$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/34332e3235342e3130362e302f32342d3234203d3e203535393934.roa File: 34332e3235342e3130362e302f32342d3234203d3e203535393934.roa (raw, json) Hash identifier: O+yhKZ9WBqPHYLfCsrXU5oDmwmnWL1rlfi0tMvl77YE= Subject key identifier: 68:18:5C:5C:0C:15:DC:D5:69:C8:FA:34:AB:E0:11:CF:1C:0B:4E:BC Certificate issuer: /CN=C89881B315F7E21BA948CF9CB11D1AC422106426 Certificate serial: 393AED28E5757A83B2559C2B1CB6AF13135C0706 Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/34332e3235342e3130362e302f32342d3234203d3e203535393934.roa Signing time: Fri 17 Apr 2026 09:14:11 +0000 ROA not before: Fri 17 Apr 2026 09:09:11 +0000 ROA not after: Fri 16 Apr 2027 09:14:11 +0000 asID: 55994 IP address blocks: 43.254.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 12:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:3a:ed:28:e5:75:7a:83:b2:55:9c:2b:1c:b6:af:13:13:5c:07:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426 Validity Not Before: Apr 17 09:09:11 2026 GMT Not After : Apr 16 09:14:11 2027 GMT Subject: CN=68185C5C0C15DCD569C8FA34ABE011CF1C0B4EBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:df:4b:5a:ef:de:bb:87:60:f7:03:0b:f6:7d: 30:31:1f:49:f6:1b:80:50:8b:30:9e:dc:85:ce:f9: 6a:a3:5b:24:8a:d6:e4:9d:2a:c6:26:c3:8e:23:99: 39:c4:6c:d2:52:d6:fd:5f:c1:e9:c5:fb:9d:4e:38: e5:5f:e9:12:66:c5:a7:6a:fb:40:ee:ab:12:06:c7: 3e:98:a9:30:8c:53:a8:44:77:63:ee:a4:61:2a:74: 11:23:01:37:4a:5d:76:bb:e0:51:e1:77:98:18:66: 51:88:d8:e9:cf:d4:c4:20:92:5c:76:ad:d6:93:4b: 17:93:11:3f:bf:67:b0:25:26:77:41:3e:ae:00:a8: d6:aa:1c:58:ae:c0:06:49:f0:e2:8a:d7:e4:6d:44: 14:7e:7a:36:b4:bc:4d:e1:4f:ae:4d:cf:04:1f:59: f7:31:a5:f2:75:be:49:21:3b:e3:37:98:78:34:e3: fa:a4:fa:e8:4e:b5:72:78:0c:1f:b1:ea:e4:9d:c1: 35:63:89:2d:9d:5e:0d:36:81:20:c0:f3:bc:b9:5b: 86:0c:54:12:16:05:4c:1a:5f:86:b5:0f:a3:de:e2: 6d:92:b0:64:2f:8b:e4:67:85:6d:c8:46:fd:22:80: 42:43:55:78:57:36:6e:e3:40:8b:f0:3d:7b:55:88: d0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:18:5C:5C:0C:15:DC:D5:69:C8:FA:34:AB:E0:11:CF:1C:0B:4E:BC X509v3 Authority Key Identifier: keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/34332e3235342e3130362e302f32342d3234203d3e203535393934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.254.106.