$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/34352e3132332e38382e302f32322d3232203d3e2030.roa File: 34352e3132332e38382e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: lG2ZbbxJfaw+5iiNSQjEHzUDh8G7c0RlQSM5zwPNhl8= Subject key identifier: 78:F0:9A:70:41:62:21:A1:CB:F2:DB:70:63:AF:2C:C1:11:EC:DE:5E Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Certificate serial: 09C229582A8A360080853375347E0D85F14FC674 Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/34352e3132332e38382e302f32322d3232203d3e2030.roa Signing time: Tue 12 May 2026 05:39:45 +0000 ROA not before: Tue 12 May 2026 05:34:45 +0000 ROA not after: Tue 11 May 2027 05:39:45 +0000 asID: 0 IP address blocks: 45.123.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c2:29:58:2a:8a:36:00:80:85:33:75:34:7e:0d:85:f1:4f:c6:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Validity Not Before: May 12 05:34:45 2026 GMT Not After : May 11 05:39:45 2027 GMT Subject: CN=78F09A70416221A1CBF2DB7063AF2CC111ECDE5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:23:33:15:c6:3c:01:eb:bf:9a:e8:ac:6b:fc: a2:3c:24:cf:0a:03:0f:dd:08:9b:fc:0a:40:80:5d: c6:a6:33:22:2a:b0:48:36:a5:e7:87:90:fb:37:e3: b5:b1:b4:0f:ad:25:77:d9:e3:d8:69:0e:13:a1:78: 2f:fe:74:45:36:ae:53:0a:c7:ae:77:69:f4:32:50: e0:bc:e4:ba:14:3f:ab:ab:64:6a:81:cb:be:a5:e3: 62:1a:45:c7:86:fd:b0:e1:a2:e6:78:4c:d0:50:96: 9c:4a:11:49:90:ae:e5:51:b7:4a:c6:39:56:92:54: 72:31:ff:49:07:26:2d:69:91:de:7b:9c:51:0f:14: 15:a0:c4:49:b9:70:00:c1:22:ad:7a:4c:6e:d4:29: ea:d5:6f:c3:54:4e:20:c0:ef:74:23:46:62:8c:e0: 81:3b:f7:80:bc:74:16:f2:80:44:df:ab:51:f0:36: aa:7a:c4:ab:57:60:10:0e:32:06:a3:79:87:bb:9f: 14:31:09:f3:b1:34:8b:32:85:bb:84:7f:b8:b4:cf: 2b:8d:a6:44:24:06:ba:be:50:31:5c:54:41:6e:6a: 18:d2:62:2a:81:ec:5a:2e:e5:4d:8a:f8:38:00:68: 68:b5:93:46:74:04:96:e0:fe:73:53:14:c0:3f:87: 93:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F0:9A:70:41:62:21:A1:CB:F2:DB:70:63:AF:2C:C1:11:EC:DE:5E X509v3 Authority Key Identifier: keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/34352e3132332e38382e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.123.88.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:83:5d:9e:03:6d:7b:bd:c4:62:2c:40:28:bb:3a:f9:eb:56: 6e:a9:7a:4f:7f:26:29:60:62:e9:f5:e0:9e:23:82:29:7f:14: 89:6c:0d:d4:e0:6d:83:06:f1:0c:8e:e0:da:4b:63:27:74:f4: 53:39:59:9c:68:6f:30:0c:c1:e4:87:e1:d6:76:e8:6e:8d:fe: 95:79:40:f8:47:7f:ac:b4:7b:b0:31:87:0d:14:4c:07:19:42: 20:bd:e4:54:d6:77:d9:f7:a9:91:36:ef:2b:95:b2:d6:77:ef: 02:30:3a:c2:7b:12:0a:da:0d:e0:d9:a2:3e:6e:9e:2a:88:df: 1b:8c:5e:f7:ab:53:b0:35:a6:93:f2:5b:87:11:1b:97:40:74: 96:40:cc:41:a5:fc:4f:c1:cf:a5:91:70:28:b0:b3:6b:89:e8: aa:51:a4:7e:4c:e2:c1:56:78:65:6c:17:1d:87:a0:dc:66:e8: f0:3d:95:98:ce:d6:d4:52:4f:0e:4f:11:5a:71:69:bc:98:14: 1c:24:d7:1e:e7:b7:a8:a6:c0:75:ba:e8:bd:1b:00:94:69:8f: 63:bf:92:53:fb:af:78:6a:f9:db:83:bd:83:48:e8:dd:10:1d: d7:fd:f6:cc:1b:42:30:4f:f3:11:7d:d7:15:c5:78:1c:fb:7c: f6:b2:b9:f4 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUCcIpWCqKNgCAhTN1NH4NhfFPxnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw NUJEOTUxNTAeFw0yNjA1MTIwNTM0NDVaFw0yNzA1MTEwNTM5NDVaMDMxMTAvBgNV BAMTKDc4RjA5QTcwNDE2MjIxQTFDQkYyREI3MDYzQUYyQ0MxMTFFQ0RFNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9IzMVxjwB67+a6Kxr/KI8JM8K Aw/dCJv8CkCAXcamMyIqsEg2peeHkPs347WxtA+tJXfZ49hpDhOheC/+dEU2rlMK x653afQyUOC85LoUP6urZGqBy76l42IaRceG/bDhouZ4TNBQlpxKEUmQruVRt0rG OVaSVHIx/0kHJi1pkd57nFEPFBWgxEm5cADBIq16TG7UKerVb8NUTiDA73QjRmKM 4IE794C8dBbygETfq1HwNqp6xKtXYBAOMgajeYe7nxQxCfOxNIsyhbuEf7i0zyuN pkQkBrq+UDFcVEFuahjSYiqB7Fou5U2K+DgAaGi1k0Z0BJbg/nNTFMA/h5PvAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUePCacEFiIaHL8ttwY68swRHs3l4wHwYDVR0j BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3 NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3OTQzOTM5LzAvMzQzNTJlMzEzMjMz MmUzODM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIte1gw DQYJKoZIhvcNAQELBQADggEBAG+DXZ4DbXu9xGIsQCi7OvnrVm6pek9/JilgYun1 4J4jgil/FIlsDdTgbYMG8QyO4NpLYyd09FM5WZxobzAMweSH4dZ26G6N/pV5QPhH f6y0e7Axhw0UTAcZQiC95FTWd9n3qZE27yuVstZ37wIwOsJ7EgraDeDZoj5uniqI 3xuMXverU7A1ppPyW4cRG5dAdJZAzEGl/E/Bz6WRcCiws2uJ6KpRpH5M4sFWeGVs Fx2HoNxm6PA9lZjO1tRSTw5PEVpxabyYFBwk1x7nt6imwHW66L0bAJRpj2O/klP7 r3hq+duDvYNI6N0QHdf99swbQjBP8xF91xXFeBz7fPayufQ= -----END CERTIFICATE-----Generated at Wed May 13 05:43:46 2026 by rpki-client