$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114469232214540311/0/34332e3234372e3234392e302f32342d3332203d3e2034383038.roa File: 34332e3234372e3234392e302f32342d3332203d3e2034383038.roa (raw, json) Hash identifier: 1GL94cmOHgTxGLhU11UJqf/QFKGqpR5pyyF8pA4Xd5U= Subject key identifier: 5D:7B:90:6C:9F:06:C9:94:43:FC:34:97:88:BC:D4:9B:75:3D:4F:FE Certificate issuer: /CN=3789349FBAB7B9C74B292EDF5849BA368344B348 Certificate serial: 634CA5908E05D4E779817965878C17C2845DB8FB Authority key identifier: 37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/34332e3234372e3234392e302f32342d3332203d3e2034383038.roa Signing time: Wed 03 Jun 2026 08:27:57 +0000 ROA not before: Wed 03 Jun 2026 08:22:57 +0000 ROA not after: Wed 02 Jun 2027 08:27:57 +0000 asID: 4808 IP address blocks: 43.247.249.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:4c:a5:90:8e:05:d4:e7:79:81:79:65:87:8c:17:c2:84:5d:b8:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3789349FBAB7B9C74B292EDF5849BA368344B348 Validity Not Before: Jun 3 08:22:57 2026 GMT Not After : Jun 2 08:27:57 2027 GMT Subject: CN=5D7B906C9F06C99443FC349788BCD49B753D4FFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b3:03:f4:02:5c:48:63:2f:0c:35:76:8a:2b: 19:d1:71:0a:8e:3f:d1:27:3d:79:95:0f:f8:3c:e5: 09:3b:25:7e:6a:a0:48:52:eb:38:77:fe:60:46:93: 73:38:83:6f:9b:1b:00:96:dd:9b:b4:b7:31:a7:b9: 5d:71:94:e0:b7:24:bd:7b:7c:75:03:ac:80:79:09: be:e9:4d:18:f1:5a:a9:a0:6b:4b:3a:4c:a1:4e:c2: 62:28:a6:38:a0:4e:0a:a2:2e:3b:e6:f5:44:63:3f: d4:70:89:e3:62:7e:c2:d7:c6:78:69:50:85:28:6a: 94:1a:51:41:fc:63:6b:11:b5:24:a0:6d:7d:49:bb: 3f:93:1f:51:54:c4:8c:13:a4:d2:25:ec:42:bc:72: 25:8b:c1:bb:f5:5b:da:17:bb:10:fa:52:c8:76:60: e8:14:97:05:77:49:55:fc:86:48:48:23:90:da:80: ec:3b:5a:3d:59:47:5d:15:cd:52:11:83:e3:f8:08: 81:63:bc:10:3c:c8:8a:3a:0c:c9:f5:e9:28:5b:f1: 98:35:3f:1e:33:f5:71:db:10:52:95:3f:52:3d:d6: ce:21:af:a1:32:bb:1e:be:87:8d:b8:b9:22:5b:cd: d1:22:bc:31:45:d3:7c:b3:40:34:23:a1:a5:88:e2: 3c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7B:90:6C:9F:06:C9:94:43:FC:34:97:88:BC:D4:9B:75:3D:4F:FE X509v3 Authority Key Identifier: keyid:37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/34332e3234372e3234392e302f32342d3332203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.247.249.0/24 Signature Algorithm: sha256WithRSAEncryption 57:17:3d:f8:6b:00:dd:e9:7d:1c:73:0f:16:61:d0:96:c7:7a: 