$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134322e302f32342d3234203d3e203538343636.roa File: 34352e3131362e3134322e302f32342d3234203d3e203538343636.roa (raw, json) Hash identifier: +2HE3F+8WpQQc5JprS4NEmn9/NhFGXgXOhHvozrmObA= Subject key identifier: 8F:17:A5:94:A3:19:38:E0:37:D8:7E:5B:1E:27:D9:48:65:1D:4A:39 Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Certificate serial: 44A868EA09A6196EEF4B599A33D95591ED432084 Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134322e302f32342d3234203d3e203538343636.roa Signing time: Mon 13 Apr 2026 02:37:34 +0000 ROA not before: Mon 13 Apr 2026 02:32:34 +0000 ROA not after: Mon 12 Apr 2027 02:37:34 +0000 asID: 58466 IP address blocks: 45.116.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 09:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:a8:68:ea:09:a6:19:6e:ef:4b:59:9a:33:d9:55:91:ed:43:20:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Validity Not Before: Apr 13 02:32:34 2026 GMT Not After : Apr 12 02:37:34 2027 GMT Subject: CN=8F17A594A31938E037D87E5B1E27D948651D4A39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e2:4b:51:56:83:ba:5a:d7:8f:16:b7:12:0c: 41:f3:4e:ce:4a:d0:f1:c4:22:30:31:ba:24:5b:d0: ce:d0:06:b6:de:24:30:b8:74:69:c3:c3:f1:15:ad: 5f:4a:bf:01:4b:64:5f:d6:88:a6:85:ea:5a:5a:85: 24:f4:7b:a3:a9:df:35:3c:d2:f3:9c:d2:9a:b5:91: 5c:ae:0e:f2:ca:1f:b5:cb:92:50:2b:9f:ce:b1:42: f0:bf:f7:6b:57:58:5e:2a:de:d2:4c:7e:ba:7f:34: 81:8a:2d:e4:0a:a1:fb:93:eb:e4:0f:db:59:5b:de: af:40:46:27:0d:9e:48:cb:7b:ab:7f:0c:59:63:8d: fa:69:78:71:e4:0b:a7:29:8b:60:da:1f:df:d1:f4: 33:0e:ac:50:86:03:49:05:45:ae:fd:f9:3f:48:79: 6f:f1:97:80:6e:dd:61:dd:49:95:13:c8:e0:63:49: 55:9c:06:54:61:5f:f3:2d:8b:b2:a3:8b:bd:cb:76: 63:89:bb:9c:4f:62:8d:34:0d:7f:77:1f:17:c0:ba: 56:aa:26:22:0b:ad:9a:73:d0:d3:62:b0:5e:84:98: 06:c3:1c:77:8a:2a:a1:d1:1b:ba:ec:39:fa:e4:df: 2b:8b:a9:20:ba:1d:b9:f2:0d:1a:68:e6:df:be:a4: 89:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:17:A5:94:A3:19:38:E0:37:D8:7E:5B:1E:27:D9:48:65:1D:4A:39 X509v3 Authority Key Identifier: keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134322e302f32342d3234203d3e203538343636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.116.142.0/24 Signature Algorithm: sha256WithRSAEncryption a7:d8:21:9a:44:47:a3:04:4b:f2:6f:db:90:2c:d6:66:35:1f: d9:43:d2:19:0c:78:7f:63:0d:8e:1c:67:c0:26:75:b7:99:ae: 1b:91:8f:8f:ae:f5:4b:29:c4:61:7a:8f:87:f4:a9:be:28:c9: a4:1d:ac:6a:14:2d:b6:10:49:01:aa:0c:a2:a1:a8:f1:6c:33: c1:6f:6f:7b:3c:e9:14:d9:35:25:dd:12:33:50:95:67:01:33: b1:db:42:da:dd:80:bc:f1:5e:ff:bf:3b:4f:6a:bf:19:fa:dd: 2d:a5:4f:cf:ef:c2:40:92:bf:c1:dd:cd:05:e8:04:67:f3:56: cf:9f:6c:8c:a6:46:6e:4f:f7:b8:98:b4:d2:f4:df:32:7c:cb: e9:41:ea:05:29:23:d3:05:cc:4a:9c:9c:3b:af:75:c2:55:20: 83:ae:cf:fc:2f:59:99:44:98:a5:5c:65:33:bd:5f:eb:67:a0: ac:06:dd:c2:ea:8f:dd:05:d9:a6:d8:ab:84:5f:98:1d:d1:66: c6:a7:e0:60:2b:d9:d3:fa:fc:1a:92:78:b6:a4:f2:d1:f3:15: d8:4b:c1:61:27:7d:1f:74:41:11:d0:e6:ea:9e:b2:b8:c7:c3: 54:f7:76:88:05:a7:a3:7d:12:30:80:a4:f4:e9:fe:2a:a2:9d: 99:1a:49:da -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIURKho6gmmGW7vS1maM9lVke1DIIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhB QjIxMzUxQTAeFw0yNjA0MTMwMjMyMzRaFw0yNzA0MTIwMjM3MzRaMDMxMTAvBgNV BAMTKDhGMTdBNTk0QTMxOTM4RTAzN0Q4N0U1QjFFMjdEOTQ4NjUxRDRBMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp4ktRVoO6WtePFrcSDEHzTs5K 0PHEIjAxuiRb0M7QBrbeJDC4dGnDw/EVrV9KvwFLZF/WiKaF6lpahST0e6Op3zU8 0vOc0pq1kVyuDvLKH7XLklArn86xQvC/92tXWF4q3tJMfrp/NIGKLeQKofuT6+QP 21lb3q9ARicNnkjLe6t/DFljjfppeHHkC6cpi2DaH9/R9DMOrFCGA0kFRa79+T9I eW/xl4Bu3WHdSZUTyOBjSVWcBlRhX/Mti7Kji73LdmOJu5xPYo00DX93HxfAulaq JiILrZpz0NNisF6EmAbDHHeKKqHRG7rsOfrk3yuLqSC6HbnyDRpo5t++pIm9AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUjxellKMZOOA32H5bHifZSGUdSjkwHwYDVR0j BBgwFoAULQvBZV0Xo6sJyR5Doy3o2KshNRowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDcyMDI1OS8wLzJEMEJDMTY1NUQxN0EzQUIwOUM5MUU0M0EzMkRF OEQ4QUIyMTM1MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhBQjIxMzUxQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDcyMDI1OS8wLzM0MzUyZTMxMzEz NjJlMzEzNDMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzODM0MzYzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAC10jjANBgkqhkiG9w0BAQsFAAOCAQEAp9ghmkRHowRL8m/bkCzWZjUf 2UPSGQx4f2MNjhxnwCZ1t5muG5GPj671SynEYXqPh/SpvijJpB2sahQtthBJAaoM oqGo8WwzwW9vezzpFNk1Jd0SM1CVZwEzsdtC2t2AvPFe/787T2q/GfrdLaVPz+/C QJK/wd3NBegEZ/NWz59sjKZGbk/3uJi00vTfMnzL6UHqBSkj0wXMSpycO691wlUg g67P/C9ZmUSYpVxlM71f62egrAbdwuqP3QXZptirhF+YHdFmxqfgYCvZ0/r8GpJ4 tqTy0fMV2EvBYSd9H3RBEdDm6p6yuMfDVPd2iAWno30SMICk9On+KqKdmRpJ2g== -----END CERTIFICATE-----Generated at Mon Apr 13 15:31:16 2026 by rpki-client