: 73:e3:f3:8a:eb:3b:b4:43:10:bd:a8:58:b7:88:e8: c9:b9:de:ad:da:28:5d:cb:01:95:54:2d:1e:92:80: 9d:69:af:96:35:ce:b5:f7:c6:70:d6:20:4c:6d:bf: 44:72:f0:b9:30:33:74:a3:fc:25:37:59:f5:f5:ed: 20:2e:80:0f:dc:fe:81:c5:4e:55:7a:18:58:e0:3d: b2:18:d7:88:84:c7:e2:83:cb:b8:93:81:de:c4:4c: c3:44:e4:e7:5b:82:59:26:22:f7:48:1f:8e:77:be: 45:5c:e7:9f:29:d9:74:ae:a7:e9:66:7f:66:15:c7: 52:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:23:91:71:31:0C:B4:12:76:0A:D7:18:E5:D7:B6:A2:68:8E:98:8A X509v3 Authority Key Identifier: keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3139332e302f32342d3234203d3e20313334353433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.157.193.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:30:26:bd:15:9c:69:b2:79:10:61:f6:ec:89:fa:6e:e4:27: 56:34:93:16:d0:91:a1:78:ec:75:58:83:1b:50:d0:92:98:fb: b8:ed:de:80:14:d8:d2:de:07:65:41:a7:47:81:0f:36:83:7f: 55:66:f9:aa:e7:82:e3:02:33:72:da:cb:db:63:38:e3:a4:b5: 7a:18:7c:44:a1:b6:1c:da:2e:d7:f7:e6:04:98:39:e9:31:4a: 38:50:8c:bf:29:41:10:83:a0:5a:de:c9:25:d6:8f:f2:61:a4: f6:3f:90:5e:bf:ba:a7:ba:9d:f1:a0:32:b9:b7:05:a7:8e:34: 7f:1e:cf:0c:f2:bf:5c:5b:35:af:6f:fe:71:be:8c:12:dd:5d: f7:97:75:82:9e:fc:dc:f5:47:f3:3b:f0:b9:25:89:87:cf:f8: 66:85:38:2b:05:7e:44:24:de:b8:30:0b:3d:35:ce:29:c4:4f: 93:4d:63:f6:38:31:b1:39:25:df:cb:4b:28:d5:2a:26:93:12: 01:4b:a4:89:8d:38:ea:3f:bc:6a:1c:47:be:22:e4:ff:f0:62: 53:a9:84:49:c4:df:5f:df:05:77:f3:a2:78:3a:5a:f4:ce:46: 0a:11:70:f6:5a:3e:79:21:e4:32:86:fe:90:64:b3:a8:c2:d7: f7:d3:6d:0e -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUPS7n6sM2aaEsbkxxrSPKw5smgcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5 NUJFMDBBQTAeFw0yNjA1MjcwNzUxMThaFw0yNzA1MjYwNzU2MThaMDMxMTAvBgNV BAMTKDYwMjM5MTcxMzEwQ0I0MTI3NjBBRDcxOEU1RDdCNkEyNjg4RTk4OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCumY4ZTjbjBZptjvl0R3NDBKxZ xYxawQmjrJeGNUJKelnOhN/XCh05th0eeLGCWDCi4nPm7e70bi9KnTtT3WEIHaFL YYF1oAT1LPJ/KJwWXtD9emsectKoVBFEH5iHSduEEMp8RQ86Hh8PAq7Hg+/GNneS IwoCQtnafNvOIC2hmEDm1j3BAnPj84rrO7RDEL2oWLeI6Mm53q3aKF3LAZVULR6S gJ1pr5Y1zrX3xnDWIExtv0Ry8LkwM3Sj/CU3WfX17SAugA/c/oHFTlV6GFjgPbIY 14iEx+KDy7iTgd7ETMNE5OdbglkmIvdIH453vkVc558p2XSup+lmf2YVx1LrAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUYCORcTEMtBJ2CtcY5de2omiOmIowHwYDVR0j BBgwFoAUU4FOLN+VzJdH2R47WgFHhpW+AKowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTkwOTMzNDMxNDM4NTQyNy8wLzUzODE0RTJDREY5NUNDOTc0N0Q5MUUzQjVBMDE0 Nzg2OTVCRTAwQUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5NUJFMDBBQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMTE5MDkzMzQzMTQzODU0MjcvMC8zNDMyMmUzMTM1 MzcyZTMxMzkzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM1MzQzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEACqdwTANBgkqhkiG9w0BAQsFAAOCAQEAbTAmvRWcabJ5EGH27In6 buQnVjSTFtCRoXjsdViDG1DQkpj7uO3egBTY0t4HZUGnR4EPNoN/VWb5queC4wIz ctrL22M446S1ehh8RKG2HNou1/fmBJg56TFKOFCMvylBEIOgWt7JJdaP8mGk9j+Q Xr+6p7qd8aAyubcFp440fx7PDPK/XFs1r2/+cb6MEt1d95d1gp783PVH8zvwuSWJ h8/4ZoU4KwV+RCTeuDALPTXOKcRPk01j9jgxsTkl38tLKNUqJpMSAUukiY046j+8 ahxHviLk//BiU6mEScTfX98Fd/OieDpa9M5GChFw9lo+eSHkMob+kGSzqMLX99Nt Dg== -----END CERTIFICATE-----Generated at Fri May 29 23:54:32 2026 by rpki-client