$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/34332e3234372e3138382e302f32322d3332203d3e203233373234.roa File: 34332e3234372e3138382e302f32322d3332203d3e203233373234.roa (raw, json) Hash identifier: c4zSZbZY71uga7IrLJ18BUQO0b6emcnskcxvCwnL+wI= Subject key identifier: EF:78:3B:FD:1C:10:59:91:9F:81:2B:02:EA:D6:6B:5E:AB:32:F5:1D Certificate issuer: /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315 Certificate serial: 0EE9C01CD54146EE9C28A3B5E9143E9D4B3B0A2D Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/34332e3234372e3138382e302f32322d3332203d3e203233373234.roa Signing time: Wed 15 Apr 2026 07:54:04 +0000 ROA not before: Wed 15 Apr 2026 07:49:04 +0000 ROA not after: Wed 14 Apr 2027 07:54:04 +0000 asID: 23724 IP address blocks: 43.247.188.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:e9:c0:1c:d5:41:46:ee:9c:28:a3:b5:e9:14:3e:9d:4b:3b:0a:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315 Validity Not Before: Apr 15 07:49:04 2026 GMT Not After : Apr 14 07:54:04 2027 GMT Subject: CN=EF783BFD1C1059919F812B02EAD66B5EAB32F51D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9d:57:91:10:99:66:77:82:9a:26:ce:3a:98: de:52:07:15:9a:2b:15:95:a8:69:37:23:98:74:72: ee:f3:fa:a8:f0:f4:3e:62:cd:e8:14:4f:7a:dd:c7: f8:5a:bd:1b:4f:29:fb:ff:25:c0:e5:19:33:9d:d1: 79:7f:14:96:37:a6:da:e6:be:bd:b1:11:07:10:a7: 4d:6f:13:05:12:cb:18:ee:73:7f:16:0c:45:cb:69: 41:1d:7d:ed:a9:9a:d4:5e:a6:59:2d:18:ea:1c:27: 65:ad:ca:80:e7:12:99:f2:c4:43:74:a4:24:fc:4b: 49:13:5b:aa:94:4e:f1:80:dd:3f:d4:20:92:86:c1: ba:41:0f:90:2d:9f:eb:78:fb:b5:2f:3e:a5:6a:a2: f7:3f:47:05:8a:26:7a:88:0f:ba:13:84:88:ec:4e: 37:c8:71:f7:4c:19:2c:35:e1:59:fd:8b:c4:0d:2a: bd:7f:7d:ba:5e:ca:9f:a0:0c:fc:c6:5d:c7:81:3e: 6a:c5:e6:3b:5d:e3:24:6c:2f:f4:89:aa:cc:c6:cf: ac:c8:4f:cd:e2:3f:4d:34:ed:1e:30:0b:e3:58:dd: 66:6d:0d:dc:80:da:7f:43:5a:9f:4c:52:d1:c1:ec: cf:b5:8d:fe:1e:a5:49:e8:03:89:92:55:ac:a3:9c: 41:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:78:3B:FD:1C:10:59:91:9F:81:2B:02:EA:D6:6B:5E:AB:32:F5:1D X509v3 Authority Key Identifier: keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/34332e3234372e3138382e302f32322d3332203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.247.188.0/22 Signature Algorithm: sha256WithRSAEncryption 98:84:67:e0:5a:d8:3f:8a:fb:31:b6:4d:49:84:e9:b5:0c:ed: ec:a4:8f:ed:2c:a0:4f:80:a2:a7:44:13:f9:83:6f:a5:05:09: 