$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/34332e3235352e3230322e302f32332d3233203d3e2034383038.roa File: 34332e3235352e3230322e302f32332d3233203d3e2034383038.roa (raw, json) Hash identifier: Kwa250eYEWkMDfeOUHE6s3QVFgrrZmnI4VqHa4mOfpo= Subject key identifier: 91:54:9E:77:87:E4:18:74:1D:E9:DE:AD:09:16:0E:56:17:38:A9:35 Certificate issuer: /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398 Certificate serial: 7684C9E677FCF7D92D761FB0EDAC1B1853721701 Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/34332e3235352e3230322e302f32332d3233203d3e2034383038.roa Signing time: Mon 13 Apr 2026 08:05:20 +0000 ROA not before: Mon 13 Apr 2026 08:00:20 +0000 ROA not after: Mon 12 Apr 2027 08:05:20 +0000 asID: 4808 IP address blocks: 43.255.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 07:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:84:c9:e6:77:fc:f7:d9:2d:76:1f:b0:ed:ac:1b:18:53:72:17:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398 Validity Not Before: Apr 13 08:00:20 2026 GMT Not After : Apr 12 08:05:20 2027 GMT Subject: CN=91549E7787E418741DE9DEAD09160E561738A935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:39:f1:1e:84:92:70:a8:05:5d:37:1e:08:a5: ba:0f:a8:b7:4d:a1:a6:13:d4:da:af:96:d9:a4:da: df:cc:74:38:20:e3:45:8f:c1:8e:df:d7:e3:44:0c: e4:c3:e6:47:28:53:48:ee:65:e5:61:1a:43:07:38: cd:e4:91:06:2f:0b:16:19:15:93:91:4e:f1:7f:68: 79:af:a2:68:08:aa:64:39:43:cb:d0:46:39:44:78: 2a:2a:56:dc:f7:e6:c3:f1:a3:59:cb:d0:03:3f:2b: 27:60:f6:27:cb:6c:7b:3c:8b:0d:e0:45:41:af:c6: 0e:b5:b5:8c:96:72:09:82:af:56:4b:fe:c4:1f:fc: e2:f5:19:a1:a1:61:bf:b7:58:b0:82:d2:c6:8c:a7: b3:6b:66:93:1f:1a:6e:ee:72:8c:66:73:37:fe:a3: ba:35:aa:08:12:00:17:be:ed:fe:4c:a3:32:cc:5c: 3e:28:a1:ba:41:19:6a:12:7e:02:46:50:8d:5a:a2: d9:40:6b:23:6e:a7:54:e8:38:2b:0f:49:49:d2:f3: e1:72:96:06:60:5e:e2:5c:a2:65:55:c7:5a:fb:bd: 38:5c:1f:b9:96:21:db:81:7a:4e:ea:85:70:46:13: 7f:01:2b:e0:0f:cf:68:1e:04:dd:a1:5f:d2:18:b3: 0c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:54:9E:77:87:E4:18:74:1D:E9:DE:AD:09:16:0E:56:17:38:A9:35 X509v3 Authority Key Identifier: keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/34332e3235352e3230322e302f32332d3233203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.255.202.0/23 Signature Algorithm: sha256WithRSAEncryption 14:71:bc:19:c3:bf:ec:64:86:9a:23:66:0b:78:09:29:c4:22: a0:91:9b:ea:d2:23:97:94:15:53:19:f5:db:e5:97:6f:2d:f4: ff:83:8d:04:e6:6c:55:a2:78:fe:7c:6f:32:45:4f:bb:84:33: f1:29:ad:54:8e:b0:0b:29:9f:e9:30:04:1f:78:4e:61:64:f6: d1:cc:ab:c6:dd:cd:5c:a6:5b:ad:f5:6c:17:ad:58:21:a2:d0: a4:7b:2c:fb:d9:b5:80:d1:ce:07:eb:b2:f5:eb:31:49:f9:41: 20:a2:2a:6a:45:7a:fe:6a:22:9f:61:27:c4:aa:0f:98:f4:41: 5b:f9:72:b0:42:1c:a0:ca:db:0f:8d:73:77:dd:a5:5f:8f:1c: e4:af:d5:37:16:b0:45:dc:74:04:41:ab:fe:07:65:8a:ac:4a: 34:8e:2a:5f:8c:2a:02:bf:df:2c:45:28:4e:f6:a9:c4:dc:e6: 05:e8:f6:c0:0a:99:a6:e8:ce:b8:7d:a4:5e:30:31:0b:7b:87: 2e:ce:c3:80:4e:51:de:4b:d2:36:80:62:93:86:a8:dd:18:a0: 31:1d:02:44:99:d0:ef:de:fb:23:3b:2c:7e:74:34:e1:52:e9: ae:4e:1f:56:86:45:2f:85:f5:b3:c5:45:7a:ec:f1:1b:76:24: 3b:90:27:e5 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUdoTJ5nf899ktdh+w7awbGFNyFwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1 QUQzRjM5ODAeFw0yNjA0MTMwODAwMjBaFw0yNzA0MTIwODA1MjBaMDMxMTAvBgNV BAMTKDkxNTQ5RTc3ODdFNDE4NzQxREU5REVBRDA5MTYwRTU2MTczOEE5MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAOfEehJJwqAVdNx4IpboPqLdN oaYT1Nqvltmk2t/MdDgg40WPwY7f1+NEDOTD5kcoU0juZeVhGkMHOM3kkQYvCxYZ FZORTvF/aHmvomgIqmQ5Q8vQRjlEeCoqVtz35sPxo1nL0AM/Kydg9ifLbHs8iw3g RUGvxg61tYyWcgmCr1ZL/sQf/OL1GaGhYb+3WLCC0saMp7NrZpMfGm7ucoxmczf+ o7o1qggSABe+7f5MozLMXD4oobpBGWoSfgJGUI1aotlAayNup1ToOCsPSUnS8+Fy lgZgXuJcomVVx1r7vThcH7mWIduBek7qhXBGE38BK+APz2geBN2hX9IYswxHAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUkVSed4fkGHQd6d6tCRYOVhc4qTUwHwYDVR0j BBgwFoAUwcSPlZPWoZ29P6ypxu+ltVrT85gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk3ODMxNjg4NTY1NTU1NS8wL0MxQzQ4Rjk1OTNENkExOURCRDNGQUNBOUM2RUZB NUI1NUFEM0YzOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1QUQzRjM5OC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1OTc4MzE2ODg1NjU1NTU1LzAvMzQzMzJlMzIzNTM1 MmUzMjMwMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEASv/yjANBgkqhkiG9w0BAQsFAAOCAQEAFHG8GcO/7GSGmiNmC3gJKcQioJGb 6tIjl5QVUxn12+WXby30/4ONBOZsVaJ4/nxvMkVPu4Qz8SmtVI6wCymf6TAEH3hO YWT20cyrxt3NXKZbrfVsF61YIaLQpHss+9m1gNHOB+uy9esxSflBIKIqakV6/moi n2EnxKoPmPRBW/lysEIcoMrbD41zd92lX48c5K/VNxawRdx0BEGr/gdliqxKNI4q X4wqAr/fLEUoTvapxNzmBej2wAqZpujOuH2kXjAxC3uHLs7DgE5R3kvSNoBik4ao 3RigMR0CRJnQ7977IzssfnQ04VLprk4fVoZFL4X1s8VFeuzxG3YkO5An5Q== -----END CERTIFICATE-----Generated at Fri Apr 17 19:42:04 2026 by rpki-client