$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/34332e3232392e35312e302f32342d3234203d3e2034383131.roa File: 34332e3232392e35312e302f32342d3234203d3e2034383131.roa (raw, json) Hash identifier: WmqVv2e+3L/NWDrXt+GhaCmoyhim3K8xqJfOoFv+lMs= Subject key identifier: 68:FF:DF:77:7D:83:01:22:0E:64:67:D4:6D:F0:AA:F6:7C:AC:59:0A Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Certificate serial: 02E1B6A29016FF0AB973F47B903FD2DCC8572A18 Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/34332e3232392e35312e302f32342d3234203d3e2034383131.roa Signing time: Fri 17 Apr 2026 01:57:40 +0000 ROA not before: Fri 17 Apr 2026 01:52:40 +0000 ROA not after: Fri 16 Apr 2027 01:57:40 +0000 asID: 4811 IP address blocks: 43.229.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 04:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:e1:b6:a2:90:16:ff:0a:b9:73:f4:7b:90:3f:d2:dc:c8:57:2a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Validity Not Before: Apr 17 01:52:40 2026 GMT Not After : Apr 16 01:57:40 2027 GMT Subject: CN=68FFDF777D8301220E6467D46DF0AAF67CAC590A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:15:8f:91:b2:17:43:40:c7:ec:70:17:1b:f4: 7c:db:db:aa:0f:79:6f:d9:8b:3d:e1:a8:ad:0f:83: a8:78:94:6d:06:9d:6e:5a:33:c3:45:74:51:c1:22: 18:1c:7a:0a:0b:f3:43:3b:53:69:5d:15:ea:e6:ac: b5:87:b8:1f:45:66:e2:94:05:54:6b:61:4a:59:45: b4:c9:a5:75:c0:ac:3d:58:62:f9:06:5b:41:f9:a7: 4f:8a:27:64:ef:1a:a8:d1:8e:e7:65:69:41:4a:33: d4:b4:f6:bb:52:70:e8:68:f4:7a:b2:56:b9:85:e6: 8f:d3:88:c0:2b:42:d0:f9:7b:ef:ec:9c:99:92:90: 2e:1d:b6:d1:73:a1:99:a9:57:af:1a:66:c6:7f:5d: 65:b7:0f:2c:e2:1f:c4:27:63:69:11:ad:48:9f:64: 47:46:24:39:af:9d:8b:99:88:fe:8e:23:81:c7:03: 8c:53:8f:f4:1c:db:81:0b:1e:1a:64:34:a0:32:72: 22:73:d7:51:97:04:79:0e:4f:33:aa:d6:a9:72:84: d7:76:0c:1f:43:eb:c6:06:99:63:5b:46:db:b1:be: 5f:9a:e6:e5:a3:99:d4:50:83:7f:25:cd:06:6b:6e: 9e:27:f3:ab:54:38:09:13:98:d3:76:8b:82:6d:d2: aa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FF:DF:77:7D:83:01:22:0E:64:67:D4:6D:F0:AA:F6:7C:AC:59:0A X509v3 Authority Key Identifier: keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/34332e3232392e35312e302f32342d3234203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.229.51.0/24 Signature Algorithm: sha256WithRSAEncryption ce:b7:93:78:ae:cd:7d:8c:55:1e:aa:53:aa:2b:94:65:df:e4: 79:56:3f:a0:ce:f0:6d:47:46:f6:45:15:d5:db:0b:37:e3:fb: 9e:03:3a:3c:cc:37:d7:c5:a2:b2:23:fc:c7:79:b3:1d:0c:6f: f9:bc:fb:22:84:b1:8c:a6:cc:43:72:3f:55:d6:b7:9b:fb:7b: 67:b3:0e:1a:4b:63:c9:52:d6:e1:bb:bd:4c:20:1e:96:e9:e1: a7:08:cf:51:3c:7b:c7:d4:60:f0:61:ef:35:d7:fd:c5:81:2e: f5:5e:0d:01:bb:2b:55:aa:14:b6:18:80:0c:8c:11:84:9d:ef: 9f:f1:b7:a9:2e:fd:3a:31:25:96:61:5a:1f:16:81:08:a2:ca: 33:ce:13:b2:e6:73:00:28:04:e2:16:2d:a8:ee:e0:c4:ab:a2: ea:80:7f:a5:de:e5:6c:3c:e2:8a:42:2f:53:2c:38:8b:5e:be: f7:aa:eb:fd:19:35:cb:9f:cc:50:64:83:59:62:9b:c8:47:0d: 37:02:3c:d5:88:e6:83:3d:20:12:84:6a:de:59:3c:38:5a:60: db:17:a4:ee:1c:c6:56:29:5e:41:c4:f6:fa:cd:79:33:43:2d: 36:6d:d5:37:74:06:de:dd:bf:2b:83:25:43:1e:5d:5b:fb:d6: be:3d:8a:c7 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUAuG2opAW/wq5c/R7kD/S3MhXKhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4 M0FCMjMzOTAeFw0yNjA0MTcwMTUyNDBaFw0yNzA0MTYwMTU3NDBaMDMxMTAvBgNV BAMTKDY4RkZERjc3N0Q4MzAxMjIwRTY0NjdENDZERjBBQUY2N0NBQzU5MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgFY+RshdDQMfscBcb9Hzb26oP eW/Ziz3hqK0Pg6h4lG0GnW5aM8NFdFHBIhgcegoL80M7U2ldFermrLWHuB9FZuKU BVRrYUpZRbTJpXXArD1YYvkGW0H5p0+KJ2TvGqjRjudlaUFKM9S09rtScOho9Hqy VrmF5o/TiMArQtD5e+/snJmSkC4dttFzoZmpV68aZsZ/XWW3DyziH8QnY2kRrUif ZEdGJDmvnYuZiP6OI4HHA4xTj/Qc24ELHhpkNKAyciJz11GXBHkOTzOq1qlyhNd2 DB9D68YGmWNbRtuxvl+a5uWjmdRQg38lzQZrbp4n86tUOAkTmNN2i4Jt0qpXAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUaP/fd32DASIOZGfUbfCq9nysWQowHwYDVR0j BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjAyOTQ1LzAvMzQzMzJlMzIzMjM5 MmUzNTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMxMzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAr5TMwDQYJKoZIhvcNAQELBQADggEBAM63k3iuzX2MVR6qU6orlGXf5HlWP6DO 8G1HRvZFFdXbCzfj+54DOjzMN9fForIj/Md5sx0Mb/m8+yKEsYymzENyP1XWt5v7 e2ezDhpLY8lS1uG7vUwgHpbp4acIz1E8e8fUYPBh7zXX/cWBLvVeDQG7K1WqFLYY gAyMEYSd75/xt6ku/ToxJZZhWh8WgQiiyjPOE7LmcwAoBOIWLaju4MSrouqAf6Xe 5Ww84opCL1MsOItevveq6/0ZNcufzFBkg1lim8hHDTcCPNWI5oM9IBKEat5ZPDha YNsXpO4cxlYpXkHE9vrNeTNDLTZt1Td0Bt7dvyuDJUMeXVv71r49isc= -----END CERTIFICATE-----Generated at Fri Apr 17 13:31:19 2026 by rpki-client