$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577334786/0/34352e3132352e34342e302f32322d3332203d3e20313339313830.roa File: 34352e3132352e34342e302f32322d3332203d3e20313339313830.roa (raw, json) Hash identifier: Rdc1fS1nMg3eDvAUZy4aoiCM0ja6bwoDhkdphv67+rA= Subject key identifier: F2:B2:D3:BB:DC:C2:E7:0C:E2:3A:7B:D9:80:2A:17:08:EA:B3:4A:32 Certificate issuer: /CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Certificate serial: 02526A206304A4F924E583396AE95BBCD59ABE27 Authority key identifier: 8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/34352e3132352e34342e302f32322d3332203d3e20313339313830.roa Signing time: Mon 20 Apr 2026 17:54:48 +0000 ROA not before: Mon 20 Apr 2026 17:49:48 +0000 ROA not after: Mon 19 Apr 2027 17:54:48 +0000 asID: 139180 IP address blocks: 45.125.44.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:52:6a:20:63:04:a4:f9:24:e5:83:39:6a:e9:5b:bc:d5:9a:be:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Validity Not Before: Apr 20 17:49:48 2026 GMT Not After : Apr 19 17:54:48 2027 GMT Subject: CN=F2B2D3BBDCC2E70CE23A7BD9802A1708EAB34A32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:43:13:fc:43:6d:1b:f1:ec:82:7f:7d:cb:de: a3:b8:d4:5d:dd:99:7e:f4:ba:6d:89:f2:54:51:fd: e6:43:59:7f:65:03:70:8c:90:71:d1:78:4c:ba:be: c5:2d:73:6b:0a:b9:c1:db:b7:94:85:da:ec:86:29: d9:b9:f9:3f:6d:58:19:97:95:31:ff:57:8b:3c:c7: 9f:ae:05:bc:c4:10:2b:2f:5d:de:90:5c:c3:24:4d: 3e:73:e5:ef:b1:e8:d5:82:c9:90:33:be:21:51:2d: 41:84:b1:d7:25:b7:02:e5:de:af:82:c5:27:12:42: c0:6a:d9:44:ca:30:52:3b:1b:57:48:39:b4:f9:3f: 74:e2:a9:2c:ce:37:95:0f:b5:95:0e:be:a8:31:93: c5:7e:a7:10:b5:1a:76:5d:80:e5:2f:07:88:2e:51: 3d:6e:fb:61:79:d4:02:9d:1a:cd:45:f0:5a:47:57: e3:e3:b7:ef:6f:5f:b0:51:56:b4:bb:e3:1d:54:eb: 3f:fe:8c:74:74:e2:8e:6a:25:b7:bc:ed:27:19:23: 16:1d:d9:98:88:c8:04:a1:b3:c4:1d:85:b6:1c:9a: 03:8e:47:4a:ac:5c:a2:f3:01:81:bf:48:62:58:3b: e2:3c:91:20:9b:4d:80:4c:e3:8e:58:f4:41:0c:4c: 47:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B2:D3:BB:DC:C2:E7:0C:E2:3A:7B:D9:80:2A:17:08:EA:B3:4A:32 X509v3 Authority Key Identifier: keyid:8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/34352e3132352e34342e302f32322d3332203d3e20313339313830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.125.44.0/22 Signature Algorithm: sha256WithRSAEncryption 69:fc:98:be:da:f5:87:c4:d9:db:10:32:dd:97:63:82:ff:f4: 91:6e:15:02:2d:7d:eb:c8:cd:d1:95:3d:41:a2:07:1b:8e:39: 67:2e:99:3e:1b:df:c6:1f:9b:51:58:a8:1c:6f:16:02:bf:bc: 98:59:36:a4:77:1c:25:54:e8:e7:96:19:ed:23:47:be:ae:d0: ed:82:09:31:6e:2f:72:e6:03:75:39:1b:b2:d2:5f:18:03:ac: 0e:fe:a7:18:77:28:7e:d2:b1:c7:14:be:d9:79:af:7e:3a:48: b0:1e:94:23:79:1c:68:43:eb:e3:97:b0:7e:f3:f9:0a:20:4e: 40:69:0e:4d:b0:43:7c:d9:ac:6b:d9:ff:dd:48:58:e3:5a:c2: 97:01:62:57:1c:41:6b:dc:0c:a9:96:fb:56:05:91:14:6c:a0: 39:12:6b:d5:72:7e:ad:04:d3:47:c4:2a:96:ae:63:96:59:ba: 17:07:4d:2a:82:96:36:85:39:b1:f4:5c:ff:2e:5d:6c:44:62: 91:a3:c0:62:a8:bf:bd:3b:6d:22:8e:a0:17:15:5b:01:04:2d: 1e:4d:da:c3:22:ae:91:8e:a6:4d:10:61:97:8e:e2:87:bf:bb: 46:a0:6e:b4:e1:16:e5:52:56:a8:7d:bc:c8:f7:1b:1b:39:01: b4:91:a6:36 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUAlJqIGMEpPkk5YM5aulbvNWavicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1 QTJBNTE5ODAeFw0yNjA0MjAxNzQ5NDhaFw0yNzA0MTkxNzU0NDhaMDMxMTAvBgNV BAMTKEYyQjJEM0JCRENDMkU3MENFMjNBN0JEOTgwMkExNzA4RUFCMzRBMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1QxP8Q20b8eyCf33L3qO41F3d mX70um2J8lRR/eZDWX9lA3CMkHHReEy6vsUtc2sKucHbt5SF2uyGKdm5+T9tWBmX lTH/V4s8x5+uBbzEECsvXd6QXMMkTT5z5e+x6NWCyZAzviFRLUGEsdcltwLl3q+C xScSQsBq2UTKMFI7G1dIObT5P3TiqSzON5UPtZUOvqgxk8V+pxC1GnZdgOUvB4gu UT1u+2F51AKdGs1F8FpHV+Pjt+9vX7BRVrS74x1U6z/+jHR04o5qJbe87ScZIxYd 2ZiIyAShs8QdhbYcmgOOR0qsXKLzAYG/SGJYO+I8kSCbTYBM445Y9EEMTEefAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU8rLTu9zC5wziOnvZgCoXCOqzSjIwHwYDVR0j BBgwFoAUjoD6JOXf8wc2IQUP8YSHAloqUZgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzMzNDc4Ni8wLzhFODBGQTI0RTVERkYzMDczNjIxMDUwRkYxODQ4 NzAyNUEyQTUxOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1QTJBNTE5OC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4Mjc0MTU3NzMzNDc4Ni8wLzM0MzUyZTMxMzIz NTJlMzQzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMxMzMzOTMxMzgzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAi19LDANBgkqhkiG9w0BAQsFAAOCAQEAafyYvtr1h8TZ2xAy3Zdjgv/0 kW4VAi1968jN0ZU9QaIHG445Zy6ZPhvfxh+bUVioHG8WAr+8mFk2pHccJVTo55YZ 7SNHvq7Q7YIJMW4vcuYDdTkbstJfGAOsDv6nGHcoftKxxxS+2XmvfjpIsB6UI3kc aEPr45ewfvP5CiBOQGkOTbBDfNmsa9n/3UhY41rClwFiVxxBa9wMqZb7VgWRFGyg ORJr1XJ+rQTTR8Qqlq5jllm6FwdNKoKWNoU5sfRc/y5dbERikaPAYqi/vTttIo6g FxVbAQQtHk3awyKukY6mTRBhl47ih7+7RqButOEW5VJWqH28yPcbGzkBtJGmNg== -----END CERTIFICATE-----Generated at Wed May 13 20:57:46 2026 by rpki-client