$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3235312e332e302f32342d3234203d3e20313436373732.roa File: 34352e3235312e332e302f32342d3234203d3e20313436373732.roa (raw, json) Hash identifier: 84MNUAfErXO1nrT6PFyovWHzQ0LJbZ44LYC9o9hGmRE= Subject key identifier: 14:E6:79:43:96:6B:66:19:92:25:2D:F9:63:61:B1:E4:12:07:07:18 Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Certificate serial: 3E0F5D2F6632232C830EC83B92367D54816DD599 Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3235312e332e302f32342d3234203d3e20313436373732.roa Signing time: Fri 24 Apr 2026 07:34:54 +0000 ROA not before: Fri 24 Apr 2026 07:29:54 +0000 ROA not after: Fri 23 Apr 2027 07:34:54 +0000 asID: 146772 IP address blocks: 45.251.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:0f:5d:2f:66:32:23:2c:83:0e:c8:3b:92:36:7d:54:81:6d:d5:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Validity Not Before: Apr 24 07:29:54 2026 GMT Not After : Apr 23 07:34:54 2027 GMT Subject: CN=14E67943966B661992252DF96361B1E412070718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e8:04:ec:94:b8:aa:bd:b4:c1:ec:a0:1a:44: e1:96:57:4b:c2:9f:3d:2a:65:46:69:c1:6d:a5:a6: d0:43:f1:48:c9:95:50:a6:23:c4:7b:1f:59:03:1e: 3d:67:34:7b:f3:11:36:58:2a:62:b7:28:e7:4c:75: b6:31:50:91:bf:79:95:85:e9:63:f2:5e:bf:87:85: a6:f1:5c:ae:d9:e3:45:0a:b0:7e:ec:58:8c:d2:20: 05:06:66:49:5c:34:1d:48:37:c4:c2:37:dc:3d:96: 11:22:27:24:28:a2:5b:b9:ee:3a:20:e6:d3:2e:a7: 47:6f:99:6c:e2:e1:ed:67:82:4c:52:c9:01:50:2c: a4:66:7e:60:20:16:d8:5e:db:33:e7:29:ef:02:33: 8f:6f:79:53:a2:2a:6c:13:a3:d4:3c:c8:e9:d6:d7: 31:50:a4:1f:99:d8:df:34:16:03:15:ad:50:ce:41: 0b:c5:46:9d:26:10:60:e1:12:df:e9:20:e9:bf:c5: 01:f5:27:88:42:0e:51:a2:a7:d9:70:f3:d2:83:5c: 11:57:18:63:2d:45:f9:cb:54:4f:8c:2d:08:39:9f: 35:af:0e:e8:1d:97:b2:6e:5c:93:68:82:92:fb:17: 87:27:03:4f:f7:75:97:30:2d:aa:77:e5:4c:aa:17: 42:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E6:79:43:96:6B:66:19:92:25:2D:F9:63:61:B1:E4:12:07:07:18 X509v3 Authority Key Identifier: keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3235312e332e302f32342d3234203d3e20313436373732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.251.3.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:4f:d0:30:4c:54:3c:af:6f:0b:0f:ec:66:b6:46:59:c9:a3: e0:53:33:ab:bd:df:33:31:e3:20:b5:49:22:f9:6a:79:d9:4a: d4:84:30:a6:52:a3:86:a0:6a:e6:38:45:99:b2:1b:a1:ba:32: 7d:e8:cb:96:50:f7:04:c3:e3:1d:4e:4e:40:92:98:af:7f:0d: ce:35:97:c5:e0:a4:0c:0d:ec:31:aa:70:33:e8:ba:eb:cf:bd: 9c:67:3a:9b:61:9f:79:7e:94:a4:77:c2:2f:3d:a4:30:a2:9d: ed:ad:4e:58:bd:2c:eb:20:b6:ad:1c:f5:18:5e:52:2e:7d:3c: ff:ab:28:7f:a8:cc:90:b9:60:88:b3:a5:47:0b:5b:28:f3:a2: c8:6a:b5:90:07:39:2a:c8:10:04:01:a3:2d:bc:1a:ae:65:49: 2b:e5:91:23:a5:4a:f0:a3:31:ce:ca:ed:05:f0:00:3e:b7:27: f9:ce:10:c5:29:06:1d:6b:fe:6a:92:6a:81:b8:7e:69:67:25: 6e:6b:f0:da:7d:09:c1:ef:db:ff:db:bb:3e:93:2a:f5:df:cc: 56:18:ae:d2:a4:66:c5:f1:c9:57:82:d3:57:d4:f5:3f:ff:7d: 6a:a7:66:86:d5:91:ec:ff:96:8c:b4:62:a9:26:a7:85:18:b5: 36:66:da:3e -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUPg9dL2YyIyyDDsg7kjZ9VIFt1ZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0Qzcy RjFBMTJCODAeFw0yNjA0MjQwNzI5NTRaFw0yNzA0MjMwNzM0NTRaMDMxMTAvBgNV BAMTKDE0RTY3OTQzOTY2QjY2MTk5MjI1MkRGOTYzNjFCMUU0MTIwNzA3MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy6ATslLiqvbTB7KAaROGWV0vC nz0qZUZpwW2lptBD8UjJlVCmI8R7H1kDHj1nNHvzETZYKmK3KOdMdbYxUJG/eZWF 6WPyXr+HhabxXK7Z40UKsH7sWIzSIAUGZklcNB1IN8TCN9w9lhEiJyQoolu57jog 5tMup0dvmWzi4e1ngkxSyQFQLKRmfmAgFthe2zPnKe8CM49veVOiKmwTo9Q8yOnW 1zFQpB+Z2N80FgMVrVDOQQvFRp0mEGDhEt/pIOm/xQH1J4hCDlGip9lw89KDXBFX GGMtRfnLVE+MLQg5nzWvDugdl7JuXJNogpL7F4cnA0/3dZcwLap35UyqF0ITAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUFOZ5Q5ZrZhmSJS35Y2Gx5BIHBxgwHwYDVR0j BBgwFoAUPQHNaSjd6NJqyWJl8fkExy8aErgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQyMDI4OS8wLzNEMDFDRDY5MjhEREU4RDI2QUM5NjI2NUYxRjkw NEM3MkYxQTEyQjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0QzcyRjFBMTJCOC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1NDIwMjg5LzAvMzQzNTJlMzIzNTMx MmUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM3MzczMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAC37AzANBgkqhkiG9w0BAQsFAAOCAQEAKk/QMExUPK9vCw/sZrZGWcmj4FMz q73fMzHjILVJIvlqedlK1IQwplKjhqBq5jhFmbIboboyfejLllD3BMPjHU5OQJKY r38NzjWXxeCkDA3sMapwM+i668+9nGc6m2GfeX6UpHfCLz2kMKKd7a1OWL0s6yC2 rRz1GF5SLn08/6sof6jMkLlgiLOlRwtbKPOiyGq1kAc5KsgQBAGjLbwarmVJK+WR I6VK8KMxzsrtBfAAPrcn+c4QxSkGHWv+apJqgbh+aWclbmvw2n0Jwe/b/9u7PpMq 9d/MVhiu0qRmxfHJV4LTV9T1P/99aqdmhtWR7P+WjLRiqSanhRi1NmbaPg== -----END CERTIFICATE-----Generated at Wed May 13 14:47:45 2026 by rpki-client