$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3235302e3138362e302f32342d3234203d3e20313436373732.roa File: 34352e3235302e3138362e302f32342d3234203d3e20313436373732.roa (raw, json) Hash identifier: +bdBZ80rAX6pNZJiJAuhtUYUM70FL/Zy8XUK4RRkC4Q= Subject key identifier: 16:45:AE:8A:C0:D8:99:C4:9F:97:1F:02:C3:5A:D7:F4:F3:FB:FA:DD Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Certificate serial: 5E4F96C96EA778DBCEF17A13D7813E586230F2E4 Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3235302e3138362e302f32342d3234203d3e20313436373732.roa Signing time: Wed 24 Jun 2026 08:21:03 +0000 ROA not before: Wed 24 Jun 2026 08:16:03 +0000 ROA not after: Wed 23 Jun 2027 08:21:03 +0000 asID: 146772 IP address blocks: 45.250.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 Jul 2026 03:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:4f:96:c9:6e:a7:78:db:ce:f1:7a:13:d7:81:3e:58:62:30:f2:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Validity Not Before: Jun 24 08:16:03 2026 GMT Not After : Jun 23 08:21:03 2027 GMT Subject: CN=1645AE8AC0D899C49F971F02C35AD7F4F3FBFADD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ac:f2:0c:8f:65:01:88:90:a5:9c:58:56:fc: cd:a9:9c:a3:57:3e:8c:ea:9e:f9:af:42:27:76:b5: 8c:16:58:97:80:ba:f4:4e:8d:5f:10:2f:9d:36:38: 67:77:fc:35:e2:53:69:f4:1c:2a:b7:0b:25:8c:b6: 22:5f:58:c3:94:e7:ba:95:62:2a:1e:62:4e:4d:30: fb:55:0e:93:20:7a:e0:7e:08:d7:47:a4:af:2f:42: dc:b9:23:42:d8:4b:95:a6:da:3a:39:0e:92:4b:27: b7:d5:55:47:8a:dc:22:ac:e7:90:72:e2:f1:b3:9c: ee:b8:f3:9f:f2:f9:ac:da:c5:54:2c:f3:1b:a1:22: 55:e0:71:76:b3:47:aa:8f:c5:6d:d8:cf:fb:ed:42: ea:66:2d:dd:05:d7:43:c0:cb:39:e6:91:82:54:97: 0c:12:9a:87:5a:20:b0:07:37:49:28:76:54:06:3a: 9f:d1:5d:b4:60:bf:12:79:ce:a2:81:dd:14:ed:3f: 34:84:24:0a:79:14:df:bb:dc:76:92:23:e6:d8:07: 64:b6:18:eb:05:ff:04:0a:f3:4a:18:94:b2:7b:7b: 9c:c0:61:fa:c1:cf:76:3c:a0:db:da:fc:03:6d:4c: 65:85:e1:15:c7:b4:60:f4:cc:5b:2b:19:dd:51:8c: 01:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:45:AE:8A:C0:D8:99:C4:9F:97:1F:02:C3:5A:D7:F4:F3:FB:FA:DD X509v3 Authority Key Identifier: keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3235302e3138362e302f32342d3234203d3e20313436373732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.250.186.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:5c:12:ec:e9:e0:a7:ca:4b:21:72:b0:a4:26:45:13:53:c0: 34:78:8c:92:73:0b:8d:5c:f9:98:65:a2:a7:bd:16:9c:d8:9f: d5:f0:7b:48:35:c9:0e:f4:14:7b:c0:d6:f3:15:ab:70:4c:e0: 66:bb:84:27:82:19:0e:16:9c:f0:0a:c5:bc:01:7b:49:29:ab: b8:6a:fa:99:28:4d:84:a2:04:58:b9:20:27:a6:3f:aa:0a:e5: 32:ff:f0:97:de:e8:c3:06:0c:c0:a8:92:b8:45:07:2a:64:b2: 21:42:1f:d6:46:61:fa:5b:7d:5f:b8:f3:11:c0:ef:1d:5c:03: 6f:ce:37:dd:45:a2:07:cc:ad:2c:a1:35:9b:b6:ca:14:41:5d: a8:8a:09:ef:4f:e6:51:88:66:cd:cb:80:a1:a3:0c:d7:f0:ff: c1:2e:3a:20:13:aa:3d:fb:f2:25:76:f3:5d:e3:59:65:09:7a: 87:6a:76:01:8a:12:3f:15:b0:b9:a4:89:3e:f7:77:e5:e9:49: 2e:61:bc:0a:84:f2:26:de:b6:3b:7a:41:9f:b9:80:da:64:d9: 7b:25:d4:b1:ff:fe:37:a9:6e:05:47:3b:e6:b5:f3:5c:e1:5d: 92:72:f6:f7:12:96:70:20:77:91:76:54:21:0e:bc:60:52:69: d9:c6:90:54 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUXk+WyW6neNvO8XoT14E+WGIw8uQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0Qzcy RjFBMTJCODAeFw0yNjA2MjQwODE2MDNaFw0yNzA2MjMwODIxMDNaMDMxMTAvBgNV BAMTKDE2NDVBRThBQzBEODk5QzQ5Rjk3MUYwMkMzNUFEN0Y0RjNGQkZBREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOrPIMj2UBiJClnFhW/M2pnKNX PozqnvmvQid2tYwWWJeAuvROjV8QL502OGd3/DXiU2n0HCq3CyWMtiJfWMOU57qV YioeYk5NMPtVDpMgeuB+CNdHpK8vQty5I0LYS5Wm2jo5DpJLJ7fVVUeK3CKs55By 4vGznO6485/y+azaxVQs8xuhIlXgcXazR6qPxW3Yz/vtQupmLd0F10PAyznmkYJU lwwSmodaILAHN0kodlQGOp/RXbRgvxJ5zqKB3RTtPzSEJAp5FN+73HaSI+bYB2S2 GOsF/wQK80oYlLJ7e5zAYfrBz3Y8oNva/ANtTGWF4RXHtGD0zFsrGd1RjAFtAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUFkWuisDYmcSflx8Cw1rX9PP7+t0wHwYDVR0j BBgwFoAUPQHNaSjd6NJqyWJl8fkExy8aErgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQyMDI4OS8wLzNEMDFDRDY5MjhEREU4RDI2QUM5NjI2NUYxRjkw NEM3MkYxQTEyQjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0QzcyRjFBMTJCOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0MjAyODkvMC8zNDM1MmUzMjM1 MzAyZTMxMzgzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM3MzczMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAC36ujANBgkqhkiG9w0BAQsFAAOCAQEAfFwS7Ongp8pLIXKwpCZF E1PANHiMknMLjVz5mGWip70WnNif1fB7SDXJDvQUe8DW8xWrcEzgZruEJ4IZDhac 8ArFvAF7SSmruGr6mShNhKIEWLkgJ6Y/qgrlMv/wl97owwYMwKiSuEUHKmSyIUIf 1kZh+lt9X7jzEcDvHVwDb8433UWiB8ytLKE1m7bKFEFdqIoJ70/mUYhmzcuAoaMM 1/D/wS46IBOqPfvyJXbzXeNZZQl6h2p2AYoSPxWwuaSJPvd35elJLmG8CoTyJt62 O3pBn7mA2mTZeyXUsf/+N6luBUc75rXzXOFdknL29xKWcCB3kXZUIQ68YFJp2caQ VA== -----END CERTIFICATE-----Generated at Wed Jul 8 19:12:07 2026 by rpki-client