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:b1:13:46:ac:de:9d:6c:6c:9f:ab:77:d2:e5:1a:bf:dd:88: 6f:66:8e:6a:12:fe:db:2c:9f:fa:d3:9f:18:36:cb:6b:06:36: f4:be:bc:03:c2:59:37:7b:47:79:49:c0:cc:dd:3f:4e:4b:0d: d8:c7:83:fe:30:de:7f:29:dd:fe:1e:8d:f0:08:0a:37:9f:da: 93:3b:ad:16:6b:f0:bc:36:e3:f2:0f:c3:23:9b:c9:12:7b:98: 2c:11:2c:13:85:f3:98:79:b4:04:1b:2b:95:9c:bb:f3:49:54: 67:5b:c4:d2:69:66:84:9b:10:f2:c5:39:b0:31:a7:7d:db:a7: 11:13:3a:b4:75:e1:a5:76:d9:ed:a6:2e:ad:3e:a0:f5:a5:75: 72:67:cf:95:42:e7:28:12:dd:83:10:dd:12:c3:47:47:58:15: e9:dd:4a:7a:74:77:ed:e5:8e:d6:75:08:51:d0:51:ba:0b:76: 3d:17:59:14:1f:6c:19:72:97:e1:cd:2f:98:1f:a2:29:39:22: 6d:5c:a5:99:85:7e:95:d4:6d:cf:f3:ef:4d:c8:2a:de:5b:37: 0d:18:3f:05:f9:a8:bc:8d:bf:76:d5:26:bc:3c:06:dc:af:97: d9:fd:b3:38:85:db:47:70:b9:07:e2:ca:74:a2:40:bc:2b:a4: 15:84:f0:02 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUOTrtKOV1eoOyVZwrHLavExNcBwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQy MjEwNjQyNjAeFw0yNjA0MTcwOTA5MTFaFw0yNzA0MTYwOTE0MTFaMDMxMTAvBgNV BAMTKDY4MTg1QzVDMEMxNURDRDU2OUM4RkEzNEFCRTAxMUNGMUMwQjRFQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa30ta7967h2D3Awv2fTAxH0n2 G4BQizCe3IXO+WqjWySK1uSdKsYmw44jmTnEbNJS1v1fwenF+51OOOVf6RJmxadq +0DuqxIGxz6YqTCMU6hEd2PupGEqdBEjATdKXXa74FHhd5gYZlGI2OnP1MQgklx2 rdaTSxeTET+/Z7AlJndBPq4AqNaqHFiuwAZJ8OKK1+RtRBR+eja0vE3hT65NzwQf WfcxpfJ1vkkhO+M3mHg04/qk+uhOtXJ4DB+x6uSdwTVjiS2dXg02gSDA87y5W4YM VBIWBUwaX4a1D6Pe4m2SsGQvi+RnhW3IRv0igEJDVXhXNm7jQIvwPXtViNCBAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUaBhcXAwV3NVpyPo0q+ARzxwLTrwwHwYDVR0j BBgwFoAUyJiBsxX34hupSM+csR0axCIQZCYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzMjA2Mjk5NzE2ODEzMS8wL0M4OTg4MUIzMTVGN0UyMUJBOTQ4Q0Y5Q0IxMUQx QUM0MjIxMDY0MjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQyMjEwNjQyNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjYzMjA2Mjk5NzE2ODEzMS8wLzM0MzMyZTMyMzUz NDJlMzEzMDM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTM5MzkzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEACv+ajANBgkqhkiG9w0BAQsFAAOCAQEAK7ETRqzenWxsn6t30uUav92I b2aOahL+2yyf+tOfGDbLawY29L68A8JZN3tHeUnAzN0/TksN2MeD/jDefynd/h6N 8AgKN5/akzutFmvwvDbj8g/DI5vJEnuYLBEsE4XzmHm0BBsrlZy780lUZ1vE0mlm hJsQ8sU5sDGnfdunERM6tHXhpXbZ7aYurT6g9aV1cmfPlULnKBLdgxDdEsNHR1gV 6d1KenR37eWO1nUIUdBRugt2PRdZFB9sGXKX4c0vmB+iKTkibVylmYV+ldRtz/Pv Tcgq3ls3DRg/BfmovI2/dtUmvDwG3K+X2f2zOIXbR3C5B+LKdKJAvCukFYTwAg== -----END CERTIFICATE-----Generated at Sat Apr 18 03:52:56 2026 by rpki-client