$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096689320682586114/0/34332e3233392e3132332e302f32342d3234203d3e2030.roa File: 34332e3233392e3132332e302f32342d3234203d3e2030.roa (raw, json) Hash identifier: VMjL+XSC1mPOSkeTdlTojJzBzT03t2yOX7OTsoHue0g= Subject key identifier: C6:51:28:53:D4:D9:F6:69:DF:0D:3A:0D:3B:F3:66:D0:51:BD:18:0A Certificate issuer: /CN=526198C6FEC4729E2A08209CDB07E7BD6537198F Certificate serial: 66B363078F7BCAF91C28A509C992D167BD189924 Authority key identifier: 52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/34332e3233392e3132332e302f32342d3234203d3e2030.roa Signing time: Wed 15 Apr 2026 06:59:04 +0000 ROA not before: Wed 15 Apr 2026 06:54:04 +0000 ROA not after: Wed 14 Apr 2027 06:59:04 +0000 asID: 0 IP address blocks: 43.239.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 17:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:b3:63:07:8f:7b:ca:f9:1c:28:a5:09:c9:92:d1:67:bd:18:99:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=526198C6FEC4729E2A08209CDB07E7BD6537198F Validity Not Before: Apr 15 06:54:04 2026 GMT Not After : Apr 14 06:59:04 2027 GMT Subject: CN=C6512853D4D9F669DF0D3A0D3BF366D051BD180A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fb:cf:e7:7f:5f:83:74:1a:04:3e:8a:45:6a: 85:6e:74:a8:b3:21:ec:51:df:7a:e3:88:e9:47:d2: 75:9b:89:0c:c9:bf:16:71:51:d6:df:b0:e9:f9:d6: 1d:b7:07:d3:2a:87:f8:ad:1b:48:90:8c:a7:c1:f9: f9:53:7f:0e:f0:5f:f7:68:53:e9:b1:66:af:58:e0: 75:67:58:e0:b6:b6:7f:36:f4:f6:a4:40:94:ca:bc: 95:84:9f:aa:47:80:f6:63:ce:2d:44:0f:fa:a7:66: 00:a5:2a:2c:4e:c3:ff:d9:f4:bd:b4:6e:a9:27:a7: af:50:be:9b:19:8a:ba:2a:5e:94:c4:9e:fd:39:75: 71:a5:16:93:0f:09:65:03:09:d3:36:86:05:37:3e: 1c:e4:f0:fd:c5:cd:0c:49:9b:83:40:10:2c:f8:df: 84:ac:30:fa:b4:80:8d:49:1b:4e:4d:4b:0e:5b:ec: 9c:f5:bd:cb:e8:fa:a5:a7:2b:24:48:aa:36:68:1c: 46:83:dd:2d:7b:a2:9a:26:3c:d4:22:d4:c1:cc:d7: 75:65:ee:79:95:d5:2b:de:2d:ff:5b:2f:df:53:07: 7b:15:19:fa:40:78:6b:b6:25:93:72:20:d1:2c:cf: 34:08:24:62:f9:da:c4:5a:24:a5:5b:fc:ca:5c:08: 69:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:51:28:53:D4:D9:F6:69:DF:0D:3A:0D:3B:F3:66:D0:51:BD:18:0A X509v3 Authority Key Identifier: keyid:52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/34332e3233392e3132332e302f32342d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.239.123.0/24 Signature Algorithm: sha256WithRSAEncryption 13:93:ee:90:37:d6:4c:d3:0e:86:76:e1:11:8c:c8:04:4f:3c: 