$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e382e302f32342d3234203d3e2034383038.roa File: 34352e3235342e382e302f32342d3234203d3e2034383038.roa (raw, json) Hash identifier: VpZ8FbBlmNhUuL/1VLo0qosPgq8i+8uaHFmEuk5tiDg= Subject key identifier: C8:9F:62:19:5A:64:F1:EA:85:EF:A8:BF:DE:07:81:35:FC:DE:76:28 Certificate issuer: /CN=B5148646F2C451864E20696E4F1C926A098BC8D2 Certificate serial: 7A3B1A13FAFA827EA5B21613A930AAE58D11768F Authority key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e382e302f32342d3234203d3e2034383038.roa Signing time: Tue 23 Jun 2026 13:06:07 +0000 ROA not before: Tue 23 Jun 2026 13:01:07 +0000 ROA not after: Tue 22 Jun 2027 13:06:07 +0000 asID: 4808 IP address blocks: 45.254.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:3b:1a:13:fa:fa:82:7e:a5:b2:16:13:a9:30:aa:e5:8d:11:76:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5148646F2C451864E20696E4F1C926A098BC8D2 Validity Not Before: Jun 23 13:01:07 2026 GMT Not After : Jun 22 13:06:07 2027 GMT Subject: CN=C89F62195A64F1EA85EFA8BFDE078135FCDE7628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a4:3e:78:20:14:33:e3:3b:76:eb:cb:e3:bb: 13:b2:6c:ac:17:df:46:64:48:41:e8:b2:85:d6:c6: f7:1e:ef:10:3d:f5:15:44:be:90:eb:0a:21:c4:53: ad:62:83:d8:64:24:bf:c9:30:ee:a5:ab:eb:69:70: 91:12:62:60:15:be:c6:83:5f:0c:c4:d9:26:2a:e8: d6:83:24:32:cb:aa:83:df:4d:70:1a:07:f5:4d:28: 64:d9:48:d6:67:55:e7:b5:b9:c4:4d:39:38:47:52: 12:38:1d:b2:7f:e7:cb:51:46:75:17:29:25:b3:63: 05:73:d4:20:4f:e3:19:77:1a:9e:40:2d:e0:e7:1a: a1:15:95:2d:f6:e8:1b:bb:15:dc:2d:7c:71:70:fc: 81:1e:17:00:23:cf:ae:2e:2b:33:0c:66:b4:2a:5a: 70:19:bb:cb:2e:f0:ae:62:68:b9:3c:b6:75:67:bf: 65:a7:b2:ba:ef:84:2a:61:ba:ab:bd:f8:51:e4:0a: 6d:aa:37:b3:fd:fd:cd:62:7a:7e:4f:c4:e2:f8:64: ec:af:57:c0:7d:0e:71:67:39:f2:2d:01:f4:5d:e8: 7e:c4:da:21:0f:79:b4:34:e1:ad:3d:de:33:7f:15: a8:0e:fe:92:c4:a0:9f:3a:82:1a:27:4b:45:5a:a8: fa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:9F:62:19:5A:64:F1:EA:85:EF:A8:BF:DE:07:81:35:FC:DE:76:28 X509v3 Authority Key Identifier: keyid:B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e382e302f32342d3234203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.254.8.0/24 Signature Algorithm: sha256WithRSAEncryption 79:e9:3f:f9:6d:6c:f3:d2:4c:81:5e:a9:10:82:bb:96:dd:6a: 43:c2:f4:2f:da:25:3f:d1:c1:e1:86:65:1b:53:63:3f:bc:7b: 48:cc:fb:12:08:62:4c:79:2b:af:3f:4c:19:31:eb:e3:30:ab: b8:df:39:1c:d1:16:3b:bd:39:3a:f8:4a:15:8e:ef:5b:52:53: a9:ec:83:83:cb:f5:88:c0:c1:9f:41:0a:5a:fa:f0:1e:07:3b: bd:30:83:b7:94:cd:da:c3:05:ea:6b:fa:e6:31:25:61:9e:10: f3:3e:58:aa:5e:cd:b8:8c:d9:20:1a:dc:9e:76:7c:e5:5b:bb: 49:5f:87:5f:ed:ae:f5:8f:3f:d7:ec:fc:d4:75:08:6b:15:5a: 3e:0e:3a:37:b0:10:19:da:5e:5d:66:ee:50:be:14:e2:eb:16: 42:b4:58:e8:b7:62:47:42:81:b9:38:70:29:36:7d:30:f5:79: 62:f9:59:60:2f:bb:cd:f9:00:ee:27:16:90:bd:38:45:f7:b2: d2:84:96:46:14:15:fb:5e:b4:f4:2d:48:c2:a2:26:52:54:42: d2:1b:9c:d6:78:5e:20:15:a7:18:d2:26:a3:1f:97:4e:f6:fb: 72:f4:30:bd:6d:0b:fe:f2:49:c4:90:88:05:45:ca:6f:e5:62: 2d:76:ba:89 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUejsaE/r6gn6lshYTqTCq5Y0Rdo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEw OThCQzhEMjAeFw0yNjA2MjMxMzAxMDdaFw0yNzA2MjIxMzA2MDdaMDMxMTAvBgNV BAMTKEM4OUY2MjE5NUE2NEYxRUE4NUVGQThCRkRFMDc4MTM1RkNERTc2MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcpD54IBQz4zt268vjuxOybKwX 30ZkSEHosoXWxvce7xA99RVEvpDrCiHEU61ig9hkJL/JMO6lq+tpcJESYmAVvsaD XwzE2SYq6NaDJDLLqoPfTXAaB/VNKGTZSNZnVee1ucRNOThHUhI4HbJ/58tRRnUX KSWzYwVz1CBP4xl3Gp5ALeDnGqEVlS326Bu7FdwtfHFw/IEeFwAjz64uKzMMZrQq WnAZu8su8K5iaLk8tnVnv2WnsrrvhCphuqu9+FHkCm2qN7P9/c1ien5PxOL4ZOyv V8B9DnFnOfItAfRd6H7E2iEPebQ04a093jN/FagO/pLEoJ86ghonS0VaqPqPAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUyJ9iGVpk8eqF76i/3geBNfzedigwHwYDVR0j BBgwFoAUtRSGRvLEUYZOIGluTxySagmLyNIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTM1NDAzNjg2OTQ2NDA4NS8wL0I1MTQ4NjQ2RjJDNDUxODY0RTIwNjk2RTRGMUM5 MjZBMDk4QkM4RDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEwOThCQzhEMi5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA5MzU0MDM2ODY5NDY0MDg1LzAvMzQzNTJlMzIzNTM0 MmUzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzgzMDM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA Lf4IMA0GCSqGSIb3DQEBCwUAA4IBAQB56T/5bWzz0kyBXqkQgruW3WpDwvQv2iU/ 0cHhhmUbU2M/vHtIzPsSCGJMeSuvP0wZMevjMKu43zkc0RY7vTk6+EoVju9bUlOp 7IODy/WIwMGfQQpa+vAeBzu9MIO3lM3awwXqa/rmMSVhnhDzPliqXs24jNkgGtye dnzlW7tJX4df7a71jz/X7PzUdQhrFVo+Djo3sBAZ2l5dZu5QvhTi6xZCtFjot2JH QoG5OHApNn0w9Xli+VlgL7vN+QDuJxaQvThF97LShJZGFBX7XrT0LUjCoiZSVELS G5zWeF4gFacY0iajH5dO9vty9DC9bQv+8knEkIgFRcpv5WItdrqJ -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:21 2026 by rpki-client