$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/34332e3234322e35322e302f32342d3234203d3e20313334333636.roa File: 34332e3234322e35322e302f32342d3234203d3e20313334333636.roa (raw, json) Hash identifier: Wy3gDCRAbNPJI6Q6VL0wJx4Pa2cgkvGgI+huOvg3Sq8= Subject key identifier: 10:1F:E8:75:5E:8E:79:23:ED:F3:7D:54:26:0D:D3:2B:FC:C6:44:DB Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Certificate serial: 6BC244AE300BBC89BEA7B0B4F9D32BD53978598B Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/34332e3234322e35322e302f32342d3234203d3e20313334333636.roa Signing time: Wed 15 Apr 2026 08:59:32 +0000 ROA not before: Wed 15 Apr 2026 08:54:32 +0000 ROA not after: Wed 14 Apr 2027 08:59:32 +0000 asID: 134366 IP address blocks: 43.242.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:c2:44:ae:30:0b:bc:89:be:a7:b0:b4:f9:d3:2b:d5:39:78:59:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Validity Not Before: Apr 15 08:54:32 2026 GMT Not After : Apr 14 08:59:32 2027 GMT Subject: CN=101FE8755E8E7923EDF37D54260DD32BFCC644DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c1:fa:02:39:d5:46:a9:00:66:8d:65:d8:f1: a6:f4:6b:be:ad:b4:8a:62:80:5c:5f:09:7c:a6:5a: ff:94:f5:a8:6a:79:29:b9:43:eb:f7:3f:5d:00:d5: 6f:f2:36:3a:58:df:63:2c:6e:4b:35:0c:5f:a0:f5: 0b:73:45:a9:67:ba:46:44:b7:f7:d8:e9:64:3e:c0: 55:0a:70:ae:b3:76:1d:4d:af:55:d5:92:3f:8f:0c: 9a:c1:33:b2:24:7a:b2:a4:1c:37:5b:3c:80:80:6d: 20:b8:48:98:15:ac:14:13:34:e9:d4:ef:c5:41:9d: da:6e:5e:dd:ce:e4:c2:f4:b3:55:69:5f:0f:72:fd: 5a:8d:d2:bb:87:50:e7:cb:2f:34:85:db:4a:06:86: a8:86:b2:15:35:69:3a:79:64:b6:62:d6:85:de:dd: 2f:14:9e:70:32:36:66:58:70:68:94:0d:de:ed:ee: 1a:60:fd:a0:bd:82:33:92:09:2f:3f:b3:e7:99:fb: 18:1b:55:38:72:6e:ca:a5:c7:17:48:f1:c4:0c:33: 3d:8a:4c:c4:e2:f2:8a:8c:c7:b8:3a:26:5a:38:1f: 1c:e8:83:59:76:2c:dc:b6:d9:02:ea:46:3f:d8:60: 37:11:3f:83:37:06:c9:59:29:18:16:ec:d4:62:09: 6b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1F:E8:75:5E:8E:79:23:ED:F3:7D:54:26:0D:D3:2B:FC:C6:44:DB X509v3 Authority Key Identifier: keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/34332e3234322e35322e302f32342d3234203d3e20313334333636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.242.52.0/24 Signature Algorithm: sha256WithRSAEncryption 21:5b:37:43:64:de:e7:11:01:46:6e:7f:dd:53:e3:af:c0:d5: 54:cb:f3:70:78:5e:6f:f6:10:5e:0a:e1:68:c1:91:86:ac:3b: f8:c2:13:f6:7d:7f:54:e4:f2:0e:4b:e6:9b:2d:81:6a:bf:19: 35:8d:8c:95:a9:2d:d0:4d:a0:86:b2:0d:24:8b:ce:d8:0d:13: 12:94:0f:d5:90:8c:d1:76:d0:a2:83:f2:2e:f6:9c:df:55:38: a5:0c:d2:d1:34:2f:6e:66:28:cf:90:18:f3:0b:14:64:38:f4: 7e:c0:72:12:ce:a5:a7:b5:9e:1f:0d:94:6e:ff:25:bd:76:87: 2f:32:03:87:6b:8b:02:fd:8b:b0:4e:f3:42:81:08:ac:88:11: 93:0c:48:d7:b7:8c:19:d7:0a:bc:3f:1e:73:6a:d9:65:3c:f4: ae:cf:82:2b:b9:45:04:22:56:f3:20:ae:40:4e:b2:4c:e0:60: 60:e9:32:ec:63:7d:61:14:71:32:7c:37:df:92:95:c3:95:3d: b5:28:7b:8e:7d:51:37:2c:11:19:5c:75:e0:5c:cf:55:65:f4: d1:b3:6f:3b:41:ac:19:78:9f:45:49:b4:95:3b:a2:86:2f:58: df:39:9c:47:59:ef:5f:ba:4d:66:d8:46:03:4d:3c:0d:d1:56: 56:ae:67:69 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUa8JErjALvIm+p7C0+dMr1Tl4WYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0Iy NjVGOTZDRTAeFw0yNjA0MTUwODU0MzJaFw0yNzA0MTQwODU5MzJaMDMxMTAvBgNV BAMTKDEwMUZFODc1NUU4RTc5MjNFREYzN0Q1NDI2MEREMzJCRkNDNjQ0REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCwfoCOdVGqQBmjWXY8ab0a76t tIpigFxfCXymWv+U9ahqeSm5Q+v3P10A1W/yNjpY32Msbks1DF+g9QtzRalnukZE t/fY6WQ+wFUKcK6zdh1Nr1XVkj+PDJrBM7IkerKkHDdbPICAbSC4SJgVrBQTNOnU 78VBndpuXt3O5ML0s1VpXw9y/VqN0ruHUOfLLzSF20oGhqiGshU1aTp5ZLZi1oXe 3S8UnnAyNmZYcGiUDd7t7hpg/aC9gjOSCS8/s+eZ+xgbVThybsqlxxdI8cQMMz2K TMTi8oqMx7g6Jlo4Hxzog1l2LNy22QLqRj/YYDcRP4M3BslZKRgW7NRiCWsHAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUEB/odV6OeSPt831UJg3TK/zGRNswHwYDVR0j BBgwFoAUNoXayIKLPrSYl2FCKneqeyZfls4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8wLzM2ODVEQUM4ODI4QjNFQjQ5ODk3NjE0MjJBNzdB QTdCMjY1Rjk2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDUyMzY1MS8wLzM0MzMyZTMyMzQz MjJlMzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDMzMzYzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEACvyNDANBgkqhkiG9w0BAQsFAAOCAQEAIVs3Q2Te5xEBRm5/3VPjr8DV VMvzcHheb/YQXgrhaMGRhqw7+MIT9n1/VOTyDkvmmy2Bar8ZNY2Mlakt0E2ghrIN JIvO2A0TEpQP1ZCM0XbQooPyLvac31U4pQzS0TQvbmYoz5AY8wsUZDj0fsByEs6l p7WeHw2Ubv8lvXaHLzIDh2uLAv2LsE7zQoEIrIgRkwxI17eMGdcKvD8ec2rZZTz0 rs+CK7lFBCJW8yCuQE6yTOBgYOky7GN9YRRxMnw335KVw5U9tSh7jn1RNywRGVx1 4FzPVWX00bNvO0GsGXifRUm0lTuihi9Y3zmcR1nvX7pNZthGA008DdFWVq5naQ== -----END CERTIFICATE-----Generated at Fri Apr 17 23:56:01 2026 by rpki-client