$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/34332e3235352e3230302e302f32332d3233203d3e2034383038.roa File: 34332e3235352e3230302e302f32332d3233203d3e2034383038.roa (raw, json) Hash identifier: ap0XTw8WxsXmWf3NMpU4qhdo6QhwQmfZH8WhXiv/7xw= Subject key identifier: 91:18:B2:0A:E2:16:82:4A:75:88:0E:60:4A:DC:EB:A5:EF:AC:3B:D3 Certificate issuer: /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398 Certificate serial: 28F7E55833E0D8A346D2BABC1034DCC2719AFCC0 Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/34332e3235352e3230302e302f32332d3233203d3e2034383038.roa Signing time: Mon 13 Apr 2026 08:05:20 +0000 ROA not before: Mon 13 Apr 2026 08:00:20 +0000 ROA not after: Mon 12 Apr 2027 08:05:20 +0000 asID: 4808 IP address blocks: 43.255.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 07:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:f7:e5:58:33:e0:d8:a3:46:d2:ba:bc:10:34:dc:c2:71:9a:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398 Validity Not Before: Apr 13 08:00:20 2026 GMT Not After : Apr 12 08:05:20 2027 GMT Subject: CN=9118B20AE216824A75880E604ADCEBA5EFAC3BD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c9:e6:7c:0f:7a:f5:1c:60:2c:e4:40:11:09: 08:99:39:82:60:28:3b:24:52:ce:dd:ba:e8:9f:b6: c2:89:f3:d1:c3:de:eb:7e:b1:28:04:b4:52:96:2c: bc:97:e3:a3:87:62:09:aa:50:28:f3:ca:53:b5:53: 91:b1:53:2b:ac:46:8c:2f:e0:57:68:e1:e6:ef:cf: 58:e2:ca:26:c0:77:1b:eb:f8:5a:b3:24:9e:d1:d3: 28:f9:30:df:a0:03:da:cb:2a:79:a7:ab:ae:6d:bc: c8:72:d4:af:c9:08:f7:db:7e:4d:da:a5:e1:03:ee: cf:b9:61:41:a4:ec:f5:de:ff:37:90:6f:bc:6c:25: bb:0c:25:a9:25:bb:79:c6:88:07:ea:f9:86:6b:d1: 41:be:68:70:0f:b5:d7:51:1e:6d:0b:c7:04:72:90: 24:9c:ac:20:77:0e:cc:30:de:49:64:f2:52:f2:32: a1:cd:82:a1:36:e7:6d:4f:43:7d:90:d0:59:db:14: 54:36:d3:9c:01:11:9e:4b:78:d1:94:49:8c:b8:82: 71:04:c5:40:f4:1b:37:f4:81:f5:54:6b:79:70:28: 57:81:63:1b:18:67:31:8e:47:cd:f1:05:5c:0d:d8: fb:d7:8b:1e:53:4b:55:35:26:08:62:a0:b3:70:b4: 08:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:18:B2:0A:E2:16:82:4A:75:88:0E:60:4A:DC:EB:A5:EF:AC:3B:D3 X509v3 Authority Key Identifier: keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/34332e3235352e3230302e302f32332d3233203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.255.200.0/23 Signature Algorithm: sha256WithRSAEncryption 90:58:c4:9a:d5:3d:ed:dd:05:17:3c:b1:d3:eb:45:6c:e2:bd: b4:d3:47:2d:23:00:e0:12:52:ae:cd:85:4c:42:bc:78:15:e9: 7a:17:95:74:41:89:1c:e1:00:17:27:d0:38:18:4e:d9:e2:e7: ef:f4:b0:d4:fe:75:97:73:9a:26:4c:d4:4e:8a:b2:b4:75:8b: c1:50:15:51:6a:4a:16:d1:c5:3a:41:32:20:74:2e:98:3e:47: c2:de:45:2c:e2:4c:f7:a9:ce:9e:d2:8c:5c:5e:c1:ea:04:f3: 40:06:0e:49:77:a2:f0:66:57:ec:a1:1a:03:e8:13:0c:4c:26: 11:42:75:a6:eb:6d:bb:40:3a:1f:d8:96:14:2d:d6:90:c3:ac: 74:d0:69:9e:ee:9d:90:59:69:a0:d8:0d:95:af:4c:1e:8e:16: a9:42:5f:1b:1d:d6:24:e9:a3:d3:f5:71:5c:f7:bd:1d:50:c5: 28:e1:5b:4b:da:00:b3:10:94:0c:a7:d8:f6:41:4c:6f:5f:5a: 3c:f8:bd:87:b7:60:07:0a:b3:87:f3:df:24:d6:69:51:99:a9: b1:31:d2:60:85:08:78:49:0f:fb:ed:06:39:de:11:2c:92:d5: b0:ef:49:69:65:77:92:f6:26:9f:c6:fe:dd:41:49:56:8f:32: 8d:ad:28:41 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUKPflWDPg2KNG0rq8EDTcwnGa/MAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1 QUQzRjM5ODAeFw0yNjA0MTMwODAwMjBaFw0yNzA0MTIwODA1MjBaMDMxMTAvBgNV BAMTKDkxMThCMjBBRTIxNjgyNEE3NTg4MEU2MDRBRENFQkE1RUZBQzNCRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyyeZ8D3r1HGAs5EARCQiZOYJg KDskUs7duuiftsKJ89HD3ut+sSgEtFKWLLyX46OHYgmqUCjzylO1U5GxUyusRowv 4Fdo4ebvz1jiyibAdxvr+FqzJJ7R0yj5MN+gA9rLKnmnq65tvMhy1K/JCPfbfk3a peED7s+5YUGk7PXe/zeQb7xsJbsMJaklu3nGiAfq+YZr0UG+aHAPtddRHm0LxwRy kCScrCB3Dsww3klk8lLyMqHNgqE2521PQ32Q0FnbFFQ205wBEZ5LeNGUSYy4gnEE xUD0Gzf0gfVUa3lwKFeBYxsYZzGOR83xBVwN2PvXix5TS1U1JghioLNwtAjDAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUkRiyCuIWgkp1iA5gStzrpe+sO9MwHwYDVR0j BBgwFoAUwcSPlZPWoZ29P6ypxu+ltVrT85gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk3ODMxNjg4NTY1NTU1NS8wL0MxQzQ4Rjk1OTNENkExOURCRDNGQUNBOUM2RUZB NUI1NUFEM0YzOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1QUQzRjM5OC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1OTc4MzE2ODg1NjU1NTU1LzAvMzQzMzJlMzIzNTM1 MmUzMjMwMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEASv/yDANBgkqhkiG9w0BAQsFAAOCAQEAkFjEmtU97d0FFzyx0+tFbOK9tNNH LSMA4BJSrs2FTEK8eBXpeheVdEGJHOEAFyfQOBhO2eLn7/Sw1P51l3OaJkzUToqy tHWLwVAVUWpKFtHFOkEyIHQumD5Hwt5FLOJM96nOntKMXF7B6gTzQAYOSXei8GZX 7KEaA+gTDEwmEUJ1puttu0A6H9iWFC3WkMOsdNBpnu6dkFlpoNgNla9MHo4WqUJf Gx3WJOmj0/VxXPe9HVDFKOFbS9oAsxCUDKfY9kFMb19aPPi9h7dgBwqzh/PfJNZp UZmpsTHSYIUIeEkP++0GOd4RLJLVsO9JaWV3kvYmn8b+3UFJVo8yja0oQQ== -----END CERTIFICATE-----Generated at Fri Apr 17 18:23:37 2026 by rpki-client