$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34332e3232362e3233362e302f32332d3234203d3e2034383038.roa File: 34332e3232362e3233362e302f32332d3234203d3e2034383038.roa (raw, json) Hash identifier: ltG+CN3QLh2wEki9NxuSInye3hQqwHvvC+my2YhdooQ= Subject key identifier: EF:5B:65:28:C8:41:36:72:EB:79:08:88:4F:37:AB:32:A0:EA:1D:31 Certificate issuer: /CN=B28274A718A1FE9A74E76E477B0790607D2775C9 Certificate serial: 5717FA79B24523B37D5A3FE2722AB7B6AAF2CA01 Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34332e3232362e3233362e302f32332d3234203d3e2034383038.roa Signing time: Fri 29 May 2026 13:28:14 +0000 ROA not before: Fri 29 May 2026 13:23:14 +0000 ROA not after: Fri 28 May 2027 13:28:14 +0000 asID: 4808 IP address blocks: 43.226.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:40:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:17:fa:79:b2:45:23:b3:7d:5a:3f:e2:72:2a:b7:b6:aa:f2:ca:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9 Validity Not Before: May 29 13:23:14 2026 GMT Not After : May 28 13:28:14 2027 GMT Subject: CN=EF5B6528C8413672EB7908884F37AB32A0EA1D31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f9:74:ac:2a:5e:a3:c0:fc:e8:8b:e9:fd:be: c2:61:30:e5:fc:79:24:78:4f:be:47:08:cf:fa:40: 15:ff:4d:97:f3:58:da:9d:ad:2d:8d:17:fc:a1:35: f3:4b:25:9d:8a:e3:9a:7b:be:bc:49:55:58:48:16: 17:36:47:d4:98:fe:a7:d5:c0:71:3c:eb:77:2a:37: a4:8f:13:25:a4:ab:9b:05:ef:fe:cb:57:d8:2a:7e: fe:5b:ea:c3:2f:0e:18:3d:9c:d3:a1:d8:4e:f5:0f: e0:d4:53:df:3b:af:20:e2:7e:33:9e:98:c5:6f:76: 20:a4:67:9d:6b:c6:c8:df:47:82:14:bc:d4:f7:0a: 9a:30:2b:01:3c:19:d7:f2:75:77:d6:5b:3d:02:8c: 68:97:48:1c:cb:c3:17:0d:af:6f:62:c5:3a:68:e4: 1f:62:cb:46:cc:29:1d:eb:36:28:0c:55:90:02:92: a5:a9:45:48:f8:74:9f:6a:8b:05:2f:e1:99:4f:73: 24:75:7a:12:cd:6f:60:22:9d:ae:0a:f5:33:f8:8e: f4:7d:da:a6:c2:9f:36:bf:b2:1d:d4:22:e7:5d:0f: 07:fc:2c:9a:72:99:10:07:12:a4:b3:25:9a:68:9a: 82:21:95:b5:b2:c2:e1:53:0a:20:ae:d6:53:49:5a: 87:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5B:65:28:C8:41:36:72:EB:79:08:88:4F:37:AB:32:A0:EA:1D:31 X509v3 Authority Key Identifier: keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34332e3232362e3233362e302f32332d3234203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.236.0/23 Signature Algorithm: sha256WithRSAEncryption 99:78:f6:84:7c:7d:91:e6:7e:55:83:55:e4:e3:ed:9d:37:96: 2c:b5:89:b3:8d:1d:af:0d:59:4e:9f:a4:16:9e:ea:d2:26:6a: 