$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3235312e322e302f32332d3233203d3e203137383136.roa File: 34352e3235312e322e302f32332d3233203d3e203137383136.roa (raw, json) Hash identifier: Rx5OuBmdni1w5P8Xxxw5Y5JHc1feX0tCf3IRIhgjjW0= Subject key identifier: DA:83:FC:68:4C:8C:FE:CE:17:33:97:67:0A:77:3C:53:CB:A6:4B:83 Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Certificate serial: 0E932983D21CA66368010D81812B7C8A900ECCF9 Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3235312e322e302f32332d3233203d3e203137383136.roa Signing time: Sat 09 May 2026 01:20:09 +0000 ROA not before: Sat 09 May 2026 01:15:09 +0000 ROA not after: Sat 08 May 2027 01:20:09 +0000 asID: 17816 IP address blocks: 45.251.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:93:29:83:d2:1c:a6:63:68:01:0d:81:81:2b:7c:8a:90:0e:cc:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Validity Not Before: May 9 01:15:09 2026 GMT Not After : May 8 01:20:09 2027 GMT Subject: CN=DA83FC684C8CFECE173397670A773C53CBA64B83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a7:7a:b7:67:4a:14:c7:b7:db:0a:cd:83:0d: 97:e7:b1:f5:f3:14:42:c0:31:8f:38:e1:b2:10:ca: ee:98:6c:4e:4a:50:a1:b9:bd:7f:18:b3:71:60:fb: ec:f9:25:7c:c0:2e:8b:99:00:9e:c3:be:15:86:43: e0:f1:83:f3:70:99:36:b6:b3:5d:ab:69:f2:13:2f: 86:69:0c:01:d0:5e:dc:03:1b:3f:bc:1c:28:9a:10: 97:20:46:04:ac:20:75:c8:0f:8c:8c:45:1e:b7:7d: e0:35:03:de:03:b6:d5:22:54:15:8a:dc:1c:45:bb: c1:22:91:88:32:ea:c7:4d:bc:52:43:b2:c2:97:1c: 16:f7:61:67:2e:07:ff:e9:88:43:9e:29:3e:d2:ee: bc:f0:89:1e:0c:6c:55:58:a4:c1:80:97:91:53:2d: 61:68:f6:4e:8d:0b:79:bf:c7:bd:85:fa:7c:4e:be: f9:c8:3d:b7:41:ea:af:a7:e9:b1:ee:d2:de:9b:03: eb:90:9d:b8:01:4c:4d:4e:88:3d:ef:25:01:f2:b6: 98:ad:45:be:e9:fd:e7:df:85:2c:e6:d9:53:0b:47: b0:5d:d4:a4:48:3b:a2:0e:9c:f6:cd:40:e1:7d:93: 58:b7:c6:59:18:c5:67:7e:ef:33:18:f0:1e:d2:68: 99:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:83:FC:68:4C:8C:FE:CE:17:33:97:67:0A:77:3C:53:CB:A6:4B:83 X509v3 Authority Key Identifier: keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3235312e322e302f32332d3233203d3e203137383136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.251.2.0/23 Signature Algorithm: sha256WithRSAEncryption 07:5b:7e:ef:3c:b0:37:dc:f7:a4:ab:d5:18:a6:f6:e7:94:52: 04:ea:64:41:83:e6:4f:17:0f:da:95:7b:c2:99:f0:72:37:c6: a1:4d:17:f4:23:d4:db:0f:e2:9e:0c:9d:28:38:d7:ab:85:37: e1:b7:9b:8f:f4:fe:a2:b1:58:15:e6:b9:ae:30:2d:2a:c1:b4: e9:ca:2b:b8:b3:2f:59:b5:bc:42:dc:75:41:48:55:4e:61:b6: 62:a3:e6:f8:b7:9c:b1:7d:44:94:62:b0:0e:06:95:74:33:99: d0:25:09:d1:71:e5:15:02:0f:5e:6a:d6:e8:5b:75:5e:72:b6: 88:d7:d6:8e:c4:a2:cb:fa:e0:6e:c8:0a:bb:5f:3e:d7:dc:bd: e7:c7:52:6a:05:35:06:ec:87:43:36:18:99:0c:62:0e:4c:27: 38:46:38:8b:0f:97:0e:95:ea:64:f8:92:d1:5c:77:95:34:c8: 03:7f:2f:3e:dd:f2:5b:88:2f:83:f9:81:1f:36:89:eb:da:dc: a8:1e:e6:53:69:2b:43:6b:1f:4f:c2:74:0d:d8:45:7f:a2:8f: ab:f3:42:59:00:96:9d:a5:0b:e1:06:4c:7b:ca:c0:6d:b1:8d: cc:69:a3:38:06:09:21:78:8c:ea:cb:a0:8d:d0:03:13:19:06: 5f:e3:b9:cc -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUDpMpg9IcpmNoAQ2BgSt8ipAOzPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0Qzcy RjFBMTJCODAeFw0yNjA1MDkwMTE1MDlaFw0yNzA1MDgwMTIwMDlaMDMxMTAvBgNV BAMTKERBODNGQzY4NEM4Q0ZFQ0UxNzMzOTc2NzBBNzczQzUzQ0JBNjRCODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzp3q3Z0oUx7fbCs2DDZfnsfXz FELAMY844bIQyu6YbE5KUKG5vX8Ys3Fg++z5JXzALouZAJ7DvhWGQ+Dxg/NwmTa2 s12rafITL4ZpDAHQXtwDGz+8HCiaEJcgRgSsIHXID4yMRR63feA1A94DttUiVBWK 3BxFu8EikYgy6sdNvFJDssKXHBb3YWcuB//piEOeKT7S7rzwiR4MbFVYpMGAl5FT LWFo9k6NC3m/x72F+nxOvvnIPbdB6q+n6bHu0t6bA+uQnbgBTE1OiD3vJQHytpit Rb7p/effhSzm2VMLR7Bd1KRIO6IOnPbNQOF9k1i3xlkYxWd+7zMY8B7SaJmzAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQU2oP8aEyM/s4XM5dnCnc8U8umS4MwHwYDVR0j BBgwFoAUPQHNaSjd6NJqyWJl8fkExy8aErgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQyMDI4OS8wLzNEMDFDRDY5MjhEREU4RDI2QUM5NjI2NUYxRjkw NEM3MkYxQTEyQjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0QzcyRjFBMTJCOC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1NDIwMjg5LzAvMzQzNTJlMzIzNTMx MmUzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzczODMxMzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAEt+wIwDQYJKoZIhvcNAQELBQADggEBAAdbfu88sDfc96Sr1Rim9ueUUgTqZEGD 5k8XD9qVe8KZ8HI3xqFNF/Qj1NsP4p4MnSg416uFN+G3m4/0/qKxWBXmua4wLSrB tOnKK7izL1m1vELcdUFIVU5htmKj5vi3nLF9RJRisA4GlXQzmdAlCdFx5RUCD15q 1uhbdV5ytojX1o7Eosv64G7ICrtfPtfcvefHUmoFNQbsh0M2GJkMYg5MJzhGOIsP lw6V6mT4ktFcd5U0yAN/Lz7d8luIL4P5gR82ieva3Kge5lNpK0NrH0/CdA3YRX+i j6vzQlkAlp2lC+EGTHvKwG2xjcxpozgGCSF4jOrLoI3QAxMZBl/jucw= -----END CERTIFICATE-----Generated at Wed May 13 14:13:14 2026 by rpki-client