$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/34332e3234332e3134382e302f32322d3232203d3e203137363231.roa File: 34332e3234332e3134382e302f32322d3232203d3e203137363231.roa (raw, json) Hash identifier: p1N758mpRIbRQaZ6S/4u+A7kQ0tt7FYVPDXk+G4wGCg= Subject key identifier: 12:10:0D:D1:FB:F6:C5:B5:AB:CA:F6:7A:A9:FD:BC:0B:AD:DE:7B:83 Certificate issuer: /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F Certificate serial: 4D18CCE38D88467970181BF1D867C932B4A83A28 Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/34332e3234332e3134382e302f32322d3232203d3e203137363231.roa Signing time: Wed 15 Apr 2026 04:15:18 +0000 ROA not before: Wed 15 Apr 2026 04:10:18 +0000 ROA not after: Wed 14 Apr 2027 04:15:18 +0000 asID: 17621 IP address blocks: 43.243.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 12:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:18:cc:e3:8d:88:46:79:70:18:1b:f1:d8:67:c9:32:b4:a8:3a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F Validity Not Before: Apr 15 04:10:18 2026 GMT Not After : Apr 14 04:15:18 2027 GMT Subject: CN=12100DD1FBF6C5B5ABCAF67AA9FDBC0BADDE7B83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2d:f5:61:ec:ed:f0:66:1b:75:67:7b:9e:6c: 62:c1:f1:0a:77:47:8a:3d:72:63:bd:62:d8:52:b6: 5b:a0:93:34:19:20:3f:07:06:53:08:10:2d:2d:15: 36:4b:65:6c:18:5f:dc:c8:e9:4f:eb:ab:0e:d3:4f: 17:1d:99:eb:f5:9b:1e:e9:02:07:d2:b1:53:91:cf: f1:aa:8d:22:d5:f3:56:d5:4a:c6:34:df:72:a0:ff: 99:18:d5:47:f3:7b:30:b7:5f:8e:f1:09:89:73:50: 46:ad:40:87:d5:54:46:cf:63:16:f0:ef:93:d7:7c: 3e:3f:0a:d0:94:f6:c3:1e:5f:0e:4a:df:c4:26:31: f5:50:e6:b2:b7:04:50:7a:ba:8c:47:c5:31:5e:b4: 85:bd:ce:d6:58:72:0b:94:c7:0f:77:6b:84:6c:bd: 7f:8a:ef:80:2b:3f:13:41:9d:d7:40:d1:55:b2:7c: 40:22:f8:a0:62:90:06:bf:b8:c2:9c:6e:c0:e5:7d: df:b1:d2:4b:bc:79:a6:7e:c1:99:54:cb:ae:25:5a: e5:9e:de:d9:6b:13:b2:25:bb:af:38:63:3d:b5:c5: 0d:bd:40:d7:80:e0:c1:d4:99:fd:89:98:d0:78:7a: 11:fe:e1:a1:49:1b:22:4d:c5:3a:f7:b5:a6:90:d5: 31:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:10:0D:D1:FB:F6:C5:B5:AB:CA:F6:7A:A9:FD:BC:0B:AD:DE:7B:83 X509v3 Authority Key Identifier: keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/34332e3234332e3134382e302f32322d3232203d3e203137363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.243.148.0/22 Signature Algorithm: sha256WithRSAEncryption 97:4e:b6:bc:87:a6:f0:fa:93:c7:ec:07:df:d2:44:d0:b9:7f: