$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34332e3235352e3232382e302f32322d3232203d3e203536303430.roa File: 34332e3235352e3232382e302f32322d3232203d3e203536303430.roa (raw, json) Hash identifier: 2AjbaO8fVNae8qsW7nQQdWESYhJG93MIMZ/RdkuunwQ= Subject key identifier: 6F:8D:39:8C:72:BC:0E:91:67:70:49:73:DB:EC:93:4B:8C:19:C4:61 Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Certificate serial: 1AC6D2961B3D18382765254524B5F15035EBCF55 Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34332e3235352e3232382e302f32322d3232203d3e203536303430.roa Signing time: Wed 29 Jul 2026 01:49:18 +0000 ROA not before: Wed 29 Jul 2026 01:44:18 +0000 ROA not after: Wed 28 Jul 2027 01:49:18 +0000 asID: 56040 IP address blocks: 43.255.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c6:d2:96:1b:3d:18:38:27:65:25:45:24:b5:f1:50:35:eb:cf:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Validity Not Before: Jul 29 01:44:18 2026 GMT Not After : Jul 28 01:49:18 2027 GMT Subject: CN=6F8D398C72BC0E9167704973DBEC934B8C19C461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6c:77:ac:85:ae:95:f8:73:da:c7:ce:8b:30: 1a:96:78:48:a7:80:90:65:ce:a1:d2:e9:b5:f5:6f: f4:73:f7:6c:8e:41:04:fd:98:56:8e:25:52:9f:65: ed:3c:84:9e:fd:f0:ac:95:bf:b3:64:25:df:d2:43: 3d:62:61:61:22:1d:89:42:0a:ed:96:6b:2b:3d:8b: 07:1d:6c:af:6e:0e:b3:55:72:dd:f5:84:a2:81:c3: 79:62:df:11:04:91:8d:41:6e:f4:b9:89:9d:67:9a: 8b:c4:8f:f0:66:3b:fd:b4:26:59:3d:d7:4c:0d:a6: 29:c1:89:73:29:73:2e:a7:48:13:93:dd:b6:ef:16: 39:22:e0:5a:dc:0c:9f:5d:97:4b:91:39:67:0b:e0: 06:58:cc:95:68:07:aa:44:29:c2:17:56:99:28:42: da:c4:44:83:99:24:7a:a9:18:c1:73:60:5a:8e:a3: 2c:7b:90:5f:05:90:4b:93:31:bc:c4:e9:9f:c0:ea: 2b:1e:6f:c5:c7:46:5b:de:f7:e5:a1:77:5a:7d:66: 67:28:23:0c:46:ae:24:02:d3:d8:2f:00:fb:c5:88: 18:9f:40:97:a8:19:46:db:a2:53:2c:79:41:c9:ae: f1:01:9b:d8:13:6c:e1:ac:1d:3d:12:73:6d:08:7f: ac:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8D:39:8C:72:BC:0E:91:67:70:49:73:DB:EC:93:4B:8C:19:C4:61 X509v3 Authority Key Identifier: keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34332e3235352e3232382e302f32322d3232203d3e203536303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.255.228.0/22 Signature Algorithm: sha256WithRSAEncryption 03:e3:66:8d:8d:a4:04:1a:a3:25:86:a8:98:cb:5b:21:91:b2: ce:a8:83:84:04:11:92:f0:35:dd:af:5f:c3:10:4e:1f:ac:53: e7:20:4c:8e:f5:2e:3d:b8:47:bd:6d:ca:4e:e6:de:bf:73:32: 2c:57:65:f8:0c:50:2d:5f:51:e4:9e:04:5c:0f:92:f4:16:c8: b4:6e:81:65:fa:3c:39:f3:c4:f1:19:bd:a8:cd:4e:7f:b1:38: 4c:85:7e:aa:cd:dd:03:dc:8f:a1:e0:2b:87:a6:ee:5e:b9:5f: 94:ad:a4:3f:c1:e4:94:90:3a:ba:eb:12:81:ba:13:a3:e6:3d: 86:4a:a0:2c:56:d1:da:89:ea:c2:49:8a:6c:8d:4e:62:09:5a: b8:28:ff:3b:d0:8e:b0:9d:c1:18:c5:36:75:6c:69:47:da:31: b8:97:b6:03:ca:fb:92:05:1e:fd:34:62:37:02:3d:e9:83:cb: 83:21:ca:ec:f7:d8:8e:d8:8b:d5:13:df:9b:06:51:9e:e6:a0: e0:0e:33:a1:06:1f:1b:87:94:2e:93:79:9b:06:f2:33:87:09: 72:f5:90:e6:11:68:b6:f8:41:c6:14:36:e8:c1:b9:22:56:23: 94:2b:b3:0c:68:a9:6b:e8:bd:11:8d:e0:b1:ca:39:bf:c1:60: fd:be:ba:1c -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUGsbSlhs9GDgnZSVFJLXxUDXrz1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhB QjIxMzUxQTAeFw0yNjA3MjkwMTQ0MThaFw0yNzA3MjgwMTQ5MThaMDMxMTAvBgNV BAMTKDZGOEQzOThDNzJCQzBFOTE2NzcwNDk3M0RCRUM5MzRCOEMxOUM0NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsbHesha6V+HPax86LMBqWeEin gJBlzqHS6bX1b/Rz92yOQQT9mFaOJVKfZe08hJ798KyVv7NkJd/SQz1iYWEiHYlC Cu2Ways9iwcdbK9uDrNVct31hKKBw3li3xEEkY1BbvS5iZ1nmovEj/BmO/20Jlk9 10wNpinBiXMpcy6nSBOT3bbvFjki4FrcDJ9dl0uROWcL4AZYzJVoB6pEKcIXVpko QtrERIOZJHqpGMFzYFqOoyx7kF8FkEuTMbzE6Z/A6iseb8XHRlve9+Whd1p9Zmco IwxGriQC09gvAPvFiBifQJeoGUbbolMseUHJrvEBm9gTbOGsHT0Sc20If6wpAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUb405jHK8DpFncElz2+yTS4wZxGEwHwYDVR0j BBgwFoAULQvBZV0Xo6sJyR5Doy3o2KshNRowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDcyMDI1OS8wLzJEMEJDMTY1NUQxN0EzQUIwOUM5MUU0M0EzMkRF OEQ4QUIyMTM1MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhBQjIxMzUxQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDcyMDI1OS8wLzM0MzMyZTMyMzUz NTJlMzIzMjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzNjMwMzQzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAiv/5DANBgkqhkiG9w0BAQsFAAOCAQEAA+NmjY2kBBqjJYaomMtbIZGy zqiDhAQRkvA13a9fwxBOH6xT5yBMjvUuPbhHvW3KTubev3MyLFdl+AxQLV9R5J4E XA+S9BbItG6BZfo8OfPE8Rm9qM1Of7E4TIV+qs3dA9yPoeArh6buXrlflK2kP8Hk lJA6uusSgboTo+Y9hkqgLFbR2onqwkmKbI1OYglauCj/O9COsJ3BGMU2dWxpR9ox uJe2A8r7kgUe/TRiNwI96YPLgyHK7PfYjtiL1RPfmwZRnuag4A4zoQYfG4eULpN5 mwbyM4cJcvWQ5hFotvhBxhQ26MG5IlYjlCuzDGipa+i9EY3gsco5v8Fg/b66HA== -----END CERTIFICATE-----Generated at Wed Jul 29 06:17:40 2026 by rpki-client