$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e342e302f32322d3232203d3e203234343236.roa File: 34332e3234362e342e302f32322d3232203d3e203234343236.roa (raw, json) Hash identifier: JVklD7/PUpiJJ/hmAMl8t/QUJEbKN3OokDSjoA1K4us= Subject key identifier: 0A:FC:99:E2:F1:FE:11:A4:D4:60:E4:F0:34:3F:5F:C9:11:BF:E7:DE Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Certificate serial: 30014057F80C2697E9772A34CF23F6E78A6B1ABB Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e342e302f32322d3232203d3e203234343236.roa Signing time: Fri 05 Jun 2026 05:48:48 +0000 ROA not before: Fri 05 Jun 2026 05:43:48 +0000 ROA not after: Fri 04 Jun 2027 05:48:48 +0000 asID: 24426 IP address blocks: 43.246.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:01:40:57:f8:0c:26:97:e9:77:2a:34:cf:23:f6:e7:8a:6b:1a:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Validity Not Before: Jun 5 05:43:48 2026 GMT Not After : Jun 4 05:48:48 2027 GMT Subject: CN=0AFC99E2F1FE11A4D460E4F0343F5FC911BFE7DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:93:51:2f:57:6e:fc:b3:dd:e6:63:a7:48:1a: 5c:db:76:e3:83:f9:4b:91:19:14:43:46:bd:b7:56: d2:23:91:c0:42:c6:9d:21:0c:d5:93:07:76:e7:3b: 2a:7d:4d:80:6e:78:cf:be:5b:b9:c0:2b:b4:75:63: a0:e8:e7:b7:f8:0c:45:c4:26:65:d7:e9:25:16:ef: f3:52:09:99:21:70:fc:17:59:e2:3e:fd:bf:c0:54: 06:62:62:b4:58:75:31:64:9b:2c:95:4b:d2:66:c4: 63:4f:fa:a0:3b:57:ce:ac:81:e6:8c:9f:ea:00:6b: ff:90:a7:34:62:40:26:d5:12:77:93:1a:50:70:23: a0:25:2f:cc:e6:fa:dd:5c:ef:0f:cd:9a:5c:a9:20: 07:19:7b:8a:a8:83:9a:1e:59:a0:1b:c6:f4:14:ca: 19:fa:f3:bd:7f:02:2d:fb:fa:29:9f:d7:2e:db:b1: b4:13:cc:ec:7f:e7:05:2a:8e:a1:a5:9d:96:d9:05: ed:d4:cb:60:52:56:c5:6e:6a:51:53:df:f6:9d:af: f5:b8:50:e6:97:9d:aa:ca:5d:e5:21:10:c6:fa:66: 2b:9b:0c:fc:86:22:5c:6b:32:d4:ec:1d:79:b3:3a: 86:fe:e1:dd:66:b1:5a:48:05:9e:5e:83:04:55:45: b4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:FC:99:E2:F1:FE:11:A4:D4:60:E4:F0:34:3F:5F:C9:11:BF:E7:DE X509v3 Authority Key Identifier: keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e342e302f32322d3232203d3e203234343236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.246.4.0/22 Signature Algorithm: sha256WithRSAEncryption b0:57:37:4a:9d:c6:f2:d1:64:64:d3:97:ef:e3:e4:8a:1b:f8: da:9a:66:ec:bd:d7:4a:3b:32:d3:77:55:19:8e:20:a2:84:53: 40:28:f8:27:1d:c0:42:e0:85:c0:58:aa:cc:ad:5d:1b:e7:d0: 13:57:a7:9c:38:0a:38:d3:15:c6:d8:28:67:d3:df:c0:17:1d: 8e:d9:9e:1e:e4:b4:eb:e2:f0:7d:fa:44:dc:48:8e:df:22:20: 0c:40:47:4e:a8:18:ce:c9:d1:37:cf:56:ef:bb:1b:c0:fc:59: 3a:a2:91:5b:5b:51:f8:50:9d:b2:bf:90:4c:3f:09:69:ef:5b: 12:10:4f:1d:dd:75:fc:cf:33:9e:fa:d2:a8:95:54:7f:f2:e6: 20:8f:8e:42:dd:c0:71:75:8f:0f:49:ca:12:82:10:9d:ee:4a: 0c:e9:88:43:2f:6d:26:eb:a1:57:09:27:aa:82:3f:af:5e:a5: 27:a1:9b:69:1a:62:be:82:73:fe:37:cb:b7:e0:8c:d2:7c:e5: f4:cd:3e:89:44:b3:38:12:8f:76:36:81:74:f3:71:71:c3:f9: e4:9b:e8:c0:41:91:8d:7b:cd:f7:d4:3d:25:4a:12:c5:6a:4e: c1:1d:3a:ea:97:49:44:8c:cb:84:f1:b1:49:cf:d3:c5:c7:85: f0:22:92:89 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUMAFAV/gMJpfpdyo0zyP254prGrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx OEQ2QjM2MDAeFw0yNjA2MDUwNTQzNDhaFw0yNzA2MDQwNTQ4NDhaMDMxMTAvBgNV BAMTKDBBRkM5OUUyRjFGRTExQTRENDYwRTRGMDM0M0Y1RkM5MTFCRkU3REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsk1EvV278s93mY6dIGlzbduOD +UuRGRRDRr23VtIjkcBCxp0hDNWTB3bnOyp9TYBueM++W7nAK7R1Y6Do57f4DEXE JmXX6SUW7/NSCZkhcPwXWeI+/b/AVAZiYrRYdTFkmyyVS9JmxGNP+qA7V86sgeaM n+oAa/+QpzRiQCbVEneTGlBwI6AlL8zm+t1c7w/NmlypIAcZe4qog5oeWaAbxvQU yhn6871/Ai37+imf1y7bsbQTzOx/5wUqjqGlnZbZBe3Uy2BSVsVualFT3/adr/W4 UOaXnarKXeUhEMb6ZiubDPyGIlxrMtTsHXmzOob+4d1msVpIBZ5egwRVRbS5AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUCvyZ4vH+EaTUYOTwND9fyRG/594wHwYDVR0j BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3LzAvMzQzMzJlMzIzNDM2 MmUzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzQzNDMyMzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIr9gQwDQYJKoZIhvcNAQELBQADggEBALBXN0qdxvLRZGTTl+/j5Iob+NqaZuy9 10o7MtN3VRmOIKKEU0Ao+CcdwELghcBYqsytXRvn0BNXp5w4CjjTFcbYKGfT38AX HY7Znh7ktOvi8H36RNxIjt8iIAxAR06oGM7J0TfPVu+7G8D8WTqikVtbUfhQnbK/ kEw/CWnvWxIQTx3ddfzPM5760qiVVH/y5iCPjkLdwHF1jw9JyhKCEJ3uSgzpiEMv bSbroVcJJ6qCP69epSehm2kaYr6Cc/43y7fgjNJ85fTNPolEszgSj3Y2gXTzcXHD +eSb6MBBkY17zffUPSVKEsVqTsEdOuqXSUSMy4TxsUnP08XHhfAikok= -----END CERTIFICATE-----Generated at Sun Jun 14 09:56:18 2026 by rpki-client