$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/0/34332e3234372e34382e302f32322d3234203d3e2030.roa File: 34332e3234372e34382e302f32322d3234203d3e2030.roa (raw, json) Hash identifier: PXeMygp6CVTZIqD/BGSl6kO+v/LbccYaHizGDTFfLKw= Subject key identifier: E1:2E:73:2A:CE:78:C3:55:37:44:FE:6B:4F:7F:E5:01:5B:87:ED:C4 Certificate issuer: /CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E Certificate serial: 4E12D5703726DA89092DE7949CF4979B5C53EB87 Authority key identifier: A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/34332e3234372e34382e302f32322d3234203d3e2030.roa Signing time: Thu 16 Apr 2026 07:16:32 +0000 ROA not before: Thu 16 Apr 2026 07:11:32 +0000 ROA not after: Thu 15 Apr 2027 07:16:32 +0000 asID: 0 IP address blocks: 43.247.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 08:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:12:d5:70:37:26:da:89:09:2d:e7:94:9c:f4:97:9b:5c:53:eb:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E Validity Not Before: Apr 16 07:11:32 2026 GMT Not After : Apr 15 07:16:32 2027 GMT Subject: CN=E12E732ACE78C3553744FE6B4F7FE5015B87EDC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:09:18:2e:39:d5:af:93:20:f7:30:f1:0e:89: 4d:bb:33:71:57:37:13:49:aa:0a:61:db:3b:07:6d: 4a:5f:0c:3e:ca:8c:73:76:9b:e8:20:80:4e:3b:65: 6b:6c:b3:6a:b6:a6:f1:aa:f7:09:af:53:db:d9:ae: 1b:e2:23:9b:2d:b1:05:d5:9d:4f:e8:aa:49:d0:f5: 37:df:a4:26:a8:3a:aa:45:fa:e1:56:60:05:97:05: ad:8a:5a:44:1f:ee:e9:1e:d2:22:db:91:c5:b9:ae: a9:81:86:a7:ce:fb:21:56:66:46:78:a1:a6:b9:86: 0f:35:1e:9f:a3:eb:c5:d1:91:71:9e:c4:66:d3:ac: cb:36:b3:a9:f3:9b:1f:65:3b:61:de:b4:9b:8e:14: df:8e:47:72:f1:bc:9c:3f:13:82:bc:39:9c:c8:dd: f0:c8:d5:2e:43:e5:4b:07:79:94:3d:04:98:30:e8: e2:6f:11:ea:f8:92:37:2a:6a:2a:d9:69:29:85:ad: 2a:b9:cc:09:61:2b:ba:89:50:80:e0:24:a4:f2:0c: 2f:37:b3:3f:a0:1e:4b:7d:57:d7:a1:c8:0c:df:7a: de:05:4f:bf:b4:85:72:d6:d4:14:b2:bb:15:89:f6: 73:27:d4:ac:14:09:da:f5:1d:3c:b9:0f:4a:ce:5b: d5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:2E:73:2A:CE:78:C3:55:37:44:FE:6B:4F:7F:E5:01:5B:87:ED:C4 X509v3 Authority Key Identifier: keyid:A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/34332e3234372e34382e302f32322d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.247.48.0/22 Signature Algorithm: sha256WithRSAEncryption 90:f1:2c:3f:7c:03:1d:30:72:dd:b1:d0:aa:10:cf:14:10:7c: