$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/34332e3234312e37362e302f32322d3232203d3e203633363437.roa File: 34332e3234312e37362e302f32322d3232203d3e203633363437.roa (raw, json) Hash identifier: gAMD+4cbodhA3dlU+8WAt19oUpti6aCVJXNXAq9wt6w= Subject key identifier: F6:67:D9:95:43:FC:4A:61:FA:10:6A:9B:98:06:A1:A4:65:5F:B7:9A Certificate issuer: /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398 Certificate serial: 786D95425B06BE01629BFC10EE272804543A27E4 Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/34332e3234312e37362e302f32322d3232203d3e203633363437.roa Signing time: Mon 13 Apr 2026 08:05:20 +0000 ROA not before: Mon 13 Apr 2026 08:00:20 +0000 ROA not after: Mon 12 Apr 2027 08:05:20 +0000 asID: 63647 IP address blocks: 43.241.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 07:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:6d:95:42:5b:06:be:01:62:9b:fc:10:ee:27:28:04:54:3a:27:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398 Validity Not Before: Apr 13 08:00:20 2026 GMT Not After : Apr 12 08:05:20 2027 GMT Subject: CN=F667D99543FC4A61FA106A9B9806A1A4655FB79A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a4:18:25:52:ef:fb:ef:97:86:43:1e:75:9d: a9:91:94:27:e7:2b:2c:f6:2a:2d:a9:eb:53:16:d3: fc:16:da:79:ad:87:39:28:d8:ed:b3:83:9a:ad:4b: 23:fb:21:61:cb:5a:b2:26:1e:6a:41:61:02:ac:03: 6d:46:6b:21:7c:0a:d5:4e:6a:8c:6d:10:f2:4a:2e: 21:af:39:ca:32:8b:44:22:9e:9f:42:2d:9f:cd:ee: 2d:19:d6:2f:2f:2b:f5:ec:4b:c7:14:49:2e:36:9a: f0:28:11:dd:30:0d:be:5f:cc:f3:df:3b:51:04:64: 02:27:37:16:b9:74:59:17:6c:8a:3d:45:1a:7b:9c: 8f:71:5b:bc:55:72:54:d5:6f:af:f1:7a:5d:6e:cb: 17:f2:d1:04:82:7a:49:69:7e:10:67:d7:39:a3:06: b2:30:0e:e5:2e:97:02:a8:29:60:91:c9:81:ae:01: 62:f2:9b:6c:f5:8b:f7:ef:b9:8a:66:0f:47:67:c7: be:21:3a:f1:ed:d2:b5:31:1a:66:2d:f5:9f:0f:d6: 72:68:99:92:49:bc:a7:e2:01:47:40:78:23:65:51: 3f:ce:92:e4:5f:a3:24:00:c6:a6:12:62:10:83:79: 96:01:30:04:26:41:9e:d1:fb:4d:7e:5c:b3:29:2d: 7d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:67:D9:95:43:FC:4A:61:FA:10:6A:9B:98:06:A1:A4:65:5F:B7:9A X509v3 Authority Key Identifier: keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/34332e3234312e37362e302f32322d3232203d3e203633363437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.241.76.0/22 Signature Algorithm: sha256WithRSAEncryption 71:92:26:24:2b:dd:3a:e9:05:cc:10:5f:3f:36:1d:c6:8c:44: 1c:2d:58:5d:b2:58:1e:53:63:d6:61:4e:93:5c:4a:66:a8:a4: 99:da:4a:85:c8:3a:ca:fa:6c:55:f3:9f:11:e0:37:0b:03:20: cb:3e:1e:1c:51:8d:1e:1b:5d:b8:47:46:b1:23:73:24:af:5f: 28:d1:ad:95:af:02:c1:c2:1b:f7:65:b7:f4:5d:df:9d:66:ff: 74:4b:ec:bc:c6:63:f1:95:80:80:08:26:38:02:77:56:28:df: b5:af:4e:54:6c:1c:ea:44:45:a1:93:e3:39:3e:3a:38:98:6d: b2:77:ca:48:bd:95:8b:8b:ed:50:54:5c:d8:55:27:bc:6d:06: a0:84:e3:b1:a3:4e:b6:7a:e8:54:84:16:b5:7d:48:84:14:65: 7d:ec:31:67:84:b8:cd:be:a8:d2:90:a4:74:e9:6a:70:3d:c2: e7:43:94:ed:bb:ed:9e:30:7b:5a:8e:e9:45:c7:48:89:12:53: b6:89:65:35:88:be:97:49:7a:60:60:b8:71:79:9f:4e:55:7b: cf:95:36:9d:52:fe:c3:1b:0f:07:00:bc:f9:71:54:53:df:85: 8c:12:20:25:48:c2:f1:18:4e:fb:3b:f2:7a:2e:cf:4d:a8:76: 60:6e:df:31 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUeG2VQlsGvgFim/wQ7icoBFQ6J+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1 QUQzRjM5ODAeFw0yNjA0MTMwODAwMjBaFw0yNzA0MTIwODA1MjBaMDMxMTAvBgNV BAMTKEY2NjdEOTk1NDNGQzRBNjFGQTEwNkE5Qjk4MDZBMUE0NjU1RkI3OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqpBglUu/775eGQx51namRlCfn Kyz2Ki2p61MW0/wW2nmthzko2O2zg5qtSyP7IWHLWrImHmpBYQKsA21GayF8CtVO aoxtEPJKLiGvOcoyi0Qinp9CLZ/N7i0Z1i8vK/XsS8cUSS42mvAoEd0wDb5fzPPf O1EEZAInNxa5dFkXbIo9RRp7nI9xW7xVclTVb6/xel1uyxfy0QSCeklpfhBn1zmj BrIwDuUulwKoKWCRyYGuAWLym2z1i/fvuYpmD0dnx74hOvHt0rUxGmYt9Z8P1nJo mZJJvKfiAUdAeCNlUT/OkuRfoyQAxqYSYhCDeZYBMAQmQZ7R+01+XLMpLX0nAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU9mfZlUP8SmH6EGqbmAahpGVft5owHwYDVR0j BBgwFoAUwcSPlZPWoZ29P6ypxu+ltVrT85gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk3ODMxNjg4NTY1NTU1NS8wL0MxQzQ4Rjk1OTNENkExOURCRDNGQUNBOUM2RUZB NUI1NUFEM0YzOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1QUQzRjM5OC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1OTc4MzE2ODg1NjU1NTU1LzAvMzQzMzJlMzIzNDMx MmUzNzM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMzM2MzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAivxTDANBgkqhkiG9w0BAQsFAAOCAQEAcZImJCvdOukFzBBfPzYdxoxEHC1Y XbJYHlNj1mFOk1xKZqikmdpKhcg6yvpsVfOfEeA3CwMgyz4eHFGNHhtduEdGsSNz JK9fKNGtla8CwcIb92W39F3fnWb/dEvsvMZj8ZWAgAgmOAJ3Vijfta9OVGwc6kRF oZPjOT46OJhtsnfKSL2Vi4vtUFRc2FUnvG0GoITjsaNOtnroVIQWtX1IhBRlfewx Z4S4zb6o0pCkdOlqcD3C50OU7bvtnjB7Wo7pRcdIiRJTtollNYi+l0l6YGC4cXmf TlV7z5U2nVL+wxsPBwC8+XFUU9+FjBIgJUjC8RhO+zvyei7PTah2YG7fMQ== -----END CERTIFICATE-----Generated at Sat Apr 18 01:20:26 2026 by rpki-client