$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3235302e3138342e302f32342d3234203d3e20313436373732.roa File: 34352e3235302e3138342e302f32342d3234203d3e20313436373732.roa (raw, json) Hash identifier: 7+NACEPrfZIjwyyvQX5L/jbdhCn11Xntxaa9WOvj/BI= Subject key identifier: 5C:B1:14:11:51:58:07:B1:2D:5D:48:C6:F6:CB:26:10:6C:B5:DB:45 Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Certificate serial: 437679B05233E6C44DB0F5DF1F62AA5DDC0E4E40 Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3235302e3138342e302f32342d3234203d3e20313436373732.roa Signing time: Wed 24 Jun 2026 08:21:04 +0000 ROA not before: Wed 24 Jun 2026 08:16:04 +0000 ROA not after: Wed 23 Jun 2027 08:21:04 +0000 asID: 146772 IP address blocks: 45.250.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Jul 2026 07:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:76:79:b0:52:33:e6:c4:4d:b0:f5:df:1f:62:aa:5d:dc:0e:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Validity Not Before: Jun 24 08:16:04 2026 GMT Not After : Jun 23 08:21:04 2027 GMT Subject: CN=5CB11411515807B12D5D48C6F6CB26106CB5DB45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:43:37:e7:50:e1:92:11:06:cd:5d:1d:29:ee: f1:f3:90:22:27:09:75:26:83:15:89:fe:ea:51:08: e1:86:10:20:ef:98:d9:52:85:49:29:9d:2d:7b:79: bb:10:3c:02:ce:1e:f9:6f:f7:af:02:91:f3:19:e7: 2d:77:e9:be:52:0e:f7:15:5a:ea:86:ef:5a:2f:38: 12:4d:fd:5c:b5:6c:88:12:27:9f:7f:e5:14:a0:e6: d1:40:69:93:a0:51:42:13:b0:75:c0:21:4d:08:63: 6a:3e:55:e4:de:e5:dc:f2:44:0a:61:0e:23:ae:ae: fe:07:8a:63:40:ce:70:9a:96:ce:7f:56:c7:51:c8: fb:bc:01:59:b0:f5:da:a1:c5:25:e7:5a:14:f8:88: 17:1c:49:d8:70:87:23:4c:11:a1:6b:0e:ec:fc:32: bb:8b:95:3c:32:e9:e9:e0:27:ac:41:16:a7:8a:22: 7b:85:22:c6:c9:e7:f6:4d:f0:16:e0:fb:e6:8b:bb: a9:4e:76:de:f4:fc:d8:eb:c5:73:40:7d:04:a0:20: 75:e3:31:70:66:1d:72:8b:55:36:4a:1a:a0:a4:79: 54:3e:df:14:dd:3e:dd:cf:72:69:2f:57:2e:66:fd: 87:68:77:3c:56:47:82:25:a1:27:c3:9f:6c:b3:5f: 06:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B1:14:11:51:58:07:B1:2D:5D:48:C6:F6:CB:26:10:6C:B5:DB:45 X509v3 Authority Key Identifier: keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3235302e3138342e302f32342d3234203d3e20313436373732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.250.184.0/24 Signature Algorithm: sha256WithRSAEncryption 38:4f:c3:36:ad:90:22:cd:ac:09:92:83:30:f9:0b:1c:f5:7f: e4:ec:ca:cc:62:31:82:9d:f0:f9:2e:c8:6a:c9:87:c6:4b:12: ae:19:4f:a2:b4:e1:6d:0a:75:88:33:c6:f7:84:39:fc:03:3f: 91:9d:9f:85:7b:6d:16:95:0d:96:3b:7a:8c:7a:9a:c0:92:23: 46:e9:e8:66:b9:71:20:7c:28:11:43:10:63:91:d1:12:9a:fc: 1f:da:ea:41:85:b9:4d:4b:52:80:00:8d:26:73:e3:67:3b:68: 51:a7:6d:87:5f:63:48:7a:e6:a5:b1:fc:17:ad:17:df:ec:ae: da:39:93:9f:da:2b:a8:79:3c:88:0d:3f:8f:7c:35:d7:21:31: 93:d9:60:1f:43:86:cc:96:11:74:1e:81:61:07:bb:72:cb:fe: a3:7f:f0:a9:64:43:ab:b8:2c:6b:3f:f3:59:d9:b8:be:7b:1c: de:d2:c7:29:a8:8a:2d:7d:21:c3:b5:bf:30:93:ba:0b:7b:7f: ab:5d:82:8e:38:f4:db:c9:1f:9b:c0:ee:67:8f:65:2b:09:56: 42:09:53:94:5f:43:3f:e1:70:a0:12:b0:25:06:3d:25:d2:fd: 86:34:10:ce:2a:e2:a7:6a:ff:8a:57:f0:22:cb:25:bb:14:79: bd:13:83:92 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUQ3Z5sFIz5sRNsPXfH2KqXdwOTkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0Qzcy RjFBMTJCODAeFw0yNjA2MjQwODE2MDRaFw0yNzA2MjMwODIxMDRaMDMxMTAvBgNV BAMTKDVDQjExNDExNTE1ODA3QjEyRDVENDhDNkY2Q0IyNjEwNkNCNURCNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxQzfnUOGSEQbNXR0p7vHzkCIn CXUmgxWJ/upRCOGGECDvmNlShUkpnS17ebsQPALOHvlv968CkfMZ5y136b5SDvcV WuqG71ovOBJN/Vy1bIgSJ59/5RSg5tFAaZOgUUITsHXAIU0IY2o+VeTe5dzyRAph DiOurv4HimNAznCals5/VsdRyPu8AVmw9dqhxSXnWhT4iBccSdhwhyNMEaFrDuz8 MruLlTwy6engJ6xBFqeKInuFIsbJ5/ZN8Bbg++aLu6lOdt70/NjrxXNAfQSgIHXj MXBmHXKLVTZKGqCkeVQ+3xTdPt3PcmkvVy5m/YdodzxWR4IloSfDn2yzXwaXAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUXLEUEVFYB7EtXUjG9ssmEGy120UwHwYDVR0j BBgwFoAUPQHNaSjd6NJqyWJl8fkExy8aErgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQyMDI4OS8wLzNEMDFDRDY5MjhEREU4RDI2QUM5NjI2NUYxRjkw NEM3MkYxQTEyQjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0QzcyRjFBMTJCOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0MjAyODkvMC8zNDM1MmUzMjM1 MzAyZTMxMzgzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM3MzczMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAC36uDANBgkqhkiG9w0BAQsFAAOCAQEAOE/DNq2QIs2sCZKDMPkL HPV/5OzKzGIxgp3w+S7IasmHxksSrhlPorThbQp1iDPG94Q5/AM/kZ2fhXttFpUN ljt6jHqawJIjRunoZrlxIHwoEUMQY5HREpr8H9rqQYW5TUtSgACNJnPjZztoUadt h19jSHrmpbH8F60X3+yu2jmTn9orqHk8iA0/j3w11yExk9lgH0OGzJYRdB6BYQe7 csv+o3/wqWRDq7gsaz/zWdm4vnsc3tLHKaiKLX0hw7W/MJO6C3t/q12Cjjj028kf m8DuZ49lKwlWQglTlF9DP+FwoBKwJQY9JdL9hjQQzirip2r/ilfwIssluxR5vROD kg== -----END CERTIFICATE-----Generated at Tue Jul 7 23:44:18 2026 by rpki-client