$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134302e302f32342d3234203d3e203536303430.roa File: 34352e3131362e3134302e302f32342d3234203d3e203536303430.roa (raw, json) Hash identifier: g8tfq1aiysMAHy6RuyCaLs4fsG4BReI5+zor251/Y7I= Subject key identifier: 02:FF:CE:EE:DF:58:CA:CA:4C:9E:E8:12:D0:FB:F5:38:70:04:95:2D Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Certificate serial: 34E55CBB2C7E427A1308295BD33C43ED74B38115 Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134302e302f32342d3234203d3e203536303430.roa Signing time: Mon 13 Apr 2026 02:37:35 +0000 ROA not before: Mon 13 Apr 2026 02:32:35 +0000 ROA not after: Mon 12 Apr 2027 02:37:35 +0000 asID: 56040 IP address blocks: 45.116.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 09:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:e5:5c:bb:2c:7e:42:7a:13:08:29:5b:d3:3c:43:ed:74:b3:81:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Validity Not Before: Apr 13 02:32:35 2026 GMT Not After : Apr 12 02:37:35 2027 GMT Subject: CN=02FFCEEEDF58CACA4C9EE812D0FBF5387004952D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:87:34:07:79:57:70:cc:e7:c8:ad:56:6b:25: 63:ef:ee:8e:f2:b9:ec:46:d5:e2:ff:3e:b4:be:3c: 31:51:b2:e3:1e:a7:41:ea:0a:4a:21:76:a1:bc:0d: ce:52:20:35:04:7e:55:b6:bd:8a:26:9c:f1:92:02: 6e:1c:4e:4c:32:04:e0:70:21:b2:42:b2:7b:8c:41: e7:4b:47:f8:d9:7c:07:f2:d4:e0:e4:ae:b8:64:24: 17:d5:10:76:21:89:dd:d7:a5:ce:2d:a1:bc:3b:c1: f0:43:c0:25:50:96:24:7e:fc:a3:37:23:ba:f3:2a: 58:52:f8:41:2e:2b:27:d2:3d:a1:84:91:90:78:c8: 2f:11:fa:e4:88:b5:85:10:38:14:7f:cf:04:5f:9e: dd:93:e8:72:96:c1:4e:79:50:ef:4c:7a:cc:19:c1: d3:c5:6e:51:ef:69:1e:ce:2e:1f:97:59:c0:2b:aa: f1:17:f7:21:3c:34:d4:7f:31:25:75:78:93:84:6c: b1:53:77:35:a8:c4:11:21:7b:43:67:cf:85:3f:d5: f5:80:fc:ca:a8:3f:af:d2:9e:d6:72:e0:d4:a2:ab: 90:bf:7b:c9:32:14:92:e0:07:4f:07:cf:f8:e9:93: ce:e7:cf:d6:13:f1:8e:9f:96:f7:99:76:34:75:7d: 97:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FF:CE:EE:DF:58:CA:CA:4C:9E:E8:12:D0:FB:F5:38:70:04:95:2D X509v3 Authority Key Identifier: keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134302e302f32342d3234203d3e203536303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.116.140.0/24 Signature Algorithm: sha256WithRSAEncryption 07:f3:95:13:71:50:33:33:1d:f2:6a:9a:84:6d:43:2d:c3:64: df:e1:51:c3:66:28:56:42:d5:84:98:7d:ee:67:17:63:6c:f2: 56:04:e2:ca:55:33:82:bc:14:0b:ed:a0:f7:b4:0c:2f:d2:4d: 0e:9e:3b:fe:3c:b1:86:d1:0d:73:2c:07:f1:12:1e:01:45:f5: cc:82:82:f6:ee:2d:df:fc:ee:80:13:6a:1c:8b:ac:e8:bc:1d: cb:66:64:80:d4:1c:86:76:9f:db:73:23:9e:4e:66:c3:48:94: 64:06:a3:25:94:de:22:ba:06:2d:bd:1e:ec:a7:2d:59:ec:5f: 88:e0:6a:95:ae:8b:39:5c:b9:51:a8:1a:42:07:09:7c:29:d5: d1:f0:8f:fb:f3:8c:5c:dc:71:35:22:e9:b3:7b:6d:b2:87:61: 04:38:5d:0d:94:8f:95:15:ee:42:b9:7d:c5:17:77:0d:55:4d: 24:ea:3c:3a:f7:ea:7a:fb:a0:dc:c3:57:d8:6d:1d:65:62:b8: a0:48:91:1b:b5:b7:a4:8a:d8:f3:b3:be:73:37:28:19:85:d8: d5:8c:4c:1c:05:60:2d:6b:e8:75:b5:8d:b2:7a:a5:5a:0e:c2: a4:5e:3e:84:4d:d3:55:83:b3:58:cd:01:97:66:16:b4:85:76: 56:20:0c:c3 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUNOVcuyx+QnoTCClb0zxD7XSzgRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhB QjIxMzUxQTAeFw0yNjA0MTMwMjMyMzVaFw0yNzA0MTIwMjM3MzVaMDMxMTAvBgNV BAMTKDAyRkZDRUVFREY1OENBQ0E0QzlFRTgxMkQwRkJGNTM4NzAwNDk1MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCshzQHeVdwzOfIrVZrJWPv7o7y uexG1eL/PrS+PDFRsuMep0HqCkohdqG8Dc5SIDUEflW2vYomnPGSAm4cTkwyBOBw IbJCsnuMQedLR/jZfAfy1ODkrrhkJBfVEHYhid3Xpc4tobw7wfBDwCVQliR+/KM3 I7rzKlhS+EEuKyfSPaGEkZB4yC8R+uSItYUQOBR/zwRfnt2T6HKWwU55UO9MeswZ wdPFblHvaR7OLh+XWcArqvEX9yE8NNR/MSV1eJOEbLFTdzWoxBEhe0Nnz4U/1fWA /MqoP6/SntZy4NSiq5C/e8kyFJLgB08Hz/jpk87nz9YT8Y6flveZdjR1fZdLAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUAv/O7t9YyspMnugS0Pv1OHAElS0wHwYDVR0j BBgwFoAULQvBZV0Xo6sJyR5Doy3o2KshNRowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDcyMDI1OS8wLzJEMEJDMTY1NUQxN0EzQUIwOUM5MUU0M0EzMkRF OEQ4QUIyMTM1MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhBQjIxMzUxQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDcyMDI1OS8wLzM0MzUyZTMxMzEz NjJlMzEzNDMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAC10jDANBgkqhkiG9w0BAQsFAAOCAQEAB/OVE3FQMzMd8mqahG1DLcNk 3+FRw2YoVkLVhJh97mcXY2zyVgTiylUzgrwUC+2g97QML9JNDp47/jyxhtENcywH 8RIeAUX1zIKC9u4t3/zugBNqHIus6Lwdy2ZkgNQchnaf23Mjnk5mw0iUZAajJZTe IroGLb0e7KctWexfiOBqla6LOVy5UagaQgcJfCnV0fCP+/OMXNxxNSLps3ttsodh BDhdDZSPlRXuQrl9xRd3DVVNJOo8Ovfqevug3MNX2G0dZWK4oEiRG7W3pIrY87O+ czcoGYXY1YxMHAVgLWvodbWNsnqlWg7CpF4+hE3TVYOzWM0Bl2YWtIV2ViAMww== -----END CERTIFICATE-----Generated at Mon Apr 13 15:31:16 2026 by rpki-client