5e:17:59:46:5f:4c:e0:52:91:8e:5e:72:9e:88:e9:9d:5f:52: 9d:47:aa:84:37:3d:53:65:fa:48:9a:f6:15:03:51:7c:a9:fe: 32:17:1f:87:3f:af:2f:23:f7:b7:83:cb:f6:9b:18:d1:f9:74: 82:43:f2:ff:71:4d:8b:8a:5b:7f:3c:ba:dd:c0:d0:59:a9:35: 58:25:32:dc:fb:5d:84:5f:c5:c9:37:d7:b8:b3:d7:83:1c:0d: 96:76:a9:d8:8a:5d:90:a4:c0:a2:a9:12:c1:56:5b:b8:4c:ff: d0:25:29:02:43:74:f5:93:7c:0a:27:be:5f:37:1f:4e:bf:1d: 24:80:7e:79:a0:83:77:37:bd:12:49:4d:0f:95:5f:a4:b6:cd: 5e:a5:e2:59:9a:24:11:26:1e:0e:11:b4:e2:d2:43:5d:54:c3: 73:80:2c:c1:52:ce:b8:34:0e:8e:0a:e8:ce:b6:89:59:8f:a7: 05:1c:08:bc:b1:ed:fb:0a:3d:e7:c5:c5:00:76:c0:55:28:97: ba:0d:73:33:41:b3:15:b6:53:5e:c8:55:a4:3e:c2:33:4d:c9: 27:59:4d:46:cf:71:89:7d:34:5a:df:26:f0:91:59:e8:58:5d: 02:3e:82:e6 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUZrNjB497yvkcKKUJyZLRZ70YmSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI2MTk4QzZGRUM0NzI5RTJBMDgyMDlDREIwN0U3QkQ2 NTM3MTk4RjAeFw0yNjA0MTUwNjU0MDRaFw0yNzA0MTQwNjU5MDRaMDMxMTAvBgNV BAMTKEM2NTEyODUzRDREOUY2NjlERjBEM0EwRDNCRjM2NkQwNTFCRDE4MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh+8/nf1+DdBoEPopFaoVudKiz IexR33rjiOlH0nWbiQzJvxZxUdbfsOn51h23B9Mqh/itG0iQjKfB+flTfw7wX/do U+mxZq9Y4HVnWOC2tn829PakQJTKvJWEn6pHgPZjzi1ED/qnZgClKixOw//Z9L20 bqknp69QvpsZiroqXpTEnv05dXGlFpMPCWUDCdM2hgU3Phzk8P3FzQxJm4NAECz4 34SsMPq0gI1JG05NSw5b7Jz1vcvo+qWnKyRIqjZoHEaD3S17opomPNQi1MHM13Vl 7nmV1SveLf9bL99TB3sVGfpAeGu2JZNyINEszzQIJGL52sRaJKVb/MpcCGn7AgMB AAGjggILMIICBzAdBgNVHQ4EFgQUxlEoU9TZ9mnfDToNO/Nm0FG9GAowHwYDVR0j BBgwFoAUUmGYxv7Ecp4qCCCc2wfnvWU3GY8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY4OTMyMDY4MjU4NjExNC8wLzUyNjE5OEM2RkVDNDcyOUUyQTA4MjA5Q0RCMDdF N0JENjUzNzE5OEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTI2MTk4QzZGRUM0NzI5RTJBMDgyMDlDREIwN0U3QkQ2NTM3MTk4Ri5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2Njg5MzIwNjgyNTg2MTE0LzAvMzQzMzJlMzIzMzM5 MmUzMTMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACvv ezANBgkqhkiG9w0BAQsFAAOCAQEAE5PukDfWTNMOhnbhEYzIBE88XhdZRl9M4FKR jl5ynojpnV9SnUeqhDc9U2X6SJr2FQNRfKn+Mhcfhz+vLyP3t4PL9psY0fl0gkPy /3FNi4pbfzy63cDQWak1WCUy3PtdhF/FyTfXuLPXgxwNlnap2IpdkKTAoqkSwVZb uEz/0CUpAkN09ZN8Cie+XzcfTr8dJIB+eaCDdze9EklND5VfpLbNXqXiWZokESYe DhG04tJDXVTDc4AswVLOuDQOjgrozraJWY+nBRwIvLHt+wo958XFAHbAVSiXug1z M0GzFbZTXshVpD7CM03JJ1lNRs9xiX00Wt8m8JFZ6FhdAj6C5g== -----END CERTIFICATE-----Generated at Thu Apr 16 22:35:37 2026 by rpki-client