$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3130312e302f32342d3234203d3e20313331343833.roa File: 34332e3234382e3130312e302f32342d3234203d3e20313331343833.roa (raw, json) Hash identifier: nxDjxnLALt/hIwHKRbfhK43Ckh4MK60QwEKg4P/wLbE= Subject key identifier: 72:4B:0B:18:FF:20:69:BF:21:78:29:DC:35:C1:80:78:3F:C4:71:AC Certificate issuer: /CN=96E9344F9168341F216708A437FB9801FEBBBBB6 Certificate serial: 41D6C49E17C2477280E5A7986A22B1301F24453E Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3130312e302f32342d3234203d3e20313331343833.roa Signing time: Fri 17 Apr 2026 08:12:50 +0000 ROA not before: Fri 17 Apr 2026 08:07:50 +0000 ROA not after: Fri 16 Apr 2027 08:12:50 +0000 asID: 131483 IP address blocks: 43.248.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 10:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:d6:c4:9e:17:c2:47:72:80:e5:a7:98:6a:22:b1:30:1f:24:45:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6 Validity Not Before: Apr 17 08:07:50 2026 GMT Not After : Apr 16 08:12:50 2027 GMT Subject: CN=724B0B18FF2069BF217829DC35C180783FC471AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1c:fc:89:cf:6b:80:15:ad:f1:9e:3f:a2:90: 47:cd:61:39:42:f2:94:05:fa:1d:ae:10:ad:ef:62: 25:42:72:15:46:40:33:99:0d:97:78:7b:1f:df:0a: d5:d9:43:ae:1c:a4:c1:c4:65:fd:c6:a7:13:72:00: 93:c4:3e:7a:0b:13:22:9d:90:30:ea:d1:6e:44:ec: 73:d3:bd:10:f2:b0:88:97:60:73:64:5d:62:2c:74: 3c:33:6e:54:80:47:77:fe:02:57:43:26:b7:18:56: 71:9e:dc:56:63:b8:33:8c:7d:c9:06:fd:e1:3d:0a: 11:f5:63:2d:fd:ba:fe:92:db:c4:7c:57:d1:cb:ae: cc:f2:23:61:4a:ec:e2:c2:b9:16:7e:01:04:01:b2: 0b:5e:e1:7f:dc:02:19:e2:c9:f4:15:25:5d:3e:5a: bc:ee:83:64:c4:38:da:49:ba:0c:1e:c1:fb:b4:92: 79:a6:7c:23:31:c9:f7:28:d9:b3:80:bf:65:1e:9b: 00:7b:0b:8f:6d:11:68:a7:f0:b1:1c:8b:cd:65:d0: cd:d0:7a:9f:a7:9a:ce:65:2e:71:02:d7:96:a6:b5: ff:0a:cb:98:1b:c2:90:d4:60:09:83:cb:59:e4:6d: eb:6a:60:a3:39:b2:66:18:4d:8d:02:f5:56:19:b4: 95:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4B:0B:18:FF:20:69:BF:21:78:29:DC:35:C1:80:78:3F:C4:71:AC X509v3 Authority Key Identifier: keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3130312e302f32342d3234203d3e20313331343833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.101.0/24 Signature Algorithm: sha256WithRSAEncryption 14:e2:1b:57:2b:57:70:6c:e0:b5:5c:30:80:74:12:17:5a:52: ba:f1:ba:ca:ad:21:0d:76:c2:e9:93:de:5b:4b:e1:99:a7:14: