$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/34332e3233302e3232332e302f32342d3234203d3e203233383438.roa File: 34332e3233302e3232332e302f32342d3234203d3e203233383438.roa (raw, json) Hash identifier: pqpx0Uqjhq8YS6XfxlN1G96yim41Ek3KzPunjOvossc= Subject key identifier: 7C:42:22:4E:E5:F9:0C:FC:BC:15:76:97:2A:A0:78:BD:A9:11:D2:96 Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D Certificate serial: 3B26A8CA17DB98BE87751AF0C7E741C888BBB4F0 Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/34332e3233302e3232332e302f32342d3234203d3e203233383438.roa Signing time: Thu 16 Apr 2026 09:07:31 +0000 ROA not before: Thu 16 Apr 2026 09:02:31 +0000 ROA not after: Thu 15 Apr 2027 09:07:31 +0000 asID: 23848 IP address blocks: 43.230.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 05:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:26:a8:ca:17:db:98:be:87:75:1a:f0:c7:e7:41:c8:88:bb:b4:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D Validity Not Before: Apr 16 09:02:31 2026 GMT Not After : Apr 15 09:07:31 2027 GMT Subject: CN=7C42224EE5F90CFCBC1576972AA078BDA911D296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:67:2a:07:44:f4:42:f9:18:09:31:da:a3:6e: 1a:8f:d0:0f:d9:89:71:89:2e:e5:0d:de:0f:1c:1c: 2e:37:cb:c3:e0:25:0c:ed:b5:ce:0b:cf:bc:c4:c7: 39:37:38:e3:36:f6:d8:25:f6:4a:55:c8:32:a4:c8: 57:62:45:96:2e:5e:af:25:5d:c5:48:a6:bd:ee:fb: c4:27:7f:7f:70:f4:3d:22:de:02:80:e0:bb:fd:89: 01:57:50:ea:e8:84:f2:89:8b:10:51:88:80:a7:58: 86:f0:a9:c3:10:9b:65:91:1d:74:89:8d:db:b5:82: 53:0a:7f:5f:19:fa:fa:94:b9:ad:1a:0b:c4:63:94: 77:a0:6c:44:24:d1:31:ad:41:cd:e4:c6:66:ba:43: 94:34:c0:e5:27:b8:44:df:3f:66:f3:9f:da:f8:89: b2:e0:a2:6d:08:da:45:70:6c:46:1d:49:c5:c8:cf: d6:2b:a1:2a:1f:bb:4a:73:c1:22:ed:10:3f:8a:7e: f8:77:ec:1f:bc:3a:f5:01:99:d7:40:52:dd:14:9d: 9d:30:ef:c5:f9:91:a2:4f:88:a4:54:67:fb:8b:75: 82:7d:b1:f6:34:c4:ca:c7:97:f4:12:1f:6f:5e:e3: ed:c4:fe:09:28:9b:64:10:86:d1:d4:ad:27:71:14: 20:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:42:22:4E:E5:F9:0C:FC:BC:15:76:97:2A:A0:78:BD:A9:11:D2:96 X509v3 Authority Key Identifier: keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/34332e3233302e3232332e302f32342d3234203d3e203233383438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.230.223.0/24 Signature Algorithm: sha256WithRSAEncryption 38:92:95:42:7c:0b:1d:08:c0:c1:f3:5a:af:0d:bc:99:cd:4c: dd:17:d7:7b:17:eb:33:17:0a:ea:68:55:42:4f:4e:83:a9:27: 5f:60:f8:52:83:17:97:20:62:da:46:2f:77:8d:c9:3b:26:5f: a1:53:09:29:5e:46:8d:41:94:64:36:7d:ce:e4:7a:d9:79:c6: 84:ab:7e:06:98:c6:3f:87:d7:c8:5d:f6:b2:a2:55:a6:01:99: 3d:c2:d0:18:b3:e6:0e:00:61:28:a9:f2:62:9f:4c:bc:76:15: 1e:84:fa:52:8e:f5:7f:4a:55:0d:75:20:d6:45:25:21:d8:50: 1a:29:6e:ac:a2:e5:e9:a8:21:07:a3:e2:8f:1f:f6:0c:70:51: 6c:2c:21:0a:8c:ed:c3:94:ad:e3:9c:5b:9e:eb:a6:b2:05:c7: 11:21:9d:70:73:9e:20:b9:1f:c4:99:32:8e:45:85:55:31:39: 00:14:f5:34:22:e5:8e:12:15:31:a8:e2:32:e7:01:c0:0c:a0: ce:a1:26:fc:1b:ce:3b:e2:0b:a4:e0:23:4d:4b:f1:15:1d:c6: 40:ad:c5:bf:87:f4:5a:3b:33:0a:31:f2:b1:1b:a2:bd:4c:92: dd:0d:c3:5c:0b:dd:e2:09:fa:1a:4d:65:5d:a0:ff:4b:5a:3d: 1f:e2:4e:b8 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUOyaoyhfbmL6HdRrwx+dByIi7tPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEw RTI3MDQyRDAeFw0yNjA0MTYwOTAyMzFaFw0yNzA0MTUwOTA3MzFaMDMxMTAvBgNV BAMTKDdDNDIyMjRFRTVGOTBDRkNCQzE1NzY5NzJBQTA3OEJEQTkxMUQyOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChZyoHRPRC+RgJMdqjbhqP0A/Z iXGJLuUN3g8cHC43y8PgJQzttc4Lz7zExzk3OOM29tgl9kpVyDKkyFdiRZYuXq8l XcVIpr3u+8Qnf39w9D0i3gKA4Lv9iQFXUOrohPKJixBRiICnWIbwqcMQm2WRHXSJ jdu1glMKf18Z+vqUua0aC8RjlHegbEQk0TGtQc3kxma6Q5Q0wOUnuETfP2bzn9r4 ibLgom0I2kVwbEYdScXIz9YroSofu0pzwSLtED+Kfvh37B+8OvUBmddAUt0UnZ0w 78X5kaJPiKRUZ/uLdYJ9sfY0xMrHl/QSH29e4+3E/gkom2QQhtHUrSdxFCBxAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUfEIiTuX5DPy8FXaXKqB4vakR0pYwHwYDVR0j BBgwFoAU7aiEp5dI1X60k2ZwTLaoEQ4nBC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA4MzUzMjM1NTgyOTc2My8wL0VEQTg4NEE3OTc0OEQ1N0VCNDkzNjY3MDRDQjZB ODExMEUyNzA0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEwRTI3MDQyRC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NzA4MzUzMjM1NTgyOTc2My8wLzM0MzMyZTMyMzMz MDJlMzIzMjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM4MzQzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEACvm3zANBgkqhkiG9w0BAQsFAAOCAQEAOJKVQnwLHQjAwfNarw28mc1M 3RfXexfrMxcK6mhVQk9Og6knX2D4UoMXlyBi2kYvd43JOyZfoVMJKV5GjUGUZDZ9 zuR62XnGhKt+BpjGP4fXyF32sqJVpgGZPcLQGLPmDgBhKKnyYp9MvHYVHoT6Uo71 f0pVDXUg1kUlIdhQGilurKLl6aghB6Pijx/2DHBRbCwhCoztw5St45xbnuumsgXH ESGdcHOeILkfxJkyjkWFVTE5ABT1NCLljhIVMajiMucBwAygzqEm/BvOO+ILpOAj TUvxFR3GQK3Fv4f0WjszCjHysRuivUyS3Q3DXAvd4gn6Gk1lXaD/S1o9H+JOuA== -----END CERTIFICATE-----Generated at Fri Apr 17 23:25:03 2026 by rpki-client