$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e382e302f32332d3233203d3e2034383437.roa File: 34352e3235342e382e302f32332d3233203d3e2034383437.roa (raw, json) Hash identifier: SP+QM9OtW5RmdBJJFM+OJXICimpfberqBDE5B1rJKNk= Subject key identifier: 09:E8:4C:75:8B:8D:20:89:5B:4D:48:6F:E4:57:56:B2:21:02:EC:0F Certificate issuer: /CN=B5148646F2C451864E20696E4F1C926A098BC8D2 Certificate serial: 1240074CD16FE916BE33F93D5254C4140B42B262 Authority key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e382e302f32332d3233203d3e2034383437.roa Signing time: Tue 23 Jun 2026 13:13:45 +0000 ROA not before: Tue 23 Jun 2026 13:08:45 +0000 ROA not after: Tue 22 Jun 2027 13:13:45 +0000 asID: 4847 IP address blocks: 45.254.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:40:07:4c:d1:6f:e9:16:be:33:f9:3d:52:54:c4:14:0b:42:b2:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5148646F2C451864E20696E4F1C926A098BC8D2 Validity Not Before: Jun 23 13:08:45 2026 GMT Not After : Jun 22 13:13:45 2027 GMT Subject: CN=09E84C758B8D20895B4D486FE45756B22102EC0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d6:70:c5:47:7d:77:96:6d:7f:2f:a0:75:a6: 2f:09:4b:fb:40:fc:c7:7b:63:95:71:c1:dd:0b:8a: 14:f6:8e:a6:00:49:a7:c0:71:4b:2c:dc:21:4c:a5: 67:b6:ab:1e:e7:a3:de:9b:dd:0c:e3:1c:87:d7:4f: 54:8b:39:bb:f9:91:35:69:ab:62:eb:26:41:04:9c: d1:0d:09:73:f8:bc:6d:ab:30:08:44:4f:94:97:c7: ad:e9:6a:88:87:42:b4:bc:6a:e6:87:bb:30:45:c5: dc:88:6d:92:e5:72:88:5c:08:45:c5:9b:19:18:6c: e1:75:38:0c:2e:3a:1c:12:5b:65:da:9f:68:89:75: 4c:06:7f:b8:5a:3d:05:86:e8:2e:b6:06:60:e2:f2: ad:a7:a6:5d:85:da:22:24:96:64:5b:ce:69:7d:23: 60:db:6b:7f:36:90:ad:23:70:97:10:4f:b0:ef:d4: a2:d0:b3:6a:5d:04:cc:ec:01:91:1d:4c:d9:6b:e3: 31:10:9a:6a:31:14:00:86:bd:ce:3b:1b:f0:dd:a1: 68:e4:81:6d:e4:ef:6b:f7:c3:eb:c9:13:e3:6c:8a: 79:f8:d2:d5:d8:51:2a:a8:df:4e:1f:4c:a9:80:e2: c7:4d:08:07:72:b0:e4:50:ff:a1:a6:82:59:87:40: 14:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E8:4C:75:8B:8D:20:89:5B:4D:48:6F:E4:57:56:B2:21:02:EC:0F X509v3 Authority Key Identifier: keyid:B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e382e302f32332d3233203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.254.8.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:c0:36:c6:a5:58:cb:88:c4:8c:48:ee:7f:f6:1e:e7:b4:27: 50:0a:2a:62:ff:b8:37:15:fa:3a:49:72:d9:94:10:4d:14:5a: 40:93:02:71:1e:c9:a0:27:e3:68:e4:9a:c3:34:39:64:d4:61: 00:b7:3a:d5:fb:ba:42:45:43:79:dd:a1:57:c7:ca:4c:73:9a: 45:a9:d2:d9:ef:d2:bc:fe:e8:82:c9:76:89:e6:62:63:6d:25: 7b:82:d5:7f:0e:9d:ab:81:e6:0f:82:d2:b4:8c:69:dc:dc:8b: fc:dc:38:ba:13:11:c9:c7:e4:26:24:cf:9a:61:c7:fb:9e:50: aa:4a:fc:5e:ca:61:32:56:8d:36:e0:9a:48:5a:b0:a0:7d:92: a0:d5:88:cd:34:b7:ce:0c:2d:98:97:52:78:ef:af:8f:f2:47: c9:94:9f:ae:4a:91:06:f3:3d:d7:ff:f9:42:86:27:e9:3a:7b: 88:1d:f0:28:c9:1a:12:46:cd:ff:b6:cb:a1:af:24:ae:c8:a4: f4:57:8a:41:7a:0b:9a:73:dc:0f:36:d4:e6:71:a3:40:f0:fe: 28:6c:6d:7e:73:aa:8a:6e:6d:1b:f3:69:35:23:c4:f8:33:25: 2d:46:06:e3:ec:be:be:14:4c:b4:81:a3:db:c6:1a:20:92:b8: 1b:9e:d3:40 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUEkAHTNFv6Ra+M/k9UlTEFAtCsmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEw OThCQzhEMjAeFw0yNjA2MjMxMzA4NDVaFw0yNzA2MjIxMzEzNDVaMDMxMTAvBgNV BAMTKDA5RTg0Qzc1OEI4RDIwODk1QjRENDg2RkU0NTc1NkIyMjEwMkVDMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx1nDFR313lm1/L6B1pi8JS/tA /Md7Y5Vxwd0LihT2jqYASafAcUss3CFMpWe2qx7no96b3QzjHIfXT1SLObv5kTVp q2LrJkEEnNENCXP4vG2rMAhET5SXx63paoiHQrS8auaHuzBFxdyIbZLlcohcCEXF mxkYbOF1OAwuOhwSW2Xan2iJdUwGf7haPQWG6C62BmDi8q2npl2F2iIklmRbzml9 I2Dba382kK0jcJcQT7Dv1KLQs2pdBMzsAZEdTNlr4zEQmmoxFACGvc47G/DdoWjk gW3k72v3w+vJE+Nsinn40tXYUSqo304fTKmA4sdNCAdysORQ/6GmglmHQBSXAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUCehMdYuNIIlbTUhv5FdWsiEC7A8wHwYDVR0j BBgwFoAUtRSGRvLEUYZOIGluTxySagmLyNIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTM1NDAzNjg2OTQ2NDA4NS8wL0I1MTQ4NjQ2RjJDNDUxODY0RTIwNjk2RTRGMUM5 MjZBMDk4QkM4RDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEwOThCQzhEMi5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA5MzU0MDM2ODY5NDY0MDg1LzAvMzQzNTJlMzIzNTM0 MmUzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM0MzgzNDM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB Lf4IMA0GCSqGSIb3DQEBCwUAA4IBAQA8wDbGpVjLiMSMSO5/9h7ntCdQCipi/7g3 Ffo6SXLZlBBNFFpAkwJxHsmgJ+No5JrDNDlk1GEAtzrV+7pCRUN53aFXx8pMc5pF qdLZ79K8/uiCyXaJ5mJjbSV7gtV/Dp2rgeYPgtK0jGnc3Iv83Di6ExHJx+QmJM+a Ycf7nlCqSvxeymEyVo024JpIWrCgfZKg1YjNNLfODC2Yl1J476+P8kfJlJ+uSpEG 8z3X//lChifpOnuIHfAoyRoSRs3/tsuhrySuyKT0V4pBeguac9wPNtTmcaNA8P4o bG1+c6qKbm0b82k1I8T4MyUtRgbj7L6+FEy0gaPbxhogkrgbntNA -----END CERTIFICATE-----Generated at Tue Jul 14 20:57:59 2026 by rpki-client