$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235342e36382e302f32322d3234203d3e203233373234.roa File: 34352e3235342e36382e302f32322d3234203d3e203233373234.roa (raw, json) Hash identifier: g++uWUYlOHzC9cwSPSvf+DQ09TCQtwQDcVfH6rP0n8c= Subject key identifier: B1:A7:AD:17:A6:4A:31:1D:10:FF:A8:E0:CC:63:E9:1E:4C:F5:9B:57 Certificate issuer: /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6 Certificate serial: 59691D022D87A58CCA65BA10CEC9BC7F4AF61C0D Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235342e36382e302f32322d3234203d3e203233373234.roa Signing time: Fri 10 Apr 2026 06:07:17 +0000 ROA not before: Fri 10 Apr 2026 06:02:17 +0000 ROA not after: Fri 09 Apr 2027 06:07:17 +0000 asID: 23724 IP address blocks: 45.254.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:69:1d:02:2d:87:a5:8c:ca:65:ba:10:ce:c9:bc:7f:4a:f6:1c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6 Validity Not Before: Apr 10 06:02:17 2026 GMT Not After : Apr 9 06:07:17 2027 GMT Subject: CN=B1A7AD17A64A311D10FFA8E0CC63E91E4CF59B57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fe:40:8e:63:97:d3:31:d9:85:91:e0:cf:d0: f0:c9:8f:87:e6:e5:15:b7:24:c1:8d:a4:5d:b1:dd: 19:d9:38:86:e2:14:d1:a4:f0:b3:7a:3b:ec:f5:4a: cb:bd:1d:d2:c2:3f:32:59:4a:c4:c4:ec:73:e9:24: 13:f0:92:f9:91:19:85:b4:70:c6:48:bf:3e:94:7c: 12:66:a5:a7:3f:f5:45:fe:8b:ce:51:63:89:97:2e: 24:2b:90:ce:0e:5e:25:47:04:e1:20:7c:78:f9:57: 95:20:0f:42:6c:24:d7:c0:05:83:6a:d2:37:c1:e8: 13:c7:8f:ba:64:8e:3f:9c:f2:a0:28:f4:c7:06:03: 99:5f:1f:80:fd:63:b0:c5:4c:42:4d:6d:c7:18:da: 9d:11:df:eb:82:cf:17:41:93:1e:49:9f:2f:8d:e7: 39:88:94:3c:06:19:0e:7e:d5:f1:db:e6:74:df:e1: 54:59:f2:13:da:1c:ac:50:82:7d:2e:4a:78:e5:fa: a5:cb:27:2a:35:76:63:fd:42:67:ce:11:bb:93:6b: d9:7d:4e:ac:0c:7d:87:62:ab:66:38:f9:d5:12:f2: 7b:58:e3:bd:87:d6:39:b4:e1:29:0b:15:ec:b1:1a: 32:42:07:d3:29:43:3c:b3:56:76:d5:08:b9:57:51: 31:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A7:AD:17:A6:4A:31:1D:10:FF:A8:E0:CC:63:E9:1E:4C:F5:9B:57 X509v3 Authority Key Identifier: keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235342e36382e302f32322d3234203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.254.68.0/22 Signature Algorithm: sha256WithRSAEncryption 58:c5:60:7e:c1:d0:dc:6b:03:75:18:53:61:7f:65:98:65:74: a6:8d:8d:4c:de:b5:b2:ec:bf:da:df:d4:b3:52:d0:1a:51:ec: 39:58:b8:ea:31:20:17:20:25:40:de:6b:0e:6b:70:b7:3e:11: 5a:90:ce:7f:63:45:10:2e:e9:9f:c7:ea:37:66:1f:86:ee:30: 3e:62:f7:77:ab:5d:d5:f2:53:8a:67:1d:66:53:45:cb:99:21: 02:98:6c:cd:20:ef:33:26:c1:9e:b4:e2:e3:59:0b:60:61:66: e3:bd:04:98:c4:03:d8:19:9f:24:ed:fc:fb:ee:90:be:69:47: 8d:0c:c6:1a:18:a3:76:3f:3e:aa:ee:b0:ae:07:3a:7e:19:40: 78:e1:54:ce:29:f3:43:bc:f6:cc:cb:1e:24:8a:84:d2:3f:86: ea:9e:49:da:2b:b2:81:40:11:5b:44:80:fc:20:9a:d3:e8:d3: e6:28:f9:14:8b:fe:33:f8:6f:22:4b:dc:d0:d0:ac:a4:19:4a: 42:a1:2c:a7:b0:11:05:79:2e:7a:46:b1:79:57:d6:c4:ff:36: c4:87:e7:66:a0:d6:3b:22:3e:d0:26:eb:72:69:bc:3f:48:0e: 4d:07:e0:d5:36:32:88:4f:4b:49:a7:8c:30:64:24:d1:1a:fe: cb:d4:83:16 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUWWkdAi2HpYzKZboQzsm8f0r2HA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0 MkNFMDBFNjAeFw0yNjA0MTAwNjAyMTdaFw0yNzA0MDkwNjA3MTdaMDMxMTAvBgNV BAMTKEIxQTdBRDE3QTY0QTMxMUQxMEZGQThFMENDNjNFOTFFNENGNTlCNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj/kCOY5fTMdmFkeDP0PDJj4fm 5RW3JMGNpF2x3RnZOIbiFNGk8LN6O+z1Ssu9HdLCPzJZSsTE7HPpJBPwkvmRGYW0 cMZIvz6UfBJmpac/9UX+i85RY4mXLiQrkM4OXiVHBOEgfHj5V5UgD0JsJNfABYNq 0jfB6BPHj7pkjj+c8qAo9McGA5lfH4D9Y7DFTEJNbccY2p0R3+uCzxdBkx5Jny+N 5zmIlDwGGQ5+1fHb5nTf4VRZ8hPaHKxQgn0uSnjl+qXLJyo1dmP9QmfOEbuTa9l9 TqwMfYdiq2Y4+dUS8ntY472H1jm04SkLFeyxGjJCB9MpQzyzVnbVCLlXUTE7AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUsaetF6ZKMR0Q/6jgzGPpHkz1m1cwHwYDVR0j BBgwFoAUN5Rn2fnS2/7+uAlXVQBO3ULOAOYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxOTUyNzkxMDIyNzk3MS8wLzM3OTQ2N0Q5RjlEMkRCRkVGRUI4MDk1NzU1MDA0 RURENDJDRTAwRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0MkNFMDBFNi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODE5NTI3OTEwMjI3OTcxLzAvMzQzNTJlMzIzNTM0 MmUzNjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMzM3MzIzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAi3+RDANBgkqhkiG9w0BAQsFAAOCAQEAWMVgfsHQ3GsDdRhTYX9lmGV0po2N TN61suy/2t/Us1LQGlHsOVi46jEgFyAlQN5rDmtwtz4RWpDOf2NFEC7pn8fqN2Yf hu4wPmL3d6td1fJTimcdZlNFy5khAphszSDvMybBnrTi41kLYGFm470EmMQD2Bmf JO38++6QvmlHjQzGGhijdj8+qu6wrgc6fhlAeOFUzinzQ7z2zMseJIqE0j+G6p5J 2iuygUARW0SA/CCa0+jT5ij5FIv+M/hvIkvc0NCspBlKQqEsp7ARBXkuekaxeVfW xP82xIfnZqDWOyI+0Cbrcmm8P0gOTQfg1TYyiE9LSaeMMGQk0Rr+y9SDFg== -----END CERTIFICATE-----Generated at Mon Apr 13 13:56:16 2026 by rpki-client