$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114469232214540311/0/34332e3234372e3234382e302f32342d3332203d3e2034383038.roa File: 34332e3234372e3234382e302f32342d3332203d3e2034383038.roa (raw, json) Hash identifier: vTt+IglLI4oJSUdpunww7HOIwuJePQzsUZURPS8m/HA= Subject key identifier: 9A:24:46:4D:22:37:29:B6:22:BC:92:90:4E:1D:2E:09:2C:8D:52:0D Certificate issuer: /CN=3789349FBAB7B9C74B292EDF5849BA368344B348 Certificate serial: 3BF18EF30ECAAE291DA98A84153F47DEE9DFC31E Authority key identifier: 37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/34332e3234372e3234382e302f32342d3332203d3e2034383038.roa Signing time: Wed 03 Jun 2026 08:27:57 +0000 ROA not before: Wed 03 Jun 2026 08:22:57 +0000 ROA not after: Wed 02 Jun 2027 08:27:57 +0000 asID: 4808 IP address blocks: 43.247.248.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f1:8e:f3:0e:ca:ae:29:1d:a9:8a:84:15:3f:47:de:e9:df:c3:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3789349FBAB7B9C74B292EDF5849BA368344B348 Validity Not Before: Jun 3 08:22:57 2026 GMT Not After : Jun 2 08:27:57 2027 GMT Subject: CN=9A24464D223729B622BC92904E1D2E092C8D520D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7d:9c:f0:b5:b2:c3:d1:36:39:ef:bc:95:e6: 01:f6:3e:64:5a:20:bc:21:d1:a8:b5:2c:40:01:8e: 6c:a3:c4:4b:55:21:55:40:9a:90:0b:a4:64:dc:0b: 66:ad:73:74:fa:4c:d0:f0:8e:fb:df:ef:93:85:cb: 54:36:66:54:0e:58:eb:da:b7:86:8a:eb:5e:52:10: ab:ec:61:1f:04:75:a4:d3:75:b1:d2:f2:2c:28:12: e8:90:56:d4:2c:9d:a2:98:ba:9c:dd:e4:7b:ed:7e: 56:d9:7b:44:59:93:15:9f:d8:0e:87:e8:1c:2d:82: 54:d7:fd:fd:ad:d2:f3:08:51:63:f6:db:38:6a:d8: 32:6b:83:f6:fc:dc:7a:24:ad:b8:b9:38:e9:4e:b3: f3:6c:8c:46:0c:c9:41:b5:76:fd:17:7b:af:f6:4a: 0c:85:a2:3c:65:4a:be:41:bb:5e:de:ce:ce:e1:a3: 42:c4:97:d9:2d:75:9a:39:ec:c8:38:af:08:31:30: 52:39:27:56:1a:c6:b4:9d:ae:07:96:b5:8f:73:0a: 4b:9c:20:a5:3d:27:b0:22:91:5f:4d:bc:64:4c:8a: 17:4e:d9:a4:cb:fb:a4:a3:6e:d1:fe:18:68:2a:04: e3:db:5e:bb:ec:c2:5a:a9:6f:63:bc:ea:bb:a6:d6: e7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:24:46:4D:22:37:29:B6:22:BC:92:90:4E:1D:2E:09:2C:8D:52:0D X509v3 Authority Key Identifier: keyid:37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/34332e3234372e3234382e302f32342d3332203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.247.248.0/24 Signature Algorithm: sha256WithRSAEncryption 48:10:35:7e:fd:d9:6a:0d:d0:75:53:af:40:ff:57:b1:16:9a: