$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3234382e3131312e302f32342d3234203d3e203137383136.roa File: 34352e3234382e3131312e302f32342d3234203d3e203137383136.roa (raw, json) Hash identifier: ttRx26kC00IoCX1/dzaef5ghHPQ/v6BLKOJI3sa9q2U= Subject key identifier: 8E:C5:4F:21:4A:C1:AC:3E:A7:88:BF:68:A9:8C:52:67:68:AF:25:D6 Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Certificate serial: 26E75DC88FC48B2251A61C52CFF05E7083560110 Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3234382e3131312e302f32342d3234203d3e203137383136.roa Signing time: Sat 09 May 2026 01:20:08 +0000 ROA not before: Sat 09 May 2026 01:15:08 +0000 ROA not after: Sat 08 May 2027 01:20:08 +0000 asID: 17816 IP address blocks: 45.248.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:e7:5d:c8:8f:c4:8b:22:51:a6:1c:52:cf:f0:5e:70:83:56:01:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Validity Not Before: May 9 01:15:08 2026 GMT Not After : May 8 01:20:08 2027 GMT Subject: CN=8EC54F214AC1AC3EA788BF68A98C526768AF25D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:67:fa:44:9b:be:53:95:c2:db:76:12:a7:a7: 6c:e6:3f:a6:0c:e2:75:5e:12:b4:bc:9c:9d:36:66: d9:60:07:03:4e:9c:1d:71:68:74:bc:06:eb:8c:aa: 2d:86:fb:48:c7:e3:9d:fa:49:09:ec:ad:7b:7c:9e: 1d:bf:da:8b:f1:89:35:3b:f9:ba:2c:82:36:b7:31: 40:e4:46:cb:85:c9:ab:a7:89:0c:d7:06:e8:1a:34: 9a:5f:ec:22:db:38:71:70:49:64:27:b5:e9:cf:8a: 68:09:57:11:fb:32:4a:c1:80:13:1d:17:ce:bf:c6: 69:0c:25:f9:7d:f9:0e:a4:14:eb:59:06:20:80:65: 91:01:9f:78:6d:9d:00:84:a1:26:92:6c:d9:d3:52: 16:18:46:22:39:61:60:ee:a0:7f:17:5d:da:0a:00: 0f:bb:c5:8e:f6:0a:ef:86:a4:12:e5:c5:10:86:2a: 95:52:40:67:3f:79:74:7b:35:b6:7e:4e:d4:5f:60: d9:cf:0c:59:5e:7e:ed:72:39:78:c5:ee:c7:c2:34: 7e:33:4f:17:44:ca:97:a4:36:15:2e:4e:85:a3:2e: c3:ba:df:37:5f:99:fb:6d:f6:16:38:c0:ad:57:62: 09:04:65:2d:e4:8e:9b:9e:30:fa:90:88:65:1a:5f: 4a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C5:4F:21:4A:C1:AC:3E:A7:88:BF:68:A9:8C:52:67:68:AF:25:D6 X509v3 Authority Key Identifier: keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3234382e3131312e302f32342d3234203d3e203137383136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.248.111.0/24 Signature Algorithm: sha256WithRSAEncryption 77:ba:15:b5:04:08:46:25:78:d9:c5:8a:b0:df:2b:11:1c:c8: e8:64:60:24:7e:b4:72:f2:2b:4c:dd:54:45:ab:2c:04:25:ce: ac:46:f3:ce:3d:fb:33:73:f6:42:7f:ea:ae:00:d2:d8:1a:e8: dc:28:07:40:ab:da:fc:0a:0b:a4:31:c5:99:3d:84:98:0b:86: 42:c5:2f:15:8c:42:06:7a:56:c2:c8:10:a5:26:13:67:5d:bb: e8:04:5c:3d:77:78:fe:c4:67:da:91:ad:12:c8:f4:50:43:00: 71:af:6c:ca:e8:8e:28:00:70:ec:6f:27:f0:ec:ac:d3:4b:93: 4e:f0:26:3e:27:7e:12:2a:d3:2a:86:60:f3:16:63:47:cb:fb: b5:93:62:a4:ab:85:39:73:0c:5d:52:bf:90:4a:50:37:9b:ca: de:40:4d:2d:07:10:18:d6:08:3f:75:32:81:ed:2f:b2:a6:8b: e8:86:b6:97:8f:59:cf:a0:21:9b:9c:a4:f9:4b:b4:0a:7b:40: 54:c2:95:22:11:da:d0:af:55:70:1d:66:7a:5a:4a:de:84:0b: 33:70:fa:95:ed:f0:79:9e:36:e5:8f:d1:6e:29:04:3c:ef:2f: e1:29:dc:bd:51:45:a1:dc:08:f8:29:3f:54:fb:f8:b3:49:4f: 21:2e:aa:e5 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUJuddyI/EiyJRphxSz/BecINWARAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0Qzcy RjFBMTJCODAeFw0yNjA1MDkwMTE1MDhaFw0yNzA1MDgwMTIwMDhaMDMxMTAvBgNV BAMTKDhFQzU0RjIxNEFDMUFDM0VBNzg4QkY2OEE5OEM1MjY3NjhBRjI1RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeZ/pEm75TlcLbdhKnp2zmP6YM 4nVeErS8nJ02ZtlgBwNOnB1xaHS8BuuMqi2G+0jH4536SQnsrXt8nh2/2ovxiTU7 +bosgja3MUDkRsuFyauniQzXBugaNJpf7CLbOHFwSWQntenPimgJVxH7MkrBgBMd F86/xmkMJfl9+Q6kFOtZBiCAZZEBn3htnQCEoSaSbNnTUhYYRiI5YWDuoH8XXdoK AA+7xY72Cu+GpBLlxRCGKpVSQGc/eXR7NbZ+TtRfYNnPDFlefu1yOXjF7sfCNH4z TxdEypekNhUuToWjLsO63zdfmftt9hY4wK1XYgkEZS3kjpueMPqQiGUaX0o/AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUjsVPIUrBrD6niL9oqYxSZ2ivJdYwHwYDVR0j BBgwFoAUPQHNaSjd6NJqyWJl8fkExy8aErgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQyMDI4OS8wLzNEMDFDRDY5MjhEREU4RDI2QUM5NjI2NUYxRjkw NEM3MkYxQTEyQjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0QzcyRjFBMTJCOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTM4OTI2NTQyMDI4OS8wLzM0MzUyZTMyMzQz ODJlMzEzMTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM4MzEzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAC34bzANBgkqhkiG9w0BAQsFAAOCAQEAd7oVtQQIRiV42cWKsN8rERzI 6GRgJH60cvIrTN1URassBCXOrEbzzj37M3P2Qn/qrgDS2Bro3CgHQKva/AoLpDHF mT2EmAuGQsUvFYxCBnpWwsgQpSYTZ1276ARcPXd4/sRn2pGtEsj0UEMAca9syuiO KABw7G8n8Oys00uTTvAmPid+EirTKoZg8xZjR8v7tZNipKuFOXMMXVK/kEpQN5vK 3kBNLQcQGNYIP3Uyge0vsqaL6Ia2l49Zz6Ahm5yk+Uu0CntAVMKVIhHa0K9VcB1m elpK3oQLM3D6le3weZ425Y/RbikEPO8v4SncvVFFodwI+Ck/VPv4s0lPIS6q5Q== -----END CERTIFICATE-----Generated at Wed May 13 15:45:05 2026 by rpki-client