$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3139362e302f32342d3234203d3e20313334353433.roa File: 34322e3135372e3139362e302f32342d3234203d3e20313334353433.roa (raw, json) Hash identifier: zhOttaUrV8X4Lg2Sj2dkmX5CA9NwRiyWT3Rgrcpj+aM= Subject key identifier: 40:6A:AB:D7:C0:9F:5E:D4:2B:68:0D:8F:A9:20:84:1D:8A:98:EA:87 Certificate issuer: /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA Certificate serial: 323388F64C1AA49B0732A2FE25A7021818E3134B Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3139362e302f32342d3234203d3e20313334353433.roa Signing time: Wed 27 May 2026 08:05:38 +0000 ROA not before: Wed 27 May 2026 08:00:38 +0000 ROA not after: Wed 26 May 2027 08:05:38 +0000 asID: 134543 IP address blocks: 42.157.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:33:88:f6:4c:1a:a4:9b:07:32:a2:fe:25:a7:02:18:18:e3:13:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA Validity Not Before: May 27 08:00:38 2026 GMT Not After : May 26 08:05:38 2027 GMT Subject: CN=406AABD7C09F5ED42B680D8FA920841D8A98EA87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:13:65:90:e7:62:98:64:1d:4d:e6:62:c6:58: a1:73:fa:34:26:dd:e6:67:ce:5b:c9:44:eb:11:16: 78:70:69:76:f0:e9:f4:49:18:e5:7a:a3:21:29:ef: 76:9d:64:96:d2:60:a4:b8:77:1d:cb:50:b7:12:fa: c5:0a:1b:3b:ac:ce:59:de:55:90:cc:03:2c:94:78: c6:f7:ff:ec:71:0c:a6:2c:f3:0c:05:ea:09:14:c8: b7:16:89:dd:cd:62:48:26:2f:72:5f:56:31:b3:8d: a5:56:69:68:5a:da:79:0e:da:b9:89:73:a6:f8:a1: b1:6c:79:e7:ff:94:ce:be:cd:f7:0c:0b:0f:a4:de: e4:e3:15:f3:fd:73:2b:4c:75:13:7d:f3:b3:5a:46: de:1e:41:da:80:8e:9b:d3:da:69:1b:fd:11:2d:29: 86:c3:c1:d0:d0:0d:18:a6:df:a7:b8:63:f0:fe:08: a8:c6:5a:bb:11:4d:c0:39:17:71:94:26:1b:ba:d3: 02:16:0d:72:5d:c6:8d:98:26:23:82:b3:ae:24:a3: 34:e3:d1:72:ba:36:6a:f4:be:f0:db:7e:1f:8e:98: 17:35:75:02:18:71:f2:80:2a:10:b0:4d:7e:28:f0: 59:20:a5:1c:59:12:09:22:4f:14:e3:36:fd:59:a7: 02:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6A:AB:D7:C0:9F:5E:D4:2B:68:0D:8F:A9:20:84:1D:8A:98:EA:87 X509v3 Authority Key Identifier: keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3139362e302f32342d3234203d3e20313334353433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.157.196.0/24 Signature Algorithm: sha256WithRSAEncryption 92:b1:39:c4:a1:19:4c:13:c5:0c:82:5f:c7:eb:4c:84:0b:56: 98:02:a7:38:09:c4:a6:7d:85:b2:f1:f4:8b:37:8a:85:55:8b: 95:8a:e6:4f:81:8d:7b:9e:cc:70:ac:db:a2:b9:e5:12:8c:4b: 3e:f9:01:5b:66:36:b6:89:5d:26:6f:de:ca:6f:57:35:83:ec: 43:dd:39:41:5c:38:df:96:77:23:24:75:02:ff:8e:b7:5b:0c: b6:71:a5:4b:51:7f:53:14:c5:96:c9:be:aa:48:82:3e:d5:bd: 19:f4:c9:73:93:a6:33:81:d8:ee:23:8e:da:e9:f2:d9:f3:34: 9f:d4:d9:36:15:80:3e:c0:2b:ad:03:b3:4a:74:6a:1a:68:86: 73:cb:f0:4c:d9:0d:1c:0a:70:00:bd:fb:35:e2:37:65:e0:b5: c3:74:a5:a6:31:66:90:07:6d:55:e2:bc:c3:5e:68:af:2e:17: e7:23:92:e8:b1:b3:91:c7:ea:ba:f6:46:ed:8d:30:25:44:ac: 85:81:67:ab:ba:e3:37:b3:18:cc:d7:da:7f:df:ce:fd:94:e0: f0:9f:7c:70:ac:7d:15:13:c2:ce:31:04:4c:9f:79:ef:97:51: 6e:e9:49:1e:21:62:49:59:e6:04:e8:a0:4e:74:48:5e:57:17: 6a:f1:7c:d9 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUMjOI9kwapJsHMqL+JacCGBjjE0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5 NUJFMDBBQTAeFw0yNjA1MjcwODAwMzhaFw0yNzA1MjYwODA1MzhaMDMxMTAvBgNV BAMTKDQwNkFBQkQ3QzA5RjVFRDQyQjY4MEQ4RkE5MjA4NDFEOEE5OEVBODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6E2WQ52KYZB1N5mLGWKFz+jQm 3eZnzlvJROsRFnhwaXbw6fRJGOV6oyEp73adZJbSYKS4dx3LULcS+sUKGzuszlne VZDMAyyUeMb3/+xxDKYs8wwF6gkUyLcWid3NYkgmL3JfVjGzjaVWaWha2nkO2rmJ c6b4obFseef/lM6+zfcMCw+k3uTjFfP9cytMdRN987NaRt4eQdqAjpvT2mkb/REt KYbDwdDQDRim36e4Y/D+CKjGWrsRTcA5F3GUJhu60wIWDXJdxo2YJiOCs64kozTj 0XK6Nmr0vvDbfh+OmBc1dQIYcfKAKhCwTX4o8FkgpRxZEgkiTxTjNv1ZpwLNAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUQGqr18CfXtQraA2PqSCEHYqY6ocwHwYDVR0j BBgwFoAUU4FOLN+VzJdH2R47WgFHhpW+AKowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTkwOTMzNDMxNDM4NTQyNy8wLzUzODE0RTJDREY5NUNDOTc0N0Q5MUUzQjVBMDE0 Nzg2OTVCRTAwQUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5NUJFMDBBQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMTE5MDkzMzQzMTQzODU0MjcvMC8zNDMyMmUzMTM1 MzcyZTMxMzkzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM1MzQzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEACqdxDANBgkqhkiG9w0BAQsFAAOCAQEAkrE5xKEZTBPFDIJfx+tM hAtWmAKnOAnEpn2FsvH0izeKhVWLlYrmT4GNe57McKzbornlEoxLPvkBW2Y2told Jm/eym9XNYPsQ905QVw435Z3IyR1Av+Ot1sMtnGlS1F/UxTFlsm+qkiCPtW9GfTJ c5OmM4HY7iOO2uny2fM0n9TZNhWAPsArrQOzSnRqGmiGc8vwTNkNHApwAL37NeI3 ZeC1w3SlpjFmkAdtVeK8w15ory4X5yOS6LGzkcfquvZG7Y0wJUSshYFnq7rjN7MY zNfaf9/O/ZTg8J98cKx9FRPCzjEETJ9575dRbulJHiFiSVnmBOigTnRIXlcXavF8 2Q== -----END CERTIFICATE-----Generated at Fri May 29 22:57:40 2026 by rpki-client