$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123865781596061733/0/34332e3234302e35362e302f32322d3232203d3e2030.roa File: 34332e3234302e35362e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: fUquqZO/jRnoexjUkCY8aUxe2xZ+sGDGR336oDjLV6g= Subject key identifier: 11:16:63:69:AE:49:7E:61:D9:04:9B:E1:75:8B:78:A8:3F:D7:88:70 Certificate issuer: /CN=C4676B3058F5B3F9BFB658BBED8F5E76C87614EB Certificate serial: 7AA6F4641880489C63B54DB4B96198BC601DBB06 Authority key identifier: C4:67:6B:30:58:F5:B3:F9:BF:B6:58:BB:ED:8F:5E:76:C8:76:14:EB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/34332e3234302e35362e302f32322d3232203d3e2030.roa Signing time: Mon 29 Jun 2026 06:46:45 +0000 ROA not before: Mon 29 Jun 2026 06:41:45 +0000 ROA not after: Mon 28 Jun 2027 06:46:45 +0000 asID: 0 IP address blocks: 43.240.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 Jul 2026 22:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:a6:f4:64:18:80:48:9c:63:b5:4d:b4:b9:61:98:bc:60:1d:bb:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4676B3058F5B3F9BFB658BBED8F5E76C87614EB Validity Not Before: Jun 29 06:41:45 2026 GMT Not After : Jun 28 06:46:45 2027 GMT Subject: CN=11166369AE497E61D9049BE1758B78A83FD78870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:89:fb:4f:13:85:b4:6c:f4:75:c2:ae:de:67: b4:1d:9c:29:2d:6d:b7:1c:af:20:93:b3:39:a1:45: 0b:93:11:4f:a1:a1:d5:cf:8e:2e:9d:ed:2e:41:dd: 0f:e6:b2:01:60:b6:37:93:05:36:f3:83:8c:70:69: ec:19:ab:e5:a1:55:5a:61:c5:59:fc:7e:a4:0a:6e: 9a:0f:cc:f5:ab:d3:58:dc:4b:ee:8d:c9:df:83:fa: 11:ff:10:b0:23:47:9b:df:b0:23:78:7b:00:51:84: e5:ec:cc:f6:be:c1:56:c9:65:ba:7a:1e:b4:9a:75: 5b:c4:c6:0b:03:21:fa:d2:d1:7c:c9:f6:56:41:b2: 44:4a:94:03:1b:45:53:3e:99:70:b4:7f:24:57:a6: 99:0c:76:dc:91:24:f2:5a:1e:1b:7c:30:d4:f2:f6: c7:3b:f0:e5:b1:95:51:96:66:cd:ba:42:36:65:eb: 65:7c:89:e6:8b:3f:7b:b1:07:1e:8d:69:b4:7c:1e: ce:33:4d:38:08:a4:4b:64:e0:57:df:99:17:0b:db: 74:a5:03:af:13:10:90:22:0c:c9:59:a9:f1:35:67: 16:d2:dd:dd:87:e9:cc:47:cf:b7:81:da:cc:84:7a: 86:52:7d:74:42:b7:05:1d:f2:be:17:46:c2:30:46: 3a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:16:63:69:AE:49:7E:61:D9:04:9B:E1:75:8B:78:A8:3F:D7:88:70 X509v3 Authority Key Identifier: keyid:C4:67:6B:30:58:F5:B3:F9:BF:B6:58:BB:ED:8F:5E:76:C8:76:14:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/34332e3234302e35362e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.56.0/22 Signature Algorithm: sha256WithRSAEncryption 