$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34352e3235332e32342e302f32322d3234203d3e203539303438.roa File: 34352e3235332e32342e302f32322d3234203d3e203539303438.roa (raw, json) Hash identifier: kMwxP2Yw6O4RiPDirMp2ZPbKDHItwX48qn1jwE3EmWI= Subject key identifier: 4D:76:43:17:F2:10:9A:8B:CE:79:90:DB:BD:D0:FB:3E:A0:ED:7E:DA Certificate issuer: /CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Certificate serial: 715D7290EBB87E07AA8CF607510FA6B279DD5911 Authority key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34352e3235332e32342e302f32322d3234203d3e203539303438.roa Signing time: Mon 11 May 2026 07:00:49 +0000 ROA not before: Mon 11 May 2026 06:55:49 +0000 ROA not after: Mon 10 May 2027 07:00:49 +0000 asID: 59048 IP address blocks: 45.253.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:5d:72:90:eb:b8:7e:07:aa:8c:f6:07:51:0f:a6:b2:79:dd:59:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Validity Not Before: May 11 06:55:49 2026 GMT Not After : May 10 07:00:49 2027 GMT Subject: CN=4D764317F2109A8BCE7990DBBDD0FB3EA0ED7EDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9e:ec:6a:79:60:09:68:12:50:d4:21:86:98: 76:4c:d5:05:d5:3e:fc:40:49:38:a6:07:02:93:d6: de:33:c9:ae:60:a6:e0:ca:a8:da:36:a3:4f:7f:dc: 3f:80:ef:18:b0:ca:61:78:2d:a1:b5:ee:e8:21:82: 73:42:6e:55:ac:55:9a:ae:09:94:99:ee:40:73:e7: 6d:1b:d8:b0:55:9b:bc:8f:7a:48:1d:2d:bd:a1:ed: 23:13:eb:ed:8d:00:52:27:09:47:63:62:ed:31:04: 2b:c2:94:c6:42:80:e2:01:8a:86:db:9d:98:91:de: fa:fb:8f:92:27:90:d8:14:ad:dd:7f:a9:60:f3:68: 56:13:87:c2:ab:9a:31:9a:8f:3f:be:04:22:61:c3: 70:26:19:e9:32:b8:06:c3:b5:04:1e:01:e5:74:59: cd:c1:e8:38:c8:cb:c3:b2:7b:40:c8:16:e8:c2:58: 82:a6:83:5c:0f:b8:48:31:7c:3e:58:1d:bd:65:b6: 79:b6:eb:71:02:f4:5b:e5:c3:c8:99:b9:a1:f5:29: 28:f8:43:0d:da:f6:6a:0c:5d:15:09:4a:ca:b0:cd: d1:e3:83:ec:66:0e:b5:d0:f8:24:f2:94:52:d2:89: 0f:ae:82:b5:12:01:26:28:00:07:6a:ab:71:48:bf: 40:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:76:43:17:F2:10:9A:8B:CE:79:90:DB:BD:D0:FB:3E:A0:ED:7E:DA X509v3 Authority Key Identifier: keyid:0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34352e3235332e32342e302f32322d3234203d3e203539303438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.253.24.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:c0:a0:f3:43:3b:15:92:86:3c:eb:2c:f8:2a:fc:ee:d3:65: ee:3d:12:af:c2:03:34:be:86:1c:fb:5b:bb:09:53:9b:28:90: 49:65:dd:57:19:6c:56:bc:44:16:cb:aa:cc:aa:83:d6:05:c8: 68:b0:d6:93:47:51:8d:6e:bc:fc:d3:e5:64:a1:64:1f:a5:48: b4:8f:3a:e1:c6:ac:7e:5a:ea:68:dd:c3:57:01:aa:2c:b2:b7: e7:4f:85:e1:83:b3:b9:19:d7:7e:3f:ea:13:ea:0f:38:f5:47: 49:2c:bd:7f:fd:21:dc:ef:e4:a8:12:60:32:7c:bc:bd:4c:35: 27:e0:fe:71:c2:c3:34:04:c9:1b:05:3b:8d:2c:99:f9:0f:38: f9:4d:64:28:5b:bb:28:36:6a:aa:e2:86:56:ac:53:fb:73:1c: df:46:e2:c8:e6:73:2a:ec:11:38:13:8f:31:a0:1c:5b:a4:a0: f9:ea:c8:27:d3:c4:db:ed:1c:5d:c5:bf:fc:6d:c2:47:87:2d: 2c:ad:e4:bc:ee:27:12:6c:5d:64:18:d1:68:14:44:30:0c:61: 39:c5:6b:36:08:60:6b:86:1a:59:57:d5:27:0a:81:1a:a9:23: 70:64:66:e9:54:2a:12:ab:aa:32:b5:a1:2f:b2:0a:8f:20:85: 90:b2:88:2f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUcV1ykOu4fgeqjPYHUQ+msnndWREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3 NjlGREY4QjAeFw0yNjA1MTEwNjU1NDlaFw0yNzA1MTAwNzAwNDlaMDMxMTAvBgNV BAMTKDRENzY0MzE3RjIxMDlBOEJDRTc5OTBEQkJERDBGQjNFQTBFRDdFREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+nuxqeWAJaBJQ1CGGmHZM1QXV PvxASTimBwKT1t4zya5gpuDKqNo2o09/3D+A7xiwymF4LaG17ughgnNCblWsVZqu CZSZ7kBz520b2LBVm7yPekgdLb2h7SMT6+2NAFInCUdjYu0xBCvClMZCgOIBiobb nZiR3vr7j5InkNgUrd1/qWDzaFYTh8KrmjGajz++BCJhw3AmGekyuAbDtQQeAeV0 Wc3B6DjIy8Oye0DIFujCWIKmg1wPuEgxfD5YHb1ltnm263EC9Fvlw8iZuaH1KSj4 Qw3a9moMXRUJSsqwzdHjg+xmDrXQ+CTylFLSiQ+ugrUSASYoAAdqq3FIv0BxAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUTXZDF/IQmovOeZDbvdD7PqDtftowHwYDVR0j BBgwFoAUDkpkqQtIyO1KooboiD1ZW3af34swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkxMjQxMDg1OTk2MjM3MS8wLzBFNEE2NEE5MEI0OEM4RUQ0QUEyODZFODg4M0Q1 OTVCNzY5RkRGOEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3NjlGREY4Qi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1OTEyNDEwODU5OTYyMzcxLzAvMzQzNTJlMzIzNTMz MmUzMjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzOTMwMzQzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAi39GDANBgkqhkiG9w0BAQsFAAOCAQEAPcCg80M7FZKGPOss+Cr87tNl7j0S r8IDNL6GHPtbuwlTmyiQSWXdVxlsVrxEFsuqzKqD1gXIaLDWk0dRjW68/NPlZKFk H6VItI864casflrqaN3DVwGqLLK350+F4YOzuRnXfj/qE+oPOPVHSSy9f/0h3O/k qBJgMny8vUw1J+D+ccLDNATJGwU7jSyZ+Q84+U1kKFu7KDZqquKGVqxT+3Mc30bi yOZzKuwROBOPMaAcW6Sg+erIJ9PE2+0cXcW//G3CR4ctLK3kvO4nEmxdZBjRaBRE MAxhOcVrNghga4YaWVfVJwqBGqkjcGRm6VQqEquqMrWhL7IKjyCFkLKILw== -----END CERTIFICATE-----Generated at Wed May 13 10:40:26 2026 by rpki-client