$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3131322e302f32322d3234203d3e203435303632.roa File: 34352e3235332e3131322e302f32322d3234203d3e203435303632.roa (raw, json) Hash identifier: VG3f8DAzFjZblXxa7j1tQ1efw0yk4/kSXKMArc56G1A= Subject key identifier: 38:25:77:BE:79:48:05:94:0A:8B:1B:D5:0E:94:CA:62:17:0A:A6:3A Certificate issuer: /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6 Certificate serial: 151136C5F5E2CBA58E43D5D6F167C790570230EB Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3131322e302f32322d3234203d3e203435303632.roa Signing time: Fri 10 Apr 2026 05:59:08 +0000 ROA not before: Fri 10 Apr 2026 05:54:08 +0000 ROA not after: Fri 09 Apr 2027 05:59:08 +0000 asID: 45062 IP address blocks: 45.253.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:11:36:c5:f5:e2:cb:a5:8e:43:d5:d6:f1:67:c7:90:57:02:30:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6 Validity Not Before: Apr 10 05:54:08 2026 GMT Not After : Apr 9 05:59:08 2027 GMT Subject: CN=382577BE794805940A8B1BD50E94CA62170AA63A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:63:c5:93:92:5b:26:b6:fa:ec:bd:55:d5:36: d2:e7:22:a5:84:60:bc:9b:fa:4a:4b:99:69:46:56: 13:7f:19:6c:5e:b3:48:82:86:e5:89:39:b9:63:f9: 1d:36:c8:2e:de:f6:14:95:0e:d1:96:64:9b:40:5c: fa:87:84:00:a9:23:93:2f:ea:fa:3d:c1:e3:96:f1: aa:35:dc:23:65:fb:e1:fc:e3:81:b8:e3:b2:db:bd: 6f:e4:7d:e6:e2:3c:ab:ed:ab:28:12:9c:49:46:88: 49:a7:b2:e3:b2:9e:d2:b6:d7:e6:8e:de:8a:e7:9a: f6:e5:5c:33:eb:1e:d3:5f:22:3f:82:09:ed:10:2e: 31:a5:a3:54:0e:82:8a:17:12:60:bf:f2:c2:f3:36: 3b:37:97:b3:ca:87:4f:3a:f2:ff:f1:40:6d:7d:bd: aa:5e:f9:2e:30:4b:1a:ee:84:8d:8a:5d:30:38:fb: 02:5f:87:15:70:91:51:68:43:40:95:e3:e8:4b:80: 7f:03:cb:07:4a:35:59:33:38:16:7b:f7:0d:fc:0b: 63:44:e0:b7:43:a0:70:b0:ae:41:fb:05:5c:82:a8: d9:e0:d1:50:d1:5d:ff:25:27:a6:7b:51:93:b1:d5: 92:31:75:88:7e:09:a9:8a:c1:de:ce:58:79:ed:38: 9e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:25:77:BE:79:48:05:94:0A:8B:1B:D5:0E:94:CA:62:17:0A:A6:3A X509v3 Authority Key Identifier: keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3131322e302f32322d3234203d3e203435303632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.253.112.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:8e:1f:d7:70:85:e6:79:04:a5:4d:9d:0a:e4:8a:77:a2:0c: c4:97:ec:70:a0:54:07:2f:e9:2e:02:13:61:d7:1b:c6:c5:59: b0:d6:c5:06:92:af:e6:75:a4:d3:50:6f:4b:87:de:91:0c:88: 8e:64:7a:42:41:fe:73:70:f6:fa:a8:e2:b0:d6:25:50:07:96: c0:fb:97:ec:05:11:6b:8c:31:66:0f:ff:0a:d7:2e:02:66:46: 26:92:40:60:91:37:32:9d:17:1e:20:18:9c:fa:b5:f3:8e:82: c4:2c:c7:30:93:02:00:76:9b:7b:31:70:73:fc:3c:05:4d:54: db:a4:39:ae:1c:a7:4f:c2:0c:93:3b:4b:d3:53:4d:bd:ca:f1: 24:4a:9c:52:06:90:3a:8b:fe:d4:d9:6b:30:fa:71:62:e7:a8: e7:fa:5c:51:02:f4:e7:05:55:9b:c6:1a:e8:d2:d8:ef:2f:a4: 42:00:43:c2:9e:5a:97:57:d1:90:aa:82:53:54:ae:81:b5:48: a6:98:f7:63:4b:d0:f2:bb:27:0b:cb:2a:4f:b1:4c:5a:42:d2: d4:51:52:73:a0:63:80:dc:07:f0:7a:4f:6a:02:a5:3a:1e:07: 57:27:ba:3f:7e:b7:13:b5:6a:6f:1e:02:35:4f:97:66:39:6f: 36:8d:b9:5f -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUFRE2xfXiy6WOQ9XW8WfHkFcCMOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0 MkNFMDBFNjAeFw0yNjA0MTAwNTU0MDhaFw0yNzA0MDkwNTU5MDhaMDMxMTAvBgNV BAMTKDM4MjU3N0JFNzk0ODA1OTQwQThCMUJENTBFOTRDQTYyMTcwQUE2M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOY8WTklsmtvrsvVXVNtLnIqWE YLyb+kpLmWlGVhN/GWxes0iChuWJOblj+R02yC7e9hSVDtGWZJtAXPqHhACpI5Mv 6vo9weOW8ao13CNl++H844G447LbvW/kfebiPKvtqygSnElGiEmnsuOyntK21+aO 3ornmvblXDPrHtNfIj+CCe0QLjGlo1QOgooXEmC/8sLzNjs3l7PKh0868v/xQG19 vape+S4wSxruhI2KXTA4+wJfhxVwkVFoQ0CV4+hLgH8DywdKNVkzOBZ79w38C2NE 4LdDoHCwrkH7BVyCqNng0VDRXf8lJ6Z7UZOx1ZIxdYh+CamKwd7OWHntOJ4PAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUOCV3vnlIBZQKixvVDpTKYhcKpjowHwYDVR0j BBgwFoAUN5Rn2fnS2/7+uAlXVQBO3ULOAOYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxOTUyNzkxMDIyNzk3MS8wLzM3OTQ2N0Q5RjlEMkRCRkVGRUI4MDk1NzU1MDA0 RURENDJDRTAwRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0MkNFMDBFNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NDgxOTUyNzkxMDIyNzk3MS8wLzM0MzUyZTMyMzUz MzJlMzEzMTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzNTMwMzYzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAi39cDANBgkqhkiG9w0BAQsFAAOCAQEAbY4f13CF5nkEpU2dCuSKd6IM xJfscKBUBy/pLgITYdcbxsVZsNbFBpKv5nWk01BvS4fekQyIjmR6QkH+c3D2+qji sNYlUAeWwPuX7AURa4wxZg//CtcuAmZGJpJAYJE3Mp0XHiAYnPq1846CxCzHMJMC AHabezFwc/w8BU1U26Q5rhynT8IMkztL01NNvcrxJEqcUgaQOov+1NlrMPpxYueo 5/pcUQL05wVVm8Ya6NLY7y+kQgBDwp5al1fRkKqCU1SugbVIppj3Y0vQ8rsnC8sq T7FMWkLS1FFSc6BjgNwH8HpPagKlOh4HVye6P363E7Vqbx4CNU+XZjlvNo25Xw== -----END CERTIFICATE-----Generated at Mon Apr 13 13:54:31 2026 by rpki-client