$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34352e3235332e33332e302f32342d3234203d3e20313338343231.roa File: 34352e3235332e33332e302f32342d3234203d3e20313338343231.roa (raw, json) Hash identifier: xV7AmwPQH+Vy2Rn3ZSAoF5UQ0LcGehtZsD/i6M51oUw= Subject key identifier: 57:9A:0F:F7:0B:E7:31:54:56:5B:BE:A8:0C:FC:23:68:0A:7F:88:82 Certificate issuer: /CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Certificate serial: 025C0EA5A51F4FF2D85170208D778EF854B6604E Authority key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34352e3235332e33332e302f32342d3234203d3e20313338343231.roa Signing time: Mon 31 Aug 2026 00:45:02 +0000 ROA not before: Mon 31 Aug 2026 00:40:02 +0000 ROA not after: Mon 30 Aug 2027 00:45:02 +0000 asID: 138421 IP address blocks: 45.253.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 15:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:5c:0e:a5:a5:1f:4f:f2:d8:51:70:20:8d:77:8e:f8:54:b6:60:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Validity Not Before: Aug 31 00:40:02 2026 GMT Not After : Aug 30 00:45:02 2027 GMT Subject: CN=579A0FF70BE73154565BBEA80CFC23680A7F8882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2e:ad:77:bb:bf:98:6a:60:45:40:77:95:3a: 75:e0:45:29:ce:a7:4d:b1:77:70:c2:45:7d:0b:7d: 84:bc:f0:e0:58:57:b5:80:a2:d8:9d:9d:2f:5c:b5: 42:3c:17:6b:2d:97:2c:aa:55:b1:8d:e0:fa:92:cc: 13:64:c4:16:7f:7c:e8:48:36:a5:2f:47:f4:d1:d4: b0:a3:3d:44:69:75:a0:85:cf:5d:5d:30:a8:61:70: 60:c6:ee:00:c0:9e:26:e8:1b:f3:8e:bc:f9:dd:c4: 02:9d:cb:7c:be:75:3b:a9:96:00:f6:82:33:1e:a4: fc:b2:ba:45:43:bf:86:c7:1f:34:58:18:b1:b5:c1: 19:83:ad:cd:d4:9d:95:da:4a:5d:34:83:2b:14:09: d7:d6:06:8a:df:c8:6e:21:58:44:7e:e6:1e:7e:8e: 65:45:36:af:dd:cf:1f:da:8d:17:4b:4f:4e:99:09: ec:0a:a9:b6:6c:fb:7c:63:9a:9f:26:ab:12:74:a9: e4:1b:55:61:e0:32:cc:96:2d:87:3e:38:ef:96:27: 37:e9:5c:d1:8e:3c:1b:54:ea:6e:fb:ea:bd:bb:67: 7b:f4:31:45:65:dc:b8:9e:da:13:8e:96:98:6c:9b: c7:f3:c0:bf:20:90:66:59:25:d1:ec:40:e7:c3:e9: aa:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9A:0F:F7:0B:E7:31:54:56:5B:BE:A8:0C:FC:23:68:0A:7F:88:82 X509v3 Authority Key Identifier: keyid:0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34352e3235332e33332e302f32342d3234203d3e20313338343231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.253.33.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:1d:2d:65:86:bb:0c:29:67:0a:9a:6d:20:87:be:82:56:1f: 3d:32:6a:21:4d:1d:06:b7:7d:cb:b1:01:2e:80:7d:03:ac:1e: 20:ad:54:74:6c:44:40:4b:7c:c3:67:7f:95:da:c7:42:ce:e3: 3c:f1:d4:5d:0a:3d:ba:c4:93:86:85:e0:e2:2b:fb:4f:ab:74: 45:dd:61:55:bc:f8:98:47:54:8a:c5:5c:22:22:28:08:3f:1a: 26:bf:bd:36:e7:12:84:e7:07:a0:57:f9:6d:8e:a7:3a:ca:e5: a3:65:8e:e4:73:f7:d6:bb:11:d8:06:7c:39:3d:ce:c2:63:9e: 4b:8b:08:32:9e:de:f6:b0:ec:a0:bd:0a:d5:d2:20:1b:02:97: a9:52:2b:c3:ee:82:8d:d7:7d:37:9f:73:9f:88:fa:79:d0:fe: 3d:ba:a0:e9:30:87:71:ea:5b:4c:ac:97:9f:3e:1f:6c:5d:8f: d6:16:17:46:93:50:99:e2:52:01:32:49:93:54:1c:2b:fa:1a: 20:a6:55:7c:14:06:bb:e5:90:f0:81:75:d9:9a:97:9b:ec:ad: 7d:76:ed:0e:b7:43:47:6e:02:fd:ad:27:30:39:18:e2:2f:ce: 51:13:1b:7f:7a:f9:8a:1c:81:08:9a:73:88:a8:7d:db:6c:77: 14:dc:b8:15 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUAlwOpaUfT/LYUXAgjXeO+FS2YE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3 NjlGREY4QjAeFw0yNjA4MzEwMDQwMDJaFw0yNzA4MzAwMDQ1MDJaMDMxMTAvBgNV BAMTKDU3OUEwRkY3MEJFNzMxNTQ1NjVCQkVBODBDRkMyMzY4MEE3Rjg4ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Lq13u7+YamBFQHeVOnXgRSnO p02xd3DCRX0LfYS88OBYV7WAotidnS9ctUI8F2stlyyqVbGN4PqSzBNkxBZ/fOhI NqUvR/TR1LCjPURpdaCFz11dMKhhcGDG7gDAniboG/OOvPndxAKdy3y+dTuplgD2 gjMepPyyukVDv4bHHzRYGLG1wRmDrc3UnZXaSl00gysUCdfWBorfyG4hWER+5h5+ jmVFNq/dzx/ajRdLT06ZCewKqbZs+3xjmp8mqxJ0qeQbVWHgMsyWLYc+OO+WJzfp XNGOPBtU6m776r27Z3v0MUVl3Lie2hOOlphsm8fzwL8gkGZZJdHsQOfD6aqTAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUV5oP9wvnMVRWW76oDPwjaAp/iIIwHwYDVR0j BBgwFoAUDkpkqQtIyO1KooboiD1ZW3af34swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkxMjQxMDg1OTk2MjM3MS8wLzBFNEE2NEE5MEI0OEM4RUQ0QUEyODZFODg4M0Q1 OTVCNzY5RkRGOEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3NjlGREY4Qi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTkxMjQxMDg1OTk2MjM3MS8wLzM0MzUyZTMyMzUz MzJlMzMzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzODM0MzIzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAC39ITANBgkqhkiG9w0BAQsFAAOCAQEAix0tZYa7DClnCpptIIe+glYf PTJqIU0dBrd9y7EBLoB9A6weIK1UdGxEQEt8w2d/ldrHQs7jPPHUXQo9usSThoXg 4iv7T6t0Rd1hVbz4mEdUisVcIiIoCD8aJr+9NucShOcHoFf5bY6nOsrlo2WO5HP3 1rsR2AZ8OT3OwmOeS4sIMp7e9rDsoL0K1dIgGwKXqVIrw+6Cjdd9N59zn4j6edD+ Pbqg6TCHcepbTKyXnz4fbF2P1hYXRpNQmeJSATJJk1QcK/oaIKZVfBQGu+WQ8IF1 2ZqXm+ytfXbtDrdDR24C/a0nMDkY4i/OURMbf3r5ihyBCJpziKh922x3FNy4FQ== -----END CERTIFICATE-----Generated at Sat Sep 5 06:59:30 2026 by rpki-client