$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123865781596061733/0/34332e3234362e3131342e302f32332d3233203d3e2030.roa File: 34332e3234362e3131342e302f32332d3233203d3e2030.roa (raw, json) Hash identifier: EyIGtasSac982Su0EhYIcMSzpqWwVN0Snz1ExIFDXbA= Subject key identifier: 22:C3:D4:A8:64:61:57:55:B4:CB:F9:D4:4A:85:AB:D3:AA:66:C0:7D Certificate issuer: /CN=C4676B3058F5B3F9BFB658BBED8F5E76C87614EB Certificate serial: 60FF4FEFE9D9BB42FD9B309E79B303DAE40E2368 Authority key identifier: C4:67:6B:30:58:F5:B3:F9:BF:B6:58:BB:ED:8F:5E:76:C8:76:14:EB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/34332e3234362e3131342e302f32332d3233203d3e2030.roa Signing time: Mon 29 Jun 2026 06:49:12 +0000 ROA not before: Mon 29 Jun 2026 06:44:12 +0000 ROA not after: Mon 28 Jun 2027 06:49:12 +0000 asID: 0 IP address blocks: 43.246.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 Jul 2026 22:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ff:4f:ef:e9:d9:bb:42:fd:9b:30:9e:79:b3:03:da:e4:0e:23:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4676B3058F5B3F9BFB658BBED8F5E76C87614EB Validity Not Before: Jun 29 06:44:12 2026 GMT Not After : Jun 28 06:49:12 2027 GMT Subject: CN=22C3D4A864615755B4CBF9D44A85ABD3AA66C07D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c0:7d:06:02:df:35:83:44:e0:23:b5:75:71: a4:84:47:84:11:d4:63:1e:64:c4:eb:d3:10:04:5d: 0f:27:4f:73:d9:68:8b:b2:fc:72:89:26:19:25:6d: f9:65:53:19:c8:fc:23:89:ef:e9:91:cf:bc:f8:fb: f1:58:4f:80:f9:3b:15:0d:d9:49:97:9c:5a:8f:5a: b3:09:30:fd:e2:d3:05:04:63:1a:59:cf:02:c1:94: a1:02:cc:24:6c:8d:e9:f9:fc:f2:8e:f1:24:e5:cd: 19:c7:8f:07:38:96:11:db:c9:ff:0b:2f:fc:03:65: 01:83:9b:a2:73:f5:06:b5:ab:a4:9d:8e:0c:13:3a: 00:07:67:be:9e:ed:d7:1e:6b:18:08:a1:24:d5:02: 01:29:bb:90:c9:09:96:ef:2c:d7:ad:a7:3c:43:6b: 6f:c5:e9:63:a9:f6:17:82:ce:21:d3:3c:db:d2:54: 25:2a:e8:15:33:3d:6a:6b:9f:d4:9b:78:8f:f7:86: 03:af:77:3c:bb:a7:8a:85:9d:6d:74:8a:ea:33:5b: bb:cb:cc:92:4f:b9:79:19:87:d4:8f:31:86:72:33: 15:f8:e1:23:44:d4:ba:c9:b2:9e:ad:84:3c:3c:33: ff:95:9a:c1:43:8a:3e:50:ab:a0:e9:87:6d:d9:7d: fa:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C3:D4:A8:64:61:57:55:B4:CB:F9:D4:4A:85:AB:D3:AA:66:C0:7D X509v3 Authority Key Identifier: keyid:C4:67:6B:30:58:F5:B3:F9:BF:B6:58:BB:ED:8F:5E:76:C8:76:14:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/34332e3234362e3131342e302f32332d3233203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.246.114.0/23 Signature Algorithm: