$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235342e37362e302f32322d3234203d3e203233373234.roa File: 34352e3235342e37362e302f32322d3234203d3e203233373234.roa (raw, json) Hash identifier: XoX2a60S/9cVGzybmyy8N4SeZW+AuS/BkIyiZrzR8Vc= Subject key identifier: E4:59:F9:D1:4A:FC:40:3D:7F:48:8F:1B:CE:2B:F9:83:EB:84:08:16 Certificate issuer: /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6 Certificate serial: 0BEA71D18F5C0D8E835A75DA4DE1C4D92970D9FB Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235342e37362e302f32322d3234203d3e203233373234.roa Signing time: Fri 10 Apr 2026 06:07:17 +0000 ROA not before: Fri 10 Apr 2026 06:02:17 +0000 ROA not after: Fri 09 Apr 2027 06:07:17 +0000 asID: 23724 IP address blocks: 45.254.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ea:71:d1:8f:5c:0d:8e:83:5a:75:da:4d:e1:c4:d9:29:70:d9:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6 Validity Not Before: Apr 10 06:02:17 2026 GMT Not After : Apr 9 06:07:17 2027 GMT Subject: CN=E459F9D14AFC403D7F488F1BCE2BF983EB840816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7e:1d:04:be:2a:3b:60:2f:ec:10:28:fa:89: 3d:20:8d:bf:85:66:4e:71:cf:10:da:b4:3e:19:c0: f0:d8:d6:7f:04:a9:b7:83:19:f9:89:0a:62:d8:17: 81:3f:9b:1a:f9:b6:af:ca:71:19:33:09:3e:d8:a6: 90:84:3b:49:27:e1:21:5c:50:f9:b9:c8:b5:07:02: 05:b0:c8:8b:4e:86:12:f1:40:38:85:a7:8a:3d:da: 65:24:d8:db:bd:ac:b8:07:12:18:8e:af:e3:66:08: 0a:76:4f:bd:d6:bb:6e:a1:23:63:67:bf:f2:ff:3b: fa:88:c0:b0:0d:58:34:1e:af:63:2c:bc:18:ed:41: 1d:7d:d8:0d:6d:7f:0f:f1:b8:cc:31:5a:34:3f:af: 76:12:24:61:cf:64:ec:97:73:1e:5e:94:0e:b0:bf: 43:b0:6b:e8:be:7c:cd:c1:34:47:2c:dc:bd:b4:ca: 8c:17:d5:cf:7d:82:4a:a1:94:bb:4b:9d:ad:87:fb: f4:b4:e8:d6:04:68:83:4b:72:6e:ed:54:d8:08:b8: 8a:c5:0d:b9:05:22:c2:be:5f:32:56:6f:8f:50:7f: bf:3b:01:1b:65:5f:ed:d5:58:33:0a:25:48:98:dd: 6f:a0:ec:cf:da:b1:0b:1f:b3:cc:fa:99:d4:6d:27: 50:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:59:F9:D1:4A:FC:40:3D:7F:48:8F:1B:CE:2B:F9:83:EB:84:08:16 X509v3 Authority Key Identifier: keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235342e37362e302f32322d3234203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.254.76.0/22 Signature Algorithm: sha256WithRSAEncryption 26:c2:64:34:41:0b:c4:72:00:b7:cb:dd:bc:63:21:20:1e:06: 80:ad:04:9d:82:c6:85:97:03:df:34:b5:56:76:80:0f:3d:e4: 61:01:08:99:38:f3:b0:69:5f:ea:78:09:0b:23:26:06:f6:53: e5:82:de:42:f6:06:88:a4:a2:63:98:87:2d:c7:72:5a:d5:08: d6:6b:11:74:73:71:ab:42:6a:f5:3a:97:4f:53:6e:26:ef:48: 9b:91:c3:69:45:15:2f:1e:c0:48:a2:24:bc:9c:1f:bf:03:fd: c6:44:6d:1f:b7:c1:8b:3c:58:f8:be:67:70:cd:85:bd:34:d0: 2f:f2:c1:81:c1:b1:ec:27:c3:f2:92:e8:4a:76:32:21:40:55: a2:f7:0d:6a:4f:53:10:07:ff:63:05:18:c2:d4:75:c1:b5:b0: 67:cf:26:d5:e0:53:21:67:f1:53:ba:3b:2b:55:c2:7e:6c:f6: 8b:95:cc:2a:06:02:75:52:e8:58:e2:23:0e:21:e8:bc:8b:c0: db:d6:f7:a6:72:55:29:10:48:7f:97:99:ce:02:42:19:55:4f: 7b:c6:fd:92:40:10:c1:6f:a6:24:b8:5f:95:88:53:60:9f:32: 3d:b7:fc:0e:aa:d2:9d:f1:ef:5e:47:79:7b:2f:67:53:af:3a: 9f:84:34:33 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUC+px0Y9cDY6DWnXaTeHE2Slw2fswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0 MkNFMDBFNjAeFw0yNjA0MTAwNjAyMTdaFw0yNzA0MDkwNjA3MTdaMDMxMTAvBgNV BAMTKEU0NTlGOUQxNEFGQzQwM0Q3RjQ4OEYxQkNFMkJGOTgzRUI4NDA4MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChfh0Evio7YC/sECj6iT0gjb+F Zk5xzxDatD4ZwPDY1n8EqbeDGfmJCmLYF4E/mxr5tq/KcRkzCT7YppCEO0kn4SFc UPm5yLUHAgWwyItOhhLxQDiFp4o92mUk2Nu9rLgHEhiOr+NmCAp2T73Wu26hI2Nn v/L/O/qIwLANWDQer2MsvBjtQR192A1tfw/xuMwxWjQ/r3YSJGHPZOyXcx5elA6w v0Owa+i+fM3BNEcs3L20yowX1c99gkqhlLtLna2H+/S06NYEaINLcm7tVNgIuIrF DbkFIsK+XzJWb49Qf787ARtlX+3VWDMKJUiY3W+g7M/asQsfs8z6mdRtJ1D3AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU5Fn50Ur8QD1/SI8bziv5g+uECBYwHwYDVR0j BBgwFoAUN5Rn2fnS2/7+uAlXVQBO3ULOAOYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxOTUyNzkxMDIyNzk3MS8wLzM3OTQ2N0Q5RjlEMkRCRkVGRUI4MDk1NzU1MDA0 RURENDJDRTAwRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0MkNFMDBFNi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODE5NTI3OTEwMjI3OTcxLzAvMzQzNTJlMzIzNTM0 MmUzNzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMzM3MzIzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAi3+TDANBgkqhkiG9w0BAQsFAAOCAQEAJsJkNEELxHIAt8vdvGMhIB4GgK0E nYLGhZcD3zS1VnaADz3kYQEImTjzsGlf6ngJCyMmBvZT5YLeQvYGiKSiY5iHLcdy WtUI1msRdHNxq0Jq9TqXT1NuJu9Im5HDaUUVLx7ASKIkvJwfvwP9xkRtH7fBizxY +L5ncM2FvTTQL/LBgcGx7CfD8pLoSnYyIUBVovcNak9TEAf/YwUYwtR1wbWwZ88m 1eBTIWfxU7o7K1XCfmz2i5XMKgYCdVLoWOIjDiHovIvA29b3pnJVKRBIf5eZzgJC GVVPe8b9kkAQwW+mJLhflYhTYJ8yPbf8DqrSnfHvXkd5ey9nU686n4Q0Mw== -----END CERTIFICATE-----Generated at Mon Apr 13 13:56:16 2026 by rpki-client