$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123865781596061733/0/34332e3234362e3131332e302f32342d3234203d3e2030.roa File: 34332e3234362e3131332e302f32342d3234203d3e2030.roa (raw, json) Hash identifier: TW47z1sGpU8fzHRBDk9ZIUHZxgI5j0f0rFegaKKWvWY= Subject key identifier: ED:1B:D9:7C:59:B8:94:6E:07:5E:43:40:06:71:E0:D5:C9:98:4B:6B Certificate issuer: /CN=C4676B3058F5B3F9BFB658BBED8F5E76C87614EB Certificate serial: 2DEEB79CCC44A9309C53EEF923D460FBD631DE69 Authority key identifier: C4:67:6B:30:58:F5:B3:F9:BF:B6:58:BB:ED:8F:5E:76:C8:76:14:EB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/34332e3234362e3131332e302f32342d3234203d3e2030.roa Signing time: Mon 29 Jun 2026 06:47:16 +0000 ROA not before: Mon 29 Jun 2026 06:42:16 +0000 ROA not after: Mon 28 Jun 2027 06:47:16 +0000 asID: 0 IP address blocks: 43.246.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 Jul 2026 22:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:ee:b7:9c:cc:44:a9:30:9c:53:ee:f9:23:d4:60:fb:d6:31:de:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4676B3058F5B3F9BFB658BBED8F5E76C87614EB Validity Not Before: Jun 29 06:42:16 2026 GMT Not After : Jun 28 06:47:16 2027 GMT Subject: CN=ED1BD97C59B8946E075E43400671E0D5C9984B6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4d:1d:8c:2e:8a:74:b4:9f:6f:a6:a8:52:9c: 5f:ee:94:ab:40:7c:d1:e4:1c:c5:05:fc:46:d3:d6: ea:63:23:39:c0:c2:64:66:59:e0:aa:a2:d8:05:48: 17:da:b6:1b:d3:70:49:2c:2a:08:c8:d7:dd:d9:72: 71:3b:0c:3f:d0:14:ba:02:b9:ae:17:48:02:a2:ec: 9b:6c:89:58:29:11:b1:01:d4:4f:4c:ea:47:66:94: 38:b2:16:50:d6:b1:f2:20:7d:24:82:3c:db:c2:35: 74:64:7f:79:57:ec:11:e3:af:bb:4c:f6:f2:28:b6: f8:a7:af:23:07:53:96:ae:c5:6d:69:42:c1:9c:40: 1b:c4:7a:eb:23:a3:38:43:20:b3:de:92:29:09:7d: 2c:d5:22:08:c9:37:f6:be:5d:b1:2f:24:1f:43:7a: 57:b3:43:8c:c5:95:0b:7d:8d:73:83:9b:93:39:37: af:f4:b3:a5:18:df:34:2d:d4:c7:3e:1b:5f:c2:ca: 6a:d5:53:97:97:19:d8:23:fd:6c:a6:9f:7e:f1:ba: 76:73:20:05:7c:00:c6:ab:e0:8e:ec:b4:f3:e8:c0: 80:1c:fa:ab:63:2a:ba:9b:31:fe:00:77:d0:a2:e0: 43:fb:42:df:c9:bb:9d:65:61:91:cf:d1:7e:6e:79: 9c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:1B:D9:7C:59:B8:94:6E:07:5E:43:40:06:71:E0:D5:C9:98:4B:6B X509v3 Authority Key Identifier: keyid:C4:67:6B:30:58:F5:B3:F9:BF:B6:58:BB:ED:8F:5E:76:C8:76:14:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/34332e3234362e3131332e302f32342d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.246.113.0/24 Signature Algorithm: