$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e33322e302f32322d3232203d3e203536303430.roa File: 34352e3131362e33322e302f32322d3232203d3e203536303430.roa (raw, json) Hash identifier: r+Vu8KXPLwZi4i7livp3MfUV2IrrNQGMyiWDliwb/cE= Subject key identifier: 32:1F:ED:7C:68:07:E3:6C:5D:94:68:59:EA:23:E9:BE:B2:CC:8B:82 Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Certificate serial: 13C9735432B12FEB790EE6FE0FE25DF7484EC6F7 Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e33322e302f32322d3232203d3e203536303430.roa Signing time: Mon 13 Apr 2026 03:16:01 +0000 ROA not before: Mon 13 Apr 2026 03:11:01 +0000 ROA not after: Mon 12 Apr 2027 03:16:01 +0000 asID: 56040 IP address blocks: 45.116.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 09:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:c9:73:54:32:b1:2f:eb:79:0e:e6:fe:0f:e2:5d:f7:48:4e:c6:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Validity Not Before: Apr 13 03:11:01 2026 GMT Not After : Apr 12 03:16:01 2027 GMT Subject: CN=321FED7C6807E36C5D946859EA23E9BEB2CC8B82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4c:39:19:b2:cb:49:bf:cd:bc:b5:b5:91:fc: 92:02:ee:1c:6a:ae:72:ee:7d:55:ae:6c:53:c6:39: 3f:b9:b1:3e:f1:b2:5b:92:95:75:c9:5f:5e:86:60: b4:a7:a4:36:81:e8:16:11:d0:ef:5a:09:e4:45:47: e3:e2:a2:71:9d:97:18:54:14:08:f8:43:f3:c1:64: 1c:90:03:fd:77:be:f3:d6:2f:eb:10:f2:14:f9:b0: f2:55:6e:16:2a:ef:35:39:2b:8b:b4:cb:c3:10:d6: 4e:9a:d3:df:b8:07:65:37:bd:06:f3:5e:2e:21:ec: 79:dc:64:ae:2a:22:ec:6a:b7:36:ee:74:ec:07:33: 7c:3f:f4:4e:a0:a7:71:69:07:13:0d:20:f2:9a:62: 16:30:80:2f:d8:7e:ac:72:2c:f5:46:ed:8b:3c:60: 60:69:1a:a8:94:01:c0:f7:81:0a:01:7c:02:c8:4f: b7:f0:b4:c8:a3:d9:46:08:78:bf:58:eb:5f:a0:8e: b5:3f:4e:c6:7a:89:4a:33:ef:ad:83:e6:db:34:92: c3:2d:d6:96:b7:57:49:d7:9e:dc:42:3b:c8:e7:0d: d0:70:73:23:72:6d:ac:12:2b:ed:c2:f0:09:6f:c2: 9c:dd:04:ae:7c:b8:eb:ad:92:38:7d:3d:c2:90:ca: c4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1F:ED:7C:68:07:E3:6C:5D:94:68:59:EA:23:E9:BE:B2:CC:8B:82 X509v3 Authority Key Identifier: keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e33322e302f32322d3232203d3e203536303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.116.32.0/22 Signature Algorithm: sha256WithRSAEncryption 24:c5:05:c3:e8:9e:70:e0:6f:3a:11:d4:f2:67:3d:b2:38:3e: 8b:ef:f4:73:4e:07:db:f7:d8:d3:ad:74:43:c0:58:a4:34:44: f8:fe:02:2b:9a:25:25:af:97:60:28:97:69:5e:bb:b6:17:05: c9:94:24:1c:44:18:3c:06:62:c9:ae:b2:72:f2:d4:9f:bf:c5: 27:72:da:01:cd:40:54:c2:b9:03:a3:98:68:44:7b:1a:37:d6: e1:f5:d8:0c:a5:3f:bc:b9:39:76:0c:0f:ba:b4:c9:1d:04:28: 38:56:c4:b4:4b:31:ee:f5:bc:6c:4e:94:cb:0f:0f:de:1d:16: 45:78:48:3a:6f:e5:39:82:74:ec:4b:b5:ab:03:2b:2b:40:f6: fa:3a:5b:22:98:1b:5f:ba:d3:a8:c7:b0:48:88:90:f2:3b:78: 17:e1:22:c3:db:93:d6:11:ed:b6:40:2d:8d:54:24:05:09:b5: dc:c2:16:9f:54:6f:f7:eb:f0:e9:93:ee:97:19:78:0a:ac:94: a0:32:fb:96:fe:9a:39:85:d5:ad:a9:9b:74:fd:d9:cd:3b:bf: c7:77:a1:2b:8e:a8:85:ff:2f:0b:e7:de:f2:2c:73:c6:0e:83: 51:8c:24:76:ae:0d:42:e9:69:77:a7:a1:0b:04:84:bf:c8:a5: e4:4c:e5:d0 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUE8lzVDKxL+t5Dub+D+Jd90hOxvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhB QjIxMzUxQTAeFw0yNjA0MTMwMzExMDFaFw0yNzA0MTIwMzE2MDFaMDMxMTAvBgNV BAMTKDMyMUZFRDdDNjgwN0UzNkM1RDk0Njg1OUVBMjNFOUJFQjJDQzhCODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYTDkZsstJv828tbWR/JIC7hxq rnLufVWubFPGOT+5sT7xsluSlXXJX16GYLSnpDaB6BYR0O9aCeRFR+PionGdlxhU FAj4Q/PBZByQA/13vvPWL+sQ8hT5sPJVbhYq7zU5K4u0y8MQ1k6a09+4B2U3vQbz Xi4h7HncZK4qIuxqtzbudOwHM3w/9E6gp3FpBxMNIPKaYhYwgC/YfqxyLPVG7Ys8 YGBpGqiUAcD3gQoBfALIT7fwtMij2UYIeL9Y61+gjrU/TsZ6iUoz762D5ts0ksMt 1pa3V0nXntxCO8jnDdBwcyNybawSK+3C8AlvwpzdBK58uOutkjh9PcKQysSzAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUMh/tfGgH42xdlGhZ6iPpvrLMi4IwHwYDVR0j BBgwFoAULQvBZV0Xo6sJyR5Doy3o2KshNRowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDcyMDI1OS8wLzJEMEJDMTY1NUQxN0EzQUIwOUM5MUU0M0EzMkRF OEQ4QUIyMTM1MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhBQjIxMzUxQS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NzIwMjU5LzAvMzQzNTJlMzEzMTM2 MmUzMzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzNjMwMzQzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAi10IDANBgkqhkiG9w0BAQsFAAOCAQEAJMUFw+iecOBvOhHU8mc9sjg+i+/0 c04H2/fY0610Q8BYpDRE+P4CK5olJa+XYCiXaV67thcFyZQkHEQYPAZiya6ycvLU n7/FJ3LaAc1AVMK5A6OYaER7GjfW4fXYDKU/vLk5dgwPurTJHQQoOFbEtEsx7vW8 bE6Uyw8P3h0WRXhIOm/lOYJ07Eu1qwMrK0D2+jpbIpgbX7rTqMewSIiQ8jt4F+Ei w9uT1hHttkAtjVQkBQm13MIWn1Rv9+vw6ZPulxl4CqyUoDL7lv6aOYXVrambdP3Z zTu/x3ehK46ohf8vC+fe8ixzxg6DUYwkdq4NQulpd6ehCwSEv8il5Ezl0A== -----END CERTIFICATE-----Generated at Mon Apr 13 15:30:56 2026 by rpki-client