b8:27:4e:c3:c6:35:e3:f0:f3:ae:7e:b4:05:14:e5:e6:a2:2b: d1:ba:5b:a6:ed:a1:24:d3:6f:1f:0f:35:c1:0c:dc:46:df:64: 0f:b9:5f:4e:e0:3b:29:cc:f5:e8:09:88:f1:14:e8:f2:c4:f5: bb:ae:5e:b6:95:38:e1:04:26:4b:3d:97:f5:43:f2:01:3d:39: 4e:2e:51:30:94:08:7e:c5:10:13:c2:16:78:66:d9:0b:69:ab: 24:c4:1e:65:de:75:98:51:79:d4:77:60:4c:ea:1f:64:c5:a2: f4:cf:2a:95:bd:40:7f:14:e0:b5:6c:9d:ab:47:63:61:71:b3: 1b:3b:da:c4:61:09:9a:8e:63:a5:35:58:0a:ee:5f:a5:4e:7c: 29:94:37:b4:e6:fa:04:f3:41:a8:b1:0e:b4:33:b6:5c:ef:b2: d5:37:8a:c7:5d:9a:0d:4a:a0:c3:00:17:a9:1f:75:25:a1:0c: d7:ae:2a:aa:69:5e:65:0a:9a:f2:c2:ab:2d:1e:24:aa:f2:f7: 14:2c:3e:71:f5:86:65:0e:10:e7:d7:96:1b:63:0e:6f:5c:6d: af:9d:6a:c1:91:10:43:e4:0a:73:f1:6f:1a:75:23:ec:ae:ae: e6:fc:f3:ce -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUThLVcDcm2okJLeeUnPSXm1xT64cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxNDA4RTk3MDEwQkRCNDQxNDYyODFCOEE3OEJDRkE0 RTBFNEM1RTAeFw0yNjA0MTYwNzExMzJaFw0yNzA0MTUwNzE2MzJaMDMxMTAvBgNV BAMTKEUxMkU3MzJBQ0U3OEMzNTUzNzQ0RkU2QjRGN0ZFNTAxNUI4N0VEQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVCRguOdWvkyD3MPEOiU27M3FX NxNJqgph2zsHbUpfDD7KjHN2m+gggE47ZWtss2q2pvGq9wmvU9vZrhviI5stsQXV nU/oqknQ9TffpCaoOqpF+uFWYAWXBa2KWkQf7uke0iLbkcW5rqmBhqfO+yFWZkZ4 oaa5hg81Hp+j68XRkXGexGbTrMs2s6nzmx9lO2HetJuOFN+OR3LxvJw/E4K8OZzI 3fDI1S5D5UsHeZQ9BJgw6OJvEer4kjcqairZaSmFrSq5zAlhK7qJUIDgJKTyDC83 sz+gHkt9V9ehyAzfet4FT7+0hXLW1BSyuxWJ9nMn1KwUCdr1HTy5D0rOW9XtAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQU4S5zKs54w1U3RP5rT3/lAVuH7cQwHwYDVR0j BBgwFoAUpRQI6XAQvbRBRigbini8+k4OTF4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8wL0E1MTQwOEU5NzAxMEJEQjQ0MTQ2MjgxQjhBNzhC Q0ZBNEUwRTRDNUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTUxNDA4RTk3MDEwQkRCNDQxNDYyODFCOEE3OEJDRkE0RTBFNEM1RS5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MjcxNjE5LzAvMzQzMzJlMzIzNDM3 MmUzNDM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIr9zAw DQYJKoZIhvcNAQELBQADggEBAJDxLD98Ax0wct2x0KoQzxQQfLgnTsPGNePw865+ tAUU5eaiK9G6W6btoSTTbx8PNcEM3EbfZA+5X07gOynM9egJiPEU6PLE9buuXraV OOEEJks9l/VD8gE9OU4uUTCUCH7FEBPCFnhm2QtpqyTEHmXedZhRedR3YEzqH2TF ovTPKpW9QH8U4LVsnatHY2Fxsxs72sRhCZqOY6U1WAruX6VOfCmUN7Tm+gTzQaix DrQztlzvstU3isddmg1KoMMAF6kfdSWhDNeuKqppXmUKmvLCqy0eJKry9xQsPnH1 hmUOEOfXlhtjDm9cba+dasGREEPkCnPxbxp1I+yurub8884= -----END CERTIFICATE-----Generated at Thu Apr 16 22:35:37 2026 by rpki-client