40:8b:9a:a4:cd:eb:c2:61:99:b9:be:42:fa:d8:c4:f1:97:cb: a2:70:2b:c2:4a:ee:5d:62:d4:31:79:ba:1f:79:ba:35:d6:6f: aa:e8:6a:2a:54:26:f1:ca:e7:08:6d:1e:49:46:82:e9:4d:a0: 53:7e:78:bc:97:05:cb:0b:a0:f9:d6:29:dc:e2:b6:05:08:b2: 99:7b:28:b3:e1:8a:56:a9:70:e5:18:af:1b:e6:af:98:72:32: 51:91:de:29:4b:e4:48:a3:68:01:4d:3b:a0:ff:49:79:ca:08: 1a:4b:e4:be:9c:98:b5:9b:d4:2e:c1:f0:25:62:de:66:64:0d: 84:5b:28:37:5b:a2:00:d1:29:d7:5b:5a:89:0c:72:a8:ed:39: 9f:5f:2a:9f:01:a5:2a:5f:03:18:12:a1:47:84:df:de:88:9e: 8e:d4:94:2a:90:43:9c:9e:9c:e8:01:f7:1b:c8:aa:f1:28:d8: 7f:ca:10:c5:c0:10:76:77:72:14:a1:04:33:48:ed:eb:6f:3e: 91:1b:6f:e4:13:86:cf:b7:a7:55:1a:f0:76:1b:59:b6:e0:4a: d8:bd:75:85 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUVxf6ebJFI7N9Wj/iciq3tqryygEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI4Mjc0QTcxOEExRkU5QTc0RTc2RTQ3N0IwNzkwNjA3 RDI3NzVDOTAeFw0yNjA1MjkxMzIzMTRaFw0yNzA1MjgxMzI4MTRaMDMxMTAvBgNV BAMTKEVGNUI2NTI4Qzg0MTM2NzJFQjc5MDg4ODRGMzdBQjMyQTBFQTFEMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCG+XSsKl6jwPzoi+n9vsJhMOX8 eSR4T75HCM/6QBX/TZfzWNqdrS2NF/yhNfNLJZ2K45p7vrxJVVhIFhc2R9SY/qfV wHE863cqN6SPEyWkq5sF7/7LV9gqfv5b6sMvDhg9nNOh2E71D+DUU987ryDifjOe mMVvdiCkZ51rxsjfR4IUvNT3CpowKwE8GdfydXfWWz0CjGiXSBzLwxcNr29ixTpo 5B9iy0bMKR3rNigMVZACkqWpRUj4dJ9qiwUv4ZlPcyR1ehLNb2Aina4K9TP4jvR9 2qbCnza/sh3UIuddDwf8LJpymRAHEqSzJZpomoIhlbWywuFTCiCu1lNJWodlAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU71tlKMhBNnLreQiITzerMqDqHTEwHwYDVR0j BBgwFoAUsoJ0pxih/pp0525HeweQYH0ndckwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjcyNDMzMTczNTAyMzYzMy8wL0IyODI3NEE3MThBMUZFOUE3NEU3NkU0NzdCMDc5 MDYwN0QyNzc1QzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjI4Mjc0QTcxOEExRkU5QTc0RTc2RTQ3N0IwNzkwNjA3RDI3NzVDOS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTEyNzI0MzMxNzM1MDIzNjMzLzAvMzQzMzJlMzIzMjM2 MmUzMjMzMzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEASvi7DANBgkqhkiG9w0BAQsFAAOCAQEAmXj2hHx9keZ+VYNV5OPtnTeWLLWJ s40drw1ZTp+kFp7q0iZqQIuapM3rwmGZub5C+tjE8ZfLonArwkruXWLUMXm6H3m6 NdZvquhqKlQm8crnCG0eSUaC6U2gU354vJcFywug+dYp3OK2BQiymXsos+GKVqlw 5RivG+avmHIyUZHeKUvkSKNoAU07oP9JecoIGkvkvpyYtZvULsHwJWLeZmQNhFso N1uiANEp11taiQxyqO05n18qnwGlKl8DGBKhR4Tf3oiejtSUKpBDnJ6c6AH3G8iq 8SjYf8oQxcAQdndyFKEEM0jt628+kRtv5BOGz7enVRrwdhtZtuBK2L11hQ== -----END CERTIFICATE-----Generated at Fri May 29 22:56:46 2026 by rpki-client