$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/34332e3235342e3233342e302f32342d3234203d3e203435313130.roa File: 34332e3235342e3233342e302f32342d3234203d3e203435313130.roa (raw, json) Hash identifier: 8RyF/Hm838MqFlR/s1qvcVW9S3vyl4SH5lcpvKDJwhc= Subject key identifier: B7:2E:E1:71:38:16:87:97:D8:E7:99:72:AE:11:AC:E5:B1:00:ED:E1 Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Certificate serial: 1DF49648D75D1DA78A52E89BE31712B43EA75570 Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/34332e3235342e3233342e302f32342d3234203d3e203435313130.roa Signing time: Fri 17 Apr 2026 11:33:54 +0000 ROA not before: Fri 17 Apr 2026 11:28:54 +0000 ROA not after: Fri 16 Apr 2027 11:33:54 +0000 asID: 45110 IP address blocks: 43.254.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:f4:96:48:d7:5d:1d:a7:8a:52:e8:9b:e3:17:12:b4:3e:a7:55:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Validity Not Before: Apr 17 11:28:54 2026 GMT Not After : Apr 16 11:33:54 2027 GMT Subject: CN=B72EE17138168797D8E79972AE11ACE5B100EDE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4a:f2:1e:55:4b:aa:57:8e:ae:20:b9:2c:cf: 66:31:5d:a8:c5:53:ca:15:05:05:21:ab:9b:28:6a: ce:7a:92:9e:72:24:2f:c2:8c:02:18:96:02:df:d1: f1:0d:4d:68:a3:d1:13:90:d6:9f:cb:73:40:4c:16: 35:bc:f5:f6:a6:65:95:8a:d3:c3:3e:6e:6e:68:7c: 9c:ba:60:97:20:6b:33:4d:2b:2e:66:86:20:83:d7: 32:00:97:af:44:ae:8a:80:74:02:5b:90:15:78:f1: 93:b1:00:d1:53:30:af:bf:f5:d0:98:e6:fd:6a:cb: 39:43:8b:03:c6:66:9c:aa:a7:30:98:4f:a1:44:9d: 72:90:b1:8f:65:c4:8e:d1:45:b7:5d:b0:e6:1a:da: b6:f4:1b:e3:c5:7b:cc:ba:1d:d8:cf:d3:72:bf:a9: 03:79:bd:95:80:88:0a:bb:10:45:3f:bf:68:33:d6: 25:9d:45:5f:35:49:6a:6d:a4:78:7c:1b:4c:15:f5: e8:49:8e:6f:54:73:9f:a0:81:ef:66:e8:15:c4:5d: af:22:b0:b0:7d:52:b3:74:10:85:61:d0:97:d8:a4: 11:89:31:b2:04:76:c6:01:8b:f9:fb:7f:7b:4e:bf: 65:27:7f:46:73:25:6b:17:57:b1:2b:c4:9b:3e:ac: f0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2E:E1:71:38:16:87:97:D8:E7:99:72:AE:11:AC:E5:B1:00:ED:E1 X509v3 Authority Key Identifier: keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/34332e3235342e3233342e302f32342d3234203d3e203435313130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.254.234.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:fc:cd:3c:3d:86:92:5f:76:9b:b7:7c:17:89:9d:6b:26:42: 06:04:4b:c6:5f:a1:fd:d4:c4:1d:e6:ac:c8:c3:0b:a6:9e:b1: 9c:45:77:fb:d7:23:78:57:9a:09:b7:83:e0:5c:7b:e3:0c:27: 8e:b2:6f:16:84:b8:0e:35:43:02:36:69:65:7a:f2:2a:57:c6: 1a:0b:ed:61:11:7b:35:dd:84:8b:b2:36:f8:a2:51:78:8e:51: 7d:f1:3b:05:c7:ad:73:5f:f8:6a:ad:92:2e:08:59:bd:39:e9: 37:48:74:01:92:e5:3b:49:ed:98:81:90:87:47:c0:91:fd:ab: 5e:75:3f:24:f3:10:fa:0a:14:00:86:63:63:c4:45:f4:ec:07: f0:d6:f6:25:73:e8:1f:7b:9f:27:d0:df:02:90:77:7a:d6:fc: e5:47:fa:fd:cc:42:8d:26:1e:99:d2:74:59:6e:35:e6:65:d0: 5a:be:f9:d3:4e:15:0a:ca:d0:e5:ab:22:88:7b:05:b6:7e:97: e5:1f:39:f7:00:30:cd:da:70:7e:e6:8a:22:6a:6b:8d:0a:80: ce:fd:c8:77:e6:02:2d:a9:0e:6e:42:9a:a7:b9:4f:dc:07:0b: 33:4e:c5:71:d3:b4:f0:6b:0e:56:ed:9f:57:e4:15:66:28:31: c3:34:5b:75 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUHfSWSNddHaeKUuib4xcStD6nVXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4 RkJFN0VBRTAeFw0yNjA0MTcxMTI4NTRaFw0yNzA0MTYxMTMzNTRaMDMxMTAvBgNV BAMTKEI3MkVFMTcxMzgxNjg3OTdEOEU3OTk3MkFFMTFBQ0U1QjEwMEVERTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvSvIeVUuqV46uILksz2YxXajF U8oVBQUhq5soas56kp5yJC/CjAIYlgLf0fENTWij0ROQ1p/Lc0BMFjW89famZZWK 08M+bm5ofJy6YJcgazNNKy5mhiCD1zIAl69EroqAdAJbkBV48ZOxANFTMK+/9dCY 5v1qyzlDiwPGZpyqpzCYT6FEnXKQsY9lxI7RRbddsOYa2rb0G+PFe8y6HdjP03K/ qQN5vZWAiAq7EEU/v2gz1iWdRV81SWptpHh8G0wV9ehJjm9Uc5+gge9m6BXEXa8i sLB9UrN0EIVh0JfYpBGJMbIEdsYBi/n7f3tOv2Unf0ZzJWsXV7ErxJs+rPAvAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUty7hcTgWh5fY55lyrhGs5bEA7eEwHwYDVR0j BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0 Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjcyMzM3MjE3OTQ1OC8wLzM0MzMyZTMyMzUz NDJlMzIzMzM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNTMxMzEzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEACv+6jANBgkqhkiG9w0BAQsFAAOCAQEAivzNPD2Gkl92m7d8F4mdayZC BgRLxl+h/dTEHeasyMMLpp6xnEV3+9cjeFeaCbeD4Fx74wwnjrJvFoS4DjVDAjZp ZXryKlfGGgvtYRF7Nd2Ei7I2+KJReI5RffE7Bcetc1/4aq2SLghZvTnpN0h0AZLl O0ntmIGQh0fAkf2rXnU/JPMQ+goUAIZjY8RF9OwH8Nb2JXPoH3ufJ9DfApB3etb8 5Uf6/cxCjSYemdJ0WW415mXQWr75004VCsrQ5asiiHsFtn6X5R859wAwzdpwfuaK ImprjQqAzv3Id+YCLakObkKap7lP3AcLM07FcdO08GsOVu2fV+QVZigxwzRbdQ== -----END CERTIFICATE-----Generated at Sat Apr 18 06:24:14 2026 by rpki-client