$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577400322/0/34332e3232382e3234302e302f32322d3232203d3e203535393931.roa File: 34332e3232382e3234302e302f32322d3232203d3e203535393931.roa (raw, json) Hash identifier: aAK3b2YO28PMJfPm9Aj9uOiTBwmGFcaW1Dy+MYbP2/I= Subject key identifier: BF:68:1B:75:5C:43:44:7C:31:59:F8:A0:AD:5F:35:4C:3F:76:E2:DC Certificate issuer: /CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Certificate serial: 1AD7C0F43F85AC67724803144432FD5B0F861541 Authority key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/34332e3232382e3234302e302f32322d3232203d3e203535393931.roa Signing time: Wed 15 Apr 2026 08:21:45 +0000 ROA not before: Wed 15 Apr 2026 08:16:45 +0000 ROA not after: Wed 14 Apr 2027 08:21:45 +0000 asID: 55991 IP address blocks: 43.228.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 14:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d7:c0:f4:3f:85:ac:67:72:48:03:14:44:32:fd:5b:0f:86:15:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Validity Not Before: Apr 15 08:16:45 2026 GMT Not After : Apr 14 08:21:45 2027 GMT Subject: CN=BF681B755C43447C3159F8A0AD5F354C3F76E2DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1c:0f:fe:69:16:9b:8b:c8:19:1f:95:fd:32: 79:28:45:da:64:12:19:d2:af:ec:bf:f8:84:d5:8a: 0b:fe:17:a8:ce:45:97:40:64:77:8a:6d:2a:7c:fe: 4c:86:aa:06:e8:bb:59:d0:6f:ad:0b:46:6a:f6:c3: 00:75:30:92:5a:03:92:14:5a:9c:2d:0b:54:37:1b: 04:e1:91:05:75:aa:21:9e:30:19:2d:38:31:de:be: 2e:07:5f:9e:98:0b:f9:d5:37:e8:ca:4c:39:ed:46: b7:30:9d:33:50:0f:96:b5:bf:d9:ee:e9:3e:b8:c6: 09:e0:d2:e3:96:52:0f:01:7a:d2:4b:8d:26:70:a2: 55:56:7e:bf:2b:17:58:c3:85:00:71:75:1d:75:35: b1:c7:f8:d7:41:a3:1b:33:42:89:8b:0b:1e:6b:5d: 02:07:21:55:b6:82:fc:a1:5e:8c:3b:be:c2:27:2a: 6c:98:5e:dc:a7:c3:54:46:73:b3:1e:1f:cd:43:03: ea:8f:c6:83:d3:82:5c:17:e9:5e:ef:5b:6e:18:7f: 7b:a6:a2:5c:56:07:9a:e3:0e:0c:49:46:e4:b1:1f: ea:b8:93:97:bf:7b:11:e9:52:20:f3:45:f2:36:74: de:42:8d:bc:72:24:86:5a:7c:2a:c0:77:4f:5a:21: 7f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:68:1B:75:5C:43:44:7C:31:59:F8:A0:AD:5F:35:4C:3F:76:E2:DC X509v3 Authority Key Identifier: keyid:11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/34332e3232382e3234302e302f32322d3232203d3e203535393931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.228.240.0/22 Signature Algorithm: sha256WithRSAEncryption c8:d4:5c:f0:35:94:96:d0:78:2e:c7:c8:b5:a7:1f:47:e4:02: e1:58:8b:a7:d3:b2:ba:b9:44:ee:37:37:fa:28:0c:7e:a3:d0: a0:fb:0b:23:68:c4:16:0e:1e:64:54:12:c6:a5:04:72:61:31: 1c:33:92:62:e3:7f:cb:8a:1d:f7:07:86:d8:e6:1c:f8:76:0c: ea:a2:9c:1b:22:e6:4c:79:73:e0:67:20:09:f3:78:af:71:56: de:5d:46:6b:9c:55:ba:63:6f:50:6e:50:89:8c:6e:31:b4:f8: 55:23:78:20:85:bf:3d:99:b3:1b:a4:7a:65:ad:a6:c2:87:2f: 09:af:be:9a:6f:ea:45:da:a3:7f:1d:63:65:81:ca:1d:7e:4e: d8:c1:4b:cc:46:08:43:29:ba:0c:ba:14:fa:45:cb:f8:fe:dd: 90:1f:7b:af:3f:f1:4c:57:dc:0f:c4:40:2a:48:78:c0:6e:4f: ef:25:e5:f0:75:bc:8a:45:60:9a:36:04:d7:b2:27:81:9c:de: c4:8b:6f:8e:b9:54:ee:5c:e5:9c:a2:94:18:f7:08:32:ae:46: 72:3c:67:55:03:a2:f6:22:2b:23:e2:23:1b:5d:54:3a:5e:33: 6d:1d:02:a9:24:cf:f4:f2:dd:1e:22:72:cc:32:ec:2f:f9:ba: ca:c3:0b:51 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUGtfA9D+FrGdySAMURDL9Ww+GFUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZD NUQyMTA3NTAeFw0yNjA0MTUwODE2NDVaFw0yNzA0MTQwODIxNDVaMDMxMTAvBgNV BAMTKEJGNjgxQjc1NUM0MzQ0N0MzMTU5RjhBMEFENUYzNTRDM0Y3NkUyREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdHA/+aRabi8gZH5X9MnkoRdpk EhnSr+y/+ITVigv+F6jORZdAZHeKbSp8/kyGqgbou1nQb60LRmr2wwB1MJJaA5IU WpwtC1Q3GwThkQV1qiGeMBktODHevi4HX56YC/nVN+jKTDntRrcwnTNQD5a1v9nu 6T64xgng0uOWUg8BetJLjSZwolVWfr8rF1jDhQBxdR11NbHH+NdBoxszQomLCx5r XQIHIVW2gvyhXow7vsInKmyYXtynw1RGc7MeH81DA+qPxoPTglwX6V7vW24Yf3um olxWB5rjDgxJRuSxH+q4k5e/exHpUiDzRfI2dN5CjbxyJIZafCrAd09aIX8pAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUv2gbdVxDRHwxWfigrV81TD924twwHwYDVR0j BBgwFoAUETNnmywQSgRG+gw3ZO7iRsXSEHUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzQwMDMyMi8wLzExMzM2NzlCMkMxMDRBMDQ0NkZBMEMzNzY0RUVF MjQ2QzVEMjEwNzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZDNUQyMTA3NS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4Mjc0MTU3NzQwMDMyMi8wLzM0MzMyZTMyMzIz ODJlMzIzNDMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzNTM5MzkzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAivk8DANBgkqhkiG9w0BAQsFAAOCAQEAyNRc8DWUltB4LsfItacfR+QC 4ViLp9OyurlE7jc3+igMfqPQoPsLI2jEFg4eZFQSxqUEcmExHDOSYuN/y4od9weG 2OYc+HYM6qKcGyLmTHlz4GcgCfN4r3FW3l1Ga5xVumNvUG5QiYxuMbT4VSN4IIW/ PZmzG6R6Za2mwocvCa++mm/qRdqjfx1jZYHKHX5O2MFLzEYIQym6DLoU+kXL+P7d kB97rz/xTFfcD8RAKkh4wG5P7yXl8HW8ikVgmjYE17IngZzexItvjrlU7lzlnKKU GPcIMq5GcjxnVQOi9iIrI+IjG11UOl4zbR0CqSTP9PLdHiJyzDLsL/m6ysMLUQ== -----END CERTIFICATE-----Generated at Fri Apr 17 19:41:08 2026 by rpki-client