sha256WithRSAEncryption c8:3b:0b:34:7e:0c:45:89:18:14:f0:de:9a:e7:4b:1c:be:43: 9c:eb:06:22:1c:14:ef:7e:b9:8a:b6:48:8f:80:a8:7d:d0:26: 87:ce:12:36:c4:8f:98:be:39:29:e7:cb:4f:49:3b:52:ac:3f: 97:a0:a8:91:b9:8f:e1:e9:70:ac:27:df:30:11:36:bd:90:e0: 9b:cd:32:8b:2d:2a:60:d4:b3:ad:fd:73:b9:1c:36:bf:40:5c: 9c:f9:22:5d:85:fc:1b:13:60:5a:14:55:41:a8:2b:be:a5:18: 3c:bf:80:4d:de:b6:4a:01:56:2c:dc:e7:75:6d:72:83:b3:6d: 59:be:8f:0d:4b:7a:cf:bd:a4:a5:20:bc:3c:be:5c:c4:75:f0: 3c:f8:d2:1e:89:83:6a:7b:d7:f3:ac:c4:6b:76:21:e6:f0:3b: 15:c7:f2:37:16:8d:e0:c0:27:ad:72:2a:5a:c7:80:68:4e:6b: 5f:73:1e:80:c4:99:29:4e:79:d3:2c:f5:0c:ec:00:30:a3:5f: 1e:a0:d3:a7:87:75:d3:b5:20:2a:54:80:db:c1:59:b0:c5:b0: 9f:00:9e:fd:cb:53:09:58:a3:33:3a:27:2a:46:cd:1e:01:7e: df:12:2f:e2:e9:e6:d7:b1:99:7e:5f:5c:99:2b:29:ae:a1:58: e8:0d:42:ab -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUYP9P7+nZu0L9mzCeebMD2uQOI2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ2NzZCMzA1OEY1QjNGOUJGQjY1OEJCRUQ4RjVFNzZD ODc2MTRFQjAeFw0yNjA2MjkwNjQ0MTJaFw0yNzA2MjgwNjQ5MTJaMDMxMTAvBgNV BAMTKDIyQzNENEE4NjQ2MTU3NTVCNENCRjlENDRBODVBQkQzQUE2NkMwN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcwH0GAt81g0TgI7V1caSER4QR 1GMeZMTr0xAEXQ8nT3PZaIuy/HKJJhklbfllUxnI/COJ7+mRz7z4+/FYT4D5OxUN 2UmXnFqPWrMJMP3i0wUEYxpZzwLBlKECzCRsjen5/PKO8STlzRnHjwc4lhHbyf8L L/wDZQGDm6Jz9Qa1q6SdjgwTOgAHZ76e7dceaxgIoSTVAgEpu5DJCZbvLNetpzxD a2/F6WOp9heCziHTPNvSVCUq6BUzPWprn9SbeI/3hgOvdzy7p4qFnW10iuozW7vL zJJPuXkZh9SPMYZyMxX44SNE1LrJsp6thDw8M/+VmsFDij5Qq6Dph23ZffpbAgMB AAGjggILMIICBzAdBgNVHQ4EFgQUIsPUqGRhV1W0y/nUSoWr06pmwH0wHwYDVR0j BBgwFoAUxGdrMFj1s/m/tli77Y9edsh2FOswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg2NTc4MTU5NjA2MTczMy8wL0M0Njc2QjMwNThGNUIzRjlCRkI2NThCQkVEOEY1 RTc2Qzg3NjE0RUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzQ2NzZCMzA1OEY1QjNGOUJGQjY1OEJCRUQ4RjVFNzZDODc2MTRFQi5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTIzODY1NzgxNTk2MDYxNzMzLzAvMzQzMzJlMzIzNDM2 MmUzMTMxMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEASv2 cjANBgkqhkiG9w0BAQsFAAOCAQEAyDsLNH4MRYkYFPDemudLHL5DnOsGIhwU7365 irZIj4CofdAmh84SNsSPmL45KefLT0k7Uqw/l6CokbmP4elwrCffMBE2vZDgm80y iy0qYNSzrf1zuRw2v0BcnPkiXYX8GxNgWhRVQagrvqUYPL+ATd62SgFWLNzndW1y g7NtWb6PDUt6z72kpSC8PL5cxHXwPPjSHomDanvX86zEa3Yh5vA7FcfyNxaN4MAn rXIqWseAaE5rX3MegMSZKU550yz1DOwAMKNfHqDTp4d107UgKlSA28FZsMWwnwCe /ctTCVijMzonKkbNHgF+3xIv4unm17GZfl9cmSsprqFY6A1Cqw== -----END CERTIFICATE-----Generated at Tue Jul 7 09:43:09 2026 by rpki-client