$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3234382e3131302e302f32332d3233203d3e203137383136.roa File: 34352e3234382e3131302e302f32332d3233203d3e203137383136.roa (raw, json) Hash identifier: rr5JAs6HDOFXBtLZkLqPblk/EY74JbxpAS7e2jKACc8= Subject key identifier: 04:7A:C2:F6:97:78:67:7C:CA:C3:29:B7:CC:57:02:90:A4:E5:AD:49 Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Certificate serial: 2B175BB3CADBC450F1A9ED9E277603AA74AEC1E9 Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3234382e3131302e302f32332d3233203d3e203137383136.roa Signing time: Sat 09 May 2026 01:20:08 +0000 ROA not before: Sat 09 May 2026 01:15:08 +0000 ROA not after: Sat 08 May 2027 01:20:08 +0000 asID: 17816 IP address blocks: 45.248.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:17:5b:b3:ca:db:c4:50:f1:a9:ed:9e:27:76:03:aa:74:ae:c1:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Validity Not Before: May 9 01:15:08 2026 GMT Not After : May 8 01:20:08 2027 GMT Subject: CN=047AC2F69778677CCAC329B7CC570290A4E5AD49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:63:ed:15:a7:6a:f4:b4:cf:78:b0:76:8e:47: 39:fd:05:1e:89:05:f7:f7:c9:cf:80:9f:8f:de:09: b8:a6:0b:06:f9:e0:4c:a7:a1:b8:53:a1:fa:79:6c: 8e:f1:1c:2f:c4:87:00:71:d3:5d:fc:e0:46:58:40: e7:1d:96:74:36:17:24:bd:d2:f2:50:c3:ab:5b:5b: b9:3c:92:3a:a9:75:31:9a:f0:e5:ea:90:02:72:1d: aa:5d:79:35:ec:7f:2e:1a:38:a1:7e:7e:a6:15:e9: 06:d0:f4:63:04:0d:fc:83:3d:95:c4:1a:24:2d:ab: bc:35:53:c1:5b:65:28:20:55:04:02:64:09:8f:b2: 19:8b:47:50:b4:29:da:5b:b2:b3:3b:9d:03:ca:04: 2d:e1:95:83:34:ff:67:19:8e:ba:5c:4a:ff:37:86: ec:d9:e7:73:6f:83:31:c3:6d:7f:2a:25:25:06:b0: 61:7a:4c:ba:fc:85:35:18:bb:39:79:d3:35:03:8f: 48:f2:b5:b0:3f:a6:a0:27:c8:1e:2e:2b:30:f8:91: 80:d0:58:9c:f7:a8:1f:24:93:90:bc:66:35:46:73: d0:cf:26:a9:61:72:ec:6d:ac:01:1d:be:ee:ca:21: 8c:a1:45:2d:1d:51:17:a8:82:19:a1:cf:56:96:3f: 27:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:7A:C2:F6:97:78:67:7C:CA:C3:29:B7:CC:57:02:90:A4:E5:AD:49 X509v3 Authority Key Identifier: keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3234382e3131302e302f32332d3233203d3e203137383136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.248.110.0/23 Signature Algorithm: sha256WithRSAEncryption 38:87:cc:ed:05:6e:aa:92:fc:45:18:b8:c8:db:af:31:e7:f9: ed:84:6a:46:8a:4c:3e:43:60:7b:17:19:4c:d2:c7:43:0f:07: 19:28:60:1a:8d:d7:46:7d:91:18:73:3e:2c:b2:43:41:b5:a0: 31:63:0e:10:c3:e5:da:47:17:a7:8a:2c:bc:be:bd:12:00:9c: bd:ee:36:24:23:7d:e1:02:33:19:dc:65:72:42:f8:bc:b0:4a: 9f:62:e3:45:6e:90:f7:9b:48:40:b5:91:1b:50:6d:54:a1:67: 6d:b3:78:f6:68:a3:86:4b:4e:27:ee:f5:b7:f7:66:0e:e7:33: 60:b9:f3:cd:97:d5:44:84:29:bd:ed:a4:e6:e2:2b:79:44:9e: a8:dd:e4:46:24:15:73:69:2d:52:45:41:73:e8:ba:7d:89:72: 2b:6c:e3:4c:19:ae:d8:0d:19:7d:08:6a:a2:82:43:f2:17:80: 1e:e4:1a:e0:6b:21:40:cf:bd:9a:40:00:b7:a1:36:20:b7:5f: 4a:7f:d6:81:a1:64:51:59:bb:1a:1f:31:19:ff:c8:ea:0b:a3: bc:23:0f:2d:d8:cf:f7:ba:d7:90:9a:fb:a6:74:e2:86:1c:b6: 10:6b:11:fc:78:3b:00:15:02:b8:46:3e:c6:90:19:26:cf:c3: 5e:7f:a3:96 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUKxdbs8rbxFDxqe2eJ3YDqnSuwekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0Qzcy RjFBMTJCODAeFw0yNjA1MDkwMTE1MDhaFw0yNzA1MDgwMTIwMDhaMDMxMTAvBgNV BAMTKDA0N0FDMkY2OTc3ODY3N0NDQUMzMjlCN0NDNTcwMjkwQTRFNUFENDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcY+0Vp2r0tM94sHaORzn9BR6J Bff3yc+An4/eCbimCwb54EynobhTofp5bI7xHC/EhwBx01384EZYQOcdlnQ2FyS9 0vJQw6tbW7k8kjqpdTGa8OXqkAJyHapdeTXsfy4aOKF+fqYV6QbQ9GMEDfyDPZXE GiQtq7w1U8FbZSggVQQCZAmPshmLR1C0KdpbsrM7nQPKBC3hlYM0/2cZjrpcSv83 huzZ53NvgzHDbX8qJSUGsGF6TLr8hTUYuzl50zUDj0jytbA/pqAnyB4uKzD4kYDQ WJz3qB8kk5C8ZjVGc9DPJqlhcuxtrAEdvu7KIYyhRS0dUReoghmhz1aWPyfnAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUBHrC9pd4Z3zKwym3zFcCkKTlrUkwHwYDVR0j BBgwFoAUPQHNaSjd6NJqyWJl8fkExy8aErgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQyMDI4OS8wLzNEMDFDRDY5MjhEREU4RDI2QUM5NjI2NUYxRjkw NEM3MkYxQTEyQjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0QzcyRjFBMTJCOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTM4OTI2NTQyMDI4OS8wLzM0MzUyZTMyMzQz ODJlMzEzMTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEzNzM4MzEzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAS34bjANBgkqhkiG9w0BAQsFAAOCAQEAOIfM7QVuqpL8RRi4yNuvMef5 7YRqRopMPkNgexcZTNLHQw8HGShgGo3XRn2RGHM+LLJDQbWgMWMOEMPl2kcXp4os vL69EgCcve42JCN94QIzGdxlckL4vLBKn2LjRW6Q95tIQLWRG1BtVKFnbbN49mij hktOJ+71t/dmDuczYLnzzZfVRIQpve2k5uIreUSeqN3kRiQVc2ktUkVBc+i6fYly K2zjTBmu2A0ZfQhqooJD8heAHuQa4GshQM+9mkAAt6E2ILdfSn/WgaFkUVm7Gh8x Gf/I6gujvCMPLdjP97rXkJr7pnTihhy2EGsR/Hg7ABUCuEY+xpAZJs/DXn+jlg== -----END CERTIFICATE-----Generated at Wed May 13 13:54:03 2026 by rpki-client