$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3234382e3130382e302f32342d3234203d3e20313436373732.roa File: 34352e3234382e3130382e302f32342d3234203d3e20313436373732.roa (raw, json) Hash identifier: W1l5mudPYcSen+JGIjiH5OvFJniliEIgw6W/cZ0DGIg= Subject key identifier: 0B:66:BF:14:0E:0B:8D:70:A0:5D:3A:F4:E0:73:37:D6:24:6D:B7:41 Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Certificate serial: 776C7594951C324C202A74C84E9D463D30745345 Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3234382e3130382e302f32342d3234203d3e20313436373732.roa Signing time: Wed 06 May 2026 01:40:57 +0000 ROA not before: Wed 06 May 2026 01:35:57 +0000 ROA not after: Wed 05 May 2027 01:40:57 +0000 asID: 146772 IP address blocks: 45.248.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:6c:75:94:95:1c:32:4c:20:2a:74:c8:4e:9d:46:3d:30:74:53:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Validity Not Before: May 6 01:35:57 2026 GMT Not After : May 5 01:40:57 2027 GMT Subject: CN=0B66BF140E0B8D70A05D3AF4E07337D6246DB741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8f:6f:ba:b8:1f:1d:99:98:a2:8b:d4:3d:0b: 4a:5f:1b:1f:9d:65:23:8d:90:d5:e6:63:93:be:3b: 99:12:f7:35:1f:68:af:e4:79:9f:d8:fa:88:e8:9e: 96:6e:dc:52:91:7a:fe:22:89:5d:8c:05:4a:36:9c: f6:b2:36:19:e3:9f:8c:39:f6:5f:87:12:be:80:bc: aa:ea:f9:0e:25:5a:66:8c:03:47:3e:15:70:bf:b1: 43:71:48:06:91:37:e7:ca:75:f3:eb:f2:e6:cd:02: f8:a0:02:7b:fb:eb:78:92:0f:d8:14:eb:b9:cf:89: 23:5c:84:0e:79:c4:82:94:93:c1:75:fa:a6:cb:cb: eb:0a:74:6b:03:23:0e:72:8c:f7:91:fc:23:f1:4d: f2:6f:66:5f:66:9d:63:a5:fb:0e:95:2c:a3:e7:a3: 95:ce:f7:10:d6:bb:44:0e:72:4f:d5:f1:0f:95:e6: fa:0d:f9:28:61:88:8c:d6:11:2f:f7:de:5a:bb:11: 01:db:2b:f2:ab:42:a6:44:30:1c:46:75:91:46:09: 78:a7:c6:75:b6:d8:85:7d:08:75:fd:ca:b1:97:f7: fc:74:72:22:7a:72:1a:bb:51:c7:10:ac:ae:1b:cb: 6f:4a:bb:9e:46:69:c4:ca:b8:f5:9e:af:eb:41:d0: e5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:66:BF:14:0E:0B:8D:70:A0:5D:3A:F4:E0:73:37:D6:24:6D:B7:41 X509v3 Authority Key Identifier: keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3234382e3130382e302f32342d3234203d3e20313436373732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.248.108.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:00:36:b5:95:0b:ce:d3:cd:4a:b0:14:3f:ee:57:ad:7d:80: d3:63:b6:84:87:f6:ff:c7:c9:cb:a3:5f:37:52:c5:80:1a:f2: 43:62:d1:5b:6f:0d:ac:89:28:12:0f:88:68:0a:56:39:95:c0: d9:41:12:e1:4a:d1:32:df:36:d8:1f:5e:57:e0:94:3f:02:b8: 6d:33:ba:dd:2f:61:89:d7:ca:20:ac:4d:0b:86:66:a5:84:c4: d7:06:c5:51:a5:ce:43:cf:7d:d3:ae:0c:06:94:1e:96:e9:b2: e9:67:79:9c:c1:31:be:e9:57:8c:9e:74:62:56:a8:05:41:4b: 65:e2:a3:38:d6:79:e7:d4:b4:a1:92:14:77:52:1d:ff:a8:5f: e8:6d:52:43:d1:41:b1:cc:28:6b:85:8f:e2:b2:f1:55:e8:3f: c5:c8:74:09:ad:e2:5e:1d:46:09:33:3b:82:ea:29:64:ad:ec: 6e:6b:c5:af:f3:a4:d5:b9:28:50:ae:ea:93:a3:8e:37:c7:da: 36:2b:cc:17:06:01:c3:27:f4:5e:13:15:9e:42:ae:20:c3:48: 77:a5:c8:1d:cb:0b:34:89:84:96:f9:7a:b9:3d:8a:2f:2d:4e: 16:48:01:55:f8:4e:cb:ab:3b:7a:37:de:d0:ad:49:21:0e:36: a3:10:d8:2d -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUd2x1lJUcMkwgKnTITp1GPTB0U0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0Qzcy RjFBMTJCODAeFw0yNjA1MDYwMTM1NTdaFw0yNzA1MDUwMTQwNTdaMDMxMTAvBgNV BAMTKDBCNjZCRjE0MEUwQjhENzBBMDVEM0FGNEUwNzMzN0Q2MjQ2REI3NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClj2+6uB8dmZiii9Q9C0pfGx+d ZSONkNXmY5O+O5kS9zUfaK/keZ/Y+ojonpZu3FKRev4iiV2MBUo2nPayNhnjn4w5 9l+HEr6AvKrq+Q4lWmaMA0c+FXC/sUNxSAaRN+fKdfPr8ubNAvigAnv763iSD9gU 67nPiSNchA55xIKUk8F1+qbLy+sKdGsDIw5yjPeR/CPxTfJvZl9mnWOl+w6VLKPn o5XO9xDWu0QOck/V8Q+V5voN+ShhiIzWES/33lq7EQHbK/KrQqZEMBxGdZFGCXin xnW22IV9CHX9yrGX9/x0ciJ6chq7UccQrK4by29Ku55GacTKuPWer+tB0OV5AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUC2a/FA4LjXCgXTr04HM31iRtt0EwHwYDVR0j BBgwFoAUPQHNaSjd6NJqyWJl8fkExy8aErgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQyMDI4OS8wLzNEMDFDRDY5MjhEREU4RDI2QUM5NjI2NUYxRjkw NEM3MkYxQTEyQjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0QzcyRjFBMTJCOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0MjAyODkvMC8zNDM1MmUzMjM0 MzgyZTMxMzAzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM3MzczMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAC34bDANBgkqhkiG9w0BAQsFAAOCAQEADwA2tZULztPNSrAUP+5X rX2A02O2hIf2/8fJy6NfN1LFgBryQ2LRW28NrIkoEg+IaApWOZXA2UES4UrRMt82 2B9eV+CUPwK4bTO63S9hidfKIKxNC4ZmpYTE1wbFUaXOQ899064MBpQelumy6Wd5 nMExvulXjJ50YlaoBUFLZeKjONZ559S0oZIUd1Id/6hf6G1SQ9FBscwoa4WP4rLx Veg/xch0Ca3iXh1GCTM7guopZK3sbmvFr/Ok1bkoUK7qk6OON8faNivMFwYBwyf0 XhMVnkKuIMNId6XIHcsLNImElvl6uT2KLy1OFkgBVfhOy6s7ejfe0K1JIQ42oxDY LQ== -----END CERTIFICATE-----Generated at Wed May 13 19:06:31 2026 by rpki-client