$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098794578586107906/0/34352e3235342e32302e302f32322d3232203d3e20313333373734.roa File: 34352e3235342e32302e302f32322d3232203d3e20313333373734.roa (raw, json) Hash identifier: ZJloOk6sDE753o+7/mUwoLrIvMNMTCjFQ6yK9+8AJEo= Subject key identifier: 3B:6A:B7:3E:64:CB:D0:7A:DA:03:B6:21:3C:07:D0:01:AD:4F:A5:E3 Certificate issuer: /CN=C99930256B2681B676C3F969B9E070208697E59E Certificate serial: 5DEEB9EC0D2CD770920E70F407BFDF03D9A9D7BB Authority key identifier: C9:99:30:25:6B:26:81:B6:76:C3:F9:69:B9:E0:70:20:86:97:E5:9E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/34352e3235342e32302e302f32322d3232203d3e20313333373734.roa Signing time: Tue 21 Apr 2026 02:20:59 +0000 ROA not before: Tue 21 Apr 2026 02:15:59 +0000 ROA not after: Tue 20 Apr 2027 02:20:59 +0000 asID: 133774 IP address blocks: 45.254.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.crl rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 02:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ee:b9:ec:0d:2c:d7:70:92:0e:70:f4:07:bf:df:03:d9:a9:d7:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C99930256B2681B676C3F969B9E070208697E59E Validity Not Before: Apr 21 02:15:59 2026 GMT Not After : Apr 20 02:20:59 2027 GMT Subject: CN=3B6AB73E64CBD07ADA03B6213C07D001AD4FA5E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cf:ee:3a:8d:0b:4a:45:1e:65:be:03:12:e5: 40:25:a3:74:01:d9:c1:4d:f4:04:b6:29:79:ee:14: 29:06:f3:79:05:62:f6:b0:2f:79:3e:9f:de:4a:55: 6c:5b:e3:93:d4:58:a8:5b:12:a3:00:1b:c5:4e:d2: 2e:42:eb:10:52:78:74:2a:ef:bf:ec:31:eb:8f:ec: 36:3d:38:65:5e:b1:d4:2d:7e:80:98:d0:06:2f:db: 0a:48:a6:17:d0:88:e2:f6:26:e8:02:14:ed:e5:f7: a0:76:15:3b:fa:65:de:21:90:99:a4:27:7c:d2:4d: cf:97:53:9c:03:cc:6e:f7:23:17:18:95:f2:f7:b4: 2d:b5:d1:78:38:16:b3:4d:4a:c2:ba:db:d4:be:97: b6:0d:f3:44:c8:4c:57:60:fe:5a:36:98:10:7d:72: a1:60:c9:ed:33:5d:15:ff:8c:01:f4:ca:8f:27:a1: 4c:01:c8:99:91:4c:3c:29:d3:ff:4d:7f:93:63:74: 2e:66:c1:e9:38:c0:49:63:33:d5:e7:19:ad:53:68: dd:f2:70:22:1e:3f:42:d7:a9:db:89:b6:86:6a:3b: 0e:cb:e0:e5:82:9f:56:e5:c9:ee:7c:8c:2f:f6:a9: 2e:7e:4f:0a:9b:48:1c:bd:00:57:44:34:30:28:35: 1a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6A:B7:3E:64:CB:D0:7A:DA:03:B6:21:3C:07:D0:01:AD:4F:A5:E3 X509v3 Authority Key Identifier: keyid:C9:99:30:25:6B:26:81:B6:76:C3:F9:69:B9:E0:70:20:86:97:E5:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/34352e3235342e32302e302f32322d3232203d3e20313333373734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.254.20.0/22 Signature Algorithm: