$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/34332e3234302e3133362e302f32322d3232203d3e203633363437.roa File: 34332e3234302e3133362e302f32322d3232203d3e203633363437.roa (raw, json) Hash identifier: u37GFxxjl2r+U4ii3ffL1u8/kZ75WsMQ+IHQVLWZ21g= Subject key identifier: 31:FE:CF:9C:B5:E0:A8:98:2C:6C:4B:6D:CD:A1:62:71:B1:69:6D:AB Certificate issuer: /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398 Certificate serial: 642B6E11D6061ED98BD98B032DA2D89A28816322 Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/34332e3234302e3133362e302f32322d3232203d3e203633363437.roa Signing time: Mon 13 Apr 2026 08:05:20 +0000 ROA not before: Mon 13 Apr 2026 08:00:20 +0000 ROA not after: Mon 12 Apr 2027 08:05:20 +0000 asID: 63647 IP address blocks: 43.240.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 07:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:2b:6e:11:d6:06:1e:d9:8b:d9:8b:03:2d:a2:d8:9a:28:81:63:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398 Validity Not Before: Apr 13 08:00:20 2026 GMT Not After : Apr 12 08:05:20 2027 GMT Subject: CN=31FECF9CB5E0A8982C6C4B6DCDA16271B1696DAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:db:ff:ce:8b:b1:49:9e:03:b5:92:6b:09:57: 75:2e:02:c5:f2:e9:f5:65:e4:1f:ad:1d:6a:0b:72: ae:4f:f2:a3:69:27:e5:70:21:6b:19:b0:37:9b:aa: 6f:8f:c4:2d:59:0f:98:2f:a0:89:99:71:b6:7d:f9: 5c:f8:bd:64:8c:5c:2c:dd:de:26:10:f8:bc:87:92: 10:fa:83:bd:fc:da:a0:75:d5:a8:45:ad:53:02:4b: 52:d3:d0:64:a5:2c:50:7e:1f:ce:c6:04:d2:fb:ea: 72:99:da:95:43:db:72:4e:05:e8:ee:25:0a:18:a7: 6a:39:b3:6d:0a:44:c1:97:0f:52:e4:0c:f0:a3:13: 7e:42:5a:2d:48:b2:71:ca:c9:a9:99:e9:38:00:e2: 56:d2:90:2c:96:89:3c:7c:e2:1e:d0:1a:22:09:bf: 77:51:2c:b5:0d:4a:1e:3f:c0:a4:3a:97:f1:ec:e2: fc:de:cf:fc:7a:58:14:7e:af:32:97:f4:07:15:1f: 7e:dd:9c:38:b0:46:74:b8:07:5b:09:87:51:9e:c2: fe:2e:7d:8a:dd:14:35:d7:d6:f8:ff:18:cc:08:ca: 29:7d:19:fb:e5:67:f2:54:ff:cb:7c:5d:b3:0f:0a: f6:df:04:10:ea:d9:c9:87:e4:7d:66:fa:f5:d7:6f: b1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FE:CF:9C:B5:E0:A8:98:2C:6C:4B:6D:CD:A1:62:71:B1:69:6D:AB X509v3 Authority Key Identifier: keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/34332e3234302e3133362e302f32322d3232203d3e203633363437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.136.0/22 Signature Algorithm: sha256WithRSAEncryption 64:81:ba:f1:dd:10:d7:b7:d4:44:88:d5:85:ec:2c:21:bd:c0: