$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/34352e3132362e3132302e302f32322d3232203d3e20313333373734.roa File: 34352e3132362e3132302e302f32322d3232203d3e20313333373734.roa (raw, json) Hash identifier: AgfUQHFuvXuvbVut6uk3L47mq/FUpfzy8Xxpq7sQuwI= Subject key identifier: 04:3E:E6:38:54:90:35:23:02:27:7A:7B:43:7A:E4:6D:8B:80:E4:18 Certificate issuer: /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Certificate serial: 5B2FC401276EEF3EA2A62DC34D7326AE62E0E354 Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/34352e3132362e3132302e302f32322d3232203d3e20313333373734.roa Signing time: Mon 11 May 2026 02:49:04 +0000 ROA not before: Mon 11 May 2026 02:44:04 +0000 ROA not after: Mon 10 May 2027 02:49:04 +0000 asID: 133774 IP address blocks: 45.126.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:2f:c4:01:27:6e:ef:3e:a2:a6:2d:c3:4d:73:26:ae:62:e0:e3:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Validity Not Before: May 11 02:44:04 2026 GMT Not After : May 10 02:49:04 2027 GMT Subject: CN=043EE6385490352302277A7B437AE46D8B80E418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b5:25:79:4e:b5:63:63:50:d8:8b:7f:93:7e: 35:27:bf:95:03:6c:23:9c:7c:21:fa:19:75:72:a4: 0c:cf:9b:6f:45:b8:3c:9d:a5:76:ca:56:25:31:70: 68:31:0b:f6:1b:76:b6:42:37:25:02:25:25:0b:47: dc:26:ed:e0:69:9a:30:f1:58:5c:d0:a3:b3:5e:0a: 60:1c:14:ed:ef:b5:cc:67:40:06:27:e4:49:e9:35: 99:9d:d1:8a:61:a2:de:f1:44:a1:e5:e0:d0:5c:f0: 09:b3:a4:28:8e:ac:b6:bf:b9:e8:64:32:b7:63:d0: 8c:0a:d1:9b:38:af:60:69:98:47:a4:e8:9c:7e:aa: 98:94:36:19:4f:52:50:bb:48:01:80:70:96:0c:85: ac:a0:e6:62:ff:54:70:82:cf:d9:c2:f7:14:e5:28: a8:25:2a:1e:41:24:fb:9e:f7:a0:5c:0c:2f:f2:2f: e7:51:f0:ab:99:35:1e:04:68:6b:57:97:04:51:b3: df:14:2b:d4:34:c4:15:72:c5:da:8e:ae:fc:d4:fe: b9:a9:73:33:a7:f3:55:d8:25:c2:c2:89:e2:31:c5: 8b:54:fc:a4:b4:f7:20:ef:bc:c7:75:e7:c0:2c:b1: 08:35:68:b9:3a:1d:09:28:4b:2e:42:6c:cb:55:07: dd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3E:E6:38:54:90:35:23:02:27:7A:7B:43:7A:E4:6D:8B:80:E4:18 X509v3 Authority Key Identifier: keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/34352e3132362e3132302e302f32322d3232203d3e20313333373734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.126.120.0/22 Signature Algorithm: sha256WithRSAEncryption b1:54:a8:88:50:37:ed:99:a3:a2:60:c9:f6:02:35:4e:a6:67: f4:05:30:d5:f5:eb:61:59:f9:e8:52:c9:45:ba:3a:ee:e0:8e: ea:96:f5:5f:be:81:e1:ba:59:87:ad:17:4b:c8:2d:50:fb:e8: ff:45:e3:bf:69:4d:c5:f4:0f:8f:43:8e:84:e7:eb:61:27:18: d2:00:c6:10:86:a1:c5:29:9c:ac:ae:b5:82:b2:91:7a:f0:ed: b9:93:14:0f:e1:78:47:91:a8:95:60:17:a2:ff:94:0b:57:59: c2:87:23:88:5c:50:41:b9:a7:85:90:a7:99:31:60:ca:33:b9: 90:97:ea:91:34:1f:69:e8:3f:52:68:e6:37:f8:18:6b:f1:45: 66:9e:68:a2:0e:fa:a4:29:6f:75:5c:11:a0:69:7a:83:da:6f: 2c:1d:dc:5d:8e:61:15:19:42:3a:e6:2d:b4:cc:7c:1b:98:b6: a2:48:a0:b1:d3:89:df:52:91:b2:69:e7:51:e4:f6:19:fd:07: 85:ae:9d:06:a2:07:9e:f1:2e:80:1f:e5:f9:fe:d1:74:5e:45: e1:8c:57:82:64:64:67:04:a2:fe:41:6c:4d:3d:03:c7:c3:0c: 4a:7a:8b:0a:da:34:69:3d:48:7b:e8:e5:6e:35:f9:65:82:61: df:69:92:f8 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUWy/EASdu7z6ipi3DTXMmrmLg41QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlE NzgxMDFENDAeFw0yNjA1MTEwMjQ0MDRaFw0yNzA1MTAwMjQ5MDRaMDMxMTAvBgNV BAMTKDA0M0VFNjM4NTQ5MDM1MjMwMjI3N0E3QjQzN0FFNDZEOEI4MEU0MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAtSV5TrVjY1DYi3+TfjUnv5UD bCOcfCH6GXVypAzPm29FuDydpXbKViUxcGgxC/YbdrZCNyUCJSULR9wm7eBpmjDx WFzQo7NeCmAcFO3vtcxnQAYn5EnpNZmd0Yphot7xRKHl4NBc8AmzpCiOrLa/uehk Mrdj0IwK0Zs4r2BpmEek6Jx+qpiUNhlPUlC7SAGAcJYMhayg5mL/VHCCz9nC9xTl KKglKh5BJPue96BcDC/yL+dR8KuZNR4EaGtXlwRRs98UK9Q0xBVyxdqOrvzU/rmp czOn81XYJcLCieIxxYtU/KS09yDvvMd158AssQg1aLk6HQkoSy5CbMtVB90lAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUBD7mOFSQNSMCJ3p7Q3rkbYuA5BgwHwYDVR0j BBgwFoAU7J4chAyHBedUwuP/MqRPudeBAdQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDQ4NzgwOS8wL0VDOUUxQzg0MEM4NzA1RTc1NEMyRTNGRjMyQTQ0 RkI5RDc4MTAxRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlENzgxMDFENC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ0ODc4MDkvMC8zNDM1MmUzMTMy MzYyZTMxMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzMzM3MzczNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAi1+eDANBgkqhkiG9w0BAQsFAAOCAQEAsVSoiFA37ZmjomDJ9gI1 TqZn9AUw1fXrYVn56FLJRbo67uCO6pb1X76B4bpZh60XS8gtUPvo/0Xjv2lNxfQP j0OOhOfrYScY0gDGEIahxSmcrK61grKRevDtuZMUD+F4R5GolWAXov+UC1dZwocj iFxQQbmnhZCnmTFgyjO5kJfqkTQfaeg/UmjmN/gYa/FFZp5oog76pClvdVwRoGl6 g9pvLB3cXY5hFRlCOuYttMx8G5i2okigsdOJ31KRsmnnUeT2Gf0Hha6dBqIHnvEu gB/l+f7RdF5F4YxXgmRkZwSi/kFsTT0Dx8MMSnqLCto0aT1Ie+jlbjX5ZYJh32mS +A== -----END CERTIFICATE-----Generated at Wed May 13 14:10:18 2026 by rpki-client