$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3235302e3138372e302f32342d3234203d3e20313436373732.roa File: 34352e3235302e3138372e302f32342d3234203d3e20313436373732.roa (raw, json) Hash identifier: tkBx4tWgliy7ZjUqEJENfu0FL53NI8fOevKc/nnlA/4= Subject key identifier: 40:74:43:04:9E:3E:30:32:E2:B2:F8:A6:31:07:17:13:8F:F3:E9:4A Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Certificate serial: 0515CA77EA6D9FA28FF8C35A0EBD714BD9AE43BE Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3235302e3138372e302f32342d3234203d3e20313436373732.roa Signing time: Wed 24 Jun 2026 08:21:03 +0000 ROA not before: Wed 24 Jun 2026 08:16:03 +0000 ROA not after: Wed 23 Jun 2027 08:21:03 +0000 asID: 146772 IP address blocks: 45.250.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Jul 2026 07:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:15:ca:77:ea:6d:9f:a2:8f:f8:c3:5a:0e:bd:71:4b:d9:ae:43:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Validity Not Before: Jun 24 08:16:03 2026 GMT Not After : Jun 23 08:21:03 2027 GMT Subject: CN=407443049E3E3032E2B2F8A6310717138FF3E94A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ab:de:3a:5a:dc:1c:f4:3f:d0:79:e7:e0:b3: 06:a3:a7:34:33:08:33:59:44:6a:76:fc:71:e2:9b: a9:57:02:e4:80:dc:5c:de:1d:d2:7b:fc:e2:d2:29: 50:b2:c4:2c:fb:c5:31:d4:5b:a0:73:08:09:ee:6e: 07:7e:d6:b3:89:03:c6:6e:79:c5:ca:a4:39:94:7b: 7f:ad:c5:9a:be:7e:79:cb:bf:db:ff:a2:af:b2:35: f0:12:08:9c:ce:e5:a6:bc:e6:e7:ab:0a:5a:ed:2a: 06:34:6f:ad:9d:dd:a0:7c:38:cf:bf:e5:db:53:b0: 4a:67:4d:ad:44:b8:a0:d7:d0:d0:04:68:b2:f9:55: 00:dc:53:f6:74:e3:d0:0f:e8:7b:a8:75:cb:45:e0: 0e:3c:2f:7b:6b:98:f4:d9:8a:2d:05:48:34:8d:df: eb:9d:62:b5:ca:43:93:54:a0:be:0f:27:b4:69:0b: e4:53:cb:f7:ab:73:81:02:55:3f:ff:14:43:f7:6a: f4:98:f5:58:e6:7b:0b:ac:e2:b8:f3:c1:c8:b1:1c: 7f:79:96:41:6c:c8:d5:8a:82:45:e6:84:4d:51:d5: 0f:88:71:e4:24:2b:d4:e8:0f:5a:ef:2d:2c:c2:55: 9e:3b:4a:d1:60:38:c2:57:fc:9f:75:58:49:59:07: 8d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:74:43:04:9E:3E:30:32:E2:B2:F8:A6:31:07:17:13:8F:F3:E9:4A X509v3 Authority Key Identifier: keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3235302e3138372e302f32342d3234203d3e20313436373732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.250.187.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:3b:74:f5:13:a3:56:be:ae:13:62:7d:0d:5f:81:66:f7:8a: 40:1a:3b:7e:07:fc:23:dd:bb:2d:ef:3a:4f:83:9e:00:3a:c4: a8:ec:ca:93:a3:77:39:a4:41:10:c6:4c:67:f4:72:e2:9a:ff: 99:79:e2:22:05:8c:31:91:97:9e:4c:91:94:49:cc:27:c4:ad: e2:19:ef:16:2b:ce:61:45:8d:14:8a:b4:28:9a:40:0a:00:a9: c1:1f:05:8f:5c:d3:6f:88:13:56:d1:5e:6f:48:2d:70:65:1a: 73:22:31:d8:d7:ef:a0:0f:b8:ce:cd:10:ec:a9:92:23:21:ab: 2f:63:1a:56:f1:90:89:3b:9f:7f:7e:34:a6:5a:66:35:f8:81: 8c:e4:95:f8:b7:ff:c8:1e:c5:00:57:b0:83:f0:81:d6:60:66: f4:69:66:da:58:91:4c:42:f3:65:db:69:f0:e2:d7:49:ee:d5: 18:b1:38:27:c5:ea:e1:8e:5a:44:8b:93:e9:1a:96:26:ec:67: 40:15:44:2f:8c:a2:f5:54:39:65:98:ee:53:45:77:b2:cf:88: 91:5d:04:ec:e5:a3:cb:3a:d6:a5:64:bd:9c:61:98:da:2a:93: 59:18:08:08:08:34:0e:2e:bc:69:96:1b:f9:ad:68:a2:74:3c: 2c:59:5b:73 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUBRXKd+ptn6KP+MNaDr1xS9muQ74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0Qzcy RjFBMTJCODAeFw0yNjA2MjQwODE2MDNaFw0yNzA2MjMwODIxMDNaMDMxMTAvBgNV BAMTKDQwNzQ0MzA0OUUzRTMwMzJFMkIyRjhBNjMxMDcxNzEzOEZGM0U5NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRq946Wtwc9D/QeefgswajpzQz CDNZRGp2/HHim6lXAuSA3FzeHdJ7/OLSKVCyxCz7xTHUW6BzCAnubgd+1rOJA8Zu ecXKpDmUe3+txZq+fnnLv9v/oq+yNfASCJzO5aa85uerClrtKgY0b62d3aB8OM+/ 5dtTsEpnTa1EuKDX0NAEaLL5VQDcU/Z049AP6HuodctF4A48L3trmPTZii0FSDSN 3+udYrXKQ5NUoL4PJ7RpC+RTy/erc4ECVT//FEP3avSY9Vjmewus4rjzwcixHH95 lkFsyNWKgkXmhE1R1Q+IceQkK9ToD1rvLSzCVZ47StFgOMJX/J91WElZB42XAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUQHRDBJ4+MDLisvimMQcXE4/z6UowHwYDVR0j BBgwFoAUPQHNaSjd6NJqyWJl8fkExy8aErgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQyMDI4OS8wLzNEMDFDRDY5MjhEREU4RDI2QUM5NjI2NUYxRjkw NEM3MkYxQTEyQjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0QzcyRjFBMTJCOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0MjAyODkvMC8zNDM1MmUzMjM1 MzAyZTMxMzgzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM3MzczMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAC36uzANBgkqhkiG9w0BAQsFAAOCAQEAjjt09ROjVr6uE2J9DV+B ZveKQBo7fgf8I927Le86T4OeADrEqOzKk6N3OaRBEMZMZ/Ry4pr/mXniIgWMMZGX nkyRlEnMJ8St4hnvFivOYUWNFIq0KJpACgCpwR8Fj1zTb4gTVtFeb0gtcGUacyIx 2NfvoA+4zs0Q7KmSIyGrL2MaVvGQiTuff340plpmNfiBjOSV+Lf/yB7FAFewg/CB 1mBm9Glm2liRTELzZdtp8OLXSe7VGLE4J8Xq4Y5aRIuT6RqWJuxnQBVEL4yi9VQ5 ZZjuU0V3ss+IkV0E7OWjyzrWpWS9nGGY2iqTWRgICAg0Di68aZYb+a1oonQ8LFlb cw== -----END CERTIFICATE-----Generated at Tue Jul 7 23:44:19 2026 by rpki-client