$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114852675259727895/0/34332e3234382e3233322e302f32332d3233203d3e2034383038.roa File: 34332e3234382e3233322e302f32332d3233203d3e2034383038.roa (raw, json) Hash identifier: q4QXAKyEiqyt6O8tYhJdmHeUcXIERGW2oDuSUPsRrZc= Subject key identifier: D5:C5:86:D7:79:16:5F:D5:DE:C8:48:F0:DC:46:E9:CC:B4:E6:71:19 Certificate issuer: /CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23 Certificate serial: 5EEC4D8CBF1B496ECFDB3AB01A52E9FD2E64D862 Authority key identifier: D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/34332e3234382e3233322e302f32332d3233203d3e2034383038.roa Signing time: Thu 04 Jun 2026 09:53:15 +0000 ROA not before: Thu 04 Jun 2026 09:48:15 +0000 ROA not after: Thu 03 Jun 2027 09:53:15 +0000 asID: 4808 IP address blocks: 43.248.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:ec:4d:8c:bf:1b:49:6e:cf:db:3a:b0:1a:52:e9:fd:2e:64:d8:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23 Validity Not Before: Jun 4 09:48:15 2026 GMT Not After : Jun 3 09:53:15 2027 GMT Subject: CN=D5C586D779165FD5DEC848F0DC46E9CCB4E67119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:19:3d:7d:f2:be:8c:c8:61:93:62:d0:cd:8a: 59:5b:0c:b1:d0:38:7b:40:aa:8a:8c:94:7a:1d:7a: 82:5e:52:b8:95:4e:ad:4d:4d:e2:66:ad:69:4f:52: 59:d0:03:a7:f9:ef:dc:58:41:7e:de:1d:9f:27:2f: 2d:21:00:56:01:4b:4c:53:98:58:b0:9b:fe:a5:cb: ff:0f:73:63:c6:45:cd:76:18:4e:54:e3:ad:35:bc: f1:fd:bc:c0:fb:30:82:04:c3:ad:5d:f6:dd:f1:39: ee:36:ed:26:3e:98:bc:8c:37:2f:4b:ab:48:76:df: bb:d6:d1:61:d3:fb:ce:7b:34:d9:7a:ff:b1:36:41: 68:63:a7:08:dd:5b:75:aa:50:1c:c8:07:3e:f1:66: e0:60:36:31:f9:e9:74:5a:a4:55:ff:a8:c2:0c:51: 7b:f0:30:e0:24:c0:93:64:bd:44:6e:97:63:ad:9d: 76:f7:0e:ff:42:79:38:34:14:97:cf:0d:66:20:11: 7f:95:43:d3:27:65:9e:86:0c:00:89:47:e4:04:a9: 65:a7:57:e3:c2:47:d1:4f:2b:ad:8d:0a:ab:39:3e: 30:24:30:f1:be:2e:82:5a:e1:00:3a:72:a6:9b:70: ea:76:90:65:bf:87:32:81:83:8c:be:62:5b:54:1c: a5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C5:86:D7:79:16:5F:D5:DE:C8:48:F0:DC:46:E9:CC:B4:E6:71:19 X509v3 Authority Key Identifier: keyid:D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/34332e3234382e3233322e302f32332d3233203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.232.0/23 Signature Algorithm: sha256WithRSAEncryption 20:14:02:bf:5e:a4:50:85:da:67:43:c4:a8:bd:4f:90:93:8e: 38:81:b4:c5:36:f8:70:18:4d:0e:6d:03:07:22:1d:78:fa:4f: