$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3235302e3138352e302f32342d3234203d3e20313436373732.roa File: 34352e3235302e3138352e302f32342d3234203d3e20313436373732.roa (raw, json) Hash identifier: U8C83SFKmu1pIjhg0/yU2GWj3Qn+cHJkfJuvl1iEvOM= Subject key identifier: E6:DF:AE:90:5C:76:46:5D:FF:6D:7E:52:5D:20:FD:73:85:09:47:DC Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Certificate serial: 22E100DD66A6D1C06E24FDB13FEBECBF51BEC4C2 Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3235302e3138352e302f32342d3234203d3e20313436373732.roa Signing time: Wed 24 Jun 2026 08:21:03 +0000 ROA not before: Wed 24 Jun 2026 08:16:03 +0000 ROA not after: Wed 23 Jun 2027 08:21:03 +0000 asID: 146772 IP address blocks: 45.250.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Jul 2026 07:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e1:00:dd:66:a6:d1:c0:6e:24:fd:b1:3f:eb:ec:bf:51:be:c4:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Validity Not Before: Jun 24 08:16:03 2026 GMT Not After : Jun 23 08:21:03 2027 GMT Subject: CN=E6DFAE905C76465DFF6D7E525D20FD73850947DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3e:4f:59:27:5e:31:46:70:b1:45:7c:c2:f1: 0f:95:66:4b:34:a9:31:d3:80:be:d9:d6:16:c4:f6: 6a:37:81:fe:ed:7a:c2:08:d0:dd:60:35:c3:0b:d9: 27:44:c5:e6:65:b8:69:2e:5a:ad:52:d8:86:cd:88: f6:25:d1:fa:61:3c:47:52:c1:82:89:65:08:61:db: a5:6f:f0:6b:23:96:76:10:ae:f5:41:05:d3:6f:3e: ce:67:b0:17:f4:ee:b6:d5:50:5d:ee:fe:a8:0a:80: 36:61:be:21:d5:ac:9c:80:93:aa:a9:d2:bc:a7:4f: 65:cc:b4:0a:f8:d8:ed:45:8c:30:91:bb:98:52:5c: 30:90:22:5f:2e:28:5d:77:d0:79:1d:c6:a6:13:0a: e5:4e:bf:54:dd:b0:aa:0f:61:c1:6b:32:2e:1d:91: 99:da:e8:4d:57:65:fe:c0:d6:be:97:01:03:46:9e: d7:68:e8:9d:7d:19:fa:94:f5:16:fa:1c:1c:f8:63: fc:5e:82:47:0b:51:17:14:dc:e0:80:08:6b:3a:81: 08:48:16:bf:e7:ce:ea:4b:c0:3d:50:6c:ca:2f:ee: 3d:6d:d3:e9:6e:04:cc:81:e2:fa:50:70:94:df:bd: 22:af:50:58:d4:85:7b:88:bb:f8:e8:99:88:b6:7e: 8f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DF:AE:90:5C:76:46:5D:FF:6D:7E:52:5D:20:FD:73:85:09:47:DC X509v3 Authority Key Identifier: keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3235302e3138352e302f32342d3234203d3e20313436373732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.250.185.0/24 Signature Algorithm: sha256WithRSAEncryption a5:43:fe:20:49:1a:84:dd:7b:0d:de:b2:ef:f6:a4:af:fa:13: 1b:51:02:27:82:86:74:5c:f0:f7:a0:42:3f:f1:6c:db:45:4a: 53:3a:e0:8b:5e:24:7b:3e:c4:cb:c7:9b:4c:89:0f:4d:ce:5d: cc:18:65:1f:cc:6d:36:67:09:5c:2d:f4:eb:d7:a2:69:7e:0b: f0:3b:64:ce:a2:24:37:b5:ca:a4:0f:ab:c1:df:fe:64:5a:41: b4:17:79:43:a2:66:fc:38:a4:5e:88:ac:23:b0:fc:20:08:fb: 5c:c7:a1:18:63:4c:b3:36:d0:7b:10:8f:17:6b:da:f7:62:ea: 04:81:c3:47:0f:bb:a0:c2:8d:44:81:5f:70:71:85:3d:fa:2b: 24:f1:a8:da:bd:5a:c5:42:31:4f:3d:fc:66:58:f5:d8:7c:dc: 4b:c0:49:7f:97:79:2e:47:0e:a4:3b:86:c3:2b:cc:50:cd:06: c3:8b:76:0b:be:d5:93:d2:dc:96:af:f3:27:aa:e3:96:da:b3: 2f:f3:32:31:8f:96:7d:af:aa:c9:c3:9a:16:82:5e:60:35:0c: 64:d1:91:04:af:f8:d8:6c:e8:4a:4b:aa:46:5f:b4:6e:ff:ad: 73:de:f8:91:51:ba:b6:39:20:fb:e5:ae:66:80:c3:96:0d:c8: 1e:1a:e6:b5 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUIuEA3Wam0cBuJP2xP+vsv1G+xMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0Qzcy RjFBMTJCODAeFw0yNjA2MjQwODE2MDNaFw0yNzA2MjMwODIxMDNaMDMxMTAvBgNV BAMTKEU2REZBRTkwNUM3NjQ2NURGRjZEN0U1MjVEMjBGRDczODUwOTQ3REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIPk9ZJ14xRnCxRXzC8Q+VZks0 qTHTgL7Z1hbE9mo3gf7tesII0N1gNcML2SdExeZluGkuWq1S2IbNiPYl0fphPEdS wYKJZQhh26Vv8GsjlnYQrvVBBdNvPs5nsBf07rbVUF3u/qgKgDZhviHVrJyAk6qp 0rynT2XMtAr42O1FjDCRu5hSXDCQIl8uKF130HkdxqYTCuVOv1TdsKoPYcFrMi4d kZna6E1XZf7A1r6XAQNGntdo6J19GfqU9Rb6HBz4Y/xegkcLURcU3OCACGs6gQhI Fr/nzupLwD1QbMov7j1t0+luBMyB4vpQcJTfvSKvUFjUhXuIu/jomYi2fo/5AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU5t+ukFx2Rl3/bX5SXSD9c4UJR9wwHwYDVR0j BBgwFoAUPQHNaSjd6NJqyWJl8fkExy8aErgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQyMDI4OS8wLzNEMDFDRDY5MjhEREU4RDI2QUM5NjI2NUYxRjkw NEM3MkYxQTEyQjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0QzcyRjFBMTJCOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0MjAyODkvMC8zNDM1MmUzMjM1 MzAyZTMxMzgzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM3MzczMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAC36uTANBgkqhkiG9w0BAQsFAAOCAQEApUP+IEkahN17Dd6y7/ak r/oTG1ECJ4KGdFzw96BCP/Fs20VKUzrgi14kez7Ey8ebTIkPTc5dzBhlH8xtNmcJ XC3069eiaX4L8DtkzqIkN7XKpA+rwd/+ZFpBtBd5Q6Jm/DikXoisI7D8IAj7XMeh GGNMszbQexCPF2va92LqBIHDRw+7oMKNRIFfcHGFPforJPGo2r1axUIxTz38Zlj1 2HzcS8BJf5d5LkcOpDuGwyvMUM0Gw4t2C77Vk9Lclq/zJ6rjltqzL/MyMY+Wfa+q ycOaFoJeYDUMZNGRBK/42GzoSkuqRl+0bv+tc974kVG6tjkg++WuZoDDlg3IHhrm tQ== -----END CERTIFICATE-----Generated at Tue Jul 7 23:44:18 2026 by rpki-client