$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/34352e3131362e35322e302f32322d3232203d3e203435303631.roa File: 34352e3131362e35322e302f32322d3232203d3e203435303631.roa (raw, json) Hash identifier: Q2GLAzJCuXolF8zvE4SK4DiSfrkjkP04MyuCM9i3+zc= Subject key identifier: 2C:EA:9C:CB:11:CB:CF:AF:3F:E0:4F:49:51:A2:6A:A9:50:06:9D:74 Certificate issuer: /CN=8421F0680EB1B3756485D0F7681F78067E9C172E Certificate serial: 530EF798BE4EC32FD09A35E72093561544C21CA6 Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/34352e3131362e35322e302f32322d3232203d3e203435303631.roa Signing time: Sat 09 May 2026 11:55:55 +0000 ROA not before: Sat 09 May 2026 11:50:55 +0000 ROA not after: Sat 08 May 2027 11:55:55 +0000 asID: 45061 IP address blocks: 45.116.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:0e:f7:98:be:4e:c3:2f:d0:9a:35:e7:20:93:56:15:44:c2:1c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E Validity Not Before: May 9 11:50:55 2026 GMT Not After : May 8 11:55:55 2027 GMT Subject: CN=2CEA9CCB11CBCFAF3FE04F4951A26AA950069D74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3b:43:8c:6a:65:5d:ed:08:b2:b2:79:32:ea: 95:0b:6c:55:a5:b6:44:2f:fd:92:c2:d2:77:00:f3: cb:25:de:66:95:c0:09:9d:6f:7a:80:2f:41:63:fd: e0:96:00:50:2e:a8:c1:8f:68:42:7e:6f:f4:25:12: 6b:99:bc:ec:53:c1:e9:c6:66:7f:ca:15:79:2b:59: a9:f6:d1:64:8a:f5:40:08:b6:72:8e:ae:8b:ef:4c: 51:ca:07:7f:9a:98:69:83:f3:a0:0b:46:0a:aa:64: 1f:ff:12:e1:11:67:e9:d3:94:1f:e7:7e:56:0a:64: 0b:c6:45:88:fe:11:47:17:93:b8:30:91:74:3e:08: 5f:c1:e6:2a:e8:9b:b5:19:11:9d:92:e7:d6:06:7c: 7e:c2:e8:98:e9:a7:c4:43:b2:df:f6:48:0d:33:19: 12:b5:04:54:57:20:62:59:a5:1b:19:7f:dd:ea:b3: 7f:29:a5:cc:00:93:fa:29:b8:7d:a5:83:2d:ad:27: 69:e0:4b:ac:91:5a:28:99:19:3a:d4:f3:39:36:cb: 70:3d:7b:c9:fa:2b:3d:5c:8d:e7:44:09:2d:8d:bc: 2d:e2:04:a2:94:16:cb:f5:10:74:9a:9a:f7:c1:4f: 03:0b:7d:fc:78:b7:c8:4d:3c:19:92:c8:33:47:4d: c5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:EA:9C:CB:11:CB:CF:AF:3F:E0:4F:49:51:A2:6A:A9:50:06:9D:74 X509v3 Authority Key Identifier: keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/34352e3131362e35322e302f32322d3232203d3e203435303631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.116.52.0/22 Signature Algorithm: sha256WithRSAEncryption 69:93:a3:47:58:43:a5:de:72:19:ec:bd:cf:b0:62:de:a1:c7: 96:af:02:dc:6b:12:c9:25:ad:82:a9:7b:c3:52:35:e5:09:64: 1a:0f:fb:cc:8b:79:2c:3a:94:26:e0:f5:f4:d5:f5:b7:c8:f5: 18:c7:41:bc:8b:59:50:1e:8f:cf:aa:83:fa:92:d4:36:1c:0b: 4b:35:4d:72:2c:9e:0e:bf:71:0c:6d:f1:d9:d9:44:39:78:b1: 34:dc:2a:04:9a:57:7c:8b:14:86:0c:39:26:5f:65:fd:6d:67: 45:6d:53:06:e3:cb:bb:1d:50:9f:0f:94:38:e5:e0:88:cb:75: 5b:4e:4a:16:c2:99:f9:be:a6:17:12:ab:56:44:f5:72:0e:ce: 8b:2f:3f:5f:8e:24:fa:2a:9f:e0:2a:ee:13:6a:2c:80:09:35: 86:82:82:51:f9:18:ea:a6:b0:c9:61:28:34:b4:d6:1b:24:f9: 09:6a:2d:9b:54:04:2b:e6:2b:95:ee:ba:5b:dc:6a:38:c0:1c: 56:5c:2b:77:33:95:4b:d6:44:41:8a:c3:28:53:6c:93:3a:19: bb:15:e6:cb:8f:ef:2c:83:5e:98:2e:31:a7:17:b4:67:90:4d: ff:a9:30:7a:21:5a:5b:ef:98:eb:60:d5:10:6b:3a:af:77:01: b5:b6:62:20 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUUw73mL5Owy/QmjXnIJNWFUTCHKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3 RTlDMTcyRTAeFw0yNjA1MDkxMTUwNTVaFw0yNzA1MDgxMTU1NTVaMDMxMTAvBgNV BAMTKDJDRUE5Q0NCMTFDQkNGQUYzRkUwNEY0OTUxQTI2QUE5NTAwNjlENzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPO0OMamVd7Qiysnky6pULbFWl tkQv/ZLC0ncA88sl3maVwAmdb3qAL0Fj/eCWAFAuqMGPaEJ+b/QlEmuZvOxTwenG Zn/KFXkrWan20WSK9UAItnKOrovvTFHKB3+amGmD86ALRgqqZB//EuERZ+nTlB/n flYKZAvGRYj+EUcXk7gwkXQ+CF/B5irom7UZEZ2S59YGfH7C6Jjpp8RDst/2SA0z GRK1BFRXIGJZpRsZf93qs38ppcwAk/opuH2lgy2tJ2ngS6yRWiiZGTrU8zk2y3A9 e8n6Kz1cjedECS2NvC3iBKKUFsv1EHSamvfBTwMLffx4t8hNPBmSyDNHTcXnAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQULOqcyxHLz68/4E9JUaJqqVAGnXQwHwYDVR0j BBgwFoAUhCHwaA6xs3VkhdD3aB94Bn6cFy4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzQ3MTg3My8wLzg0MjFGMDY4MEVCMUIzNzU2NDg1RDBGNzY4MUY3 ODA2N0U5QzE3MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3RTlDMTcyRS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NDcxODczLzAvMzQzNTJlMzEzMTM2 MmUzNTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzQzNTMwMzYzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAi10NDANBgkqhkiG9w0BAQsFAAOCAQEAaZOjR1hDpd5yGey9z7Bi3qHHlq8C 3GsSySWtgql7w1I15QlkGg/7zIt5LDqUJuD19NX1t8j1GMdBvItZUB6Pz6qD+pLU NhwLSzVNciyeDr9xDG3x2dlEOXixNNwqBJpXfIsUhgw5Jl9l/W1nRW1TBuPLux1Q nw+UOOXgiMt1W05KFsKZ+b6mFxKrVkT1cg7Oiy8/X44k+iqf4CruE2osgAk1hoKC UfkY6qawyWEoNLTWGyT5CWotm1QEK+Yrle66W9xqOMAcVlwrdzOVS9ZEQYrDKFNs kzoZuxXmy4/vLINemC4xpxe0Z5BN/6kweiFaW++Y62DVEGs6r3cBtbZiIA== -----END CERTIFICATE-----Generated at Wed May 13 12:25:26 2026 by rpki-client