$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3139372e302f32342d3234203d3e20313334353433.roa File: 34322e3135372e3139372e302f32342d3234203d3e20313334353433.roa (raw, json) Hash identifier: aXZcbzMyLuJO6Wp1fjBARWrF1NeqeBFOz48NCQJ/u8o= Subject key identifier: 50:85:3E:BF:15:61:3F:17:B1:84:5E:CA:D8:0B:E8:65:A0:98:65:63 Certificate issuer: /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA Certificate serial: 5FE882915A44A1CE84D3AAAD7A1945E7FD3C4B5A Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3139372e302f32342d3234203d3e20313334353433.roa Signing time: Wed 27 May 2026 08:05:38 +0000 ROA not before: Wed 27 May 2026 08:00:38 +0000 ROA not after: Wed 26 May 2027 08:05:38 +0000 asID: 134543 IP address blocks: 42.157.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:e8:82:91:5a:44:a1:ce:84:d3:aa:ad:7a:19:45:e7:fd:3c:4b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA Validity Not Before: May 27 08:00:38 2026 GMT Not After : May 26 08:05:38 2027 GMT Subject: CN=50853EBF15613F17B1845ECAD80BE865A0986563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c0:39:9e:80:20:1e:02:18:b1:18:ef:2c:10: 3c:e8:55:d7:9f:f5:73:04:b9:54:0f:dd:44:0f:0d: 79:9d:ed:00:a4:12:0c:ba:e4:8e:08:68:ba:77:38: 97:85:9a:7a:38:50:85:f4:28:9e:6e:7c:c2:40:d7: 93:44:3e:48:82:80:64:a2:41:23:79:33:e5:77:9d: 66:bb:f4:17:de:89:d5:0d:aa:1a:8e:09:29:9a:99: 66:bf:67:19:d0:68:36:4b:26:27:27:72:8f:52:b1: f7:fe:cb:7f:d1:40:2e:53:40:6e:e5:b6:6f:5d:ac: 48:58:9b:e3:73:04:4f:ef:c1:64:7b:22:cf:88:82: c8:c6:03:d4:cc:dc:e7:7a:87:aa:93:58:71:c9:f9: f6:bb:13:7d:03:7f:71:62:24:5b:65:89:82:80:90: 78:d6:6f:43:31:89:f8:fe:00:44:64:7e:59:b9:77: c3:e4:29:52:a3:12:55:d4:f0:e7:67:c0:c8:54:0d: 5f:3f:15:01:4e:68:5e:a9:89:28:5d:c2:5a:9a:97: a3:9c:ec:2d:6d:e1:37:38:bf:3b:7a:2d:24:76:de: 29:eb:6f:fb:f8:7c:62:df:d2:19:f2:26:f3:fb:15: 36:d9:6f:93:d2:13:3b:d0:0f:f9:dd:26:9e:49:97: 3f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:85:3E:BF:15:61:3F:17:B1:84:5E:CA:D8:0B:E8:65:A0:98:65:63 X509v3 Authority Key Identifier: keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3139372e302f32342d3234203d3e20313334353433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.157.197.0/24 Signature Algorithm: sha256WithRSAEncryption 93:2d:1f:b0:c5:ef:80:7f:54:f3:49:9d:28:f2:28:20:69:e3: 0c:65:6d:de:c1:26:2c:50:9b:11:19:54:2c:60:db:cb:37:ba: 05:71:f2:bc:97:05:48:ae:c3:7b:f2:45:5a:4f:f2:56:19:77: 64:ef:87:ec:27:49:1c:55:9b:99:db:74:02:02:45:c6:9c:c8: 0d:a0:f6:10:07:6d:9b:bf:23:81:78:e6:36:7a:0d:e6:2e:5b: 90:bb:52:01:54:9c:e8:7f:5c:2a:b4:20:f1:d3:34:9a:c9:e3: c0:0a:7f:b0:80:80:01:c0:05:3c:3a:8c:3f:2c:e5:8b:1d:20: 69:50:7b:2d:03:9f:58:15:31:5d:70:44:fb:27:c9:08:5f:23: 3b:0d:7d:14:1b:c9:f3:7f:20:43:f3:89:a0:64:b8:ab:c6:ff: 76:ab:c5:42:af:a4:20:c3:07:a4:a1:6b:26:21:c3:c6:42:0b: 94:69:dc:09:c8:e0:4d:1f:75:2a:55:08:c5:ce:76:a3:81:64: 06:bb:bf:2e:53:cc:6d:bb:eb:c7:2f:da:d2:3c:2c:68:57:d3: 22:62:5d:67:44:0d:fb:d8:19:9d:7a:49:ac:a3:6c:47:c5:1f: 00:c1:d3:13:a6:ab:c1:89:dc:6f:f6:b1:d2:4f:54:d5:6d:f1: bd:4d:6d:5f -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUX+iCkVpEoc6E06qtehlF5/08S1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5 NUJFMDBBQTAeFw0yNjA1MjcwODAwMzhaFw0yNzA1MjYwODA1MzhaMDMxMTAvBgNV BAMTKDUwODUzRUJGMTU2MTNGMTdCMTg0NUVDQUQ4MEJFODY1QTA5ODY1NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiwDmegCAeAhixGO8sEDzoVdef 9XMEuVQP3UQPDXmd7QCkEgy65I4IaLp3OJeFmno4UIX0KJ5ufMJA15NEPkiCgGSi QSN5M+V3nWa79BfeidUNqhqOCSmamWa/ZxnQaDZLJicnco9Ssff+y3/RQC5TQG7l tm9drEhYm+NzBE/vwWR7Is+IgsjGA9TM3Od6h6qTWHHJ+fa7E30Df3FiJFtliYKA kHjWb0Mxifj+AERkflm5d8PkKVKjElXU8OdnwMhUDV8/FQFOaF6piShdwlqal6Oc 7C1t4Tc4vzt6LSR23inrb/v4fGLf0hnyJvP7FTbZb5PSEzvQD/ndJp5Jlz9hAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUUIU+vxVhPxexhF7K2AvoZaCYZWMwHwYDVR0j BBgwFoAUU4FOLN+VzJdH2R47WgFHhpW+AKowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTkwOTMzNDMxNDM4NTQyNy8wLzUzODE0RTJDREY5NUNDOTc0N0Q5MUUzQjVBMDE0 Nzg2OTVCRTAwQUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5NUJFMDBBQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMTE5MDkzMzQzMTQzODU0MjcvMC8zNDMyMmUzMTM1 MzcyZTMxMzkzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM1MzQzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEACqdxTANBgkqhkiG9w0BAQsFAAOCAQEAky0fsMXvgH9U80mdKPIo IGnjDGVt3sEmLFCbERlULGDbyze6BXHyvJcFSK7De/JFWk/yVhl3ZO+H7CdJHFWb mdt0AgJFxpzIDaD2EAdtm78jgXjmNnoN5i5bkLtSAVSc6H9cKrQg8dM0msnjwAp/ sICAAcAFPDqMPyzlix0gaVB7LQOfWBUxXXBE+yfJCF8jOw19FBvJ838gQ/OJoGS4 q8b/dqvFQq+kIMMHpKFrJiHDxkILlGncCcjgTR91KlUIxc52o4FkBru/LlPMbbvr xy/a0jwsaFfTImJdZ0QN+9gZnXpJrKNsR8UfAMHTE6arwYncb/ax0k9U1W3xvU1t Xw== -----END CERTIFICATE-----Generated at Fri May 29 23:53:44 2026 by rpki-client