f7:7e:c2:c7:0d:d1:bc:8a:a1:55:59:63:80:6a:73:3a:8f:72: 7e:2f:a7:05:a0:6d:f4:3d:6a:1a:ad:4d:5f:7e:b4:13:de:0c: 61:fe:b4:6c:6e:09:08:1c:c0:2a:b1:94:85:d2:58:bd:45:93: dc:33:a4:47:30:0d:b0:31:c8:50:31:f3:56:ea:a8:c7:90:2b: 3d:0a:07:33:6d:ac:61:9b:38:80:c5:9f:2d:f9:dc:45:26:85: 8e:55:65:05:6d:67:5a:66:c5:d3:2f:e4:51:62:aa:22:91:69: 53:de:21:56:e0:81:9c:77:3d:9d:0b:b4:fc:c1:7b:fa:45:6e: 03:6a:e9:70:9c:b0:29:6d:d2:8b:a4:a8:86:31:83:4a:0d:f2: fa:4c:42:7a:c3:2f:81:0b:1d:77:45:3e:dc:46:0f:82:20:50: ea:cf:cb:19:a1:21:3d:a6:ce:0f:82:b3:a3:9a:d1:e2:2d:e2: 95:f8:d7:08:b4:8a:4b:02:93:8e:e4:57:b0:ba:dd:ef:4c:d3: bc:ac:c1:76:9b:a3:65:e4:c2:06:8e:04:04:f5:d6:db:c1:a9: 09:33:f2:65:ed:00:9c:6a:73:0e:2a:cf:7d:39:51:21:e5:33: 4b:1c:b6:2a -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUTRjM442IRnlwGBvx2GfJMrSoOigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDky MjJFOEY5RjAeFw0yNjA0MTUwNDEwMThaFw0yNzA0MTQwNDE1MThaMDMxMTAvBgNV BAMTKDEyMTAwREQxRkJGNkM1QjVBQkNBRjY3QUE5RkRCQzBCQURERTdCODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCLfVh7O3wZht1Z3uebGLB8Qp3 R4o9cmO9YthStlugkzQZID8HBlMIEC0tFTZLZWwYX9zI6U/rqw7TTxcdmev1mx7p AgfSsVORz/GqjSLV81bVSsY033Kg/5kY1UfzezC3X47xCYlzUEatQIfVVEbPYxbw 75PXfD4/CtCU9sMeXw5K38QmMfVQ5rK3BFB6uoxHxTFetIW9ztZYcguUxw93a4Rs vX+K74ArPxNBnddA0VWyfEAi+KBikAa/uMKcbsDlfd+x0ku8eaZ+wZlUy64lWuWe 3tlrE7Ilu684Yz21xQ29QNeA4MHUmf2JmNB4ehH+4aFJGyJNxTr3taaQ1TEhAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUEhAN0fv2xbWryvZ6qf28C63ee4MwHwYDVR0j BBgwFoAUGyfCb49+zlOXLYCTP1A8CSIuj58wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 MDk1NTkyNDA3MzU0NTczMS8wLzFCMjdDMjZGOEY3RUNFNTM5NzJEODA5MzNGNTAz QzA5MjIyRThGOUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDkyMjJFOEY5Ri5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA3MDk1NTkyNDA3MzU0NTczMS8wLzM0MzMyZTMyMzQz MzJlMzEzNDM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzNzM2MzIzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAivzlDANBgkqhkiG9w0BAQsFAAOCAQEAl062vIem8PqTx+wH39JE0Ll/ 937Cxw3RvIqhVVljgGpzOo9yfi+nBaBt9D1qGq1NX360E94MYf60bG4JCBzAKrGU hdJYvUWT3DOkRzANsDHIUDHzVuqox5ArPQoHM22sYZs4gMWfLfncRSaFjlVlBW1n WmbF0y/kUWKqIpFpU94hVuCBnHc9nQu0/MF7+kVuA2rpcJywKW3Si6SohjGDSg3y +kxCesMvgQsdd0U+3EYPgiBQ6s/LGaEhPabOD4Kzo5rR4i3ilfjXCLSKSwKTjuRX sLrd70zTvKzBdpujZeTCBo4EBPXW28GpCTPyZe0AnGpzDirPfTlRIeUzSxy2Kg== -----END CERTIFICATE-----Generated at Fri Apr 17 21:01:26 2026 by rpki-client