$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e382e302f32332d3233203d3e2034383038.roa File: 34352e3235342e382e302f32332d3233203d3e2034383038.roa (raw, json) Hash identifier: fyh+el9sgg8/Y93qBnXPHlHdezwIV67264v8qH2vob4= Subject key identifier: 1C:81:43:21:8D:22:A4:EA:E2:81:15:E0:4A:67:C6:4A:AE:F2:AA:17 Certificate issuer: /CN=B5148646F2C451864E20696E4F1C926A098BC8D2 Certificate serial: 365C0267A609F89F5AD97B3C6F3BB959C2C56DCE Authority key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e382e302f32332d3233203d3e2034383038.roa Signing time: Tue 23 Jun 2026 13:13:45 +0000 ROA not before: Tue 23 Jun 2026 13:08:45 +0000 ROA not after: Tue 22 Jun 2027 13:13:45 +0000 asID: 4808 IP address blocks: 45.254.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:5c:02:67:a6:09:f8:9f:5a:d9:7b:3c:6f:3b:b9:59:c2:c5:6d:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5148646F2C451864E20696E4F1C926A098BC8D2 Validity Not Before: Jun 23 13:08:45 2026 GMT Not After : Jun 22 13:13:45 2027 GMT Subject: CN=1C8143218D22A4EAE28115E04A67C64AAEF2AA17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9d:19:a7:2f:56:32:65:45:aa:67:12:82:bb: 9c:02:bf:87:6b:69:12:1b:ac:23:4b:91:ef:29:1b: 95:b6:3b:7d:44:2b:54:3c:22:5d:9d:8e:f7:75:50: 98:10:de:c7:ad:09:73:db:21:c0:7f:ce:e1:82:70: 48:47:e9:e5:25:44:6a:ad:60:84:7a:de:5c:ab:de: 38:95:75:8e:cd:87:64:43:20:02:dd:0a:5a:b6:06: 78:7f:ff:0c:30:07:c5:66:b5:63:80:23:02:32:88: d8:03:18:0a:a6:2c:be:a3:2f:e4:25:33:c5:23:09: a4:dd:e5:65:d1:e9:f7:e2:25:14:e0:6c:0b:b9:23: d5:ce:6a:8c:00:c9:71:23:f9:7f:6f:44:ec:cc:46: cf:dd:a8:3d:0c:c9:c6:21:db:b9:e8:24:12:8f:e8: 6e:39:91:c5:14:7a:35:44:ea:7d:a9:75:1c:84:f7: b8:6e:64:d4:a6:7a:f7:cd:32:75:c6:ee:59:5a:09: 0a:91:b7:16:49:f3:9d:46:99:5d:90:91:ca:7a:01: 59:be:fd:86:0d:c7:34:7f:4b:a6:1e:7a:4d:ad:5c: 55:ea:84:35:3a:e7:58:ed:c4:5f:a3:74:8d:d6:da: 26:4d:9b:e2:d0:a0:41:83:8f:a4:6d:df:ed:8b:ef: ad:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:81:43:21:8D:22:A4:EA:E2:81:15:E0:4A:67:C6:4A:AE:F2:AA:17 X509v3 Authority Key Identifier: keyid:B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e382e302f32332d3233203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.254.8.0/23 Signature Algorithm: sha256WithRSAEncryption a2:d5:e4:df:f3:69:43:b6:89:04:ea:d2:86:fa:2f:99:b6:8b: ed:36:b1:aa:5d:7f:ab:52:3c:fc:6a:0d:5b:58:44:bd:6f:88: 