$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/34332e3232372e3130342e302f32322d3232203d3e2034383337.roa File: 34332e3232372e3130342e302f32322d3232203d3e2034383337.roa (raw, json) Hash identifier: GLbfxMMaTcSe4efbnlbWRaxf9Jjtph+xTIVxiVt5E+8= Subject key identifier: F7:6E:79:01:57:8E:C0:8C:54:CD:77:ED:0B:C0:BF:F8:B9:FE:D3:06 Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD Certificate serial: 74120D0DF708352C251918DD302CE4D2B5712D67 Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/34332e3232372e3130342e302f32322d3232203d3e2034383337.roa Signing time: Wed 03 Jun 2026 06:20:29 +0000 ROA not before: Wed 03 Jun 2026 06:15:29 +0000 ROA not after: Wed 02 Jun 2027 06:20:29 +0000 asID: 4837 IP address blocks: 43.227.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:12:0d:0d:f7:08:35:2c:25:19:18:dd:30:2c:e4:d2:b5:71:2d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD Validity Not Before: Jun 3 06:15:29 2026 GMT Not After : Jun 2 06:20:29 2027 GMT Subject: CN=F76E7901578EC08C54CD77ED0BC0BFF8B9FED306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:09:87:99:be:5f:74:3e:5b:30:3c:ee:21:06: de:81:62:b8:04:24:af:53:5c:c0:b0:68:35:6f:ce: ac:e1:b9:2d:8c:d4:98:e3:c9:4d:97:3e:c7:8c:19: 54:e9:9b:f4:30:da:4a:8c:a3:06:4c:f2:54:39:e4: 6d:8f:bd:00:a6:ff:6a:eb:e7:0c:db:7c:fb:b4:ed: eb:b4:02:34:e9:2f:2c:a2:a9:cd:68:21:a6:65:5c: 43:7a:7c:09:f2:72:2b:f7:a0:a0:1d:51:d9:12:a7: ba:31:e4:38:26:64:65:e0:bc:ea:06:04:02:aa:8b: 23:57:5c:05:8a:54:4d:41:ae:1b:ee:39:10:31:4d: 15:1a:48:8e:46:ac:61:da:31:1f:e0:75:56:f2:dc: 4e:05:45:7c:4b:5c:cc:40:e3:0d:d7:26:99:c3:f5: be:d6:31:ea:ca:1e:79:3a:a8:e0:7c:d2:2b:6a:74: 7c:52:6d:e6:05:18:43:0e:9e:c9:a7:96:80:bb:32: f5:29:2f:53:fa:77:29:e5:99:25:5b:02:0b:d4:29: 2c:39:97:5d:58:17:e4:da:a9:dd:76:67:88:20:22: 91:15:0c:21:34:09:d2:56:5b:fc:b2:2f:3c:4c:c0: 45:38:5b:5d:c9:fa:fe:5d:44:c5:ec:b5:d5:6e:ea: d6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:6E:79:01:57:8E:C0:8C:54:CD:77:ED:0B:C0:BF:F8:B9:FE:D3:06 X509v3 Authority Key Identifier: keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/34332e3232372e3130342e302f32322d3232203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.227.104.0/22 Signature Algorithm: sha256WithRSAEncryption b4:c1:7f:48:e7:68:85:3d:5e:68:4e:0b:2e:48:74:ae:7e:32: 29:9a:fa:ea:e3:4b:c8:c5:5e:df:4d:53:8f:a4:97:2c:93:0d: 49:d8:c2:5c:21:61:7f:7f:59:d2:50:14:c3:f3:f7:0b:c5:a0: 54:c8:a3:11:9f:66:43:83:3b:30:5f:0a:e1:23:05:dd:ee:7b: 7c:52:31:a4:17:b7:4a:90:a6:b7:fe:24:ea:76:cd:37:dd:4f: fb:de:37:84:6d:32:f3:27:57:f1:87:6e:a9:13:db:01:8a:b1: d5:52:49:ba:a2:da:08:e1:ae:a8:f2:63:7a:17:4c:8a:55:57: ec:4d:41:ca:01:46:08:9f:17:c5:bd:86:a1:3b:41:6c:b3:90: b4:ab:30:66:a9:80:ae:1e:3b:39:a5:d1:91:4f:32:b0:ff:b7: 80:52:63:9d:c5:06:fe:c9:73:cf:22:7b:9c:6e:e4:1b:b4:11: b7:d8:7e:87:b5:34:e1:44:85:31:d0:5a:cb:45:b7:eb:ce:86: 8f:33:17:45:7e:9b:6d:a3:35:7c:28:1b:40:16:fa:e4:3d:21: 33:4e:fc:b8:14:59:03:4a:d1:fe:6c:91:57:96:b7:a2:a2:58: 8e:5b:c4:01:18:d3:85:c1:85:8f:8e:74:38:90:9e:e8:bd:6d: ea:47:21:a3 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUdBINDfcINSwlGRjdMCzk0rVxLWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYz NUI3ODFERDAeFw0yNjA2MDMwNjE1MjlaFw0yNzA2MDIwNjIwMjlaMDMxMTAvBgNV BAMTKEY3NkU3OTAxNTc4RUMwOEM1NENENzdFRDBCQzBCRkY4QjlGRUQzMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8CYeZvl90PlswPO4hBt6BYrgE JK9TXMCwaDVvzqzhuS2M1JjjyU2XPseMGVTpm/Qw2kqMowZM8lQ55G2PvQCm/2rr 5wzbfPu07eu0AjTpLyyiqc1oIaZlXEN6fAnyciv3oKAdUdkSp7ox5DgmZGXgvOoG BAKqiyNXXAWKVE1BrhvuORAxTRUaSI5GrGHaMR/gdVby3E4FRXxLXMxA4w3XJpnD 9b7WMerKHnk6qOB80itqdHxSbeYFGEMOnsmnloC7MvUpL1P6dynlmSVbAgvUKSw5 l11YF+Taqd12Z4ggIpEVDCE0CdJWW/yyLzxMwEU4W13J+v5dRMXstdVu6tanAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU9255AVeOwIxUzXftC8C/+Ln+0wYwHwYDVR0j BBgwFoAUNyKsyLLlVAISHurgGUye1jW3gd0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDM1Njg1NjI2NTk2NTU4NS8wLzM3MjJBQ0M4QjJFNTU0MDIxMjFFRUFFMDE5NEM5 RUQ2MzVCNzgxREQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYzNUI3ODFERC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTE0MzU2ODU2MjY1OTY1NTg1LzAvMzQzMzJlMzIzMjM3 MmUzMTMwMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAivjaDANBgkqhkiG9w0BAQsFAAOCAQEAtMF/SOdohT1eaE4LLkh0rn4yKZr6 6uNLyMVe301Tj6SXLJMNSdjCXCFhf39Z0lAUw/P3C8WgVMijEZ9mQ4M7MF8K4SMF 3e57fFIxpBe3SpCmt/4k6nbNN91P+943hG0y8ydX8YduqRPbAYqx1VJJuqLaCOGu qPJjehdMilVX7E1BygFGCJ8Xxb2GoTtBbLOQtKswZqmArh47OaXRkU8ysP+3gFJj ncUG/slzzyJ7nG7kG7QRt9h+h7U04USFMdBay0W3686GjzMXRX6bbaM1fCgbQBb6 5D0hM078uBRZA0rR/myRV5a3oqJYjlvEARjThcGFj450OJCe6L1t6kchow== -----END CERTIFICATE-----Generated at Fri Jun 12 06:44:31 2026 by rpki-client