05:5e:91:4f:04:78:5a:c8:10:55:0f:43:aa:ed:6d:6f:05:41: 0b:c5:7f:ed:91:22:6f:1f:4a:f4:3c:06:44:d2:6d:53:a9:f6: ce:dc:ed:42:4b:91:b4:ba:da:26:98:fe:30:56:33:10:33:c8: 7b:15:5e:22:a9:dc:a3:a5:5e:03:1c:21:18:31:79:f8:2e:f5: 78:45:d3:1c:43:8b:af:c1:da:ed:31:e2:02:cd:c9:d4:5b:36: c4:22:a1:83:74:7e:11:8f:b9:26:43:e3:45:77:e2:59:56:d3: 93:3c:9e:34:02:f4:6b:76:b9:46:0e:b6:e6:13:88:ab:60:fc: d2:60:8a:7a:31:0a:f6:49:bc:1a:ef:65:3e:df:8b:dd:ff:7c: 11:bd:e5:4b:a2:6d:5e:9c:76:e6:5e:29:56:55:d7:b4:1b:70: 3f:a4:56:b6:b5:91:16:5a:ee:2d:7e:52:1e:c4:bf:a0:bf:38: 93:df:c4:bb:38:e1:bf:f2:8f:66:50:af:11:17:ca:b5:76:3c: 4b:4a:72:95:9c:f4:52:55:63:69:1e:bf:70:61:7b:76:57:a7: db:34:6e:18 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUDunAHNVBRu6cKKO16RQ+nUs7Ci0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3 OEMxRTMxNTAeFw0yNjA0MTUwNzQ5MDRaFw0yNzA0MTQwNzU0MDRaMDMxMTAvBgNV BAMTKEVGNzgzQkZEMUMxMDU5OTE5RjgxMkIwMkVBRDY2QjVFQUIzMkY1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYnVeREJlmd4KaJs46mN5SBxWa KxWVqGk3I5h0cu7z+qjw9D5izegUT3rdx/havRtPKfv/JcDlGTOd0Xl/FJY3ptrm vr2xEQcQp01vEwUSyxjuc38WDEXLaUEdfe2pmtReplktGOocJ2WtyoDnEpnyxEN0 pCT8S0kTW6qUTvGA3T/UIJKGwbpBD5Atn+t4+7UvPqVqovc/RwWKJnqID7oThIjs TjfIcfdMGSw14Vn9i8QNKr1/fbpeyp+gDPzGXceBPmrF5jtd4yRsL/SJqszGz6zI T83iP0007R4wC+NY3WZtDdyA2n9DWp9MUtHB7M+1jf4epUnoA4mSVayjnEEVAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU73g7/RwQWZGfgSsC6tZrXqsy9R0wHwYDVR0j BBgwFoAUIMrI5wtcswlOR/8FFiOphXjB4xUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDI5NDc2NzA5OTkwNS8wLzIwQ0FDOEU3MEI1Q0IzMDk0RTQ3RkYwNTE2MjNB OTg1NzhDMUUzMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3OEMxRTMxNS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTk4NDI5NDc2NzA5OTkwNS8wLzM0MzMyZTMyMzQz NzJlMzEzODM4MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzMzM3MzIzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAiv3vDANBgkqhkiG9w0BAQsFAAOCAQEAmIRn4FrYP4r7MbZNSYTptQzt 7KSP7SygT4Cip0QT+YNvpQUJBV6RTwR4WsgQVQ9Dqu1tbwVBC8V/7ZEibx9K9DwG RNJtU6n2ztztQkuRtLraJpj+MFYzEDPIexVeIqnco6VeAxwhGDF5+C71eEXTHEOL r8Ha7THiAs3J1Fs2xCKhg3R+EY+5JkPjRXfiWVbTkzyeNAL0a3a5Rg625hOIq2D8 0mCKejEK9km8Gu9lPt+L3f98Eb3lS6JtXpx25l4pVlXXtBtwP6RWtrWRFlruLX5S HsS/oL84k9/Euzjhv/KPZlCvERfKtXY8S0pylZz0UlVjaR6/cGF7dlen2zRuGA== -----END CERTIFICATE-----Generated at Sat Apr 18 02:27:55 2026 by rpki-client