$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e38382e302f32322d3232203d3e203536303438.roa File: 3134302e3231302e38382e302f32322d3232203d3e203536303438.roa (raw, json) Hash identifier: u8SeXRz0X/7DQzHGxz2Skd1jmKkX2zw3XsOp0eIJ5AI= Subject key identifier: 34:DC:51:A3:10:85:94:C2:C7:35:C6:85:C7:02:E5:24:03:76:21:D8 Certificate issuer: /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA Certificate serial: 43BF3877E7F882CDE3D4F8BF3B84395E67BC8FF5 Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e38382e302f32322d3232203d3e203536303438.roa Signing time: Wed 10 Jun 2026 17:54:20 +0000 ROA not before: Wed 10 Jun 2026 17:49:20 +0000 ROA not after: Wed 09 Jun 2027 17:54:20 +0000 asID: 56048 IP address blocks: 140.210.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 14:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:bf:38:77:e7:f8:82:cd:e3:d4:f8:bf:3b:84:39:5e:67:bc:8f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA Validity Not Before: Jun 10 17:49:20 2026 GMT Not After : Jun 9 17:54:20 2027 GMT Subject: CN=34DC51A3108594C2C735C685C702E524037621D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:18:13:cf:b8:08:33:b0:2e:b3:1e:84:73:0b: be:6f:02:2e:32:d1:62:49:5e:f3:96:13:0f:db:6a: 51:48:a6:89:19:5d:e0:f6:b2:d5:a4:98:e7:48:97: 56:f0:69:1b:23:a4:27:6c:0c:3c:f6:fa:4d:e4:80: 47:27:38:8e:0b:3c:7f:16:b8:5e:c8:8f:49:25:2d: 8d:08:e8:1d:75:06:26:98:c1:cf:5a:fd:18:1a:7f: fe:0a:5c:d2:cd:3b:ff:01:c4:ad:c2:cd:eb:94:e5: 90:5b:7e:6d:e8:92:6b:50:f8:bf:db:51:b8:ae:07: 7b:72:ce:03:9c:75:f1:57:a1:4c:2e:a3:18:32:0e: a5:4e:5d:92:01:96:c1:60:99:cc:26:bf:0f:41:50: 96:61:42:10:94:f4:0b:f1:de:c7:8f:72:4d:56:c8: 1a:84:9e:93:46:89:dc:4a:67:4c:82:17:7d:37:d7: 6c:64:3b:8e:7b:11:35:fc:4e:1d:56:54:6f:df:00: 93:6a:0f:a5:a7:16:4b:95:66:db:14:f2:52:cc:ab: 5e:de:ce:b1:12:39:eb:73:0b:7e:fa:a8:8a:80:d9: 03:d0:b1:d7:1d:70:67:70:5f:29:19:bc:80:3f:47: 73:a1:05:13:49:35:21:35:d2:76:b1:eb:38:4c:ec: 01:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DC:51:A3:10:85:94:C2:C7:35:C6:85:C7:02:E5:24:03:76:21:D8 X509v3 Authority Key Identifier: keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3134302e3231302e38382e302f32322d3232203d3e203536303438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.210.88.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:2b:8e:05:00:7a:74:1d:99:64:d5:85:cf:c5:71:ea:67:e8: 2a:45:28:14:2c:e7:1f:4a:05:e9:b4:0e:80:4e:13:8b:26:51: 1f:08:48:55:46:28:d4:05:6c:70:3c:e8:dd:73:ad:c8:9c:1b: 3b:30:77:fa:b3:0c:8d:0d:bf:15:93:a4:d0:0d:62:f5:a7:ca: 85:f6:f3:fc:0a:c8:22:c3:6b:d2:b5:2c:66:b4:1d:8e:37:af: b0:5a:d7:bd:b7:44:ff:70:b8:1a:33:29:b9:6a:c5:7a:9b:f6: 91:20:7f:c6:82:b7:97:08:15:7b:3d:17:4f:31:93:15:44:78: 99:87:cf:48:ff:35:42:34:e6:0a:f4:64:ff:9b:32:c4:86:81: ad:21:48:64:0a:a4:88:e8:01:8d:4d:36:3c:1b:4c:21:1f:08: ce:3e:3d:5f:c0:49:f4:a8:42:bb:4b:1a:d3:b1:58:1f:a3:0d: c0:e5:41:64:0d:4d:15:95:f4:93:e5:75:17:84:16:83:84:cc: a1:ff:ba:69:91:c9:51:6f:87:c1:5a:a3:ba:85:af:a4:d1:52: 0e:77:2c:71:03:00:a9:c2:d6:7b:2f:7e:01:55:0b:34:6f:fe: 1e:98:4f:6a:eb:25:9d:cd:4f:56:18:7c:f5:52:f8:ad:f7:fb: 69:6a:de:22 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUQ784d+f4gs3j1Pi/O4Q5Xme8j/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZE RUYwMERCQTAeFw0yNjA2MTAxNzQ5MjBaFw0yNzA2MDkxNzU0MjBaMDMxMTAvBgNV BAMTKDM0REM1MUEzMTA4NTk0QzJDNzM1QzY4NUM3MDJFNTI0MDM3NjIxRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlGBPPuAgzsC6zHoRzC75vAi4y 0WJJXvOWEw/balFIpokZXeD2stWkmOdIl1bwaRsjpCdsDDz2+k3kgEcnOI4LPH8W uF7Ij0klLY0I6B11BiaYwc9a/Rgaf/4KXNLNO/8BxK3CzeuU5ZBbfm3okmtQ+L/b UbiuB3tyzgOcdfFXoUwuoxgyDqVOXZIBlsFgmcwmvw9BUJZhQhCU9Avx3sePck1W yBqEnpNGidxKZ0yCF30312xkO457ETX8Th1WVG/fAJNqD6WnFkuVZtsU8lLMq17e zrESOetzC376qIqA2QPQsdcdcGdwXykZvIA/R3OhBRNJNSE10nax6zhM7AGlAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUNNxRoxCFlMLHNcaFxwLlJAN2IdgwHwYDVR0j BBgwFoAUNNWKBis9mW2x6KK7J2QYj97wDbowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODE1NjkzMC8xLzM0RDU4QTA2MkIzRDk5NkRCMUU4QTJCQjI3NjQx ODhGREVGMDBEQkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZERUYwMERCQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4ODk5MzU0ODE1NjkzMC8xLzMxMzQzMDJlMzIz MTMwMmUzODM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzNjMwMzQzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAozSWDANBgkqhkiG9w0BAQsFAAOCAQEAmiuOBQB6dB2ZZNWFz8Vx6mfo KkUoFCznH0oF6bQOgE4TiyZRHwhIVUYo1AVscDzo3XOtyJwbOzB3+rMMjQ2/FZOk 0A1i9afKhfbz/ArIIsNr0rUsZrQdjjevsFrXvbdE/3C4GjMpuWrFepv2kSB/xoK3 lwgVez0XTzGTFUR4mYfPSP81QjTmCvRk/5syxIaBrSFIZAqkiOgBjU02PBtMIR8I zj49X8BJ9KhCu0sa07FYH6MNwOVBZA1NFZX0k+V1F4QWg4TMof+6aZHJUW+HwVqj uoWvpNFSDncscQMAqcLWey9+AVULNG/+HphPauslnc1PVhh89VL4rff7aWreIg== -----END CERTIFICATE-----Generated at Fri Jun 12 06:44:52 2026 by rpki-client