$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097087053666975747/0/34322e312e3132382e302f31372d3137203d3e2030.roa File: 34322e312e3132382e302f31372d3137203d3e2030.roa (raw, json) Hash identifier: tf+O/VpEdVRcosS5mpWfSvN2AvVYD/EcyTRfCJi5g4o= Subject key identifier: DD:65:B4:91:28:FC:B6:05:0F:F5:94:0D:68:0A:D5:D1:CA:67:EC:7E Certificate issuer: /CN=9006F3ED77C8551A72B9D224109F782F6A4251D9 Certificate serial: 6150F4AFAA91517738E4AD8EFF9B26592FD75B3D Authority key identifier: 90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/34322e312e3132382e302f31372d3137203d3e2030.roa Signing time: Thu 16 Apr 2026 09:28:44 +0000 ROA not before: Thu 16 Apr 2026 09:23:44 +0000 ROA not after: Thu 15 Apr 2027 09:28:44 +0000 asID: 0 IP address blocks: 42.1.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 09:56:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:50:f4:af:aa:91:51:77:38:e4:ad:8e:ff:9b:26:59:2f:d7:5b:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9006F3ED77C8551A72B9D224109F782F6A4251D9 Validity Not Before: Apr 16 09:23:44 2026 GMT Not After : Apr 15 09:28:44 2027 GMT Subject: CN=DD65B49128FCB6050FF5940D680AD5D1CA67EC7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9b:c2:53:1c:9c:73:dd:d3:5e:77:41:88:ee: ad:d8:e2:bf:58:46:2e:15:0e:3b:76:82:61:4b:7e: 6f:e8:be:3c:65:d2:6c:0b:47:75:b6:78:ac:85:9c: b2:7c:e9:26:58:73:a8:eb:6d:76:bc:32:a3:4e:a6: 06:a5:3e:80:2a:99:35:90:9b:9f:ce:67:21:5c:f0: e3:81:15:47:e5:8a:2c:5e:46:28:a6:db:4c:07:1c: 8e:3b:dc:ee:35:0a:6b:ee:ec:64:98:c6:2a:fa:ab: 34:b9:1a:21:d1:a3:1e:1d:51:e3:65:67:d9:af:d9: 75:1a:f0:29:f1:05:4f:f9:63:d1:2b:0e:dc:71:19: 16:fa:ef:fb:3d:3d:27:a3:d8:44:26:e8:c9:3f:be: 4d:a4:ce:3e:85:cc:c8:20:aa:51:02:89:26:5b:79: b2:78:da:be:25:28:9e:43:44:fc:5a:96:21:e4:8a: 55:d6:bc:67:74:e7:76:0f:a1:19:b9:b5:bc:04:b5: 56:d5:9c:fe:3e:77:b3:f6:27:87:55:b4:53:ea:d9: 99:9e:a7:a3:70:c2:01:96:4e:ed:06:79:fc:fd:f1: 74:29:85:b1:20:32:32:87:23:74:ec:3c:6e:52:c9: e2:8d:c9:df:ac:91:4a:22:cb:20:b8:d8:9e:eb:47: 96:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:65:B4:91:28:FC:B6:05:0F:F5:94:0D:68:0A:D5:D1:CA:67:EC:7E X509v3 Authority Key Identifier: keyid:90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/34322e312e3132382e302f31372d3137203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.1.128.0/17 Signature Algorithm: sha256WithRSAEncryption 87:7f:e1:d6:1c:61:35:0d:b8:ee:1f:3e:3d:a2:d0:d9:d8:eb: 