sha256WithRSAEncryption 89:c7:48:06:31:b3:c1:35:12:8a:f3:8b:ff:61:74:72:9f:4c: d7:fa:dd:df:e2:8e:4d:7f:49:10:01:86:fa:d0:5d:f9:3f:c9: 17:4e:eb:1b:73:b7:0b:0b:bf:4c:01:70:57:f3:16:2c:58:dd: 6d:02:07:7d:5e:f8:58:bb:d1:ba:8c:c7:72:56:74:40:e3:37: 33:11:e3:e7:4c:de:4e:9d:18:5a:c8:a1:00:68:1d:c2:b3:5e: e8:4f:a0:bc:5f:49:9f:de:9e:40:ee:50:89:86:3c:a7:a3:fa: 2a:50:e9:90:26:72:f8:50:5a:b6:46:89:e0:de:63:32:b6:34: b6:ec:5c:70:9e:5b:e2:5f:04:e2:79:9c:f6:cc:24:b3:93:3d: af:fc:34:ca:57:87:54:82:ae:4b:8e:f7:89:b8:e0:63:fb:d6: 8b:aa:29:93:10:66:7a:bd:4f:a0:57:c5:0a:34:d4:d8:3a:76: 6c:39:f5:74:25:bf:e7:2b:b3:54:e4:48:41:d0:4a:d0:12:81: 18:2f:8c:90:f5:e8:82:e0:45:ba:03:cd:78:d7:d4:53:1d:b3: f7:36:d6:23:88:17:20:71:3e:bd:6f:7c:31:f8:f5:f9:ea:38: b1:51:9e:ce:df:00:d7:6e:c1:f5:5f:97:41:1e:80:54:29:d7: 27:b8:58:5b -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUXe657A0s13CSDnD0B7/fA9mp17swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk5OTMwMjU2QjI2ODFCNjc2QzNGOTY5QjlFMDcwMjA4 Njk3RTU5RTAeFw0yNjA0MjEwMjE1NTlaFw0yNzA0MjAwMjIwNTlaMDMxMTAvBgNV BAMTKDNCNkFCNzNFNjRDQkQwN0FEQTAzQjYyMTNDMDdEMDAxQUQ0RkE1RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXz+46jQtKRR5lvgMS5UAlo3QB 2cFN9AS2KXnuFCkG83kFYvawL3k+n95KVWxb45PUWKhbEqMAG8VO0i5C6xBSeHQq 77/sMeuP7DY9OGVesdQtfoCY0AYv2wpIphfQiOL2JugCFO3l96B2FTv6Zd4hkJmk J3zSTc+XU5wDzG73IxcYlfL3tC210Xg4FrNNSsK629S+l7YN80TITFdg/lo2mBB9 cqFgye0zXRX/jAH0yo8noUwByJmRTDwp0/9Nf5NjdC5mwek4wEljM9XnGa1TaN3y cCIeP0LXqduJtoZqOw7L4OWCn1blye58jC/2qS5+TwqbSBy9AFdENDAoNRqxAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUO2q3PmTL0HraA7YhPAfQAa1PpeMwHwYDVR0j BBgwFoAUyZkwJWsmgbZ2w/lpueBwIIaX5Z4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODc5NDU3ODU4NjEwNzkwNi8wL0M5OTkzMDI1NkIyNjgxQjY3NkMzRjk2OUI5RTA3 MDIwODY5N0U1OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzk5OTMwMjU2QjI2ODFCNjc2QzNGOTY5QjlFMDcwMjA4Njk3RTU5RS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5ODc5NDU3ODU4NjEwNzkwNi8wLzM0MzUyZTMyMzUz NDJlMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzMzM3MzczNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAi3+FDANBgkqhkiG9w0BAQsFAAOCAQEAicdIBjGzwTUSivOL/2F0cp9M 1/rd3+KOTX9JEAGG+tBd+T/JF07rG3O3Cwu/TAFwV/MWLFjdbQIHfV74WLvRuozH clZ0QOM3MxHj50zeTp0YWsihAGgdwrNe6E+gvF9Jn96eQO5QiYY8p6P6KlDpkCZy +FBatkaJ4N5jMrY0tuxccJ5b4l8E4nmc9swks5M9r/w0yleHVIKuS473ibjgY/vW i6opkxBmer1PoFfFCjTU2Dp2bDn1dCW/5yuzVORIQdBK0BKBGC+MkPXoguBFugPN eNfUUx2z9zbWI4gXIHE+vW98Mfj1+eo4sVGezt8A127B9V+XQR6AVCnXJ7hYWw== -----END CERTIFICATE-----Generated at Mon Apr 27 13:54:38 2026 by rpki-client