cf:21:fd:0d:44:08:78:2a:94:1a:00:c1:8b:d2:d5:c7:8e:52: b8:08:d8:59:30:65:88:99:03:4f:b2:de:ad:ec:1b:10:f4:56: ac:d2:6c:eb:6c:c8:82:ab:ce:72:0a:9a:86:06:6c:70:47:55: af:f2:c9:8d:77:33:a0:e0:76:62:97:26:94:2d:00:cd:8b:2c: cf:c4:be:23:77:89:fb:fd:2c:86:27:67:b1:11:4a:66:39:13: c7:fd:8c:0c:4f:ae:ab:c5:a8:5f:b9:c7:dc:29:f1:2b:15:48: cb:22:8a:23:e0:c3:da:32:8f:4e:b0:5b:e6:aa:b7:0a:fd:43: 72:39:a0:36:97:56:1b:5c:c1:c6:25:a3:27:8b:0a:7d:d5:96: 72:f7:20:2f:b5:2d:94:23:09:a1:1b:0b:60:97:8e:ca:db:d4: 0c:90:e6:0f:48:bc:de:c2:e5:5f:67:0e:6a:59:5f:b9:28:ff: 02:23:cd:d0:27:6c:81:a1:02:c6:d6:d2:58:cf:93:e0:16:e3: 74:db:b0:55:d9:7a:bc:66:bb:17:7f:47:3b:c9:41:f7:03:47: 72:32:27:e5 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUQdbEnhfCR3KA5aeYaiKxMB8kRT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZFOTM0NEY5MTY4MzQxRjIxNjcwOEE0MzdGQjk4MDFG RUJCQkJCNjAeFw0yNjA0MTcwODA3NTBaFw0yNzA0MTYwODEyNTBaMDMxMTAvBgNV BAMTKDcyNEIwQjE4RkYyMDY5QkYyMTc4MjlEQzM1QzE4MDc4M0ZDNDcxQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYHPyJz2uAFa3xnj+ikEfNYTlC 8pQF+h2uEK3vYiVCchVGQDOZDZd4ex/fCtXZQ64cpMHEZf3GpxNyAJPEPnoLEyKd kDDq0W5E7HPTvRDysIiXYHNkXWIsdDwzblSAR3f+AldDJrcYVnGe3FZjuDOMfckG /eE9ChH1Yy39uv6S28R8V9HLrszyI2FK7OLCuRZ+AQQBsgte4X/cAhniyfQVJV0+ Wrzug2TEONpJugwewfu0knmmfCMxyfco2bOAv2UemwB7C49tEWin8LEci81l0M3Q ep+nms5lLnEC15amtf8Ky5gbwpDUYAmDy1nkbetqYKM5smYYTY0C9VYZtJUnAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUcksLGP8gab8heCncNcGAeD/EcawwHwYDVR0j BBgwFoAUluk0T5FoNB8hZwikN/uYAf67u7YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQzMzc4OTc4Njc1MDk3Ny8wLzk2RTkzNDRGOTE2ODM0MUYyMTY3MDhBNDM3RkI5 ODAxRkVCQkJCQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTZFOTM0NEY5MTY4MzQxRjIxNjcwOEE0MzdGQjk4MDFGRUJCQkJCNi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTc0MzM3ODk3ODY3NTA5NzcvMC8zNDMzMmUzMjM0 MzgyZTMxMzAzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMTM0MzgzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEACv4ZTANBgkqhkiG9w0BAQsFAAOCAQEAFOIbVytXcGzgtVwwgHQS F1pSuvG6yq0hDXbC6ZPeW0vhmacUzyH9DUQIeCqUGgDBi9LVx45SuAjYWTBliJkD T7LerewbEPRWrNJs62zIgqvOcgqahgZscEdVr/LJjXczoOB2YpcmlC0AzYssz8S+ I3eJ+/0shidnsRFKZjkTx/2MDE+uq8WoX7nH3CnxKxVIyyKKI+DD2jKPTrBb5qq3 Cv1DcjmgNpdWG1zBxiWjJ4sKfdWWcvcgL7UtlCMJoRsLYJeOytvUDJDmD0i83sLl X2cOallfuSj/AiPN0CdsgaECxtbSWM+T4BbjdNuwVdl6vGa7F39HO8lB9wNHcjIn 5Q== -----END CERTIFICATE-----Generated at Sat Apr 18 02:43:22 2026 by rpki-client