d0:39:2a:aa:71:7f:78:72:d2:db:74:9e:e9:e6:e7:a8:10:60: e0:8a:61:ef:5b:47:75:06:e3:ce:33:de:72:37:d0:b5:68:44: dd:4a:28:a0:45:9c:52:55:b0:35:12:5c:c5:df:27:3a:ea:c2: d1:31:e7:ed:94:8a:4e:a7:eb:77:b3:ca:fa:68:44:3d:24:db: 49:c3:39:e2:6c:33:f3:e5:fe:3e:17:20:7d:e7:e0:7f:52:97: e3:93:23:bd:76:81:25:33:80:09:cc:d8:dc:8b:ac:e2:6c:9a: 46:da:6e:50:0b:da:90:d1:10:11:a5:c9:ff:47:3c:61:b8:7b: f3:73:86:1d:b8:b1:b1:cf:97:31:01:11:ad:8a:bc:8c:b2:17: 44:a6:53:f2:da:68:5d:b5:4e:1a:ba:12:96:0f:45:b7:2c:70: ff:5c:2b:cf:87:f5:52:d1:e8:f2:bd:a6:4e:6e:58:f2:29:ae: aa:55:29:ff:21:3a:70:0e:5f:cc:d3:69:0f:e4:c3:62:a1:86: f7:a0:fc:5d:f8:7a:2e:aa:39:c1:bf:89:d7:73:c4:de:1e:42: 83:bc:10:79:66:2c:34:c2:0d:61:77:bf:21:e9:37:de:c0:60: 3a:40:3c:d1 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUO/GO8w7KrikdqYqEFT9H3unfwx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4 MzQ0QjM0ODAeFw0yNjA2MDMwODIyNTdaFw0yNzA2MDIwODI3NTdaMDMxMTAvBgNV BAMTKDlBMjQ0NjREMjIzNzI5QjYyMkJDOTI5MDRFMUQyRTA5MkM4RDUyMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClfZzwtbLD0TY577yV5gH2PmRa ILwh0ai1LEABjmyjxEtVIVVAmpALpGTcC2atc3T6TNDwjvvf75OFy1Q2ZlQOWOva t4aK615SEKvsYR8EdaTTdbHS8iwoEuiQVtQsnaKYupzd5HvtflbZe0RZkxWf2A6H 6BwtglTX/f2t0vMIUWP22zhq2DJrg/b83Hokrbi5OOlOs/NsjEYMyUG1dv0Xe6/2 SgyFojxlSr5Bu17ezs7ho0LEl9ktdZo57Mg4rwgxMFI5J1YaxrSdrgeWtY9zCkuc IKU9J7AikV9NvGRMihdO2aTL+6SjbtH+GGgqBOPbXrvswlqpb2O86rum1ue/AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUmiRGTSI3KbYivJKQTh0uCSyNUg0wHwYDVR0j BBgwFoAUN4k0n7q3ucdLKS7fWEm6NoNEs0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDQ2OTIzMjIxNDU0MDMxMS8wLzM3ODkzNDlGQkFCN0I5Qzc0QjI5MkVERjU4NDlC QTM2ODM0NEIzNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4MzQ0QjM0OC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTE0NDY5MjMyMjE0NTQwMzExLzAvMzQzMzJlMzIzNDM3 MmUzMjM0MzgyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEACv3+DANBgkqhkiG9w0BAQsFAAOCAQEASBA1fv3Zag3QdVOvQP9XsRaa0Dkq qnF/eHLS23Se6ebnqBBg4Iph71tHdQbjzjPecjfQtWhE3UoooEWcUlWwNRJcxd8n OurC0THn7ZSKTqfrd7PK+mhEPSTbScM54mwz8+X+Phcgfefgf1KX45MjvXaBJTOA CczY3Ius4myaRtpuUAvakNEQEaXJ/0c8Ybh783OGHbixsc+XMQERrYq8jLIXRKZT 8tpoXbVOGroSlg9Ftyxw/1wrz4f1UtHo8r2mTm5Y8imuqlUp/yE6cA5fzNNpD+TD YqGG96D8Xfh6Lqo5wb+J13PE3h5Cg7wQeWYsNMINYXe/Iek33sBgOkA80Q== -----END CERTIFICATE-----Generated at Fri Jun 12 02:25:18 2026 by rpki-client