$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e33322e302f32322d3232203d3e203234343236.roa File: 34332e3234362e33322e302f32322d3232203d3e203234343236.roa (raw, json) Hash identifier: O90CAX6HaWNTYUXyvHpl5Pl6X1QD1YNyQLpcsQOUWOE= Subject key identifier: 67:59:4A:18:4A:55:04:D8:05:7B:36:D5:C9:EC:49:22:BE:48:36:AB Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Certificate serial: 5A4B9A34231BDABC027ADB7F28B513ECECA607B9 Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e33322e302f32322d3232203d3e203234343236.roa Signing time: Fri 05 Jun 2026 05:49:19 +0000 ROA not before: Fri 05 Jun 2026 05:44:19 +0000 ROA not after: Fri 04 Jun 2027 05:49:19 +0000 asID: 24426 IP address blocks: 43.246.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:4b:9a:34:23:1b:da:bc:02:7a:db:7f:28:b5:13:ec:ec:a6:07:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Validity Not Before: Jun 5 05:44:19 2026 GMT Not After : Jun 4 05:49:19 2027 GMT Subject: CN=67594A184A5504D8057B36D5C9EC4922BE4836AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:71:29:24:25:e1:e8:53:79:f3:1b:6e:43:aa: 88:f7:07:1b:83:1c:e5:0b:ce:bf:ef:80:26:e7:12: 98:0c:53:2b:fd:5f:6d:b0:0f:25:2b:06:fa:dc:e3: 83:68:ee:58:d1:a9:6d:95:80:9a:43:25:c3:33:26: 31:1b:e4:51:bc:43:0c:6e:77:51:12:ca:64:a5:af: 99:f7:09:c1:90:68:32:aa:fd:76:dd:e9:49:68:67: a9:98:13:43:81:e6:1c:c7:a6:0e:14:3a:9b:84:21: 09:3d:be:87:c9:54:b4:6b:49:7e:f1:79:f0:c3:d1: e4:24:6e:1d:e1:30:75:b4:d1:41:d2:48:2d:7b:e2: 4b:03:d9:87:f6:9b:c3:6b:15:7c:5c:0d:1f:06:f7: fc:81:66:c1:21:d6:37:48:5c:86:3d:5c:95:08:40: da:a1:80:e1:f7:79:8e:c2:b7:c3:ff:d9:fa:1b:35: 23:b2:4e:d9:dd:b1:a2:cb:c5:1a:86:d0:ff:b2:cf: cf:df:3c:ce:35:2b:88:e4:a3:a1:9b:6a:b7:03:e0: ec:5b:4d:1a:3f:24:fb:ba:85:e8:46:77:06:6f:93: 55:da:35:1c:a4:9d:5d:5e:47:e7:54:c5:f7:db:1e: cf:77:bf:fc:b7:be:7a:70:fb:17:55:c8:c4:92:7d: 78:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:59:4A:18:4A:55:04:D8:05:7B:36:D5:C9:EC:49:22:BE:48:36:AB X509v3 Authority Key Identifier: keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e33322e302f32322d3232203d3e203234343236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.246.32.0/22 Signature Algorithm: sha256WithRSAEncryption b4:d0:ad:69:15:b2:bb:0e:2a:33:81:f6:c3:64:16:54:e9:95: ad:b0:96:ff:42:2b:6d:0e:ba:50:d3:fb:bc:2c:44:67:a6:68: bf:02:9c:64:4c:35:80:b7:f8:25:5c:a3:a5:39:10:62:d3:22: b5:b5:0e:da:22:37:b3:b9:4b:20:ad:13:86:31:07:c2:85:f0: 68:5f:ce:19:af:6d:05:a8:a9:d5:ab:a2:35:94:7e:26:60:d2: 3d:18:35:06:87:d0:9e:99:43:fc:d5:e4:e3:2f:e6:f0:df:14: 5a:4f:0b:18:40:21:94:54:01:14:44:69:95:3d:a3:70:d6:cc: 16:f9:18:76:32:02:fb:23:78:96:77:19:cc:f8:c2:31:dd:fe: a3:00:28:75:ee:37:e1:0d:b8:63:f4:ea:2e:30:be:5d:42:09: 4d:6a:75:be:6d:22:c3:34:0f:67:47:13:70:3b:b4:71:25:d5: 00:43:bf:0c:e8:8e:9e:94:ea:70:87:7a:63:e2:c9:fe:90:88: 6d:05:a4:30:f1:ec:aa:42:d2:09:9e:fc:8b:d4:a1:14:d3:eb: 0b:ee:e8:25:8a:4f:85:fd:f3:5e:40:99:de:bc:bd:64:90:d0: da:d9:23:79:39:2f:4e:fb:f9:a1:e1:13:f5:26:ab:b0:d8:bd: c8:e6:a5:ad -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUWkuaNCMb2rwCett/KLUT7OymB7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx OEQ2QjM2MDAeFw0yNjA2MDUwNTQ0MTlaFw0yNzA2MDQwNTQ5MTlaMDMxMTAvBgNV BAMTKDY3NTk0QTE4NEE1NTA0RDgwNTdCMzZENUM5RUM0OTIyQkU0ODM2QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFcSkkJeHoU3nzG25Dqoj3BxuD HOULzr/vgCbnEpgMUyv9X22wDyUrBvrc44No7ljRqW2VgJpDJcMzJjEb5FG8Qwxu d1ESymSlr5n3CcGQaDKq/Xbd6UloZ6mYE0OB5hzHpg4UOpuEIQk9vofJVLRrSX7x efDD0eQkbh3hMHW00UHSSC174ksD2Yf2m8NrFXxcDR8G9/yBZsEh1jdIXIY9XJUI QNqhgOH3eY7Ct8P/2fobNSOyTtndsaLLxRqG0P+yz8/fPM41K4jko6GbarcD4Oxb TRo/JPu6hehGdwZvk1XaNRyknV1eR+dUxffbHs93v/y3vnpw+xdVyMSSfXgjAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUZ1lKGEpVBNgFezbVyexJIr5INqswHwYDVR0j BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3LzAvMzQzMzJlMzIzNDM2 MmUzMzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDM0MzIzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAiv2IDANBgkqhkiG9w0BAQsFAAOCAQEAtNCtaRWyuw4qM4H2w2QWVOmVrbCW /0IrbQ66UNP7vCxEZ6ZovwKcZEw1gLf4JVyjpTkQYtMitbUO2iI3s7lLIK0ThjEH woXwaF/OGa9tBaip1auiNZR+JmDSPRg1BofQnplD/NXk4y/m8N8UWk8LGEAhlFQB FERplT2jcNbMFvkYdjIC+yN4lncZzPjCMd3+owAode434Q24Y/TqLjC+XUIJTWp1 vm0iwzQPZ0cTcDu0cSXVAEO/DOiOnpTqcId6Y+LJ/pCIbQWkMPHsqkLSCZ78i9Sh FNPrC+7oJYpPhf3zXkCZ3ry9ZJDQ2tkjeTkvTvv5oeET9SarsNi9yOalrQ== -----END CERTIFICATE-----Generated at Sun Jun 14 09:56:43 2026 by rpki-client