$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/34332e3235342e3233392e302f32342d3234203d3e203435313130.roa File: 34332e3235342e3233392e302f32342d3234203d3e203435313130.roa (raw, json) Hash identifier: HsPRsanyqWFfGBX1ERFNRh3G5GX39eSTmTtJSPsAmbo= Subject key identifier: 42:37:7D:CD:A8:89:9F:FB:32:2D:FC:3E:EB:DF:22:D6:6D:8A:64:CB Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Certificate serial: 04BC1E0BEB77AA1A0991DCB0BBBB151A92E6587E Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/34332e3235342e3233392e302f32342d3234203d3e203435313130.roa Signing time: Fri 17 Apr 2026 11:33:54 +0000 ROA not before: Fri 17 Apr 2026 11:28:54 +0000 ROA not after: Fri 16 Apr 2027 11:33:54 +0000 asID: 45110 IP address blocks: 43.254.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 12:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:bc:1e:0b:eb:77:aa:1a:09:91:dc:b0:bb:bb:15:1a:92:e6:58:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Validity Not Before: Apr 17 11:28:54 2026 GMT Not After : Apr 16 11:33:54 2027 GMT Subject: CN=42377DCDA8899FFB322DFC3EEBDF22D66D8A64CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:31:05:71:ae:7f:0f:e9:dd:41:25:4e:3d:15: 82:cb:62:d8:89:c3:72:9a:0c:4b:78:9b:06:99:0e: fe:5e:dc:39:58:72:08:db:ab:07:ec:ed:55:08:fb: 15:ab:d5:40:30:82:2c:3e:4a:a7:c1:a6:a7:97:48: f6:03:bb:2e:bb:9f:72:b6:9e:9c:23:a9:ec:af:13: 91:7b:70:63:ce:5c:3e:c3:9a:0b:11:48:07:2d:dc: c9:b2:22:de:4f:21:98:cb:87:ef:4e:46:b7:ab:0a: d1:f3:14:d9:35:46:47:4e:df:f5:85:4b:b4:87:12: 6d:83:a3:37:38:cb:5a:b6:e6:f4:78:6f:e2:cb:13: 2f:e7:a0:e2:0e:48:c2:5a:6d:ef:24:68:e5:9f:81: 58:95:3a:ce:e7:6e:15:63:91:5e:0d:64:2c:d0:06: 27:c1:af:1b:6c:1a:83:4d:68:29:a5:59:42:bf:74: 59:f0:3c:be:f9:5d:67:6f:45:bd:b6:d1:30:a3:14: 66:56:f4:c6:91:83:8d:e7:26:3f:c4:2b:1c:1d:86: cb:ec:17:5d:11:2b:89:3d:eb:02:a9:b5:53:fd:5c: 64:a8:c1:60:81:7c:7a:3e:53:77:5a:4b:ff:cd:a2: f5:d5:8e:9e:db:21:60:a5:4e:32:be:3c:c3:22:f3: f1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:37:7D:CD:A8:89:9F:FB:32:2D:FC:3E:EB:DF:22:D6:6D:8A:64:CB X509v3 Authority Key Identifier: keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/34332e3235342e3233392e302f32342d3234203d3e203435313130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.254.239.0/24 Signature Algorithm: sha256WithRSAEncryption 66:1e:ef:0a:e5:2a:7d:37:2f:b2:0e:a3:13:6d:26:6b:07:51: bc:06:43:cc:89:10:0e:3e:d7:e1:4a:d4:dc:6c:49:7a:b6:10: 49:64:58:04:3a:e7:8b:92:3e:62:3a:12:ad:38:d9:b8:42:63: 1f:c4:da:2e:ee:b8:a0:9c:fd:92:a7:cf:5e:37:cc:a7:1b:2a: 7f:e0:f5:27:b0:6d:c8:b4:18:23:b5:5d:19:2b:86:4e:f5:fe: b4:92:9b:28:c1:56:bd:47:81:36:93:29:07:2b:3e:ba:ab:89: c2:68:b5:80:32:b6:db:38:af:3b:db:cf:31:b3:b8:e6:2d:e4: b6:92:69:50:10:d4:8d:5e:83:79:a9:0a:47:64:53:d4:e3:d3: d7:f1:93:52:86:de:19:8e:9d:45:ca:0d:fe:a7:d5:ab:b8:a9: 0b:f5:72:a3:22:8e:8a:db:bc:97:ba:af:e6:38:e4:f9:e6:99: 59:4b:a6:28:4a:ff:da:dd:ac:1d:64:1f:83:d1:85:91:1b:f6: e4:14:08:83:e2:c8:94:fd:e2:f2:7b:53:e6:a9:3f:7b:39:b1: 04:29:0a:34:44:a7:6e:db:2e:78:b6:64:32:b6:ed:a5:ee:f5: a5:94:dd:e5:84:f8:06:bd:fc:97:60:94:00:54:52:da:3c:2a: c0:65:19:86 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUBLweC+t3qhoJkdywu7sVGpLmWH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4 RkJFN0VBRTAeFw0yNjA0MTcxMTI4NTRaFw0yNzA0MTYxMTMzNTRaMDMxMTAvBgNV BAMTKDQyMzc3RENEQTg4OTlGRkIzMjJERkMzRUVCREYyMkQ2NkQ4QTY0Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvMQVxrn8P6d1BJU49FYLLYtiJ w3KaDEt4mwaZDv5e3DlYcgjbqwfs7VUI+xWr1UAwgiw+SqfBpqeXSPYDuy67n3K2 npwjqeyvE5F7cGPOXD7DmgsRSAct3MmyIt5PIZjLh+9ORrerCtHzFNk1RkdO3/WF S7SHEm2Dozc4y1q25vR4b+LLEy/noOIOSMJabe8kaOWfgViVOs7nbhVjkV4NZCzQ BifBrxtsGoNNaCmlWUK/dFnwPL75XWdvRb220TCjFGZW9MaRg43nJj/EKxwdhsvs F10RK4k96wKptVP9XGSowWCBfHo+U3daS//NovXVjp7bIWClTjK+PMMi8/GnAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUQjd9zaiJn/syLfw+698i1m2KZMswHwYDVR0j BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0 Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjcyMzM3MjE3OTQ1OC8wLzM0MzMyZTMyMzUz NDJlMzIzMzM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNTMxMzEzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEACv+7zANBgkqhkiG9w0BAQsFAAOCAQEAZh7vCuUqfTcvsg6jE20mawdR vAZDzIkQDj7X4UrU3GxJerYQSWRYBDrni5I+YjoSrTjZuEJjH8TaLu64oJz9kqfP XjfMpxsqf+D1J7BtyLQYI7VdGSuGTvX+tJKbKMFWvUeBNpMpBys+uquJwmi1gDK2 2zivO9vPMbO45i3ktpJpUBDUjV6DeakKR2RT1OPT1/GTUobeGY6dRcoN/qfVq7ip C/VyoyKOitu8l7qv5jjk+eaZWUumKEr/2t2sHWQfg9GFkRv25BQIg+LIlP3i8ntT 5qk/ezmxBCkKNESnbtsueLZkMrbtpe71pZTd5YT4Br38l2CUAFRS2jwqwGUZhg== -----END CERTIFICATE-----Generated at Sat Apr 18 00:22:19 2026 by rpki-client