$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3133322e302f32322d3234203d3e203435303632.roa File: 34352e3235332e3133322e302f32322d3234203d3e203435303632.roa (raw, json) Hash identifier: tzRI4+ggej3QkwDrwNhbLDQFDruptiPCxjvNhuyj5WU= Subject key identifier: 21:0D:FC:B5:D9:5F:2C:A1:F7:4E:63:48:EF:7C:53:C6:4B:8B:29:00 Certificate issuer: /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6 Certificate serial: 229B11580A65A98BEEF11123036C5A1F4FB41A09 Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3133322e302f32322d3234203d3e203435303632.roa Signing time: Fri 10 Apr 2026 05:59:09 +0000 ROA not before: Fri 10 Apr 2026 05:54:09 +0000 ROA not after: Fri 09 Apr 2027 05:59:09 +0000 asID: 45062 IP address blocks: 45.253.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:9b:11:58:0a:65:a9:8b:ee:f1:11:23:03:6c:5a:1f:4f:b4:1a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6 Validity Not Before: Apr 10 05:54:09 2026 GMT Not After : Apr 9 05:59:09 2027 GMT Subject: CN=210DFCB5D95F2CA1F74E6348EF7C53C64B8B2900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:83:e7:8e:4c:26:0c:30:3c:1f:db:6c:bb:79: be:c0:76:7e:a8:49:19:85:00:c7:73:57:43:79:52: b8:44:30:24:9e:37:4c:8b:f9:af:c6:cf:7e:6c:d1: 58:37:64:cd:2c:cb:fd:91:57:55:4e:a0:1c:c1:af: 42:3d:64:a0:2a:82:3b:fb:f1:d7:d5:ae:cb:bd:2f: c1:07:02:e6:bc:0a:bf:23:44:12:0a:a4:bd:18:2d: cd:cf:9e:22:8e:2d:fd:10:eb:4e:53:5d:90:26:cc: 03:42:80:cb:7b:0c:6c:9e:d8:7e:e6:89:84:e5:a0: 38:72:33:20:a7:f8:ed:57:86:3f:5f:34:cb:bb:e5: 34:bd:3a:90:d8:bb:a7:fc:d4:96:45:4d:d6:ca:0c: 43:ad:33:a8:12:0d:5f:e7:57:80:24:8b:01:57:11: b0:d3:db:a0:c2:3b:da:e6:61:b9:e8:6c:5d:8e:e1: 49:22:7d:ec:f6:8c:89:ae:28:12:fb:81:ae:a6:5c: cc:b2:b9:96:8e:cf:11:f0:47:dc:64:ca:34:35:f5: 2c:59:f7:90:15:0a:7a:2d:7e:5a:67:26:99:94:62: c4:0b:9e:14:0e:d3:38:50:72:79:65:e1:58:23:00: 5c:2a:ea:ed:e2:fe:80:ae:b5:f3:5b:61:c8:45:14: 7e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0D:FC:B5:D9:5F:2C:A1:F7:4E:63:48:EF:7C:53:C6:4B:8B:29:00 X509v3 Authority Key Identifier: keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3133322e302f32322d3234203d3e203435303632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.253.132.0/22 Signature Algorithm: sha256WithRSAEncryption 84:cb:4d:02:c4:c0:e4:48:47:5d:65:16:f6:aa:cb:13:5d:f9: ac:73:ff:34:50:67:c3:83:f0:2c:d2:64:5a:92:91:6f:6e:30: 7b:31:b4:01:cf:0a:42:c5:fb:aa:80:a2:53:1d:19:12:79:e0: 5f:52:7b:1b:8d:13:09:b7:51:77:ed:0d:a5:6a:7e:c6:d0:87: 44:e0:b5:0a:d5:c7:c6:2d:6b:c6:75:fe:a6:12:66:87:d0:ef: e9:23:45:2f:5f:d4:94:1c:0e:61:ae:55:7b:46:51:39:c4:95: f9:17:4b:2b:19:c0:00:18:f7:4c:8e:9a:23:21:f3:af:57:e8: 83:84:77:f1:85:f7:a4:ad:d5:15:4c:84:be:c1:b8:67:d0:b6: 0e:1e:06:0c:6b:70:3a:a1:e2:b8:7f:3d:58:0f:1b:3e:6e:a2: 6a:87:7d:48:52:de:14:09:c3:66:52:bb:9c:57:e9:0a:5d:56: 54:83:d3:aa:1a:fb:b3:55:93:2d:5d:4e:ad:60:e3:25:1b:a1: 2a:c6:f7:42:39:ff:8d:34:6b:56:93:5b:18:ee:a8:3d:d1:e7: 43:81:c2:1c:32:f4:c5:01:93:84:c8:18:98:77:03:94:6e:7e: 9f:f3:1c:a5:ad:e4:b4:dc:b5:8f:77:4b:4c:ae:15:32:39:43: 1e:d2:88:9d -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUIpsRWAplqYvu8REjA2xaH0+0GgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0 MkNFMDBFNjAeFw0yNjA0MTAwNTU0MDlaFw0yNzA0MDkwNTU5MDlaMDMxMTAvBgNV BAMTKDIxMERGQ0I1RDk1RjJDQTFGNzRFNjM0OEVGN0M1M0M2NEI4QjI5MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCug+eOTCYMMDwf22y7eb7Adn6o SRmFAMdzV0N5UrhEMCSeN0yL+a/Gz35s0Vg3ZM0sy/2RV1VOoBzBr0I9ZKAqgjv7 8dfVrsu9L8EHAua8Cr8jRBIKpL0YLc3PniKOLf0Q605TXZAmzANCgMt7DGye2H7m iYTloDhyMyCn+O1Xhj9fNMu75TS9OpDYu6f81JZFTdbKDEOtM6gSDV/nV4AkiwFX EbDT26DCO9rmYbnobF2O4Ukifez2jImuKBL7ga6mXMyyuZaOzxHwR9xkyjQ19SxZ 95AVCnotflpnJpmUYsQLnhQO0zhQcnll4VgjAFwq6u3i/oCutfNbYchFFH6TAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUIQ38tdlfLKH3TmNI73xTxkuLKQAwHwYDVR0j BBgwFoAUN5Rn2fnS2/7+uAlXVQBO3ULOAOYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxOTUyNzkxMDIyNzk3MS8wLzM3OTQ2N0Q5RjlEMkRCRkVGRUI4MDk1NzU1MDA0 RURENDJDRTAwRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0MkNFMDBFNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NDgxOTUyNzkxMDIyNzk3MS8wLzM0MzUyZTMyMzUz MzJlMzEzMzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzNTMwMzYzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAi39hDANBgkqhkiG9w0BAQsFAAOCAQEAhMtNAsTA5EhHXWUW9qrLE135 rHP/NFBnw4PwLNJkWpKRb24wezG0Ac8KQsX7qoCiUx0ZEnngX1J7G40TCbdRd+0N pWp+xtCHROC1CtXHxi1rxnX+phJmh9Dv6SNFL1/UlBwOYa5Ve0ZROcSV+RdLKxnA ABj3TI6aIyHzr1fog4R38YX3pK3VFUyEvsG4Z9C2Dh4GDGtwOqHiuH89WA8bPm6i aod9SFLeFAnDZlK7nFfpCl1WVIPTqhr7s1WTLV1OrWDjJRuhKsb3Qjn/jTRrVpNb GO6oPdHnQ4HCHDL0xQGThMgYmHcDlG5+n/Mcpa3ktNy1j3dLTK4VMjlDHtKInQ== -----END CERTIFICATE-----Generated at Mon Apr 13 13:53:34 2026 by rpki-client