$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3231322e302f32322d3234203d3e203435303632.roa File: 34352e3235332e3231322e302f32322d3234203d3e203435303632.roa (raw, json) Hash identifier: 03j9kvP3PsyE/5TDkmslziRR4ULTo4PXVCplUKFjFyU= Subject key identifier: 03:03:8B:AC:9D:EF:CA:CF:65:6F:D4:4B:75:5B:F4:D3:5D:D8:50:A3 Certificate issuer: /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6 Certificate serial: 14D25B5A62ADE8997E43977C8785DE5EC65E3D76 Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3231322e302f32322d3234203d3e203435303632.roa Signing time: Fri 10 Apr 2026 05:59:09 +0000 ROA not before: Fri 10 Apr 2026 05:54:09 +0000 ROA not after: Fri 09 Apr 2027 05:59:09 +0000 asID: 45062 IP address blocks: 45.253.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:d2:5b:5a:62:ad:e8:99:7e:43:97:7c:87:85:de:5e:c6:5e:3d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6 Validity Not Before: Apr 10 05:54:09 2026 GMT Not After : Apr 9 05:59:09 2027 GMT Subject: CN=03038BAC9DEFCACF656FD44B755BF4D35DD850A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6c:da:6d:9e:34:fc:55:30:dd:90:98:12:37: 76:15:9e:8f:af:6c:de:23:e2:80:14:51:76:8f:2a: a7:56:93:4b:5c:21:92:78:d5:29:92:6c:9e:89:48: 75:b8:2f:b8:02:f7:e9:ad:96:0a:89:2d:f6:1d:ae: 68:fd:1d:8b:01:c3:12:61:9d:4c:0b:5f:a5:68:ab: b3:7c:fb:23:e7:8a:d7:ef:51:6d:a4:24:3b:24:81: 04:0c:e1:4e:bf:58:e0:73:21:ef:cf:a1:a1:02:4f: e7:2b:31:93:e9:10:6e:c0:a6:d4:d9:a2:96:c1:fa: f7:0d:77:f6:e3:ef:83:48:aa:66:48:46:14:70:6f: ca:e2:76:76:74:b4:6a:b6:73:ec:d0:b1:57:e4:ed: da:92:af:09:54:70:c5:7e:3c:4b:33:39:fb:0f:1b: 36:09:10:45:62:6d:3a:c6:b6:37:17:68:3e:cf:6a: 39:8d:08:ba:c5:77:b3:0d:ba:09:26:f8:de:e8:e4: 10:da:52:ee:2c:5f:f9:fa:81:77:05:02:ce:64:c6: 9c:ed:c4:c0:3b:89:1b:4c:b6:c6:45:bc:10:93:23: 42:c9:d1:ff:e8:85:15:a8:df:0e:d2:93:e7:a4:d2: 5b:92:bb:1f:44:46:48:c7:d4:12:0c:0f:d7:53:82: 15:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:03:8B:AC:9D:EF:CA:CF:65:6F:D4:4B:75:5B:F4:D3:5D:D8:50:A3 X509v3 Authority Key Identifier: keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3231322e302f32322d3234203d3e203435303632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.253.212.0/22 Signature Algorithm: sha256WithRSAEncryption 33:60:61:58:51:4e:a5:9f:96:8d:f6:c7:83:c5:ac:d0:da:9a: ca:c6:de:d1:72:be:58:4d:f9:5c:a6:64:ba:3e:30:87:a7:f3: 82:07:9c:ef:61:38:5a:55:0b:08:48:64:5f:c3:0d:ae:e7:90: 0d:f4:bc:3d:c5:fa:60:00:63:e3:fb:c6:8c:dd:6e:24:80:74: 94:60:45:c5:d1:5e:05:50:2e:ab:08:6c:11:60:08:29:16:da: dd:38:85:bc:c7:37:a9:62:5d:f7:ca:08:87:c7:1e:c5:b9:93: 54:17:cd:8c:44:9c:eb:9b:40:04:f2:0b:af:bf:ec:25:c3:4a: 2a:77:e3:b2:c6:93:52:fa:5a:07:43:4a:99:39:2f:9f:5d:a1: 24:76:57:70:60:59:4a:a6:09:a1:e0:d7:d2:a8:85:af:69:c5: 19:a2:44:1d:92:25:1a:c8:14:4e:01:3b:c7:db:38:5f:84:d9: f1:ee:50:f6:a9:0d:6e:a9:e9:ed:82:f6:9c:15:32:22:67:7e: ca:54:bd:4a:4e:ed:43:13:e8:0e:2d:dc:a1:77:54:8a:23:41: 50:be:d0:33:d8:38:d8:23:c2:90:57:1d:3e:1f:da:f4:a1:1f: 26:47:2c:9d:b4:cb:fd:04:ae:7c:99:b3:8f:6c:14:25:0b:04: 06:1f:5b:22 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUFNJbWmKt6Jl+Q5d8h4XeXsZePXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0 MkNFMDBFNjAeFw0yNjA0MTAwNTU0MDlaFw0yNzA0MDkwNTU5MDlaMDMxMTAvBgNV BAMTKDAzMDM4QkFDOURFRkNBQ0Y2NTZGRDQ0Qjc1NUJGNEQzNUREODUwQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTbNptnjT8VTDdkJgSN3YVno+v bN4j4oAUUXaPKqdWk0tcIZJ41SmSbJ6JSHW4L7gC9+mtlgqJLfYdrmj9HYsBwxJh nUwLX6Voq7N8+yPnitfvUW2kJDskgQQM4U6/WOBzIe/PoaECT+crMZPpEG7AptTZ opbB+vcNd/bj74NIqmZIRhRwb8ridnZ0tGq2c+zQsVfk7dqSrwlUcMV+PEszOfsP GzYJEEVibTrGtjcXaD7PajmNCLrFd7MNugkm+N7o5BDaUu4sX/n6gXcFAs5kxpzt xMA7iRtMtsZFvBCTI0LJ0f/ohRWo3w7Sk+ek0luSux9ERkjH1BIMD9dTghVjAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUAwOLrJ3vys9lb9RLdVv0013YUKMwHwYDVR0j BBgwFoAUN5Rn2fnS2/7+uAlXVQBO3ULOAOYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxOTUyNzkxMDIyNzk3MS8wLzM3OTQ2N0Q5RjlEMkRCRkVGRUI4MDk1NzU1MDA0 RURENDJDRTAwRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0MkNFMDBFNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NDgxOTUyNzkxMDIyNzk3MS8wLzM0MzUyZTMyMzUz MzJlMzIzMTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzNTMwMzYzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAi391DANBgkqhkiG9w0BAQsFAAOCAQEAM2BhWFFOpZ+WjfbHg8Ws0Nqa ysbe0XK+WE35XKZkuj4wh6fzggec72E4WlULCEhkX8MNrueQDfS8PcX6YABj4/vG jN1uJIB0lGBFxdFeBVAuqwhsEWAIKRba3TiFvMc3qWJd98oIh8cexbmTVBfNjESc 65tABPILr7/sJcNKKnfjssaTUvpaB0NKmTkvn12hJHZXcGBZSqYJoeDX0qiFr2nF GaJEHZIlGsgUTgE7x9s4X4TZ8e5Q9qkNbqnp7YL2nBUyImd+ylS9Sk7tQxPoDi3c oXdUiiNBUL7QM9g42CPCkFcdPh/a9KEfJkcsnbTL/QSufJmzj2wUJQsEBh9bIg== -----END CERTIFICATE-----Generated at Mon Apr 13 13:54:28 2026 by rpki-client