0f:2f:ac:bb:ef:79:b8:1e:6a:9f:82:0f:3c:5d:c9:0e:88:d3: 6e:28:34:3b:d7:b4:37:9c:69:3b:81:a8:25:44:6a:9a:d0:17: 6f:06:8d:e2:50:00:a8:48:30:fb:2b:59:c9:04:15:5e:dd:be: f3:cb:29:2c:6a:b1:52:00:55:50:a4:92:c2:b5:1f:5d:d6:2b: ed:c9:f4:c6:d0:20:03:84:3c:a9:bb:55:c4:09:52:7b:c7:d9: 1f:c6:46:35:4a:3a:09:a5:54:cc:7e:f1:ea:4f:a8:31:0a:74: 2f:3b:9b:4a:b5:4c:24:49:cd:42:d7:f1:bb:2d:2c:ba:20:fc: 9e:0b:e6:bd:ef:53:44:dd:88:43:b0:96:df:73:a7:36:ca:2c: b1:86:25:7d:e0:cc:15:58:2b:5b:01:74:af:16:48:00:2f:40: 39:17:9e:8b:89:d9:c7:81:58:ac:42:df:07:e4:7f:0d:4d:42: 8f:39:9a:2e:a5:dc:19:86:60:52:26:ee:56:7e:e8:64:49:89: f2:9b:92:4d:0e:cb:fb:97:e5:4e:bb:c4:93:14:88:cf:08:a1: 6c:8c:8d:f6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUNlwCZ6YJ+J9a2Xs8bzu5WcLFbc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEw OThCQzhEMjAeFw0yNjA2MjMxMzA4NDVaFw0yNzA2MjIxMzEzNDVaMDMxMTAvBgNV BAMTKDFDODE0MzIxOEQyMkE0RUFFMjgxMTVFMDRBNjdDNjRBQUVGMkFBMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6nRmnL1YyZUWqZxKCu5wCv4dr aRIbrCNLke8pG5W2O31EK1Q8Il2djvd1UJgQ3setCXPbIcB/zuGCcEhH6eUlRGqt YIR63lyr3jiVdY7Nh2RDIALdClq2Bnh//wwwB8VmtWOAIwIyiNgDGAqmLL6jL+Ql M8UjCaTd5WXR6ffiJRTgbAu5I9XOaowAyXEj+X9vROzMRs/dqD0MycYh27noJBKP 6G45kcUUejVE6n2pdRyE97huZNSmevfNMnXG7llaCQqRtxZJ851GmV2Qkcp6AVm+ /YYNxzR/S6Yeek2tXFXqhDU651jtxF+jdI3W2iZNm+LQoEGDj6Rt3+2L763XAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUHIFDIY0ipOrigRXgSmfGSq7yqhcwHwYDVR0j BBgwFoAUtRSGRvLEUYZOIGluTxySagmLyNIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTM1NDAzNjg2OTQ2NDA4NS8wL0I1MTQ4NjQ2RjJDNDUxODY0RTIwNjk2RTRGMUM5 MjZBMDk4QkM4RDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEwOThCQzhEMi5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA5MzU0MDM2ODY5NDY0MDg1LzAvMzQzNTJlMzIzNTM0 MmUzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM0MzgzMDM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB Lf4IMA0GCSqGSIb3DQEBCwUAA4IBAQCi1eTf82lDtokE6tKG+i+ZtovtNrGqXX+r Ujz8ag1bWES9b4gPL6y773m4Hmqfgg88XckOiNNuKDQ717Q3nGk7gaglRGqa0Bdv Bo3iUACoSDD7K1nJBBVe3b7zyyksarFSAFVQpJLCtR9d1ivtyfTG0CADhDypu1XE CVJ7x9kfxkY1SjoJpVTMfvHqT6gxCnQvO5tKtUwkSc1C1/G7LSy6IPyeC+a971NE 3YhDsJbfc6c2yiyxhiV94MwVWCtbAXSvFkgAL0A5F56LidnHgVisQt8H5H8NTUKP OZoupdwZhmBSJu5WfuhkSYnym5JNDsv7l+VOu8STFIjPCKFsjI32 -----END CERTIFICATE-----Generated at Tue Jul 14 20:57:59 2026 by rpki-client