$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/34332e3234392e3137302e302f32332d3234203d3e20313531333032.roa File: 34332e3234392e3137302e302f32332d3234203d3e20313531333032.roa (raw, json) Hash identifier: TViUEFSUDt+dBd98dAM8WDyGrFeARupa+y25tQ3Xkpo= Subject key identifier: 03:60:BB:98:B5:3A:06:8A:FC:70:03:02:CD:99:05:BC:42:6D:77:12 Certificate issuer: /CN=9684E4B95F47A986892F9930EF9D9E453227439F Certificate serial: 35479C8F7C479DC7A2FFBD34C7C4AA2815076D2A Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/34332e3234392e3137302e302f32332d3234203d3e20313531333032.roa Signing time: Thu 16 Apr 2026 03:35:08 +0000 ROA not before: Thu 16 Apr 2026 03:30:08 +0000 ROA not after: Thu 15 Apr 2027 03:35:08 +0000 asID: 151302 IP address blocks: 43.249.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 07:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:47:9c:8f:7c:47:9d:c7:a2:ff:bd:34:c7:c4:aa:28:15:07:6d:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F Validity Not Before: Apr 16 03:30:08 2026 GMT Not After : Apr 15 03:35:08 2027 GMT Subject: CN=0360BB98B53A068AFC700302CD9905BC426D7712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ec:75:d4:4e:e1:63:b8:88:19:e8:f5:0d:17: 56:c5:5e:af:5e:d2:90:b8:7f:8a:a0:6a:56:24:d8: 8d:7e:8c:e2:35:60:f9:c3:15:40:c0:3d:c8:7c:e4: 77:68:07:3b:b5:f8:93:6c:98:30:fe:6a:3a:f8:a7: d2:5a:22:05:8d:27:82:d6:7f:50:8d:65:ac:c3:c8: b7:6c:20:6d:82:ec:e9:8a:9e:ca:8a:66:d1:81:62: 26:7f:6d:f1:85:11:7f:34:44:f9:a2:bf:85:d3:7c: ea:ff:3f:06:8d:af:90:05:31:6d:47:1c:4e:9b:ca: a6:89:3d:cf:5c:7a:41:03:75:14:f6:a2:95:06:f1: 4a:de:72:4b:85:8b:1b:6d:c8:e3:7c:ba:3d:49:1c: ec:76:96:f1:16:c9:b1:18:cd:94:3b:1b:71:21:9c: 85:7e:68:d1:65:dc:55:e0:1c:3c:45:0b:ba:64:e4: 77:6c:a8:fd:6b:83:06:f7:d9:e4:e5:d2:01:d5:f4: 41:ab:0c:a7:95:28:58:bb:87:72:d3:6e:15:62:1f: 25:a1:91:20:f4:6f:93:07:8c:b8:b0:ee:57:06:41: a0:d9:2f:2a:56:8b:24:85:0c:a8:01:38:e5:1d:3c: 00:36:48:01:e4:e8:0e:44:9f:68:5c:2f:bf:23:6c: 62:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:60:BB:98:B5:3A:06:8A:FC:70:03:02:CD:99:05:BC:42:6D:77:12 X509v3 Authority Key Identifier: keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/34332e3234392e3137302e302f32332d3234203d3e20313531333032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.249.170.0/23 Signature Algorithm: sha256WithRSAEncryption 64:d4:72:29:ee:01:04:89:51:ae:29:8b:26:53:b6:8f:a0:dd: f8:59:45:47:90:b9:de:d2:9d:e4:ff:cf:76:8a:c2:cf:95:db: 