$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134302e302f32342d3234203d3e20313336393538.roa File: 34352e3131362e3134302e302f32342d3234203d3e20313336393538.roa (raw, json) Hash identifier: uGi/AcLPJ7YMbtrC6gkhv8y/ZAYPj/6sASnujMFg9qM= Subject key identifier: D9:9D:3E:CB:D1:FF:E5:9F:0B:5A:9D:38:89:94:F0:84:72:F9:C1:54 Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Certificate serial: 338ED7D880666BA238E8AF1B4840375EE7BEA748 Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134302e302f32342d3234203d3e20313336393538.roa Signing time: Thu 21 May 2026 08:16:47 +0000 ROA not before: Thu 21 May 2026 08:11:47 +0000 ROA not after: Thu 20 May 2027 08:16:47 +0000 asID: 136958 IP address blocks: 45.116.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 11:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:8e:d7:d8:80:66:6b:a2:38:e8:af:1b:48:40:37:5e:e7:be:a7:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Validity Not Before: May 21 08:11:47 2026 GMT Not After : May 20 08:16:47 2027 GMT Subject: CN=D99D3ECBD1FFE59F0B5A9D388994F08472F9C154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4b:ec:ae:2d:d7:1e:06:f8:97:e4:33:75:93: 6e:e4:01:54:96:84:f0:17:eb:7c:fc:d4:d1:48:d8: 71:a4:9f:9a:14:a3:d9:42:02:92:dc:38:9f:86:14: 27:8a:ff:53:c0:80:d6:de:9d:ec:c5:4c:a3:08:2f: d5:bb:28:40:ed:75:29:fb:47:1f:e2:21:a0:0a:87: 68:ed:6e:82:ce:7b:3a:54:ad:4e:6c:19:03:73:04: bd:b8:86:dc:1e:35:99:a0:9b:37:76:6a:51:65:68: 5e:b5:0f:4b:99:65:06:1a:bb:49:c7:9e:37:53:5e: e1:c4:a2:0f:51:69:d6:7f:58:3b:f6:2a:d4:ea:6b: 83:ed:51:97:15:10:56:08:ca:05:65:6e:74:6c:3d: ae:47:3c:40:2b:94:9f:c9:30:62:df:77:c7:dc:dc: 9c:2c:a8:52:19:8d:6c:8d:5b:61:80:5c:3f:69:78: 04:47:64:68:70:70:f2:00:4c:1d:2c:30:0e:b2:e7: 85:c4:f3:cd:3b:a0:ae:bf:96:25:de:1a:45:c0:5d: c1:ff:d3:63:2c:cd:6f:a5:f9:f8:32:10:b0:13:26: 90:38:81:6a:a6:b8:b1:9e:3c:cd:dc:a9:fc:92:49: 65:80:47:32:48:73:df:75:72:f9:b2:75:23:70:47: a0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9D:3E:CB:D1:FF:E5:9F:0B:5A:9D:38:89:94:F0:84:72:F9:C1:54 X509v3 Authority Key Identifier: keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134302e302f32342d3234203d3e20313336393538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.116.140.0/24 Signature Algorithm: sha256WithRSAEncryption 71:74:e7:c9:df:43:0f:6d:d7:24:14:bd:d0:08:fc:2c:0c:9c: 65:7a:d1:6f:29:1a:24:30:55:84:0d:32:5c:4e:5a:1d:57:29: 22:60:7d:f7:94:b9:dc:2e:4b:f3:eb:c4:56:5e:fc:e2:15:60: 98:90:96:ca:08:7b:29:91:e2:5b:13:b7:a4:da:74:9a:29:ba: 25:33:ea:70:f2:7d:9a:0d:24:87:5a:04:9f:cb:7e:c9:0b:1a: 7d:5a:d8:aa:57:61:d5:5b:b1:6d:e2:3d:3d:ec:77:e3:96:37: f4:8f:99:0c:a2:ac:68:e1:0a:49:1f:75:9b:f4:a3:e5:d9:b2: 60:36:a2:f3:d5:51:7d:5d:b1:5d:d0:64:38:e6:93:eb:e5:10: 72:b4:22:6b:c4:63:ef:3f:cb:e0:27:3a:99:20:15:cf:de:d4: c7:da:fa:42:e6:39:5f:1d:e5:9c:f2:90:02:07:b5:74:6a:f0: 9c:a0:3b:01:c2:4b:0f:ff:9d:e3:14:28:d1:34:df:d0:30:e1: 80:02:44:75:e6:b0:44:1d:ff:56:7f:7e:79:cf:28:d7:2d:a5: 8c:f2:05:82:a7:53:6b:0a:92:ca:d4:b3:e7:6f:71:1d:ad:db: 79:e6:77:38:5f:d3:36:6c:f2:4d:4d:3e:a5:7c:d4:86:b6:0f: f9:e0:ab:71 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUM47X2IBma6I46K8bSEA3Xue+p0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhB QjIxMzUxQTAeFw0yNjA1MjEwODExNDdaFw0yNzA1MjAwODE2NDdaMDMxMTAvBgNV BAMTKEQ5OUQzRUNCRDFGRkU1OUYwQjVBOUQzODg5OTRGMDg0NzJGOUMxNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyS+yuLdceBviX5DN1k27kAVSW hPAX63z81NFI2HGkn5oUo9lCApLcOJ+GFCeK/1PAgNbenezFTKMIL9W7KEDtdSn7 Rx/iIaAKh2jtboLOezpUrU5sGQNzBL24htweNZmgmzd2alFlaF61D0uZZQYau0nH njdTXuHEog9RadZ/WDv2KtTqa4PtUZcVEFYIygVlbnRsPa5HPEArlJ/JMGLfd8fc 3JwsqFIZjWyNW2GAXD9peARHZGhwcPIATB0sMA6y54XE8807oK6/liXeGkXAXcH/ 02MszW+l+fgyELATJpA4gWqmuLGePM3cqfySSWWARzJIc991cvmydSNwR6A1AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU2Z0+y9H/5Z8LWp04iZTwhHL5wVQwHwYDVR0j BBgwFoAULQvBZV0Xo6sJyR5Doy3o2KshNRowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDcyMDI1OS8wLzJEMEJDMTY1NUQxN0EzQUIwOUM5MUU0M0EzMkRF OEQ4QUIyMTM1MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhBQjIxMzUxQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3MjAyNTkvMC8zNDM1MmUzMTMx MzYyZTMxMzQzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM5MzUzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAC10jDANBgkqhkiG9w0BAQsFAAOCAQEAcXTnyd9DD23XJBS90Aj8 LAycZXrRbykaJDBVhA0yXE5aHVcpImB995S53C5L8+vEVl784hVgmJCWygh7KZHi WxO3pNp0mim6JTPqcPJ9mg0kh1oEn8t+yQsafVrYqldh1VuxbeI9Pex345Y39I+Z DKKsaOEKSR91m/Sj5dmyYDai89VRfV2xXdBkOOaT6+UQcrQia8Rj7z/L4Cc6mSAV z97Ux9r6QuY5Xx3lnPKQAge1dGrwnKA7AcJLD/+d4xQo0TTf0DDhgAJEdeawRB3/ Vn9+ec8o1y2ljPIFgqdTawqSytSz529xHa3beeZ3OF/TNmzyTU0+pXzUhrYP+eCr cQ== -----END CERTIFICATE-----Generated at Fri May 29 22:58:15 2026 by rpki-client