1e:a8:d6:b5:ef:7b:78:9c:d8:21:f9:e0:9e:f3:72:e9:e8:34: 0d:d5:11:8b:9b:b8:38:a6:fc:33:1d:1b:3e:7c:da:a4:ce:75: 0e:78:be:a2:f1:6c:01:3d:e9:33:2a:8c:44:42:4a:0a:3b:cf: 5b:53:eb:88:e4:83:b5:20:24:3c:87:d8:3e:c1:6e:f3:61:90: 09:31:a0:35:91:6f:80:3f:ba:c6:f8:e5:c1:5d:35:30:36:8c: ce:f2:17:40:c7:a7:be:95:63:63:45:9c:94:d2:c2:b1:c4:b0: 5a:f2:13:8f:30:82:84:50:f8:ae:3f:79:b8:3b:0f:45:41:4d: 3d:38:4c:d2:26:2d:fa:9f:e7:90:b2:7e:e2:69:8c:5d:9c:b6: 54:f0:9d:a9:24:c9:24:ed:fd:5a:45:b3:96:23:9f:da:6f:f6: f5:d9:c9:34:2b:dc:92:55:4a:98:8b:ad:81:c7:34:56:bb:4c: e4:34:63:fa:d4:f8:5c:13:89:e1:54:93:f5:57:60:08:12:05: 89:ee:d9:f0:02:ee:d7:92:ad:d0:a8:3a:c5:3e:77:0f:61:a5: a9:40:20:0a:4b:0e:bd:7f:53:9d:be:6e:c8:fc:84:26:b5:db: a0:3b:69:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgIUYVD0r6qRUXc45K2O/5smWS/XWz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAwNkYzRUQ3N0M4NTUxQTcyQjlEMjI0MTA5Rjc4MkY2 QTQyNTFEOTAeFw0yNjA0MTYwOTIzNDRaFw0yNzA0MTUwOTI4NDRaMDMxMTAvBgNV BAMTKERENjVCNDkxMjhGQ0I2MDUwRkY1OTQwRDY4MEFENUQxQ0E2N0VDN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4m8JTHJxz3dNed0GI7q3Y4r9Y Ri4VDjt2gmFLfm/ovjxl0mwLR3W2eKyFnLJ86SZYc6jrbXa8MqNOpgalPoAqmTWQ m5/OZyFc8OOBFUfliixeRiim20wHHI473O41Cmvu7GSYxir6qzS5GiHRox4dUeNl Z9mv2XUa8CnxBU/5Y9ErDtxxGRb67/s9PSej2EQm6Mk/vk2kzj6FzMggqlECiSZb ebJ42r4lKJ5DRPxaliHkilXWvGd053YPoRm5tbwEtVbVnP4+d7P2J4dVtFPq2Zme p6NwwgGWTu0Gefz98XQphbEgMjKHI3TsPG5SyeKNyd+skUoiyyC42J7rR5a5AgMB AAGjggIHMIICAzAdBgNVHQ4EFgQU3WW0kSj8tgUP9ZQNaArV0cpn7H4wHwYDVR0j BBgwFoAUkAbz7XfIVRpyudIkEJ94L2pCUdkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA4NzA1MzY2Njk3NTc0Ny8wLzkwMDZGM0VENzdDODU1MUE3MkI5RDIyNDEwOUY3 ODJGNkE0MjUxRDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTAwNkYzRUQ3N0M4NTUxQTcyQjlEMjI0MTA5Rjc4MkY2QTQyNTFEOS5jZXIw gYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3MDg3MDUzNjY2OTc1NzQ3LzAvMzQzMjJlMzEyZTMx MzIzODJlMzAyZjMxMzcyZDMxMzcyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHKgGAMA0G CSqGSIb3DQEBCwUAA4IBAQCHf+HWHGE1DbjuHz49otDZ2OseqNa173t4nNgh+eCe 83Lp6DQN1RGLm7g4pvwzHRs+fNqkznUOeL6i8WwBPekzKoxEQkoKO89bU+uI5IO1 ICQ8h9g+wW7zYZAJMaA1kW+AP7rG+OXBXTUwNozO8hdAx6e+lWNjRZyU0sKxxLBa 8hOPMIKEUPiuP3m4Ow9FQU09OEzSJi36n+eQsn7iaYxdnLZU8J2pJMkk7f1aRbOW I5/ab/b12ck0K9ySVUqYi62BxzRWu0zkNGP61PhcE4nhVJP1V2AIEgWJ7tnwAu7X kq3QqDrFPncPYaWpQCAKSw69f1Odvm7I/IQmtdugO2nC -----END CERTIFICATE-----Generated at Thu Apr 16 22:35:43 2026 by rpki-client