$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134302e302f32322d3232203d3e203536303430.roa File: 34352e3131362e3134302e302f32322d3232203d3e203536303430.roa (raw, json) Hash identifier: LsQIfsUKOQjsnX05xlup9BkZVlHz+kCT806/GW4sdX0= Subject key identifier: 79:0D:E3:D6:9D:69:9C:CA:B3:69:24:98:4B:0D:B0:87:01:DC:CB:B0 Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Certificate serial: 796354C15309A007A45BE408DFB2D13F8DCEECC1 Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134302e302f32322d3232203d3e203536303430.roa Signing time: Mon 13 Apr 2026 02:37:34 +0000 ROA not before: Mon 13 Apr 2026 02:32:34 +0000 ROA not after: Mon 12 Apr 2027 02:37:34 +0000 asID: 56040 IP address blocks: 45.116.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 09:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:63:54:c1:53:09:a0:07:a4:5b:e4:08:df:b2:d1:3f:8d:ce:ec:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Validity Not Before: Apr 13 02:32:34 2026 GMT Not After : Apr 12 02:37:34 2027 GMT Subject: CN=790DE3D69D699CCAB36924984B0DB08701DCCBB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b9:12:99:f1:dc:3c:6c:ab:31:87:da:42:87: 99:ed:72:43:83:21:61:cd:82:57:e8:a8:24:8b:0d: d8:b1:69:33:8b:b5:69:05:15:d3:8b:dc:0a:be:d1: 5d:ee:de:4f:81:ad:d7:ff:4b:53:e6:d2:70:21:25: 43:e7:29:d4:6c:9d:23:f8:4d:a6:f3:91:88:c4:f1: 86:5c:9c:32:4d:6e:9a:08:26:ed:f3:44:c5:43:d3: 81:a2:da:13:44:44:48:79:6e:a7:5e:fa:9d:0a:f2: 4c:b6:84:88:f5:6c:91:b0:d2:3b:e0:04:45:b4:c1: 6f:54:25:14:96:1d:6b:fe:4c:9e:e7:ce:ae:18:26: 65:85:c7:5c:26:38:04:1b:a2:4e:40:e3:9b:ef:3a: 56:13:57:e2:11:63:de:80:53:97:24:b0:38:a3:b2: 36:81:07:5b:48:b0:be:d0:77:51:86:0a:ed:13:cb: 32:eb:ee:21:5f:7d:5b:63:7b:ab:81:3a:87:1e:8d: 99:6a:6a:88:22:9c:7d:60:a1:06:7a:9b:04:4a:38: 30:92:f8:2c:bd:25:37:73:14:d4:5f:92:8a:a3:e9: 28:b5:c0:03:b6:0d:98:4b:f4:78:7d:67:4d:be:81: 27:12:69:70:d8:94:6f:cb:2a:89:6c:6c:39:e1:73: 69:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:0D:E3:D6:9D:69:9C:CA:B3:69:24:98:4B:0D:B0:87:01:DC:CB:B0 X509v3 Authority Key Identifier: keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134302e302f32322d3232203d3e203536303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.116.140.0/22 Signature Algorithm: sha256WithRSAEncryption b1:f1:5c:93:d9:7d:fd:4a:3c:4c:5b:37:18:ac:de:56:89:ea: db:ed:2f:79:71:12:f5:cb:ad:f6:58:e6:13:e4:82:70:5f:3c: 14:1c:fb:9b:51:4d:f9:0c:dc:4d:b3:11:74:8d:7c:e2:99:c0: bf:d4:46:ae:e6:6d:fc:c5:0e:1e:50:c3:40:58:33:1d:03:cb: e7:f2:28:4c:2a:da:42:c7:6d:89:7c:9f:8b:66:f8:d2:49:af: 54:8a:01:12:70:13:00:ee:a9:cf:73:e7:ee:2b:d8:93:d3:23: c1:e7:da:a0:92:37:6b:d9:5b:fa:f5:85:3f:6c:68:5d:94:e8: ef:cb:38:fe:e0:2e:87:f1:13:66:50:32:f0:33:b1:fa:a2:75: 6c:6c:d7:b1:64:af:6d:7f:ee:f5:b1:9b:5b:89:9f:e0:37:ae: fa:80:c1:64:ad:8a:59:41:19:3e:4e:ff:1e:b4:5c:0e:b9:c7: 4b:0d:0e:07:94:f0:39:71:1e:e9:03:d7:47:7e:d3:fc:49:56: 6f:ce:51:e5:0a:da:f6:56:8c:89:2a:a0:cd:7b:4c:9d:90:80: aa:78:73:a0:9b:03:b5:b6:83:97:70:04:8f:94:58:d3:e5:3c: bf:05:9e:4a:39:0e:db:06:f0:bb:d9:f1:2f:24:13:c0:f7:bb: 3f:c5:c6:eb -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUeWNUwVMJoAekW+QI37LRP43O7MEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhB QjIxMzUxQTAeFw0yNjA0MTMwMjMyMzRaFw0yNzA0MTIwMjM3MzRaMDMxMTAvBgNV BAMTKDc5MERFM0Q2OUQ2OTlDQ0FCMzY5MjQ5ODRCMERCMDg3MDFEQ0NCQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiuRKZ8dw8bKsxh9pCh5ntckOD IWHNglfoqCSLDdixaTOLtWkFFdOL3Aq+0V3u3k+Brdf/S1Pm0nAhJUPnKdRsnSP4 TabzkYjE8YZcnDJNbpoIJu3zRMVD04Gi2hNEREh5bqde+p0K8ky2hIj1bJGw0jvg BEW0wW9UJRSWHWv+TJ7nzq4YJmWFx1wmOAQbok5A45vvOlYTV+IRY96AU5cksDij sjaBB1tIsL7Qd1GGCu0TyzLr7iFffVtje6uBOocejZlqaoginH1goQZ6mwRKODCS +Cy9JTdzFNRfkoqj6Si1wAO2DZhL9Hh9Z02+gScSaXDYlG/LKolsbDnhc2lbAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUeQ3j1p1pnMqzaSSYSw2whwHcy7AwHwYDVR0j BBgwFoAULQvBZV0Xo6sJyR5Doy3o2KshNRowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDcyMDI1OS8wLzJEMEJDMTY1NUQxN0EzQUIwOUM5MUU0M0EzMkRF OEQ4QUIyMTM1MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhBQjIxMzUxQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDcyMDI1OS8wLzM0MzUyZTMxMzEz NjJlMzEzNDMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzNjMwMzQzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAi10jDANBgkqhkiG9w0BAQsFAAOCAQEAsfFck9l9/Uo8TFs3GKzeVonq 2+0veXES9cut9ljmE+SCcF88FBz7m1FN+QzcTbMRdI184pnAv9RGruZt/MUOHlDD QFgzHQPL5/IoTCraQsdtiXyfi2b40kmvVIoBEnATAO6pz3Pn7ivYk9MjwefaoJI3 a9lb+vWFP2xoXZTo78s4/uAuh/ETZlAy8DOx+qJ1bGzXsWSvbX/u9bGbW4mf4Deu +oDBZK2KWUEZPk7/HrRcDrnHSw0OB5TwOXEe6QPXR37T/ElWb85R5Qra9laMiSqg zXtMnZCAqnhzoJsDtbaDl3AEj5RY0+U8vwWeSjkO2wbwu9nxLyQTwPe7P8XG6w== -----END CERTIFICATE-----Generated at Mon Apr 13 15:31:16 2026 by rpki-client