sha256WithRSAEncryption 07:c2:19:4c:52:f9:27:ae:4e:a7:5c:7a:4b:88:60:ae:f9:5c: ad:25:91:b7:04:15:8d:6a:5c:7d:b6:40:6f:97:35:06:ee:56: f5:94:e3:21:46:6c:8d:3a:be:8b:78:46:41:00:26:79:99:cc: 64:9d:5d:ad:c3:15:fd:85:ff:af:86:1d:31:cd:c7:da:cb:2d: 8c:a0:af:17:9c:f8:bc:81:d7:fd:0c:b1:0f:52:7d:4b:9b:3b: 6b:f1:ff:5d:ec:de:89:52:15:89:ff:ae:ab:58:77:3c:99:0d: 76:7b:29:81:62:ec:68:ad:ff:95:85:5a:dd:cf:74:5d:0b:fd: d2:bd:16:ab:84:69:c8:89:ce:3b:c6:3e:47:5b:ba:f8:e8:24: fe:ba:cf:97:37:9a:f7:f5:9c:af:8d:d5:bb:fc:7b:26:b3:05: e0:aa:e7:f7:8c:4f:a8:8e:a1:90:67:b3:1e:24:57:e3:00:40: 3c:ee:30:6b:40:2a:17:4a:58:09:cb:c3:61:93:ac:d0:50:d1: 5d:86:15:a9:2b:bf:1d:78:dd:75:9c:d7:9c:50:98:7a:86:ae: 09:03:b2:8b:a6:a6:df:1a:12:93:e2:bf:82:57:f5:04:b6:d0: 15:3d:b3:1e:45:ae:4b:a3:4d:bf:38:be:e5:a1:be:60:5e:ea: 7d:31:84:6c -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIULe63nMxEqTCcU+75I9Rg+9Yx3mkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ2NzZCMzA1OEY1QjNGOUJGQjY1OEJCRUQ4RjVFNzZD ODc2MTRFQjAeFw0yNjA2MjkwNjQyMTZaFw0yNzA2MjgwNjQ3MTZaMDMxMTAvBgNV BAMTKEVEMUJEOTdDNTlCODk0NkUwNzVFNDM0MDA2NzFFMEQ1Qzk5ODRCNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwTR2MLop0tJ9vpqhSnF/ulKtA fNHkHMUF/EbT1upjIznAwmRmWeCqotgFSBfathvTcEksKgjI193ZcnE7DD/QFLoC ua4XSAKi7JtsiVgpEbEB1E9M6kdmlDiyFlDWsfIgfSSCPNvCNXRkf3lX7BHjr7tM 9vIotvinryMHU5auxW1pQsGcQBvEeusjozhDILPekikJfSzVIgjJN/a+XbEvJB9D elezQ4zFlQt9jXODm5M5N6/0s6UY3zQt1Mc+G1/CymrVU5eXGdgj/Wymn37xunZz IAV8AMar4I7stPPowIAc+qtjKrqbMf4Ad9Ci4EP7Qt/Ju51lYZHP0X5ueZzVAgMB AAGjggILMIICBzAdBgNVHQ4EFgQU7RvZfFm4lG4HXkNABnHg1cmYS2swHwYDVR0j BBgwFoAUxGdrMFj1s/m/tli77Y9edsh2FOswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg2NTc4MTU5NjA2MTczMy8wL0M0Njc2QjMwNThGNUIzRjlCRkI2NThCQkVEOEY1 RTc2Qzg3NjE0RUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzQ2NzZCMzA1OEY1QjNGOUJGQjY1OEJCRUQ4RjVFNzZDODc2MTRFQi5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTIzODY1NzgxNTk2MDYxNzMzLzAvMzQzMzJlMzIzNDM2 MmUzMTMxMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv2 cTANBgkqhkiG9w0BAQsFAAOCAQEAB8IZTFL5J65Op1x6S4hgrvlcrSWRtwQVjWpc fbZAb5c1Bu5W9ZTjIUZsjTq+i3hGQQAmeZnMZJ1drcMV/YX/r4YdMc3H2sstjKCv F5z4vIHX/QyxD1J9S5s7a/H/XezeiVIVif+uq1h3PJkNdnspgWLsaK3/lYVa3c90 XQv90r0Wq4RpyInOO8Y+R1u6+Ogk/rrPlzea9/Wcr43Vu/x7JrMF4Krn94xPqI6h kGezHiRX4wBAPO4wa0AqF0pYCcvDYZOs0FDRXYYVqSu/HXjddZzXnFCYeoauCQOy i6am3xoSk+K/glf1BLbQFT2zHkWuS6NNvzi+5aG+YF7qfTGEbA== -----END CERTIFICATE-----Generated at Tue Jul 7 09:43:21 2026 by rpki-client