$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/34332e3235352e3230302e302f32332d3233203d3e203633363437.roa File: 34332e3235352e3230302e302f32332d3233203d3e203633363437.roa (raw, json) Hash identifier: Qdj4XoKs+YJkaBz6U81jMaSigeKFBgg1ycjGe4LC6Jg= Subject key identifier: 59:63:07:A2:D4:65:6F:A5:05:86:B8:3B:AC:35:B0:3D:A1:BE:A0:E1 Certificate issuer: /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398 Certificate serial: 261442C8CD80978C8DAFED5A17759F4E99E29D94 Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/34332e3235352e3230302e302f32332d3233203d3e203633363437.roa Signing time: Mon 13 Apr 2026 08:05:20 +0000 ROA not before: Mon 13 Apr 2026 08:00:20 +0000 ROA not after: Mon 12 Apr 2027 08:05:20 +0000 asID: 63647 IP address blocks: 43.255.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 07:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:14:42:c8:cd:80:97:8c:8d:af:ed:5a:17:75:9f:4e:99:e2:9d:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398 Validity Not Before: Apr 13 08:00:20 2026 GMT Not After : Apr 12 08:05:20 2027 GMT Subject: CN=596307A2D4656FA50586B83BAC35B03DA1BEA0E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6a:11:06:7b:1c:dd:09:d6:cf:4f:03:97:82: 6d:95:25:cc:31:7d:cc:31:cf:2b:8a:0e:78:a2:44: 20:94:77:c3:35:b6:02:79:4b:23:8b:f6:59:c7:f8: 69:66:de:81:06:6d:de:57:83:fd:e3:ca:cd:17:25: f7:85:3d:52:ec:00:34:f0:af:2e:d5:79:9b:65:12: 91:68:f3:e9:da:51:d9:48:63:17:54:30:f6:8c:02: ac:d4:c5:e4:f1:ce:91:a9:12:06:f5:18:f2:05:d8: b5:37:96:56:23:61:11:50:a7:ed:ec:50:7f:ce:f7: 52:4b:5f:48:38:a8:62:4c:da:c2:b3:ba:66:ce:6c: 57:02:bc:ce:59:fb:2f:18:fb:58:41:33:c0:d4:f6: 3d:34:da:3f:bf:f2:1a:88:dc:96:9b:df:16:41:34: 79:8f:55:f8:39:ef:ae:bf:a1:3f:89:33:b5:88:05: 03:45:82:db:c0:3f:57:ff:7b:f6:81:1a:02:20:60: fd:08:b9:7d:df:7f:2a:1b:51:f9:1e:e3:fd:18:c9: 7a:bd:a8:1c:7e:28:bc:24:67:e7:3f:8c:4b:94:5f: 56:d7:fd:f2:71:7c:32:2d:0e:97:0d:71:97:37:43: 7b:f0:89:e8:2d:1f:2f:9d:26:5d:e6:c4:4c:bd:74: 29:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:63:07:A2:D4:65:6F:A5:05:86:B8:3B:AC:35:B0:3D:A1:BE:A0:E1 X509v3 Authority Key Identifier: keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/34332e3235352e3230302e302f32332d3233203d3e203633363437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.255.200.0/23 Signature Algorithm: sha256WithRSAEncryption aa:fc:ea:a3:fd:6c:7c:85:4d:4a:9a:c8:d3:35:02:12:9c:92: 