$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e33322e302f32342d3234203d3e20313336393538.roa File: 34352e3131362e33322e302f32342d3234203d3e20313336393538.roa (raw, json) Hash identifier: l9Gsrt4nzqtfu76U8v30H+wYxj/oWKD4MpUXXlmhBmo= Subject key identifier: FA:6C:72:51:B1:64:69:05:50:C2:E3:3C:EE:62:76:0E:60:B7:DE:54 Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Certificate serial: 2CFBEDB3D2750BF11515628107B5C16DD409B1E2 Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e33322e302f32342d3234203d3e20313336393538.roa Signing time: Sat 09 May 2026 01:54:30 +0000 ROA not before: Sat 09 May 2026 01:49:30 +0000 ROA not after: Sat 08 May 2027 01:54:30 +0000 asID: 136958 IP address blocks: 45.116.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:fb:ed:b3:d2:75:0b:f1:15:15:62:81:07:b5:c1:6d:d4:09:b1:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Validity Not Before: May 9 01:49:30 2026 GMT Not After : May 8 01:54:30 2027 GMT Subject: CN=FA6C7251B164690550C2E33CEE62760E60B7DE54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:22:9a:23:fe:ce:7b:d4:98:3a:da:6f:ac:2f: 1e:1d:ac:d9:2d:45:15:53:80:c1:b0:46:14:b7:ca: 32:bb:0b:fa:0c:03:ec:59:c6:b0:1f:2c:32:e4:b4: 19:cb:3d:6a:35:3b:4c:a1:5e:cb:1a:ba:65:01:82: c9:eb:46:64:2e:7e:0f:47:68:0a:6a:2e:df:41:4a: 63:5d:6a:da:bc:4c:f9:80:62:c6:e7:68:d9:29:06: 2c:0f:48:e1:f2:0e:dc:47:43:b4:55:ef:ac:a2:e7: 29:97:c8:84:a1:30:56:18:a8:e0:59:b1:ea:f7:13: 0f:79:fa:2a:07:08:30:ef:08:93:01:94:c7:dc:0f: dd:97:08:14:1e:dc:20:c4:9e:10:d9:86:21:79:7c: 43:9f:29:d2:a0:bc:48:f2:7d:5f:8f:a6:8a:0a:26: 10:6d:b1:d5:75:70:7e:3c:34:19:6e:0c:b2:e1:32: f8:19:30:20:83:af:ea:ed:d3:cc:7f:35:ab:a7:ac: 5c:86:9c:c4:8b:a8:a7:19:7f:f1:f6:59:d8:48:43: 5e:e0:e5:54:2d:4d:34:9a:20:d7:02:80:f4:e1:76: 36:14:16:d8:e6:03:1f:c5:5e:00:63:41:6f:f2:92: 0e:84:2f:a4:02:e7:60:87:f2:ee:de:09:50:e6:92: 9d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:6C:72:51:B1:64:69:05:50:C2:E3:3C:EE:62:76:0E:60:B7:DE:54 X509v3 Authority Key Identifier: keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e33322e302f32342d3234203d3e20313336393538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.116.32.0/24 Signature Algorithm: sha256WithRSAEncryption aa:fc:64:cb:4f:0b:ed:5e:f2:71:fa:26:5a:1f:86:96:e4:54: 78:f7:41:79:d1:45:69:6b:90:19:66:eb:79:47:a9:7d:b5:10: 97:0e:33:83:7e:c0:6f:68:c2:8d:57:da:0b:0a:a5:fe:f3:a8: 49:56:b6:be:b4:dc:34:9a:2d:c0:b7:a6:1b:c9:23:bd:46:b8: 0e:b6:b6:cc:4c:7a:68:0b:d4:e3:f2:6b:03:b5:ba:20:e1:51: 21:e4:ba:c8:12:62:ff:aa:77:ce:06:ae:9e:17:32:fe:7b:4e: 7a:ce:21:b5:16:41:71:e4:de:1f:00:43:e7:c3:6c:46:95:04: ec:0a:41:65:d6:02:9c:4c:2a:58:07:cc:8f:5f:8a:d0:ec:4b: 71:5c:23:27:c9:eb:db:84:ce:35:0b:6b:b3:26:af:2f:f9:22: 8c:eb:1d:12:ae:ba:ee:e4:00:07:84:4e:80:3a:4f:b3:2f:7d: a9:30:e0:71:25:ea:14:5a:0a:3e:64:b1:d5:9a:df:d6:47:25: 26:d1:c0:a6:e6:3c:ab:c1:f9:6a:f9:d0:15:1e:a3:f9:86:32: ef:4a:ba:0c:82:4e:4b:61:f7:6a:4b:e1:ee:08:2a:26:4b:0e: b5:d6:e0:4d:90:b8:4e:96:73:85:dc:2a:3e:3f:f4:f1:b5:3e: 34:90:d6:ca -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIULPvts9J1C/EVFWKBB7XBbdQJseIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhB QjIxMzUxQTAeFw0yNjA1MDkwMTQ5MzBaFw0yNzA1MDgwMTU0MzBaMDMxMTAvBgNV BAMTKEZBNkM3MjUxQjE2NDY5MDU1MEMyRTMzQ0VFNjI3NjBFNjBCN0RFNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Ipoj/s571Jg62m+sLx4drNkt RRVTgMGwRhS3yjK7C/oMA+xZxrAfLDLktBnLPWo1O0yhXssaumUBgsnrRmQufg9H aApqLt9BSmNdatq8TPmAYsbnaNkpBiwPSOHyDtxHQ7RV76yi5ymXyIShMFYYqOBZ ser3Ew95+ioHCDDvCJMBlMfcD92XCBQe3CDEnhDZhiF5fEOfKdKgvEjyfV+PpooK JhBtsdV1cH48NBluDLLhMvgZMCCDr+rt08x/NaunrFyGnMSLqKcZf/H2WdhIQ17g 5VQtTTSaINcCgPThdjYUFtjmAx/FXgBjQW/ykg6EL6QC52CH8u7eCVDmkp0NAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU+mxyUbFkaQVQwuM87mJ2DmC33lQwHwYDVR0j BBgwFoAULQvBZV0Xo6sJyR5Doy3o2KshNRowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDcyMDI1OS8wLzJEMEJDMTY1NUQxN0EzQUIwOUM5MUU0M0EzMkRF OEQ4QUIyMTM1MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhBQjIxMzUxQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDcyMDI1OS8wLzM0MzUyZTMxMzEz NjJlMzMzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM5MzUzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAC10IDANBgkqhkiG9w0BAQsFAAOCAQEAqvxky08L7V7ycfomWh+GluRU ePdBedFFaWuQGWbreUepfbUQlw4zg37Ab2jCjVfaCwql/vOoSVa2vrTcNJotwLem G8kjvUa4Dra2zEx6aAvU4/JrA7W6IOFRIeS6yBJi/6p3zgaunhcy/ntOes4htRZB ceTeHwBD58NsRpUE7ApBZdYCnEwqWAfMj1+K0OxLcVwjJ8nr24TONQtrsyavL/ki jOsdEq667uQAB4ROgDpPsy99qTDgcSXqFFoKPmSx1Zrf1kclJtHApuY8q8H5avnQ FR6j+YYy70q6DIJOS2H3akvh7ggqJksOtdbgTZC4TpZzhdwqPj/08bU+NJDWyg== -----END CERTIFICATE-----Generated at Wed May 13 15:39:54 2026 by rpki-client