$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/34332e3232392e34382e302f32322d3234203d3e203535393936.roa File: 34332e3232392e34382e302f32322d3234203d3e203535393936.roa (raw, json) Hash identifier: 4+JErO+9l43bjxVNYsIRPa9SKrgCAkgicIQTFBmpRmU= Subject key identifier: 5B:F2:38:69:6F:A2:B0:64:4B:52:F2:EF:F1:3F:87:36:B7:F0:2E:A9 Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Certificate serial: 0F054D45DEE254AB385B70647A9AA511F09B0EC0 Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/34332e3232392e34382e302f32322d3234203d3e203535393936.roa Signing time: Fri 17 Apr 2026 01:57:40 +0000 ROA not before: Fri 17 Apr 2026 01:52:40 +0000 ROA not after: Fri 16 Apr 2027 01:57:40 +0000 asID: 55996 IP address blocks: 43.229.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:05:4d:45:de:e2:54:ab:38:5b:70:64:7a:9a:a5:11:f0:9b:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Validity Not Before: Apr 17 01:52:40 2026 GMT Not After : Apr 16 01:57:40 2027 GMT Subject: CN=5BF238696FA2B0644B52F2EFF13F8736B7F02EA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:21:1a:16:a6:2e:b4:ca:3f:6b:63:2c:c9:d0: c0:d4:9f:4c:5c:60:b8:e4:63:41:ca:a5:35:da:db: 73:3b:af:81:12:7f:bb:0f:60:f8:eb:b3:9d:67:d8: ef:52:6f:77:54:09:86:84:10:f3:b9:4b:14:9c:0a: 63:5c:03:7d:c5:31:32:e4:bc:69:f1:6d:a2:7d:e2: 22:7d:eb:bc:64:c1:de:2f:64:7e:b9:b9:a4:fb:2c: 3d:8c:f6:1c:c2:37:83:59:01:08:ae:93:6b:e0:b6: e9:41:1e:b2:51:29:80:6b:52:60:9b:d3:6e:70:e6: a7:4c:b3:05:4a:62:9c:d8:34:d9:85:a4:64:d3:40: 1b:3a:91:ac:b0:c7:fd:71:2e:1a:08:21:a4:02:61: 6a:3c:88:23:02:9a:0d:46:1e:60:6b:c6:f8:da:75: eb:70:95:b3:f1:ab:11:5c:51:8a:c9:77:9c:05:e9: 34:be:c0:c9:a9:0d:80:1b:23:55:dd:6d:40:3a:62: b9:e3:34:63:b7:40:ee:25:e8:ed:1f:12:e3:1f:bc: fa:9e:a1:82:a6:f1:32:22:2c:17:63:ca:98:a4:14: f9:3c:05:c2:8c:ba:25:36:a4:c8:90:0d:88:98:ed: 9d:78:ce:52:9d:7f:71:28:ce:43:fd:b3:37:35:2a: 67:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F2:38:69:6F:A2:B0:64:4B:52:F2:EF:F1:3F:87:36:B7:F0:2E:A9 X509v3 Authority Key Identifier: keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/34332e3232392e34382e302f32322d3234203d3e203535393936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.229.48.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:ba:b7:5a:47:46:03:be:d6:db:98:b1:93:35:b0:38:b2:c1: 97:ea:25:ec:0c:b4:af:25:a3:d2:95:86:18:6f:cb:b8:21:ac: 3b:e7:7b:6b:1b:e8:d6:be:c6:80:f0:f6:f4:1c:9f:d9:14:dc: 1d:53:20:82:59:54:ff:d8:23:60:52:db:f9:06:85:66:76:f0: 53:0d:32:37:70:9d:a6:1a:2f:a8:9d:fb:3e:16:cf:80:f5:00: 1c:de:37:c0:42:05:2c:ab:f3:aa:2b:c2:47:e6:a7:65:5b:27: f4:66:3a:48:74:06:c6:0e:7b:1a:5c:0a:b0:21:d1:0e:0f:d0: 93:62:e4:ea:e8:b5:16:02:a2:f8:ab:d3:de:40:1f:53:41:7c: 35:7e:d2:2a:17:18:e7:eb:e8:27:17:b3:02:fb:44:95:ba:8b: 1c:34:d9:91:13:de:5f:8f:bf:fc:f4:5c:b0:a5:ac:28:4a:2c: e4:1e:56:ed:5e:4f:02:1c:a2:6e:23:e3:ad:a9:6e:bf:14:c4: 05:2b:e9:c2:d4:2f:5d:15:b8:8b:a3:25:15:d6:1a:f9:e2:b6: fc:46:db:8b:2a:a0:f1:f6:0c:ab:df:e5:6f:6b:ed:d2:0c:9f: 55:1b:46:0a:54:43:8e:38:cd:2f:05:4f:82:ce:94:64:f7:4c: 01:ec:e4:d7 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUDwVNRd7iVKs4W3BkepqlEfCbDsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4 M0FCMjMzOTAeFw0yNjA0MTcwMTUyNDBaFw0yNzA0MTYwMTU3NDBaMDMxMTAvBgNV BAMTKDVCRjIzODY5NkZBMkIwNjQ0QjUyRjJFRkYxM0Y4NzM2QjdGMDJFQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQIRoWpi60yj9rYyzJ0MDUn0xc YLjkY0HKpTXa23M7r4ESf7sPYPjrs51n2O9Sb3dUCYaEEPO5SxScCmNcA33FMTLk vGnxbaJ94iJ967xkwd4vZH65uaT7LD2M9hzCN4NZAQiuk2vgtulBHrJRKYBrUmCb 025w5qdMswVKYpzYNNmFpGTTQBs6kaywx/1xLhoIIaQCYWo8iCMCmg1GHmBrxvja detwlbPxqxFcUYrJd5wF6TS+wMmpDYAbI1XdbUA6YrnjNGO3QO4l6O0fEuMfvPqe oYKm8TIiLBdjypikFPk8BcKMuiU2pMiQDYiY7Z14zlKdf3EozkP9szc1Kmf3AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUW/I4aW+isGRLUvLv8T+HNrfwLqkwHwYDVR0j BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjAyOTQ1LzAvMzQzMzJlMzIzMjM5 MmUzNDM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzNTM5MzkzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAivlMDANBgkqhkiG9w0BAQsFAAOCAQEADrq3WkdGA77W25ixkzWwOLLBl+ol 7Ay0ryWj0pWGGG/LuCGsO+d7axvo1r7GgPD29Byf2RTcHVMggllU/9gjYFLb+QaF ZnbwUw0yN3CdphovqJ37PhbPgPUAHN43wEIFLKvzqivCR+anZVsn9GY6SHQGxg57 GlwKsCHRDg/Qk2Lk6ui1FgKi+KvT3kAfU0F8NX7SKhcY5+voJxezAvtElbqLHDTZ kRPeX4+//PRcsKWsKEos5B5W7V5PAhyibiPjraluvxTEBSvpwtQvXRW4i6MlFdYa +eK2/Ebbiyqg8fYMq9/lb2vt0gyfVRtGClRDjjjNLwVPgs6UZPdMAezk1w== -----END CERTIFICATE-----Generated at Fri Apr 17 22:10:53 2026 by rpki-client