01:ab:53:ba:a6:a7:d3:34:ca:df:6c:9a:89:76:87:e0:18:9a: 73:e8:1d:59:a0:da:c6:90:11:11:bb:1d:5b:fa:c7:89:41:52: a6:f8:bf:5e:ef:cd:72:96:f6:52:b2:f0:fc:c7:88:45:5e:c6: 9b:ee:47:b0:a4:55:ce:32:e5:0e:75:52:3c:aa:6c:f4:6c:73: 33:81:82:55:d4:eb:d3:df:cd:02:d7:09:0a:34:9b:17:c2:8d: 8c:a4:1f:59:b2:81:87:5e:86:1c:af:48:53:41:14:39:15:78: 80:c0:89:69:c1:ab:bf:66:a3:bf:06:06:bc:48:46:02:ff:5b: b5:32:b1:8a:48:cd:8f:6c:75:77:fb:3a:e5:d8:ce:4a:8e:a7: 1f:a0:3f:dc:0e:3b:8c:70:2f:27:21:9b:d0:12:0f:2b:aa:43: eb:bf:5f:60:17:44:e6:a5:8f:44:93:e2:85:c6:28:4a:a7:47: 2a:6e:a1:12:61:a9:2f:ce:a6:86:47:79:8d:f5:d4:64:f8:36: 5f:16:32:28:61:29:0a:1f:6b:de:b2:b0:74:f3:b4:29:51:3f: 68:23:fb:7e -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUNUecj3xHncei/700x8SqKBUHbSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4NEU0Qjk1RjQ3QTk4Njg5MkY5OTMwRUY5RDlFNDUz MjI3NDM5RjAeFw0yNjA0MTYwMzMwMDhaFw0yNzA0MTUwMzM1MDhaMDMxMTAvBgNV BAMTKDAzNjBCQjk4QjUzQTA2OEFGQzcwMDMwMkNEOTkwNUJDNDI2RDc3MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX7HXUTuFjuIgZ6PUNF1bFXq9e 0pC4f4qgalYk2I1+jOI1YPnDFUDAPch85HdoBzu1+JNsmDD+ajr4p9JaIgWNJ4LW f1CNZazDyLdsIG2C7OmKnsqKZtGBYiZ/bfGFEX80RPmiv4XTfOr/PwaNr5AFMW1H HE6byqaJPc9cekEDdRT2opUG8UreckuFixttyON8uj1JHOx2lvEWybEYzZQ7G3Eh nIV+aNFl3FXgHDxFC7pk5HdsqP1rgwb32eTl0gHV9EGrDKeVKFi7h3LTbhViHyWh kSD0b5MHjLiw7lcGQaDZLypWiySFDKgBOOUdPAA2SAHk6A5En2hcL78jbGL1AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUA2C7mLU6Bor8cAMCzZkFvEJtdxIwHwYDVR0j BBgwFoAUloTkuV9HqYaJL5kw752eRTInQ58wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3Nzk5MDE0Ni8wLzk2ODRFNEI5NUY0N0E5ODY4OTJGOTkzMEVGOUQ5 RTQ1MzIyNzQzOUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTY4NEU0Qjk1RjQ3QTk4Njg5MkY5OTMwRUY5RDlFNDUzMjI3NDM5Ri5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc5OTAxNDYvMC8zNDMzMmUzMjM0 MzkyZTMxMzczMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzUzMTMzMzAzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEASv5qjANBgkqhkiG9w0BAQsFAAOCAQEAZNRyKe4BBIlRrimLJlO2 j6Dd+FlFR5C53tKd5P/PdorCz5XbAatTuqan0zTK32yaiXaH4Biac+gdWaDaxpAR EbsdW/rHiUFSpvi/Xu/Ncpb2UrLw/MeIRV7Gm+5HsKRVzjLlDnVSPKps9GxzM4GC VdTr09/NAtcJCjSbF8KNjKQfWbKBh16GHK9IU0EUORV4gMCJacGrv2ajvwYGvEhG Av9btTKxikjNj2x1d/s65djOSo6nH6A/3A47jHAvJyGb0BIPK6pD679fYBdE5qWP RJPihcYoSqdHKm6hEmGpL86mhkd5jfXUZPg2XxYyKGEpCh9r3rKwdPO0KVE/aCP7 fg== -----END CERTIFICATE-----Generated at Fri Apr 17 20:16:45 2026 by rpki-client