76:d1:61:f8:f1:ec:2f:06:6a:eb:29:8c:e3:e3:03:2e:f9:8a: 12:20:8d:2d:86:08:df:54:56:42:14:dd:76:c4:fc:d7:72:50: c1:08:17:a5:3a:3c:3c:32:ec:99:9d:c1:3c:a3:f4:4d:ca:cf: c7:21:08:20:42:32:81:28:9e:a6:b2:0f:b0:8b:1a:b3:23:8b: 9d:e3:b8:57:fc:ec:97:bf:06:eb:cd:55:ed:2a:d1:e7:de:00: f5:e2:8d:8e:90:e9:a8:4e:11:be:63:e9:1e:74:0e:5f:a9:ef: 52:02:29:1e:9b:64:b8:76:91:32:c8:ac:22:64:06:49:d1:55: b2:3c:0c:ef:09:b7:c3:d2:2b:41:52:b8:c7:44:53:f0:66:e7: c2:1b:82:a4:50:63:60:1e:61:28:59:62:d5:09:6f:cf:ab:88: a1:d5:2d:fc:f1:8d:04:24:c2:93:36:a1:94:74:52:11:a3:bb: 70:b2:e9:1a:a6:73:a0:91:99:93:0f:fe:2d:e9:f8:11:fd:3c: c5:99:18:84:54:0e:43:b4:3f:e5:b9:b0:4b:67:f7:de:39:9e: 12:4b:a6:79:14:e4:eb:14:b0:44:f9:05:fc:c6:da:82:cf:41: 14:6c:07:e0:fb:64:2e:d4:57:be:a6:21:75:a7:94:2a:55:48: 28:7b:a4:96 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUeqb0ZBiASJxjtU20uWGYvGAduwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ2NzZCMzA1OEY1QjNGOUJGQjY1OEJCRUQ4RjVFNzZD ODc2MTRFQjAeFw0yNjA2MjkwNjQxNDVaFw0yNzA2MjgwNjQ2NDVaMDMxMTAvBgNV BAMTKDExMTY2MzY5QUU0OTdFNjFEOTA0OUJFMTc1OEI3OEE4M0ZENzg4NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRiftPE4W0bPR1wq7eZ7QdnCkt bbccryCTszmhRQuTEU+hodXPji6d7S5B3Q/msgFgtjeTBTbzg4xwaewZq+WhVVph xVn8fqQKbpoPzPWr01jcS+6Nyd+D+hH/ELAjR5vfsCN4ewBRhOXszPa+wVbJZbp6 HrSadVvExgsDIfrS0XzJ9lZBskRKlAMbRVM+mXC0fyRXppkMdtyRJPJaHht8MNTy 9sc78OWxlVGWZs26QjZl62V8ieaLP3uxBx6NabR8Hs4zTTgIpEtk4FffmRcL23Sl A68TEJAiDMlZqfE1ZxbS3d2H6cxHz7eB2syEeoZSfXRCtwUd8r4XRsIwRjopAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUERZjaa5JfmHZBJvhdYt4qD/XiHAwHwYDVR0j BBgwFoAUxGdrMFj1s/m/tli77Y9edsh2FOswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg2NTc4MTU5NjA2MTczMy8wL0M0Njc2QjMwNThGNUIzRjlCRkI2NThCQkVEOEY1 RTc2Qzg3NjE0RUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzQ2NzZCMzA1OEY1QjNGOUJGQjY1OEJCRUQ4RjVFNzZDODc2MTRFQi5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTIzODY1NzgxNTk2MDYxNzMzLzAvMzQzMzJlMzIzNDMw MmUzNTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIr8Dgw DQYJKoZIhvcNAQELBQADggEBAHbRYfjx7C8GauspjOPjAy75ihIgjS2GCN9UVkIU 3XbE/NdyUMEIF6U6PDwy7JmdwTyj9E3Kz8chCCBCMoEonqayD7CLGrMji53juFf8 7Je/BuvNVe0q0efeAPXijY6Q6ahOEb5j6R50Dl+p71ICKR6bZLh2kTLIrCJkBknR VbI8DO8Jt8PSK0FSuMdEU/Bm58IbgqRQY2AeYShZYtUJb8+riKHVLfzxjQQkwpM2 oZR0UhGju3Cy6Rqmc6CRmZMP/i3p+BH9PMWZGIRUDkO0P+W5sEtn9945nhJLpnkU 5OsUsET5BfzG2oLPQRRsB+D7ZC7UV76mIXWnlCpVSCh7pJY= -----END CERTIFICATE-----Generated at Tue Jul 7 09:43:26 2026 by rpki-client