3e:db:cb:53:b1:65:ef:94:83:47:95:fc:e7:cb:a1:6e:c6:3c: 31:b6:7c:5a:a7:c7:4e:40:ef:aa:b4:0a:a7:38:b1:5f:68:e0: fc:9d:94:bf:9b:8e:8f:3a:39:2a:50:5b:2e:38:ae:4b:64:70: 7c:0c:6d:49:d7:19:15:56:0a:0c:1e:cf:3b:47:53:25:05:b2: 7f:1a:bd:ef:b7:1b:42:1d:5f:3e:6e:b7:ce:32:57:21:66:ec: eb:f7:c2:6d:e9:1d:85:6e:1f:e2:f4:a3:48:4f:b0:cf:02:4d: 84:2c:c2:b6:87:f6:59:6c:c5:b4:c9:1d:13:ca:d1:13:1c:30: 8b:29:52:e1:2e:5d:c6:67:9a:8c:64:69:c2:a3:a8:10:68:a0: 61:10:04:9f:5e:90:f8:f4:28:dc:e3:cc:2c:85:62:ea:c1:3a: 12:ca:95:26:ca:bb:a1:26:72:6b:c0:9d:db:0c:1e:77:74:7c: 26:b5:eb:4d:23:e9:a9:a4:8c:bf:66:43:55:68:9d:8a:08:4c: 66:30:82:53:c2:b9:dc:c4:ec:19:58:47:5e:5f:14:06:97:46: e9:9c:9c:4a:a9:e4:f8:af:25:65:f9:c8:2b:4c:45:e6:06:16: c0:1a:e3:d9 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUY0ylkI4F1Od5gXllh4wXwoRduPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4 MzQ0QjM0ODAeFw0yNjA2MDMwODIyNTdaFw0yNzA2MDIwODI3NTdaMDMxMTAvBgNV BAMTKDVEN0I5MDZDOUYwNkM5OTQ0M0ZDMzQ5Nzg4QkNENDlCNzUzRDRGRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCswP0AlxIYy8MNXaKKxnRcQqO P9EnPXmVD/g85Qk7JX5qoEhS6zh3/mBGk3M4g2+bGwCW3Zu0tzGnuV1xlOC3JL17 fHUDrIB5Cb7pTRjxWqmga0s6TKFOwmIopjigTgqiLjvm9URjP9RwieNifsLXxnhp UIUoapQaUUH8Y2sRtSSgbX1Juz+TH1FUxIwTpNIl7EK8ciWLwbv1W9oXuxD6Ush2 YOgUlwV3SVX8hkhII5DagOw7Wj1ZR10VzVIRg+P4CIFjvBA8yIo6DMn16Shb8Zg1 Px4z9XHbEFKVP1I91s4hr6Eyux6+h424uSJbzdEivDFF03yzQDQjoaWI4jwVAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUXXuQbJ8GyZRD/DSXiLzUm3U9T/4wHwYDVR0j BBgwFoAUN4k0n7q3ucdLKS7fWEm6NoNEs0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDQ2OTIzMjIxNDU0MDMxMS8wLzM3ODkzNDlGQkFCN0I5Qzc0QjI5MkVERjU4NDlC QTM2ODM0NEIzNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4MzQ0QjM0OC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTE0NDY5MjMyMjE0NTQwMzExLzAvMzQzMzJlMzIzNDM3 MmUzMjM0MzkyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEACv3+TANBgkqhkiG9w0BAQsFAAOCAQEAVxc9+GsA3el9HHMPFmHQlsd6PtvL U7Fl75SDR5X858uhbsY8MbZ8WqfHTkDvqrQKpzixX2jg/J2Uv5uOjzo5KlBbLjiu S2RwfAxtSdcZFVYKDB7PO0dTJQWyfxq977cbQh1fPm63zjJXIWbs6/fCbekdhW4f 4vSjSE+wzwJNhCzCtof2WWzFtMkdE8rRExwwiylS4S5dxmeajGRpwqOoEGigYRAE n16Q+PQo3OPMLIVi6sE6EsqVJsq7oSZya8Cd2wwed3R8JrXrTSPpqaSMv2ZDVWid ighMZjCCU8K53MTsGVhHXl8UBpdG6ZycSqnk+K8lZfnIK0xF5gYWwBrj2Q== -----END CERTIFICATE-----Generated at Fri Jun 12 02:25:18 2026 by rpki-client