$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/34332e3234322e35322e302f32322d3232203d3e2030.roa File: 34332e3234322e35322e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: OfnqAkRJUOk2rMUn6ghg7Zkv5OQ7YaN/F8VonmsN4mo= Subject key identifier: 0F:72:D2:E6:97:48:87:33:49:84:B5:CC:99:0F:BB:9F:23:7E:95:1D Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Certificate serial: 50FFDD8EFF2F46642722DD429FDED149892C2988 Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/34332e3234322e35322e302f32322d3232203d3e2030.roa Signing time: Wed 15 Apr 2026 08:59:31 +0000 ROA not before: Wed 15 Apr 2026 08:54:31 +0000 ROA not after: Wed 14 Apr 2027 08:59:31 +0000 asID: 0 IP address blocks: 43.242.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 05:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ff:dd:8e:ff:2f:46:64:27:22:dd:42:9f:de:d1:49:89:2c:29:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Validity Not Before: Apr 15 08:54:31 2026 GMT Not After : Apr 14 08:59:31 2027 GMT Subject: CN=0F72D2E6974887334984B5CC990FBB9F237E951D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3f:65:17:98:6f:39:a1:09:10:66:32:d7:27: 1a:70:e7:da:11:2f:bf:f5:0e:5e:b9:18:89:d2:72: 82:91:76:ad:d9:fb:07:01:c1:05:5f:21:44:d6:23: 07:3e:be:1d:95:36:74:02:6b:ea:de:71:ca:1c:de: c9:88:3e:85:26:e6:49:cd:d9:2c:eb:ac:ce:07:83: b9:a5:9a:c9:30:1b:ca:65:ef:9e:49:13:c7:15:21: 90:8c:c2:1b:92:ee:bc:91:4e:28:d0:dc:7f:43:d4: 26:2f:76:b3:a7:52:88:87:66:25:63:fd:4f:75:8c: 5d:32:47:77:bc:91:13:4c:be:0d:c8:ae:57:7a:d5: 1c:f9:b3:3d:6e:c7:4d:0a:2d:cc:01:ca:ae:41:59: 40:d4:8d:91:04:43:82:51:44:94:29:14:8b:1c:2a: 8e:23:8c:47:ef:8d:8b:92:ab:53:1d:f6:06:d6:63: 14:c6:62:7f:ef:4a:cc:de:aa:13:e8:ba:4e:fa:be: 10:27:ea:d6:7b:9a:5b:a0:14:6f:8f:39:4e:9f:d4: 22:cf:59:5c:fa:65:1e:04:3a:1f:ca:fa:b4:8f:ed: ba:93:e6:20:27:72:d3:c4:26:c8:6e:31:eb:ba:1a: 38:75:0e:32:fe:12:92:e9:d9:4f:0c:c6:0d:82:f3: d4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:72:D2:E6:97:48:87:33:49:84:B5:CC:99:0F:BB:9F:23:7E:95:1D X509v3 Authority Key Identifier: keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/34332e3234322e35322e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.242.52.0/22 Signature Algorithm: sha256WithRSAEncryption 66:a8:7d:63:31:24:97:e9:a4:28:09:60:d4:08:02:54:3e:1c: 45:0a:c2:d0:19:f2:6a:c1:9b:a2:f8:eb:08:62:6f:73:0c:ed: 95:93:61:25:fb:f9:81:ad:7d:0b:13:18:9c:54:53:bd:97:28: f2:9d:1f:d2:ec:bc:6c:09:6b:c8:54:af:15:bb:5e:f8:8a:bf: dc:47:fc:0f:7e:b1:0f:74:e5:1a:16:74:50:d8:33:34:7f:9e: 16:09:e4:c7:a6:a1:7f:45:d7:cf:d6:54:6b:e5:4e:4c:71:65: 9d:e6:9c:8c:41:96:b7:58:a5:cb:de:00:5f:bd:2d:97:c3:ab: 55:ea:9d:00:01:52:3b:e6:0f:be:48:8c:15:bc:ff:66:2f:15: 2f:26:f6:b9:c9:48:ee:68:da:f3:93:ba:e8:5d:59:20:4d:64: 6f:4a:f8:a6:32:9e:cb:99:57:c2:3a:b1:ec:f4:a4:1c:53:40: 52:a3:75:8f:60:da:85:56:22:31:35:c3:95:da:93:13:54:dc: 1e:b3:b3:3b:91:c7:3b:b8:7a:42:ea:bf:a5:ed:05:68:25:0b: 51:50:21:6f:7f:92:14:a9:c8:34:53:36:44:1e:05:0f:57:35: 8e:f9:bc:08:72:26:71:11:88:74:a1:09:2c:bf:d8:9f:39:45: 8c:55:42:94 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUUP/djv8vRmQnIt1Cn97RSYksKYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0Iy NjVGOTZDRTAeFw0yNjA0MTUwODU0MzFaFw0yNzA0MTQwODU5MzFaMDMxMTAvBgNV BAMTKDBGNzJEMkU2OTc0ODg3MzM0OTg0QjVDQzk5MEZCQjlGMjM3RTk1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5P2UXmG85oQkQZjLXJxpw59oR L7/1Dl65GInScoKRdq3Z+wcBwQVfIUTWIwc+vh2VNnQCa+reccoc3smIPoUm5knN 2SzrrM4Hg7mlmskwG8pl755JE8cVIZCMwhuS7ryRTijQ3H9D1CYvdrOnUoiHZiVj /U91jF0yR3e8kRNMvg3Irld61Rz5sz1ux00KLcwByq5BWUDUjZEEQ4JRRJQpFIsc Ko4jjEfvjYuSq1Md9gbWYxTGYn/vSszeqhPouk76vhAn6tZ7mlugFG+POU6f1CLP WVz6ZR4EOh/K+rSP7bqT5iAnctPEJshuMeu6Gjh1DjL+EpLp2U8Mxg2C89QhAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUD3LS5pdIhzNJhLXMmQ+7nyN+lR0wHwYDVR0j BBgwFoAUNoXayIKLPrSYl2FCKneqeyZfls4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8wLzM2ODVEQUM4ODI4QjNFQjQ5ODk3NjE0MjJBNzdB QTdCMjY1Rjk2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTIzNjUxLzAvMzQzMzJlMzIzNDMy MmUzNTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIr8jQw DQYJKoZIhvcNAQELBQADggEBAGaofWMxJJfppCgJYNQIAlQ+HEUKwtAZ8mrBm6L4 6whib3MM7ZWTYSX7+YGtfQsTGJxUU72XKPKdH9LsvGwJa8hUrxW7XviKv9xH/A9+ sQ905RoWdFDYMzR/nhYJ5MemoX9F18/WVGvlTkxxZZ3mnIxBlrdYpcveAF+9LZfD q1XqnQABUjvmD75IjBW8/2YvFS8m9rnJSO5o2vOTuuhdWSBNZG9K+KYynsuZV8I6 sez0pBxTQFKjdY9g2oVWIjE1w5XakxNU3B6zszuRxzu4ekLqv6XtBWglC1FQIW9/ khSpyDRTNkQeBQ9XNY75vAhyJnERiHShCSy/2J85RYxVQpQ= -----END CERTIFICATE-----Generated at Thu Apr 16 22:35:34 2026 by rpki-client