$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e382e302f32342d3234203d3e2034383437.roa File: 34352e3235342e382e302f32342d3234203d3e2034383437.roa (raw, json) Hash identifier: +hAqXWTni4XLLYmJ7GcuPp0Na8xp4NPXQIH+R4INNCM= Subject key identifier: 9A:7E:E1:54:05:B5:D9:4C:87:3F:12:4F:A8:86:1B:E2:F5:18:E2:D0 Certificate issuer: /CN=B5148646F2C451864E20696E4F1C926A098BC8D2 Certificate serial: 7EF1F244C8167A5709C76FEC8D52FF050D332225 Authority key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e382e302f32342d3234203d3e2034383437.roa Signing time: Tue 23 Jun 2026 13:06:07 +0000 ROA not before: Tue 23 Jun 2026 13:01:07 +0000 ROA not after: Tue 22 Jun 2027 13:06:07 +0000 asID: 4847 IP address blocks: 45.254.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:f1:f2:44:c8:16:7a:57:09:c7:6f:ec:8d:52:ff:05:0d:33:22:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5148646F2C451864E20696E4F1C926A098BC8D2 Validity Not Before: Jun 23 13:01:07 2026 GMT Not After : Jun 22 13:06:07 2027 GMT Subject: CN=9A7EE15405B5D94C873F124FA8861BE2F518E2D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:21:97:c3:cc:68:29:c3:f5:a0:f9:5c:9b:c5: 33:0c:c2:73:8d:e0:a1:b0:6e:39:c3:cd:85:4d:d4: 85:54:b5:6d:a7:f4:f1:34:19:bd:58:40:f0:87:e8: ad:cc:53:73:ea:71:89:53:42:0f:f0:1d:66:36:52: a0:ef:ba:68:eb:80:0a:a8:b2:7f:86:94:f4:97:e6: 27:1a:8f:02:ad:67:af:40:97:3e:d7:38:e0:c5:97: 07:1e:18:06:0b:95:d6:29:72:bc:2f:5d:48:b1:1c: f8:3f:a9:89:ac:07:26:e2:e5:42:db:d4:2f:83:cb: 78:9b:15:09:1c:34:9b:96:ac:52:45:80:ce:4f:68: b9:66:50:cb:15:45:c0:9f:b8:fb:5d:6a:6a:96:73: 00:4f:f2:17:41:b9:c5:fe:69:39:4f:1e:46:44:1d: d2:22:13:20:40:e1:d4:57:ff:fe:13:9f:b2:c9:45: 5d:37:1e:17:ab:ca:66:5d:3e:f7:8a:e1:6e:aa:2c: 47:10:d6:d2:5c:29:94:3f:0a:79:44:29:32:6c:67: 38:6d:0a:9f:f4:e6:10:e0:1d:01:19:1b:4a:6e:2d: 55:59:c5:43:f6:d2:c3:7c:27:f5:48:5a:78:ce:9f: 36:d7:ff:53:8d:3c:38:d1:e4:98:40:79:9b:56:c3: 13:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7E:E1:54:05:B5:D9:4C:87:3F:12:4F:A8:86:1B:E2:F5:18:E2:D0 X509v3 Authority Key Identifier: keyid:B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e382e302f32342d3234203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.254.8.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:7a:8d:25:de:fc:ed:e1:ac:cd:3c:d2:a8:d7:37:98:9b:25: f9:2d:5c:b9:24:d7:19:36:bc:38:cf:01:f7:6a:2f:6c:d7:89: b0:c9:ff:ee:5d:95:f3:3d:51:d0:09:57:3d:55:96:7a:74:19: 04:c2:2b:2f:c6:63:3d:3a:fa:19:1b:a4:76:09:20:a4:24:b2: e8:b5:48:69:53:e7:4b:6d:ea:94:47:60:3c:c4:fa:a5:32:5d: 33:c6:2c:b4:10:54:9c:27:dc:d7:9a:78:78:15:0c:e4:4f:ba: 97:dd:b9:a2:97:9e:e4:c0:43:b3:db:ec:2c:a4:32:78:23:49: 28:0b:dc:c3:ac:4e:cd:be:e3:27:fc:97:c1:9c:b2:e5:25:a6: 0a:58:b7:ae:3e:e4:d8:c8:bf:a4:d9:c8:18:ca:01:e3:05:e2: 6a:19:58:bb:d7:ce:4c:18:f3:a2:3f:cc:c4:a4:11:66:b1:02: 15:3d:a1:c3:a3:8a:dd:03:bd:42:49:dc:78:2d:4e:7a:73:d0: 79:8a:db:da:18:f2:21:ab:4c:fd:64:63:57:60:b1:5a:2e:c0: 4d:fe:28:6b:58:51:d7:6e:ff:7a:55:f3:36:ba:3f:76:cd:0a: 96:86:9b:5a:d2:0d:5d:b8:2f:9c:67:81:91:73:d3:1c:3f:3a: 96:60:5c:f4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUfvHyRMgWelcJx2/sjVL/BQ0zIiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEw OThCQzhEMjAeFw0yNjA2MjMxMzAxMDdaFw0yNzA2MjIxMzA2MDdaMDMxMTAvBgNV BAMTKDlBN0VFMTU0MDVCNUQ5NEM4NzNGMTI0RkE4ODYxQkUyRjUxOEUyRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDIZfDzGgpw/Wg+VybxTMMwnON 4KGwbjnDzYVN1IVUtW2n9PE0Gb1YQPCH6K3MU3PqcYlTQg/wHWY2UqDvumjrgAqo sn+GlPSX5icajwKtZ69Alz7XOODFlwceGAYLldYpcrwvXUixHPg/qYmsBybi5ULb 1C+Dy3ibFQkcNJuWrFJFgM5PaLlmUMsVRcCfuPtdamqWcwBP8hdBucX+aTlPHkZE HdIiEyBA4dRX//4Tn7LJRV03HherymZdPveK4W6qLEcQ1tJcKZQ/CnlEKTJsZzht Cp/05hDgHQEZG0puLVVZxUP20sN8J/VIWnjOnzbX/1ONPDjR5JhAeZtWwxObAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUmn7hVAW12UyHPxJPqIYb4vUY4tAwHwYDVR0j BBgwFoAUtRSGRvLEUYZOIGluTxySagmLyNIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTM1NDAzNjg2OTQ2NDA4NS8wL0I1MTQ4NjQ2RjJDNDUxODY0RTIwNjk2RTRGMUM5 MjZBMDk4QkM4RDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEwOThCQzhEMi5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA5MzU0MDM2ODY5NDY0MDg1LzAvMzQzNTJlMzIzNTM0 MmUzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzgzNDM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA Lf4IMA0GCSqGSIb3DQEBCwUAA4IBAQCNeo0l3vzt4azNPNKo1zeYmyX5LVy5JNcZ Nrw4zwH3ai9s14mwyf/uXZXzPVHQCVc9VZZ6dBkEwisvxmM9OvoZG6R2CSCkJLLo tUhpU+dLbeqUR2A8xPqlMl0zxiy0EFScJ9zXmnh4FQzkT7qX3bmil57kwEOz2+ws pDJ4I0koC9zDrE7NvuMn/JfBnLLlJaYKWLeuPuTYyL+k2cgYygHjBeJqGVi7185M GPOiP8zEpBFmsQIVPaHDo4rdA71CSdx4LU56c9B5itvaGPIhq0z9ZGNXYLFaLsBN /ihrWFHXbv96VfM2uj92zQqWhpta0g1duC+cZ4GRc9McPzqWYFz0 -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:21 2026 by rpki-client