$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e392e302f32342d3234203d3e2034383038.roa File: 34352e3235342e392e302f32342d3234203d3e2034383038.roa (raw, json) Hash identifier: V9cDWRBADDfMj7Gr+jGNeCURz0MN/608S9KkOjIS7nA= Subject key identifier: 2C:77:32:6F:A6:7F:12:CE:1F:AF:CE:92:C5:BE:D6:7F:CD:BE:7B:CA Certificate issuer: /CN=B5148646F2C451864E20696E4F1C926A098BC8D2 Certificate serial: 54D53A53D133E1B72E02845344E202F8F3F63D98 Authority key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e392e302f32342d3234203d3e2034383038.roa Signing time: Tue 23 Jun 2026 13:09:11 +0000 ROA not before: Tue 23 Jun 2026 13:04:11 +0000 ROA not after: Tue 22 Jun 2027 13:09:11 +0000 asID: 4808 IP address blocks: 45.254.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d5:3a:53:d1:33:e1:b7:2e:02:84:53:44:e2:02:f8:f3:f6:3d:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5148646F2C451864E20696E4F1C926A098BC8D2 Validity Not Before: Jun 23 13:04:11 2026 GMT Not After : Jun 22 13:09:11 2027 GMT Subject: CN=2C77326FA67F12CE1FAFCE92C5BED67FCDBE7BCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:80:20:e5:87:08:f4:8e:d7:46:9a:b0:ff:d3: ce:c4:11:3f:1b:5b:b1:61:38:97:38:41:24:d2:31: 0b:a0:30:34:61:3c:56:8a:f0:2c:32:ac:60:6d:b2: 5e:dd:3e:7b:01:52:7c:bc:84:df:55:b7:8e:a4:db: 28:ba:55:ba:56:e0:58:a6:f4:01:9a:7b:9a:0d:b9: b1:bc:92:c0:18:80:c3:e4:ec:48:22:9e:cd:a9:be: e9:e7:7d:06:8b:32:4f:54:b2:8b:f2:aa:4f:15:cc: ba:e4:7a:1b:91:f0:f8:57:18:b8:09:14:46:41:33: 77:19:9f:32:fc:7b:9a:b5:36:e2:e6:20:2b:15:8f: 70:f0:a0:e9:f5:0d:af:29:c4:e2:83:c3:ad:1f:68: d2:b4:b9:11:2b:f2:7b:f9:50:d6:47:a3:26:76:48: a1:f9:0e:d3:c0:a9:3f:60:6e:9c:48:b5:60:ec:89: 7e:b4:c3:69:db:12:7b:9b:26:24:da:cf:f6:18:d2: f6:e8:27:07:58:5e:61:84:c0:b9:4d:da:36:79:d8: b4:00:04:15:2c:e8:96:94:e1:d7:c0:46:84:1b:6f: 25:f2:ac:c3:d3:8d:e5:32:0e:ea:a0:d4:b9:b3:a7: 47:88:88:32:5e:dd:71:b9:7c:87:d0:8a:4f:19:9a: 2d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:77:32:6F:A6:7F:12:CE:1F:AF:CE:92:C5:BE:D6:7F:CD:BE:7B:CA X509v3 Authority Key Identifier: keyid:B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e392e302f32342d3234203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.254.9.0/24 Signature Algorithm: sha256WithRSAEncryption 85:9a:b8:62:48:02:d3:b1:18:5f:29:1b:1e:90:17:46:f1:13: bf:bd:aa:64:6f:0a:27:a6:b4:db:fd:11:7a:07:16:28:3c:10: 