$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3230342e302f32322d3234203d3e203435303632.roa File: 34352e3235332e3230342e302f32322d3234203d3e203435303632.roa (raw, json) Hash identifier: ymcIWrw+wVjDCa25+Lm/+nk9LJssoMvLF+MKR5OyRvA= Subject key identifier: 95:A1:CD:9E:CC:3A:15:B0:E2:3B:0F:F1:2F:EA:EE:98:1A:20:E2:05 Certificate issuer: /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6 Certificate serial: 072C6EF428F1F810FE38B211081DB77BD646EDC3 Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3230342e302f32322d3234203d3e203435303632.roa Signing time: Fri 10 Apr 2026 05:52:57 +0000 ROA not before: Fri 10 Apr 2026 05:47:57 +0000 ROA not after: Fri 09 Apr 2027 05:52:57 +0000 asID: 45062 IP address blocks: 45.253.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:2c:6e:f4:28:f1:f8:10:fe:38:b2:11:08:1d:b7:7b:d6:46:ed:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6 Validity Not Before: Apr 10 05:47:57 2026 GMT Not After : Apr 9 05:52:57 2027 GMT Subject: CN=95A1CD9ECC3A15B0E23B0FF12FEAEE981A20E205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e9:70:7c:41:19:8f:b7:d3:26:e4:e0:02:67: 39:90:47:69:60:83:8f:30:da:21:69:60:64:cb:2a: 7a:a9:f1:9d:f1:8c:43:45:05:7c:db:e4:4b:78:56: 58:3e:3a:12:58:2e:23:33:6c:d6:d8:10:b0:a5:21: bc:50:cf:52:fb:88:44:c0:42:42:01:30:52:79:6f: e5:93:83:21:01:c7:56:03:5b:73:37:79:80:af:bf: aa:3b:ef:d5:57:83:90:23:9a:a2:2b:63:73:d2:25: ff:16:d4:db:24:7b:1c:14:a1:80:77:1c:f3:f2:54: 37:19:60:47:69:c7:02:c8:91:64:a3:b7:7d:c8:20: 14:0e:78:aa:0f:4a:d3:41:2c:a7:f4:dd:0e:e3:d7: 3d:92:a0:a1:9c:7d:a7:61:c3:62:83:97:0e:1b:7a: c0:bc:88:91:34:08:3a:97:92:d2:b6:c6:84:c0:40: 1d:f8:0b:c7:fa:4a:ba:73:12:e7:5d:08:6a:d8:62: 45:9a:b8:a2:ca:19:13:f6:d4:4f:18:de:9c:cc:ad: af:ab:67:ee:91:5e:af:9d:b9:38:aa:b7:07:9a:08: 7f:9e:96:76:6c:31:96:be:b9:93:e2:f5:36:d0:b8: d8:3f:5f:a5:43:96:d7:d8:20:db:92:5f:df:71:bc: 45:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A1:CD:9E:CC:3A:15:B0:E2:3B:0F:F1:2F:EA:EE:98:1A:20:E2:05 X509v3 Authority Key Identifier: keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3230342e302f32322d3234203d3e203435303632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.253.204.0/22 Signature Algorithm: sha256WithRSAEncryption 95:3b:02:4d:95:31:4f:31:89:64:77:58:13:b7:e3:bf:30:d3: 6e:8e:65:97:da:f0:c6:92:07:86:b0:5e:25:2c:c7:3f:92:d8: f5:0a:7c:10:23:f4:59:a9:90:ec:31:07:55:57:25:d0:dc:fc: 25:de:cb:38:d9:24:07:19:58:4f:46:2f:f3:fc:68:37:0e:06: 1b:4a:51:7c:60:e3:f1:83:6a:9e:67:d8:1c:26:e9:ae:b4:4c: aa:eb:81:e5:1e:c1:1b:a6:d0:0f:a9:6e:e0:36:e1:b8:20:52: bf:21:7c:20:24:ae:4b:ec:21:06:b2:ca:78:71:9d:c5:97:1a: e8:2c:91:b3:29:b7:2e:2a:61:39:d6:58:9b:d7:2b:6e:64:99: ba:b8:92:a6:e9:51:bc:0c:9c:3e:2d:68:0d:dd:69:5a:0f:72: 2d:ab:d1:9f:3c:0c:28:2d:91:a7:03:3a:46:a1:bc:7f:d0:b8: 5c:51:ba:8c:59:5a:ea:72:cb:72:e5:b3:c9:53:0e:8c:34:21: 6c:f1:d0:d1:08:1f:61:77:be:12:31:13:d9:bc:e8:07:93:0e: a7:c1:72:78:65:1b:38:da:ff:1a:92:24:ae:a4:cf:fb:33:24: 2e:05:b4:29:ba:94:22:2d:4a:76:a8:2f:50:ea:ab:0e:d9:f4: d4:60:de:1c -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUByxu9Cjx+BD+OLIRCB23e9ZG7cMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0 MkNFMDBFNjAeFw0yNjA0MTAwNTQ3NTdaFw0yNzA0MDkwNTUyNTdaMDMxMTAvBgNV BAMTKDk1QTFDRDlFQ0MzQTE1QjBFMjNCMEZGMTJGRUFFRTk4MUEyMEUyMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6XB8QRmPt9Mm5OACZzmQR2lg g48w2iFpYGTLKnqp8Z3xjENFBXzb5Et4Vlg+OhJYLiMzbNbYELClIbxQz1L7iETA QkIBMFJ5b+WTgyEBx1YDW3M3eYCvv6o779VXg5AjmqIrY3PSJf8W1NskexwUoYB3 HPPyVDcZYEdpxwLIkWSjt33IIBQOeKoPStNBLKf03Q7j1z2SoKGcfadhw2KDlw4b esC8iJE0CDqXktK2xoTAQB34C8f6SrpzEuddCGrYYkWauKLKGRP21E8Y3pzMra+r Z+6RXq+duTiqtweaCH+elnZsMZa+uZPi9TbQuNg/X6VDltfYINuSX99xvEWLAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUlaHNnsw6FbDiOw/xL+rumBog4gUwHwYDVR0j BBgwFoAUN5Rn2fnS2/7+uAlXVQBO3ULOAOYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxOTUyNzkxMDIyNzk3MS8wLzM3OTQ2N0Q5RjlEMkRCRkVGRUI4MDk1NzU1MDA0 RURENDJDRTAwRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0MkNFMDBFNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NDgxOTUyNzkxMDIyNzk3MS8wLzM0MzUyZTMyMzUz MzJlMzIzMDM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzNTMwMzYzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAi39zDANBgkqhkiG9w0BAQsFAAOCAQEAlTsCTZUxTzGJZHdYE7fjvzDT bo5ll9rwxpIHhrBeJSzHP5LY9Qp8ECP0WamQ7DEHVVcl0Nz8Jd7LONkkBxlYT0Yv 8/xoNw4GG0pRfGDj8YNqnmfYHCbprrRMquuB5R7BG6bQD6lu4DbhuCBSvyF8ICSu S+whBrLKeHGdxZca6CyRsym3LiphOdZYm9crbmSZuriSpulRvAycPi1oDd1pWg9y LavRnzwMKC2RpwM6RqG8f9C4XFG6jFla6nLLcuWzyVMOjDQhbPHQ0QgfYXe+EjET 2bzoB5MOp8FyeGUbONr/GpIkrqTP+zMkLgW0KbqUIi1KdqgvUOqrDtn01GDeHA== -----END CERTIFICATE-----Generated at Mon Apr 13 13:53:26 2026 by rpki-client