$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e392e302f32342d3234203d3e2034383437.roa File: 34352e3235342e392e302f32342d3234203d3e2034383437.roa (raw, json) Hash identifier: 9KMtusMUgjBGmA/TbBwckDV/WMFxBB9kkTkmv+BGjxQ= Subject key identifier: 4D:12:34:D4:BA:01:4F:29:8A:97:BA:D4:40:36:60:9A:02:E9:EE:7F Certificate issuer: /CN=B5148646F2C451864E20696E4F1C926A098BC8D2 Certificate serial: 1AC09972C3F1FC56625490847EB0A1AFD83642EB Authority key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e392e302f32342d3234203d3e2034383437.roa Signing time: Tue 23 Jun 2026 13:09:11 +0000 ROA not before: Tue 23 Jun 2026 13:04:11 +0000 ROA not after: Tue 22 Jun 2027 13:09:11 +0000 asID: 4847 IP address blocks: 45.254.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c0:99:72:c3:f1:fc:56:62:54:90:84:7e:b0:a1:af:d8:36:42:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5148646F2C451864E20696E4F1C926A098BC8D2 Validity Not Before: Jun 23 13:04:11 2026 GMT Not After : Jun 22 13:09:11 2027 GMT Subject: CN=4D1234D4BA014F298A97BAD44036609A02E9EE7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6c:db:62:26:9c:cd:53:2f:35:03:46:35:06: 7d:95:6c:f6:02:9c:14:a3:5d:fd:f1:14:d1:36:00: 31:82:cd:c8:ba:eb:80:2e:03:fd:3d:8c:96:de:43: 4b:7b:8a:78:ea:23:41:98:01:c6:18:56:cf:53:1e: 7a:1c:db:cb:e9:91:15:e6:b0:61:7a:4f:8c:44:4c: 8b:8e:59:e6:f8:8d:52:5f:8b:d8:46:64:7b:57:0b: af:ad:0f:33:1e:f0:fd:8e:d9:33:10:8b:3b:df:73: 67:d6:73:8e:b4:f3:f1:f3:df:e5:78:4b:8c:e5:8e: 0f:53:66:ba:1b:b6:74:88:31:a4:55:06:40:26:25: 35:09:b3:3a:3b:30:59:aa:63:56:5b:9c:44:f4:13: 79:a6:58:b8:ef:b2:6f:0b:d6:5c:28:cc:e5:bd:63: 91:6b:a3:bd:0c:52:63:45:dc:f7:a8:0e:57:ad:42: ef:e3:b4:83:c1:54:ba:60:7c:fb:60:84:57:04:3d: 60:0a:0b:59:c6:a0:03:84:53:58:18:fc:06:c1:2b: 08:bb:c4:5d:a7:9c:80:21:7f:9e:93:b5:1c:fb:01: 78:70:67:15:84:7e:93:96:9f:fc:19:d8:7b:79:4c: 7f:d0:86:b8:97:fd:fe:28:d8:2d:d8:0a:bb:b4:6b: 08:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:12:34:D4:BA:01:4F:29:8A:97:BA:D4:40:36:60:9A:02:E9:EE:7F X509v3 Authority Key Identifier: keyid:B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e392e302f32342d3234203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.254.9.0/24 Signature Algorithm: sha256WithRSAEncryption 82:4d:93:ee:17:a9:d3:ec:6e:72:17:6f:c5:dc:80:05:0b:e0: c3:68:b9:e3:e1:0c:8a:b4:3c:b3:a7:67:8e:f8:1e:d0:8c:9e: 43:06:4f:32:0a:59:40:fb:40:be:37:ec:bd:66:76:6f:76:df: 3e:8c:ca:91:b4:a6:59:fb:41:22:c9:90:bc:c4:dc:eb:03:5f: e4:3f:c3:8f:11:07:aa:5d:80:fb:32:7a:3d:45:df:e7:15:16: db:57:b9:46:b2:88:45:0b:2d:25:82:b9:75:64:7f:f7:76:11: 69:e8:fa:f6:37:88:aa:ca:3b:36:bf:ad:c0:41:ef:5b:be:b4: b5:03:9f:6d:66:73:51:8d:f7:3f:d0:c6:68:10:52:c3:86:81: 4d:b2:62:da:ff:ea:6d:f2:9c:2b:d0:3b:c1:2e:59:6b:22:d3: 70:4e:fb:8b:48:e4:94:8f:df:a3:c4:a7:cb:e2:42:72:bf:d2: 6e:26:8e:94:d2:b2:bc:90:cb:19:6a:76:bd:b5:60:c4:22:34: 48:b2:24:b0:7a:31:f5:ab:4b:19:d6:d5:e7:8a:07:fb:2c:a2: 98:13:c4:6f:c2:9e:4d:d8:26:07:91:da:f1:fd:cf:2a:ca:55: 54:ee:51:3e:3c:a4:be:6e:b4:2d:5b:ba:f5:1a:9a:f7:8b:45: 35:2d:e4:9d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUGsCZcsPx/FZiVJCEfrChr9g2QuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEw OThCQzhEMjAeFw0yNjA2MjMxMzA0MTFaFw0yNzA2MjIxMzA5MTFaMDMxMTAvBgNV BAMTKDREMTIzNEQ0QkEwMTRGMjk4QTk3QkFENDQwMzY2MDlBMDJFOUVFN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNbNtiJpzNUy81A0Y1Bn2VbPYC nBSjXf3xFNE2ADGCzci664AuA/09jJbeQ0t7injqI0GYAcYYVs9THnoc28vpkRXm sGF6T4xETIuOWeb4jVJfi9hGZHtXC6+tDzMe8P2O2TMQizvfc2fWc4608/Hz3+V4 S4zljg9TZrobtnSIMaRVBkAmJTUJszo7MFmqY1ZbnET0E3mmWLjvsm8L1lwozOW9 Y5Fro70MUmNF3PeoDletQu/jtIPBVLpgfPtghFcEPWAKC1nGoAOEU1gY/AbBKwi7 xF2nnIAhf56TtRz7AXhwZxWEfpOWn/wZ2Ht5TH/QhriX/f4o2C3YCru0awgJAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUTRI01LoBTymKl7rUQDZgmgLp7n8wHwYDVR0j BBgwFoAUtRSGRvLEUYZOIGluTxySagmLyNIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTM1NDAzNjg2OTQ2NDA4NS8wL0I1MTQ4NjQ2RjJDNDUxODY0RTIwNjk2RTRGMUM5 MjZBMDk4QkM4RDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEwOThCQzhEMi5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA5MzU0MDM2ODY5NDY0MDg1LzAvMzQzNTJlMzIzNTM0 MmUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzgzNDM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA Lf4JMA0GCSqGSIb3DQEBCwUAA4IBAQCCTZPuF6nT7G5yF2/F3IAFC+DDaLnj4QyK tDyzp2eO+B7QjJ5DBk8yCllA+0C+N+y9ZnZvdt8+jMqRtKZZ+0EiyZC8xNzrA1/k P8OPEQeqXYD7Mno9Rd/nFRbbV7lGsohFCy0lgrl1ZH/3dhFp6Pr2N4iqyjs2v63A Qe9bvrS1A59tZnNRjfc/0MZoEFLDhoFNsmLa/+pt8pwr0DvBLllrItNwTvuLSOSU j9+jxKfL4kJyv9JuJo6U0rK8kMsZana9tWDEIjRIsiSwejH1q0sZ1tXnigf7LKKY E8Rvwp5N2CYHkdrx/c8qylVU7lE+PKS+brQtW7r1Gpr3i0U1LeSd -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:21 2026 by rpki-client