$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34352e3235332e32352e302f32342d3234203d3e20313338343231.roa File: 34352e3235332e32352e302f32342d3234203d3e20313338343231.roa (raw, json) Hash identifier: uoY7fDAL8mrK2T0lofNo8b/DuIGDzMmJyoKfSlo9E7c= Subject key identifier: 82:1D:2B:0D:66:A5:38:A8:EB:82:09:45:0B:05:9A:DB:BE:8E:EB:B5 Certificate issuer: /CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Certificate serial: 252C86FC68AEE8ADDBB3CE45BDA5B4DFC7399302 Authority key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34352e3235332e32352e302f32342d3234203d3e20313338343231.roa Signing time: Mon 11 May 2026 07:00:48 +0000 ROA not before: Mon 11 May 2026 06:55:48 +0000 ROA not after: Mon 10 May 2027 07:00:48 +0000 asID: 138421 IP address blocks: 45.253.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:2c:86:fc:68:ae:e8:ad:db:b3:ce:45:bd:a5:b4:df:c7:39:93:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Validity Not Before: May 11 06:55:48 2026 GMT Not After : May 10 07:00:48 2027 GMT Subject: CN=821D2B0D66A538A8EB8209450B059ADBBE8EEBB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c4:e6:7f:51:bf:d0:d2:9d:ba:aa:98:6d:8f: 3c:d8:b0:2f:c1:9f:95:1b:b0:8b:d2:56:8e:95:53: 05:4e:d7:c5:d1:ef:99:b6:f1:27:10:47:45:ce:42: 95:09:00:06:40:a1:c8:07:8a:87:96:a2:01:ab:9d: cd:9b:93:84:ab:c7:33:f2:79:ed:aa:4c:e8:54:64: 96:9f:d2:60:50:e5:5d:e9:ce:21:61:f6:ba:74:76: 7a:69:13:a8:97:c3:dd:18:51:cc:7a:0e:1e:f1:31: 34:a0:33:29:de:22:13:b5:7e:09:ad:39:ae:30:32: 1b:d0:5e:b5:12:a6:70:8d:77:4b:23:a2:41:2a:ae: 7b:88:2e:d9:51:c2:6b:c9:f8:31:54:2c:5f:78:87: 29:fa:a0:26:98:90:87:34:48:40:8c:29:ca:d5:cd: b5:53:dd:57:66:5d:e5:68:5b:97:7a:f3:2f:ac:10: 37:2e:60:c9:b8:9d:20:75:80:90:be:6f:57:b5:bb: ae:0a:a0:ab:91:72:b6:17:a7:3d:26:02:c0:43:72: 9d:c4:01:3f:c1:30:76:0e:02:5a:0e:bf:57:c2:53: b4:b8:bf:fa:d3:6d:a9:32:3e:a2:20:0a:67:60:f9: 23:8f:e6:f5:45:8c:7d:6b:3c:8f:20:17:40:19:63: 01:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1D:2B:0D:66:A5:38:A8:EB:82:09:45:0B:05:9A:DB:BE:8E:EB:B5 X509v3 Authority Key Identifier: keyid:0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34352e3235332e32352e302f32342d3234203d3e20313338343231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.253.25.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:3d:3d:7b:4a:1a:bb:27:36:3a:a2:5c:cd:3f:dd:0c:b2:1c: 6f:31:c1:d0:ab:8e:fc:c9:fe:3d:b2:ba:c4:4a:8a:23:fd:e5: 72:1e:72:80:95:5b:fe:fc:9f:b1:f5:d4:b4:a9:c4:46:f3:69: b9:77:f9:24:95:fb:3d:25:1a:e4:60:b6:b7:84:c3:0c:72:dc: c3:9c:5f:e4:cc:7b:61:22:a5:74:4c:6e:80:ad:c3:8c:9a:07: 48:86:ce:5e:80:66:d0:e2:14:8b:5c:b2:09:4d:97:f2:20:08: 9a:4e:46:e2:87:67:a0:2c:5d:02:c4:0f:e7:ac:bc:29:16:ed: d3:6d:6f:38:14:89:0f:85:bc:15:0e:4d:e5:cb:bc:4c:af:2a: ad:21:7a:8b:3f:8c:96:0e:ed:29:f7:f6:17:e1:ed:86:8a:a3: 1b:92:9f:ee:52:e6:4b:e3:a3:7a:2c:02:df:da:36:84:68:11: 75:0f:ab:e1:4f:71:8a:92:bf:06:eb:3f:8f:65:9a:35:5f:e0: 17:42:3c:91:e8:8e:fa:07:d7:b8:da:5a:91:49:87:9c:8c:a4: 1f:b7:de:62:d0:9e:95:5b:bc:4e:14:59:c7:64:27:8c:5f:e9: 1b:3d:a7:eb:af:5d:a7:e3:0c:b2:e6:6a:51:fe:39:16:7a:e2: 4a:ed:10:07 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUJSyG/Giu6K3bs85FvaW038c5kwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3 NjlGREY4QjAeFw0yNjA1MTEwNjU1NDhaFw0yNzA1MTAwNzAwNDhaMDMxMTAvBgNV BAMTKDgyMUQyQjBENjZBNTM4QThFQjgyMDk0NTBCMDU5QURCQkU4RUVCQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSxOZ/Ub/Q0p26qphtjzzYsC/B n5UbsIvSVo6VUwVO18XR75m28ScQR0XOQpUJAAZAocgHioeWogGrnc2bk4SrxzPy ee2qTOhUZJaf0mBQ5V3pziFh9rp0dnppE6iXw90YUcx6Dh7xMTSgMyneIhO1fgmt Oa4wMhvQXrUSpnCNd0sjokEqrnuILtlRwmvJ+DFULF94hyn6oCaYkIc0SECMKcrV zbVT3VdmXeVoW5d68y+sEDcuYMm4nSB1gJC+b1e1u64KoKuRcrYXpz0mAsBDcp3E AT/BMHYOAloOv1fCU7S4v/rTbakyPqIgCmdg+SOP5vVFjH1rPI8gF0AZYwHJAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUgh0rDWalOKjrgglFCwWa276O67UwHwYDVR0j BBgwFoAUDkpkqQtIyO1KooboiD1ZW3af34swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkxMjQxMDg1OTk2MjM3MS8wLzBFNEE2NEE5MEI0OEM4RUQ0QUEyODZFODg4M0Q1 OTVCNzY5RkRGOEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3NjlGREY4Qi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTkxMjQxMDg1OTk2MjM3MS8wLzM0MzUyZTMyMzUz MzJlMzIzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzODM0MzIzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAC39GTANBgkqhkiG9w0BAQsFAAOCAQEAWj09e0oauyc2OqJczT/dDLIc bzHB0KuO/Mn+PbK6xEqKI/3lch5ygJVb/vyfsfXUtKnERvNpuXf5JJX7PSUa5GC2 t4TDDHLcw5xf5Mx7YSKldExugK3DjJoHSIbOXoBm0OIUi1yyCU2X8iAImk5G4odn oCxdAsQP56y8KRbt021vOBSJD4W8FQ5N5cu8TK8qrSF6iz+Mlg7tKff2F+Hthoqj G5Kf7lLmS+OjeiwC39o2hGgRdQ+r4U9xipK/Bus/j2WaNV/gF0I8keiO+gfXuNpa kUmHnIykH7feYtCelVu8ThRZx2QnjF/pGz2n669dp+MMsuZqUf45FnriSu0QBw== -----END CERTIFICATE-----Generated at Wed May 13 14:33:25 2026 by rpki-client