$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3234382e3130392e302f32342d3234203d3e20313436373732.roa File: 34352e3234382e3130392e302f32342d3234203d3e20313436373732.roa (raw, json) Hash identifier: l83eIj5SYIwVCavpwqb2q7eJdR1MR1SvO0kRlN7ALug= Subject key identifier: DB:E5:BA:D8:AA:AE:DB:5B:43:9F:0A:69:18:58:F7:15:AA:AC:D5:F3 Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Certificate serial: 03F8A11343AF578F07208085411F0E155EEEB78D Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3234382e3130392e302f32342d3234203d3e20313436373732.roa Signing time: Wed 06 May 2026 01:40:57 +0000 ROA not before: Wed 06 May 2026 01:35:57 +0000 ROA not after: Wed 05 May 2027 01:40:57 +0000 asID: 146772 IP address blocks: 45.248.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:f8:a1:13:43:af:57:8f:07:20:80:85:41:1f:0e:15:5e:ee:b7:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Validity Not Before: May 6 01:35:57 2026 GMT Not After : May 5 01:40:57 2027 GMT Subject: CN=DBE5BAD8AAAEDB5B439F0A691858F715AAACD5F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6f:f4:47:84:b3:83:04:10:2f:a3:85:bd:3f: d4:a5:5f:5d:5d:48:1c:25:90:48:9b:47:eb:ad:0b: 89:8b:a3:f3:05:be:f9:0d:74:9d:14:c6:4c:0a:db: 09:10:91:d2:9d:52:1e:89:b8:1f:b2:6d:ad:10:2a: cf:ec:61:96:0a:2e:a8:00:51:98:ff:ce:f7:59:5a: bf:fb:a4:8a:96:7c:97:68:2b:3d:f7:ae:57:b3:c8: 21:29:65:29:b9:2f:ce:33:0e:86:16:81:96:ea:a5: b7:36:f8:84:3f:7c:55:09:d5:70:22:63:91:0d:00: 9f:63:b8:97:f3:84:19:53:14:a3:fb:d3:6c:00:c7: 6e:66:83:c9:2b:47:a1:99:e3:7b:ba:c6:c9:a2:fb: 23:e6:4e:c6:1c:c9:2e:93:bf:7a:e9:55:1a:04:67: ea:a5:f6:3a:7b:00:88:55:fc:9c:9b:b1:c6:e8:14: dd:36:52:75:66:0c:fa:40:41:23:46:8f:f2:5f:6c: 6e:f7:11:2b:65:9d:0f:7b:ef:cf:73:c4:5f:de:2a: 7b:c4:8a:47:62:a3:2e:95:d1:12:38:f2:dd:37:61: 95:13:18:7a:ff:a6:3f:d8:4e:83:cc:ef:a7:c0:42: 1f:48:7d:2d:fc:ec:7e:59:ed:b7:70:90:4b:87:0f: 75:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E5:BA:D8:AA:AE:DB:5B:43:9F:0A:69:18:58:F7:15:AA:AC:D5:F3 X509v3 Authority Key Identifier: keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3234382e3130392e302f32342d3234203d3e20313436373732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.248.109.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:0e:50:ed:a7:03:00:f9:a6:ba:70:c7:26:f5:42:9e:b2:96: 4e:a0:be:b9:e5:71:89:69:40:7c:8e:e4:0d:90:c9:90:36:0a: fa:d2:ee:d7:dc:97:ff:10:d1:30:ff:71:23:14:a9:5b:46:02: 6f:bc:06:ba:27:bc:a5:b1:ab:fd:d9:c2:a8:6b:ee:80:20:88: 92:cd:f0:95:3e:88:69:8b:fd:3a:3f:b0:76:5f:0b:e2:ee:63: 55:4f:0c:93:dc:21:91:e2:05:e4:25:7e:4a:2e:c8:f7:63:ef: 8d:b3:ba:7d:8a:01:70:49:46:b1:af:2d:3b:d1:dc:fd:9a:1f: ad:03:a5:b2:d7:27:07:e8:b4:37:86:17:50:f1:61:c4:59:9a: af:6e:57:9d:79:96:4c:63:95:ac:be:17:33:db:e3:02:95:12: 42:bb:7c:c9:9d:f1:0c:82:8c:0a:46:2e:63:8e:17:c5:30:9e: 92:94:db:72:85:12:b9:9c:0d:d9:40:8d:5f:db:2b:7f:d4:1f: b2:2c:27:80:f7:7a:bc:17:18:7c:9e:d2:69:26:63:62:7b:80: 15:2a:fe:f7:50:fc:72:3d:eb:82:c8:d2:b1:f4:38:44:2d:67: a1:4b:dd:13:52:d7:6c:b2:80:e4:0c:a0:4d:3f:46:83:20:b6: 96:a2:03:94 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUA/ihE0OvV48HIICFQR8OFV7ut40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0Qzcy RjFBMTJCODAeFw0yNjA1MDYwMTM1NTdaFw0yNzA1MDUwMTQwNTdaMDMxMTAvBgNV BAMTKERCRTVCQUQ4QUFBRURCNUI0MzlGMEE2OTE4NThGNzE1QUFBQ0Q1RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVb/RHhLODBBAvo4W9P9SlX11d SBwlkEibR+utC4mLo/MFvvkNdJ0UxkwK2wkQkdKdUh6JuB+yba0QKs/sYZYKLqgA UZj/zvdZWr/7pIqWfJdoKz33rlezyCEpZSm5L84zDoYWgZbqpbc2+IQ/fFUJ1XAi Y5ENAJ9juJfzhBlTFKP702wAx25mg8krR6GZ43u6xsmi+yPmTsYcyS6Tv3rpVRoE Z+ql9jp7AIhV/JybscboFN02UnVmDPpAQSNGj/JfbG73EStlnQ97789zxF/eKnvE ikdioy6V0RI48t03YZUTGHr/pj/YToPM76fAQh9IfS387H5Z7bdwkEuHD3WTAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU2+W62Kqu21tDnwppGFj3Faqs1fMwHwYDVR0j BBgwFoAUPQHNaSjd6NJqyWJl8fkExy8aErgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQyMDI4OS8wLzNEMDFDRDY5MjhEREU4RDI2QUM5NjI2NUYxRjkw NEM3MkYxQTEyQjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0QzcyRjFBMTJCOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0MjAyODkvMC8zNDM1MmUzMjM0 MzgyZTMxMzAzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM3MzczMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAC34bTANBgkqhkiG9w0BAQsFAAOCAQEAng5Q7acDAPmmunDHJvVC nrKWTqC+ueVxiWlAfI7kDZDJkDYK+tLu19yX/xDRMP9xIxSpW0YCb7wGuie8pbGr /dnCqGvugCCIks3wlT6IaYv9Oj+wdl8L4u5jVU8Mk9whkeIF5CV+Si7I92PvjbO6 fYoBcElGsa8tO9Hc/ZofrQOlstcnB+i0N4YXUPFhxFmar25XnXmWTGOVrL4XM9vj ApUSQrt8yZ3xDIKMCkYuY44XxTCekpTbcoUSuZwN2UCNX9srf9QfsiwngPd6vBcY fJ7SaSZjYnuAFSr+91D8cj3rgsjSsfQ4RC1noUvdE1LXbLKA5AygTT9GgyC2lqID lA== -----END CERTIFICATE-----Generated at Wed May 13 16:12:02 2026 by rpki-client