$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34352e3235332e32342e302f32342d3234203d3e20313338343231.roa File: 34352e3235332e32342e302f32342d3234203d3e20313338343231.roa (raw, json) Hash identifier: 2Xp/MtxR2mv+Peyu2gZsYSQytZkimRRLC174L+iPML4= Subject key identifier: B1:F0:49:08:58:D7:23:9F:07:09:E6:60:3C:36:54:10:45:99:49:3A Certificate issuer: /CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Certificate serial: 25D283ABBEF12B7B560532C4AE1F4751301B1255 Authority key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34352e3235332e32342e302f32342d3234203d3e20313338343231.roa Signing time: Mon 11 May 2026 07:00:49 +0000 ROA not before: Mon 11 May 2026 06:55:49 +0000 ROA not after: Mon 10 May 2027 07:00:49 +0000 asID: 138421 IP address blocks: 45.253.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:d2:83:ab:be:f1:2b:7b:56:05:32:c4:ae:1f:47:51:30:1b:12:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Validity Not Before: May 11 06:55:49 2026 GMT Not After : May 10 07:00:49 2027 GMT Subject: CN=B1F0490858D7239F0709E6603C3654104599493A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:28:be:d1:66:d8:e1:f8:94:05:dc:31:0e:ca: 21:71:aa:aa:54:1d:c8:a0:31:4e:67:d9:8d:e3:6f: b1:db:e6:22:68:e2:9c:61:7f:13:6d:aa:19:dc:e5: 5e:1e:3b:f8:07:fe:0c:9a:f2:34:12:d7:a9:cf:af: 2e:cb:f7:19:81:46:1c:69:a5:00:fa:62:37:b8:e2: 24:8a:f9:66:93:46:3c:db:ce:31:96:52:58:c5:ef: 1a:1c:9a:49:75:d3:4b:07:46:8b:54:54:39:0a:f3: ca:77:e6:54:e1:38:f6:c4:f8:06:04:a2:59:a6:93: 31:50:b3:90:0e:1f:9d:68:14:da:82:0f:52:4f:57: 93:28:45:15:57:36:b1:45:90:56:df:e1:37:12:03: 04:1c:a1:89:00:1e:fe:0b:97:03:3c:7d:e4:36:61: a2:82:17:f9:15:63:7a:0f:f1:50:59:89:45:ad:65: 0e:56:1c:84:e5:75:19:75:40:77:dd:59:ab:9f:f7: 81:a5:11:34:c3:23:c5:09:a1:40:7d:47:22:39:d3: 6a:d8:75:0e:77:08:7d:0c:d8:98:f1:39:4d:22:dd: 0b:23:5c:bd:5c:01:4c:cd:6a:0f:a3:49:88:6b:1d: 5f:4b:bb:65:64:97:1e:d5:50:68:bf:40:8e:dc:61: 72:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F0:49:08:58:D7:23:9F:07:09:E6:60:3C:36:54:10:45:99:49:3A X509v3 Authority Key Identifier: keyid:0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34352e3235332e32342e302f32342d3234203d3e20313338343231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.253.24.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:ef:73:48:8d:6c:38:26:6b:17:1a:da:b1:d3:2a:ca:c9:e0: 2a:98:ae:62:c2:0f:c3:ff:46:bb:2a:dd:55:a1:09:39:8d:12: c1:23:b3:24:21:92:2c:9e:8b:e6:80:2d:1b:97:09:72:a7:7d: 0c:df:fc:b9:77:68:74:6c:44:fd:54:60:ce:b1:e0:59:2e:c1: a9:dc:df:bc:00:f3:a3:63:83:5a:c4:de:19:79:8f:88:44:36: d2:be:b0:ff:10:62:09:6a:fc:c6:b2:9f:21:58:e0:fc:da:eb: 13:dd:0c:ae:0d:6a:cf:43:63:b8:6f:0d:f6:3c:54:d1:67:06: 8d:54:d7:27:be:45:20:4b:81:a1:42:4f:4c:d3:b2:a5:6e:5e: 61:3f:cb:e7:e8:55:43:cd:61:fd:46:8d:02:d3:56:85:87:c7: ec:a0:ff:9a:ac:a6:b5:ea:1f:2a:f2:8d:7b:0a:6a:34:82:0f: f8:b5:23:14:1d:4e:77:4d:8c:44:31:c6:83:a3:10:d1:83:b1: 26:2c:c4:ff:26:4e:3d:f9:4a:5a:01:91:f9:9f:7a:29:e8:6f: c6:fa:81:fd:e7:36:4c:39:cb:05:56:87:65:08:55:34:ca:e5: dc:0b:d1:07:0b:61:c7:85:30:18:bc:cc:28:ad:a6:2f:d8:88: 72:ac:18:46 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUJdKDq77xK3tWBTLErh9HUTAbElUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3 NjlGREY4QjAeFw0yNjA1MTEwNjU1NDlaFw0yNzA1MTAwNzAwNDlaMDMxMTAvBgNV BAMTKEIxRjA0OTA4NThENzIzOUYwNzA5RTY2MDNDMzY1NDEwNDU5OTQ5M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpKL7RZtjh+JQF3DEOyiFxqqpU HcigMU5n2Y3jb7Hb5iJo4pxhfxNtqhnc5V4eO/gH/gya8jQS16nPry7L9xmBRhxp pQD6Yje44iSK+WaTRjzbzjGWUljF7xocmkl100sHRotUVDkK88p35lThOPbE+AYE olmmkzFQs5AOH51oFNqCD1JPV5MoRRVXNrFFkFbf4TcSAwQcoYkAHv4LlwM8feQ2 YaKCF/kVY3oP8VBZiUWtZQ5WHITldRl1QHfdWauf94GlETTDI8UJoUB9RyI502rY dQ53CH0M2JjxOU0i3QsjXL1cAUzNag+jSYhrHV9Lu2Vklx7VUGi/QI7cYXKDAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUsfBJCFjXI58HCeZgPDZUEEWZSTowHwYDVR0j BBgwFoAUDkpkqQtIyO1KooboiD1ZW3af34swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkxMjQxMDg1OTk2MjM3MS8wLzBFNEE2NEE5MEI0OEM4RUQ0QUEyODZFODg4M0Q1 OTVCNzY5RkRGOEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3NjlGREY4Qi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTkxMjQxMDg1OTk2MjM3MS8wLzM0MzUyZTMyMzUz MzJlMzIzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzODM0MzIzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAC39GDANBgkqhkiG9w0BAQsFAAOCAQEAi+9zSI1sOCZrFxrasdMqysng KpiuYsIPw/9GuyrdVaEJOY0SwSOzJCGSLJ6L5oAtG5cJcqd9DN/8uXdodGxE/VRg zrHgWS7BqdzfvADzo2ODWsTeGXmPiEQ20r6w/xBiCWr8xrKfIVjg/NrrE90Mrg1q z0NjuG8N9jxU0WcGjVTXJ75FIEuBoUJPTNOypW5eYT/L5+hVQ81h/UaNAtNWhYfH 7KD/mqymteofKvKNewpqNIIP+LUjFB1Od02MRDHGg6MQ0YOxJizE/yZOPflKWgGR +Z96KehvxvqB/ec2TDnLBVaHZQhVNMrl3AvRBwthx4UwGLzMKK2mL9iIcqwYRg== -----END CERTIFICATE-----Generated at Wed May 13 09:08:39 2026 by rpki-client