d7:1c:9b:91:d2:63:10:ed:b5:3b:01:71:26:65:2d:46:e4:bf: db:ea:49:fa:a3:4e:19:87:34:e0:31:54:0b:93:6f:57:46:c4: 84:ec:98:8f:88:fd:84:d5:2a:94:33:cf:70:97:ac:cd:cf:25: b7:62:f5:88:6e:e2:6c:3d:0f:0b:d1:64:99:55:5a:46:cb:7d: 51:1e:1e:71:2e:29:91:5a:7a:33:b4:8e:2d:d3:1c:32:cd:93: 67:13:3d:55:4e:db:1c:f3:70:fb:29:45:ab:16:1b:71:4a:7d: 18:c3:51:97:7e:90:80:ab:be:ad:ce:31:dd:68:aa:d4:6d:98: 1e:c9:63:08:09:dd:40:ed:0e:ea:90:33:e0:e1:d8:e3:dd:c7: 71:9a:f7:ba:1c:72:15:85:23:7c:cf:33:1c:fd:df:e9:2a:2f: 72:c9:ea:b6:0a:8c:af:ce:d4:5d:11:fd:6a:41:1d:fa:02:48: f6:ae:05:d6:a2:f2:cb:a1:ac:51:6e:4e:80:2e:d1:e3:4e:f0: 9b:4e:cc:5d:1e:22:c1:c0:c8:44:b9:92:c9:9e:74:70:a3:e3: f5:25:d8:4e -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUXuxNjL8bSW7P2zqwGlLp/S5k2GIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQzREZDNDEzQkM4NEZBMThCRDFCOEUwN0EyMzQ2MkMw NDNBQ0IyMzAeFw0yNjA2MDQwOTQ4MTVaFw0yNzA2MDMwOTUzMTVaMDMxMTAvBgNV BAMTKEQ1QzU4NkQ3NzkxNjVGRDVERUM4NDhGMERDNDZFOUNDQjRFNjcxMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmGT198r6MyGGTYtDNillbDLHQ OHtAqoqMlHodeoJeUriVTq1NTeJmrWlPUlnQA6f579xYQX7eHZ8nLy0hAFYBS0xT mFiwm/6ly/8Pc2PGRc12GE5U4601vPH9vMD7MIIEw61d9t3xOe427SY+mLyMNy9L q0h237vW0WHT+857NNl6/7E2QWhjpwjdW3WqUBzIBz7xZuBgNjH56XRapFX/qMIM UXvwMOAkwJNkvURul2OtnXb3Dv9CeTg0FJfPDWYgEX+VQ9MnZZ6GDACJR+QEqWWn V+PCR9FPK62NCqs5PjAkMPG+LoJa4QA6cqabcOp2kGW/hzKBg4y+YltUHKUHAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU1cWG13kWX9XeyEjw3EbpzLTmcRkwHwYDVR0j BBgwFoAU1D38QTvIT6GL0bjgeiNGLAQ6yyMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg1MjY3NTI1OTcyNzg5NS8wL0Q0M0RGQzQxM0JDODRGQTE4QkQxQjhFMDdBMjM0 NjJDMDQzQUNCMjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDQzREZDNDEzQkM4NEZBMThCRDFCOEUwN0EyMzQ2MkMwNDNBQ0IyMy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTE0ODUyNjc1MjU5NzI3ODk1LzAvMzQzMzJlMzIzNDM4 MmUzMjMzMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEASv46DANBgkqhkiG9w0BAQsFAAOCAQEAIBQCv16kUIXaZ0PEqL1PkJOOOIG0 xTb4cBhNDm0DByIdePpP1xybkdJjEO21OwFxJmUtRuS/2+pJ+qNOGYc04DFUC5Nv V0bEhOyYj4j9hNUqlDPPcJeszc8lt2L1iG7ibD0PC9FkmVVaRst9UR4ecS4pkVp6 M7SOLdMcMs2TZxM9VU7bHPNw+ylFqxYbcUp9GMNRl36QgKu+rc4x3Wiq1G2YHslj CAndQO0O6pAz4OHY493HcZr3uhxyFYUjfM8zHP3f6SovcsnqtgqMr87UXRH9akEd +gJI9q4F1qLyy6GsUW5OgC7R407wm07MXR4iwcDIRLmSyZ50cKPj9SXYTg== -----END CERTIFICATE-----Generated at Fri Jun 12 02:24:10 2026 by rpki-client