$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3235312e322e302f32332d3233203d3e20313436373732.roa File: 34352e3235312e322e302f32332d3233203d3e20313436373732.roa (raw, json) Hash identifier: HITweSejw9LPAAPT/Jl4d6YLdDhw11XAHiVYd5sZLX4= Subject key identifier: 35:A8:E1:16:75:C5:04:63:18:66:CC:7E:1F:BD:06:28:51:23:F1:CF Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Certificate serial: 4E4604B835DADF5EF82EFF6319E57B43AF1EF1D7 Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3235312e322e302f32332d3233203d3e20313436373732.roa Signing time: Fri 24 Apr 2026 07:34:55 +0000 ROA not before: Fri 24 Apr 2026 07:29:55 +0000 ROA not after: Fri 23 Apr 2027 07:34:55 +0000 asID: 146772 IP address blocks: 45.251.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:46:04:b8:35:da:df:5e:f8:2e:ff:63:19:e5:7b:43:af:1e:f1:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Validity Not Before: Apr 24 07:29:55 2026 GMT Not After : Apr 23 07:34:55 2027 GMT Subject: CN=35A8E11675C504631866CC7E1FBD06285123F1CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ed:9e:94:b1:38:7e:cf:65:b3:cc:c5:05:74: 23:ea:d4:3d:9c:54:0e:41:82:ea:c4:27:1c:a4:28: 60:b1:c8:e4:03:80:8b:c3:4e:80:db:a7:da:f5:32: f5:6c:1a:a0:f4:b6:51:47:25:1b:d9:07:3c:94:73: 83:60:b8:a0:7b:41:e9:fb:a3:ab:3c:c9:9c:1e:f0: 50:e6:1d:16:b6:0c:29:c4:05:04:d7:0d:d5:7b:a5: 71:db:d5:30:b5:4c:9d:bb:16:5b:c2:71:95:d6:a7: da:2f:08:05:04:a8:ac:11:bf:5e:23:a2:cc:3a:b3: ae:c4:67:aa:2f:08:05:4a:f4:bc:44:4b:3a:db:63: 27:3a:c5:06:ae:cf:ee:9c:db:ef:33:1d:33:ce:88: 42:1a:33:01:43:71:a2:58:fd:3c:f8:38:03:a3:10: a9:6c:1f:33:54:74:f4:fa:df:e6:9c:40:37:4c:e8: 7a:01:20:02:23:f6:48:f6:2c:9f:a8:71:ae:51:73: 3a:0b:c7:c8:b8:3e:32:c3:99:6a:a6:03:2c:26:51: f8:72:87:21:e8:81:d5:d9:92:12:5e:d2:c6:4b:b3: c6:52:5c:ff:2b:ad:2e:bb:7e:af:1d:f5:fe:bd:00: fb:06:77:2a:e0:8e:18:14:0b:ca:44:5a:5c:6f:4e: 74:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A8:E1:16:75:C5:04:63:18:66:CC:7E:1F:BD:06:28:51:23:F1:CF X509v3 Authority Key Identifier: keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3235312e322e302f32332d3233203d3e20313436373732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.251.2.0/23 Signature Algorithm: sha256WithRSAEncryption 13:c4:cf:a0:20:9e:82:49:09:da:24:58:8c:5c:a2:3d:07:81: f2:58:8a:73:80:b4:89:94:6c:d5:52:2c:fe:28:f8:68:e4:1c: 91:de:6e:a9:51:7d:35:eb:fc:d8:6c:d4:c7:f2:bb:23:1b:aa: fa:67:a5:fa:d0:ed:b0:ed:a6:31:76:f0:18:15:c3:d0:7c:b8: 8f:69:2f:92:b0:a1:16:13:e3:81:22:5e:b7:62:11:e1:29:5e: f6:38:5f:83:e1:43:74:0a:b2:95:1f:0d:b5:b8:3f:42:50:fe: 88:b0:7d:ca:21:af:57:29:fe:1a:ed:aa:37:d7:62:f1:81:cb: 7b:da:ed:0e:1b:47:70:02:99:f1:70:d1:f3:c8:a7:70:ae:bc: 7b:51:bb:92:75:ca:85:ba:2c:af:db:da:51:6a:05:91:a8:c2: 55:9e:09:72:82:b8:4b:d3:88:77:63:da:d8:df:33:0d:ed:06: 60:ae:57:4b:e1:a9:f4:b8:dd:d6:a1:b2:61:e1:cd:5d:55:23: f6:50:70:e9:11:f9:a2:e9:b9:6b:ca:bc:6d:f8:b6:36:bf:0a: a7:c8:70:d5:0f:6b:cd:9e:14:5a:a3:3e:54:ac:36:32:9d:49: 82:79:88:f7:97:87:c8:6d:97:60:f1:15:76:fd:d8:81:44:34: 6a:99:33:fc -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUTkYEuDXa3174Lv9jGeV7Q68e8dcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0Qzcy RjFBMTJCODAeFw0yNjA0MjQwNzI5NTVaFw0yNzA0MjMwNzM0NTVaMDMxMTAvBgNV BAMTKDM1QThFMTE2NzVDNTA0NjMxODY2Q0M3RTFGQkQwNjI4NTEyM0YxQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw7Z6UsTh+z2WzzMUFdCPq1D2c VA5BgurEJxykKGCxyOQDgIvDToDbp9r1MvVsGqD0tlFHJRvZBzyUc4NguKB7Qen7 o6s8yZwe8FDmHRa2DCnEBQTXDdV7pXHb1TC1TJ27FlvCcZXWp9ovCAUEqKwRv14j osw6s67EZ6ovCAVK9LxESzrbYyc6xQauz+6c2+8zHTPOiEIaMwFDcaJY/Tz4OAOj EKlsHzNUdPT63+acQDdM6HoBIAIj9kj2LJ+oca5RczoLx8i4PjLDmWqmAywmUfhy hyHogdXZkhJe0sZLs8ZSXP8rrS67fq8d9f69APsGdyrgjhgUC8pEWlxvTnRjAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUNajhFnXFBGMYZsx+H70GKFEj8c8wHwYDVR0j BBgwFoAUPQHNaSjd6NJqyWJl8fkExy8aErgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQyMDI4OS8wLzNEMDFDRDY5MjhEREU4RDI2QUM5NjI2NUYxRjkw NEM3MkYxQTEyQjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0QzcyRjFBMTJCOC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1NDIwMjg5LzAvMzQzNTJlMzIzNTMx MmUzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzQzNjM3MzczMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAS37AjANBgkqhkiG9w0BAQsFAAOCAQEAE8TPoCCegkkJ2iRYjFyiPQeB8liK c4C0iZRs1VIs/ij4aOQckd5uqVF9Nev82GzUx/K7Ixuq+mel+tDtsO2mMXbwGBXD 0Hy4j2kvkrChFhPjgSJet2IR4Sle9jhfg+FDdAqylR8Ntbg/QlD+iLB9yiGvVyn+ Gu2qN9di8YHLe9rtDhtHcAKZ8XDR88incK68e1G7knXKhbosr9vaUWoFkajCVZ4J coK4S9OId2Pa2N8zDe0GYK5XS+Gp9Ljd1qGyYeHNXVUj9lBw6RH5oum5a8q8bfi2 Nr8Kp8hw1Q9rzZ4UWqM+VKw2Mp1JgnmI95eHyG2XYPEVdv3YgUQ0apkz/A== -----END CERTIFICATE-----Generated at Wed May 13 14:09:17 2026 by rpki-client