4a:19:a2:ea:f9:d6:79:35:93:c0:c4:ab:34:f1:3f:36:ae:64: 4f:85:d0:7c:06:ae:55:2a:c0:fc:f1:d1:39:e1:ea:6c:1a:c7: 2e:7d:9a:af:2a:e9:91:48:18:83:f1:03:0a:54:4e:13:11:b1: 96:15:4a:09:8e:69:1d:2c:1a:b7:7e:5a:0e:15:04:3d:18:99: 01:de:4e:39:88:35:e8:d9:ca:64:b2:5e:10:ce:3c:a6:0d:c7: d6:d6:ba:12:b5:67:21:b1:dc:d0:c8:d7:93:14:e4:e0:f8:d8: 93:32:93:5a:06:ec:02:d8:db:33:29:53:65:c4:cf:3c:a0:e6: 08:7f:fc:6d:3b:6d:6c:c7:ae:6d:0d:bf:57:92:fb:62:b7:1f: af:04:73:c2:45:b7:e0:8a:9c:4f:83:5e:ec:ba:dd:2d:d9:99: 75:38:fb:da:ac:2f:70:a1:5e:19:35:c9:fb:05:05:04:83:86: 1b:76:5b:89:35:b4:91:6a:98:ba:e9:8f:ee:0f:ce:8e:3f:2f: 22:5a:e1:eb:b6:2c:d6:37:db:73:40:79:dc:d3:2a:b0:d2:c5: 74:47:aa:3b:9e:55:6f:a8:f4:ab:5c:c3:ba:0c:e9:1c:48:7e: ca:17:72:24 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUJhRCyM2Al4yNr+1aF3WfTpninZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1 QUQzRjM5ODAeFw0yNjA0MTMwODAwMjBaFw0yNzA0MTIwODA1MjBaMDMxMTAvBgNV BAMTKDU5NjMwN0EyRDQ2NTZGQTUwNTg2QjgzQkFDMzVCMDNEQTFCRUEwRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIahEGexzdCdbPTwOXgm2VJcwx fcwxzyuKDniiRCCUd8M1tgJ5SyOL9lnH+Glm3oEGbd5Xg/3jys0XJfeFPVLsADTw ry7VeZtlEpFo8+naUdlIYxdUMPaMAqzUxeTxzpGpEgb1GPIF2LU3llYjYRFQp+3s UH/O91JLX0g4qGJM2sKzumbObFcCvM5Z+y8Y+1hBM8DU9j002j+/8hqI3Jab3xZB NHmPVfg5766/oT+JM7WIBQNFgtvAP1f/e/aBGgIgYP0IuX3ffyobUfke4/0YyXq9 qBx+KLwkZ+c/jEuUX1bX/fJxfDItDpcNcZc3Q3vwiegtHy+dJl3mxEy9dCmjAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUWWMHotRlb6UFhrg7rDWwPaG+oOEwHwYDVR0j BBgwFoAUwcSPlZPWoZ29P6ypxu+ltVrT85gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk3ODMxNjg4NTY1NTU1NS8wL0MxQzQ4Rjk1OTNENkExOURCRDNGQUNBOUM2RUZB NUI1NUFEM0YzOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1QUQzRjM5OC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTk3ODMxNjg4NTY1NTU1NS8wLzM0MzMyZTMyMzUz NTJlMzIzMDMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzYzMzM2MzQzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEASv/yDANBgkqhkiG9w0BAQsFAAOCAQEAqvzqo/1sfIVNSprI0zUCEpyS Shmi6vnWeTWTwMSrNPE/Nq5kT4XQfAauVSrA/PHROeHqbBrHLn2aryrpkUgYg/ED ClROExGxlhVKCY5pHSwat35aDhUEPRiZAd5OOYg16NnKZLJeEM48pg3H1ta6ErVn IbHc0MjXkxTk4PjYkzKTWgbsAtjbMylTZcTPPKDmCH/8bTttbMeubQ2/V5L7Yrcf rwRzwkW34IqcT4Ne7LrdLdmZdTj72qwvcKFeGTXJ+wUFBIOGG3ZbiTW0kWqYuumP 7g/Ojj8vIlrh67Ys1jfbc0B53NMqsNLFdEeqO55Vb6j0q1zDugzpHEh+yhdyJA== -----END CERTIFICATE-----Generated at Sat Apr 18 01:20:41 2026 by rpki-client