03:ec:98:bd:eb:2e:03:9f:0b:13:20:8e:19:4a:f7:03:4c:e8: 1e:c6:4b:b6:2d:c0:98:fd:b4:e4:c9:46:52:53:c0:3f:c7:f5: 05:be:56:fb:fd:6b:47:15:eb:a9:a1:06:de:c4:f9:c3:8c:75: 9b:ae:fa:87:b2:6a:dd:cc:0c:c3:09:1a:da:62:5a:d6:41:bf: c3:a7:82:8f:88:1c:71:61:8b:52:fd:8a:d8:e6:1b:4a:dd:c3: 1b:44:2b:83:b9:52:5f:cf:8c:8e:20:c8:13:0e:f8:31:a8:a6: c0:e1:80:19:8f:d6:91:e2:00:64:5e:44:b3:7d:5f:46:6a:b9: 25:32:77:e4:60:57:8e:17:bc:c1:1b:da:a5:08:72:10:a3:d0: d1:ca:4f:7f:d4:c5:f0:97:07:3a:95:98:e7:08:e1:8c:f2:5c: 95:c0:a3:72:88:46:f8:19:16:61:a6:d4:7a:83:b1:1c:93:bf: 0a:1a:b9:6d:a8:f4:40:0f:e1:64:b8:df:18:92:2b:11:bd:8a: 44:70:aa:80:07:78:13:e5:9c:40:66:d3:35:80:e2:62:84:52: 8a:da:00:ef -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUVNU6U9Ez4bcuAoRTROIC+PP2PZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEw OThCQzhEMjAeFw0yNjA2MjMxMzA0MTFaFw0yNzA2MjIxMzA5MTFaMDMxMTAvBgNV BAMTKDJDNzczMjZGQTY3RjEyQ0UxRkFGQ0U5MkM1QkVENjdGQ0RCRTdCQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbgCDlhwj0jtdGmrD/087EET8b W7FhOJc4QSTSMQugMDRhPFaK8CwyrGBtsl7dPnsBUny8hN9Vt46k2yi6VbpW4Fim 9AGae5oNubG8ksAYgMPk7Egins2pvunnfQaLMk9Usovyqk8VzLrkehuR8PhXGLgJ FEZBM3cZnzL8e5q1NuLmICsVj3DwoOn1Da8pxOKDw60faNK0uREr8nv5UNZHoyZ2 SKH5DtPAqT9gbpxItWDsiX60w2nbEnubJiTaz/YY0vboJwdYXmGEwLlN2jZ52LQA BBUs6JaU4dfARoQbbyXyrMPTjeUyDuqg1Lmzp0eIiDJe3XG5fIfQik8Zmi3BAgMB AAGjggINMIICCTAdBgNVHQ4EFgQULHcyb6Z/Es4fr86Sxb7Wf82+e8owHwYDVR0j BBgwFoAUtRSGRvLEUYZOIGluTxySagmLyNIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTM1NDAzNjg2OTQ2NDA4NS8wL0I1MTQ4NjQ2RjJDNDUxODY0RTIwNjk2RTRGMUM5 MjZBMDk4QkM4RDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEwOThCQzhEMi5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA5MzU0MDM2ODY5NDY0MDg1LzAvMzQzNTJlMzIzNTM0 MmUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzgzMDM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA Lf4JMA0GCSqGSIb3DQEBCwUAA4IBAQCFmrhiSALTsRhfKRsekBdG8RO/vapkbwon prTb/RF6BxYoPBAD7Ji96y4DnwsTII4ZSvcDTOgexku2LcCY/bTkyUZSU8A/x/UF vlb7/WtHFeupoQbexPnDjHWbrvqHsmrdzAzDCRraYlrWQb/Dp4KPiBxxYYtS/YrY 5htK3cMbRCuDuVJfz4yOIMgTDvgxqKbA4YAZj9aR4gBkXkSzfV9GarklMnfkYFeO F7zBG9qlCHIQo9DRyk9/1MXwlwc6lZjnCOGM8lyVwKNyiEb4GRZhptR6g7Eck78K GrltqPRAD+FkuN8YkisRvYpEcKqAB3gT5ZxAZtM1gOJihFKK2gDv -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:22 2026 by rpki-client