$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/34352e3131352e34342e302f32322d3232203d3e2034383131.roa File: 34352e3131352e34342e302f32322d3232203d3e2034383131.roa (raw, json) Hash identifier: y/MSFBJdojfDrNGDV6JXxCEFfy6JVkgRu8xQqlGA1+o= Subject key identifier: 67:04:37:14:F9:CF:5E:31:03:EF:80:D5:07:7B:72:D3:EA:9A:6A:49 Certificate issuer: /CN=8421F0680EB1B3756485D0F7681F78067E9C172E Certificate serial: 5136FF1C3AB56E3A6495AEF2FB958A5EF0660C5D Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/34352e3131352e34342e302f32322d3232203d3e2034383131.roa Signing time: Sat 09 May 2026 11:55:54 +0000 ROA not before: Sat 09 May 2026 11:50:54 +0000 ROA not after: Sat 08 May 2027 11:55:54 +0000 asID: 4811 IP address blocks: 45.115.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 14:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:36:ff:1c:3a:b5:6e:3a:64:95:ae:f2:fb:95:8a:5e:f0:66:0c:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E Validity Not Before: May 9 11:50:54 2026 GMT Not After : May 8 11:55:54 2027 GMT Subject: CN=67043714F9CF5E3103EF80D5077B72D3EA9A6A49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:6f:f2:a6:c7:7f:95:ff:f8:9d:9b:16:e0:d6: 98:35:fe:b7:2a:6f:c1:5f:c7:c4:72:81:bb:a7:d6: 7f:3a:db:24:a1:77:e4:a0:df:62:c2:07:31:90:6d: 84:eb:fe:dd:5c:b6:e7:9a:44:89:b9:50:d8:a8:c0: 8c:a5:17:1e:db:f2:70:ab:ae:e2:ea:e8:25:67:9e: a0:83:cc:74:97:60:2e:84:2e:09:07:06:ac:67:4c: bc:32:d6:ef:e4:43:5d:39:ba:6f:a4:40:04:aa:4a: a6:8a:66:e8:e1:59:58:c7:76:ae:8c:d7:f9:3b:bf: d0:49:53:e9:6e:bd:42:78:46:01:9a:f0:7f:9e:31: d6:81:97:d2:a1:26:f7:bf:6f:15:0e:f7:1f:2b:6e: 92:0d:f8:9e:ab:18:46:0f:a8:61:5d:06:a3:14:50: e0:9c:33:33:4f:9b:47:94:b3:8b:7e:db:67:84:75: f4:b2:35:57:2c:65:a6:29:db:c6:7f:ca:c9:16:c0: 66:56:9f:8d:4b:c4:7a:0d:0f:20:25:48:bf:cf:04: 97:33:4b:94:3d:ac:32:05:81:8c:99:41:55:2f:ef: 98:b3:e5:93:8c:e5:13:75:68:b1:1c:bf:85:1b:2c: 18:a9:fc:97:f6:5d:30:c7:e3:9b:3f:40:7d:8a:68: 72:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:04:37:14:F9:CF:5E:31:03:EF:80:D5:07:7B:72:D3:EA:9A:6A:49 X509v3 Authority Key Identifier: keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/34352e3131352e34342e302f32322d3232203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.115.44.0/22 Signature Algorithm: sha256WithRSAEncryption 08:68:07:61:bd:7d:a2:d6:79:e8:32:55:69:f0:aa:46:2a:d3: 5a:ca:f2:f2:a4:a8:a6:c0:8b:ec:be:a6:dc:d0:b9:30:84:7b: ce:16:b8:4e:da:7d:4e:fd:ed:c9:30:f8:2e:c0:c7:b8:df:61: db:14:9a:6e:fb:6d:31:21:7b:4c:ac:c0:01:6a:55:78:5b:73: 7f:0b:1d:f6:1d:27:cd:c0:59:35:ef:0c:a4:b9:c4:01:3f:8b: b3:de:e3:3c:5f:22:33:04:2f:de:61:eb:91:b1:bb:d5:3d:11: e1:80:3b:6e:08:96:d6:ef:83:dd:52:ca:2f:d3:8e:2b:f4:f0: ba:29:e3:0d:df:46:59:98:4e:18:73:e4:0c:28:b3:1e:39:f9: 10:70:4e:21:09:f6:c9:32:23:11:cb:de:ee:43:ec:4f:d3:ff: a8:21:4b:c2:96:60:66:c8:ee:f3:05:8c:73:bf:ba:71:ed:17: f2:00:5c:9d:16:26:b9:9a:de:d9:18:80:c4:b5:3d:1b:ff:dd: b6:9c:26:83:1a:5e:72:b9:71:13:f3:8c:3d:55:12:a5:6c:bd: d7:6a:0c:38:a3:5c:a6:f9:c6:26:0e:0a:42:07:a9:72:16:4c: b3:c0:e2:12:38:be:3a:b5:a1:06:38:e8:2c:9f:0e:3d:7d:56: bf:0f:aa:41 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUUTb/HDq1bjpkla7y+5WKXvBmDF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3 RTlDMTcyRTAeFw0yNjA1MDkxMTUwNTRaFw0yNzA1MDgxMTU1NTRaMDMxMTAvBgNV BAMTKDY3MDQzNzE0RjlDRjVFMzEwM0VGODBENTA3N0I3MkQzRUE5QTZBNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5b/Kmx3+V//idmxbg1pg1/rcq b8Ffx8Rygbun1n862yShd+Sg32LCBzGQbYTr/t1ctueaRIm5UNiowIylFx7b8nCr ruLq6CVnnqCDzHSXYC6ELgkHBqxnTLwy1u/kQ105um+kQASqSqaKZujhWVjHdq6M 1/k7v9BJU+luvUJ4RgGa8H+eMdaBl9KhJve/bxUO9x8rbpIN+J6rGEYPqGFdBqMU UOCcMzNPm0eUs4t+22eEdfSyNVcsZaYp28Z/yskWwGZWn41LxHoNDyAlSL/PBJcz S5Q9rDIFgYyZQVUv75iz5ZOM5RN1aLEcv4UbLBip/Jf2XTDH45s/QH2KaHKhAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUZwQ3FPnPXjED74DVB3ty0+qaakkwHwYDVR0j BBgwFoAUhCHwaA6xs3VkhdD3aB94Bn6cFy4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzQ3MTg3My8wLzg0MjFGMDY4MEVCMUIzNzU2NDg1RDBGNzY4MUY3 ODA2N0U5QzE3MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3RTlDMTcyRS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NDcxODczLzAvMzQzNTJlMzEzMTM1 MmUzNDM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzQzODMxMzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAItcywwDQYJKoZIhvcNAQELBQADggEBAAhoB2G9faLWeegyVWnwqkYq01rK8vKk qKbAi+y+ptzQuTCEe84WuE7afU797ckw+C7Ax7jfYdsUmm77bTEhe0yswAFqVXhb c38LHfYdJ83AWTXvDKS5xAE/i7Pe4zxfIjMEL95h65Gxu9U9EeGAO24Iltbvg91S yi/Tjiv08Lop4w3fRlmYThhz5Awosx45+RBwTiEJ9skyIxHL3u5D7E/T/6ghS8KW YGbI7vMFjHO/unHtF/IAXJ0WJrma3tkYgMS1PRv/3bacJoMaXnK5cRPzjD1VEqVs vddqDDijXKb5xiYOCkIHqXIWTLPA4hI4vjq1oQY46CyfDj19Vr8PqkE= -----END CERTIFICATE-----Generated at Wed May 13 07:52:44 2026 by rpki-client