c4:77:c8:dc:29:5a:f8:dc:02:e3:8d:1c:a1:f4:2f:98:86:ab: 9d:29:6b:b2:b9:86:8d:6f:83:95:34:d9:03:34:22:5b:a4:97: 77:4c:aa:29:3a:af:9a:7d:63:d4:89:68:e7:3a:3a:f4:97:df: 26:22:5d:4e:0f:01:e2:f5:dd:2b:cf:04:29:e6:83:fc:90:c0: f7:ee:86:ed:47:b8:4d:1d:08:96:3c:b5:f3:ae:21:fd:01:2f: 33:4c:2f:eb:b2:06:62:59:b4:f9:39:14:9d:06:fc:db:ab:e3: 65:11:61:fd:fa:ac:0c:e9:29:6f:4a:be:6e:6e:d6:bb:07:0a: 39:d5:c8:37:c4:60:0c:2c:e2:fb:af:3a:1c:91:60:4a:d6:c8: 45:43:3a:83:8d:fd:1e:0c:b9:4f:41:f1:d4:18:40:31:d7:db: bb:dd:c2:42:27:78:35:5a:79:16:f4:92:7d:1b:bf:70:c5:60: fb:4f:66:59:c7:ad:dd:89:6a:f3:00:c9:b3:e3:a4:c9:4e:99: 17:8c:af:d4:1b:0c:7c:cd:b3:79:4c:c4:4c:3c:79:f3:aa:d8: 97:f2:25:b7:61:ed:45:8b:71:4f:b3:db:3c:99:87:35:4d:23: 43:0f:e5:c5 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUZCtuEdYGHtmL2YsDLaLYmiiBYyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1 QUQzRjM5ODAeFw0yNjA0MTMwODAwMjBaFw0yNzA0MTIwODA1MjBaMDMxMTAvBgNV BAMTKDMxRkVDRjlDQjVFMEE4OTgyQzZDNEI2RENEQTE2MjcxQjE2OTZEQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM2//Oi7FJngO1kmsJV3UuAsXy 6fVl5B+tHWoLcq5P8qNpJ+VwIWsZsDebqm+PxC1ZD5gvoImZcbZ9+Vz4vWSMXCzd 3iYQ+LyHkhD6g7382qB11ahFrVMCS1LT0GSlLFB+H87GBNL76nKZ2pVD23JOBeju JQoYp2o5s20KRMGXD1LkDPCjE35CWi1IsnHKyamZ6TgA4lbSkCyWiTx84h7QGiIJ v3dRLLUNSh4/wKQ6l/Hs4vzez/x6WBR+rzKX9AcVH37dnDiwRnS4B1sJh1Gewv4u fYrdFDXX1vj/GMwIyil9GfvlZ/JU/8t8XbMPCvbfBBDq2cmH5H1m+vXXb7H7AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUMf7PnLXgqJgsbEttzaFicbFpbaswHwYDVR0j BBgwFoAUwcSPlZPWoZ29P6ypxu+ltVrT85gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk3ODMxNjg4NTY1NTU1NS8wL0MxQzQ4Rjk1OTNENkExOURCRDNGQUNBOUM2RUZB NUI1NUFEM0YzOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1QUQzRjM5OC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTk3ODMxNjg4NTY1NTU1NS8wLzM0MzMyZTMyMzQz MDJlMzEzMzM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMzM2MzQzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAivwiDANBgkqhkiG9w0BAQsFAAOCAQEAZIG68d0Q17fURIjVhewsIb3A xHfI3Cla+NwC440cofQvmIarnSlrsrmGjW+DlTTZAzQiW6SXd0yqKTqvmn1j1Ilo 5zo69JffJiJdTg8B4vXdK88EKeaD/JDA9+6G7Ue4TR0Iljy1864h/QEvM0wv67IG Ylm0+TkUnQb826vjZRFh/fqsDOkpb0q+bm7WuwcKOdXIN8RgDCzi+686HJFgStbI RUM6g439Hgy5T0Hx1BhAMdfbu93CQid4NVp5FvSSfRu/cMVg+09mWcet3Ylq8wDJ s+OkyU6ZF4yv1BsMfM2zeUzETDx586rYl/Ilt2HtRYtxT7PbPJmHNU0jQw/lxQ== -----END CERTIFICATE-----Generated at Sat Apr 18 01:20:52 2026 by rpki-client