$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3139352e302f32342d3234203d3e20313334353433.roa File: 34322e3135372e3139352e302f32342d3234203d3e20313334353433.roa (raw, json) Hash identifier: TCGxK2DtS6oGRAf75zYXX36e/mJU2AgOR/+95B7nF4Y= Subject key identifier: C8:37:B4:4D:39:37:56:4F:31:1E:36:51:14:D1:C8:D8:9A:00:35:C7 Certificate issuer: /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA Certificate serial: 42A7B71C5AEEA6C6CED53D2404B6ACDA38C7FE4B Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3139352e302f32342d3234203d3e20313334353433.roa Signing time: Wed 27 May 2026 07:56:18 +0000 ROA not before: Wed 27 May 2026 07:51:18 +0000 ROA not after: Wed 26 May 2027 07:56:18 +0000 asID: 134543 IP address blocks: 42.157.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a7:b7:1c:5a:ee:a6:c6:ce:d5:3d:24:04:b6:ac:da:38:c7:fe:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA Validity Not Before: May 27 07:51:18 2026 GMT Not After : May 26 07:56:18 2027 GMT Subject: CN=C837B44D3937564F311E365114D1C8D89A0035C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c7:b6:f7:cf:63:4f:70:66:d8:a7:a8:43:ce: e2:1c:c3:1b:b8:92:a8:14:09:ce:e6:14:5f:92:37: a8:56:29:72:a4:3d:a7:47:df:fe:30:8f:5f:2e:20: d2:09:ba:48:f1:e6:66:15:06:94:67:bd:63:37:7a: ed:4c:4a:f4:bd:de:cd:3a:2f:89:2c:54:03:42:49: 47:c1:3e:2b:31:db:2b:e0:86:8a:d5:c6:7d:17:d7: 70:9b:d5:7a:38:5d:57:ff:00:64:e8:d9:79:08:2a: 9b:04:69:00:2a:0f:0e:6a:91:e1:0d:70:bc:80:72: db:5a:e4:d5:3e:7f:9f:a4:f2:ff:69:46:41:bb:e6: e3:78:15:09:38:c0:5e:dc:11:67:28:6e:8e:3c:24: ee:e3:39:9b:fd:5e:43:10:1a:0b:12:ad:b1:15:24: 4b:b3:2f:73:dc:a8:7f:e2:35:32:b5:65:b8:c9:33: 52:e1:27:e7:75:19:66:cc:9b:fa:78:87:0b:f9:77: 8c:85:8c:9b:79:e2:9c:fb:1b:01:26:b2:b3:d1:09: 9a:5c:55:48:8a:ff:5b:a2:ba:20:cb:d1:03:d5:9b: 7f:97:0d:06:bf:23:4d:22:69:46:74:5d:78:43:fc: c7:b6:58:de:53:bb:a6:a4:66:1f:ea:3f:66:ce:f0: 4e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:37:B4:4D:39:37:56:4F:31:1E:36:51:14:D1:C8:D8:9A:00:35:C7 X509v3 Authority Key Identifier: keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3139352e302f32342d3234203d3e20313334353433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.157.195.0/24 Signature Algorithm: sha256WithRSAEncryption 24:84:f6:98:86:ed:e8:08:52:f8:33:7f:ff:34:98:86:d4:60: 77:9f:7e:9b:c0:f2:b0:11:39:5d:0d:c6:a8:7d:63:cb:1d:55: 43:6b:e2:43:8d:cf:19:01:09:81:df:89:03:c9:29:50:af:71: 2e:f2:97:d5:dc:ea:99:e9:84:18:dc:5f:72:f0:73:d5:0e:9f: 5e:10:3c:c6:75:d0:3c:c0:78:f5:7f:0d:84:1b:c9:a3:aa:0d: 4a:29:27:68:9b:03:60:22:f5:a1:9f:0f:10:41:78:c2:1e:45: 7f:48:1d:b6:54:73:6f:a4:32:a6:3d:e5:ef:b3:c1:82:8f:5f: ed:e8:d8:5e:ee:7c:f0:e6:d2:27:35:ea:32:0b:25:2a:b9:ba: a2:5c:62:b6:70:f0:e6:71:1a:12:9c:f4:63:3a:6b:98:99:48: bb:be:7e:fb:34:19:e9:c4:64:c4:62:aa:0e:7d:ff:66:08:0e: 2d:cf:94:a8:04:f9:ef:bc:cc:fe:f8:84:65:a3:a8:c2:89:a3: ba:be:dd:a8:e4:25:a3:3e:19:ee:5b:49:a7:70:b4:1f:b9:2d: aa:22:54:e5:3e:dd:c4:38:54:96:e1:dd:40:7e:18:65:d1:a9: 78:64:29:ef:a7:46:e8:0f:2f:3a:5c:d7:be:97:e6:2d:00:85: 4f:67:b8:38 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUQqe3HFrupsbO1T0kBLas2jjH/kswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5 NUJFMDBBQTAeFw0yNjA1MjcwNzUxMThaFw0yNzA1MjYwNzU2MThaMDMxMTAvBgNV BAMTKEM4MzdCNDREMzkzNzU2NEYzMTFFMzY1MTE0RDFDOEQ4OUEwMDM1QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdx7b3z2NPcGbYp6hDzuIcwxu4 kqgUCc7mFF+SN6hWKXKkPadH3/4wj18uINIJukjx5mYVBpRnvWM3eu1MSvS93s06 L4ksVANCSUfBPisx2yvghorVxn0X13Cb1Xo4XVf/AGTo2XkIKpsEaQAqDw5qkeEN cLyActta5NU+f5+k8v9pRkG75uN4FQk4wF7cEWcobo48JO7jOZv9XkMQGgsSrbEV JEuzL3PcqH/iNTK1ZbjJM1LhJ+d1GWbMm/p4hwv5d4yFjJt54pz7GwEmsrPRCZpc VUiK/1uiuiDL0QPVm3+XDQa/I00iaUZ0XXhD/Me2WN5Tu6akZh/qP2bO8E7nAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUyDe0TTk3Vk8xHjZRFNHI2JoANccwHwYDVR0j BBgwFoAUU4FOLN+VzJdH2R47WgFHhpW+AKowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTkwOTMzNDMxNDM4NTQyNy8wLzUzODE0RTJDREY5NUNDOTc0N0Q5MUUzQjVBMDE0 Nzg2OTVCRTAwQUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5NUJFMDBBQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMTE5MDkzMzQzMTQzODU0MjcvMC8zNDMyMmUzMTM1 MzcyZTMxMzkzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM1MzQzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEACqdwzANBgkqhkiG9w0BAQsFAAOCAQEAJIT2mIbt6AhS+DN//zSY htRgd59+m8DysBE5XQ3GqH1jyx1VQ2viQ43PGQEJgd+JA8kpUK9xLvKX1dzqmemE GNxfcvBz1Q6fXhA8xnXQPMB49X8NhBvJo6oNSiknaJsDYCL1oZ8PEEF4wh5Ff0gd tlRzb6Qypj3l77PBgo9f7ejYXu588ObSJzXqMgslKrm6olxitnDw5nEaEpz0Yzpr mJlIu75++zQZ6cRkxGKqDn3/ZggOLc+UqAT577zM/viEZaOowomjur7dqOQloz4Z 7ltJp3C0H7ktqiJU5T7dxDhUluHdQH4YZdGpeGQp76dG6A8vOlzXvpfmLQCFT2e4 OA== -----END CERTIFICATE-----Generated at Fri May 29 23:53:57 2026 by rpki-client