$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34352e3235332e32362e302f32342d3234203d3e20313338343231.roa File: 34352e3235332e32362e302f32342d3234203d3e20313338343231.roa (raw, json) Hash identifier: gJkNdrTDAVj2H/fjazY6lqqI7ikr1XkVjwxhcPiRKvw= Subject key identifier: 7D:4B:00:E7:C4:82:C4:48:3E:98:FD:56:AE:DF:E8:F8:A1:59:44:49 Certificate issuer: /CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Certificate serial: 4CAFD2D1082A01C9AD38EE173FEF0C2B779CEDA5 Authority key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34352e3235332e32362e302f32342d3234203d3e20313338343231.roa Signing time: Mon 11 May 2026 07:00:49 +0000 ROA not before: Mon 11 May 2026 06:55:49 +0000 ROA not after: Mon 10 May 2027 07:00:49 +0000 asID: 138421 IP address blocks: 45.253.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:af:d2:d1:08:2a:01:c9:ad:38:ee:17:3f:ef:0c:2b:77:9c:ed:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Validity Not Before: May 11 06:55:49 2026 GMT Not After : May 10 07:00:49 2027 GMT Subject: CN=7D4B00E7C482C4483E98FD56AEDFE8F8A1594449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:4e:85:83:0e:b1:3f:c7:8a:8b:2a:0d:6a:63: 29:e3:66:7d:d5:5a:cd:4f:cb:7d:61:59:9f:01:cc: 43:a3:2d:94:9d:da:93:9f:94:a3:d6:22:86:d4:ba: 6e:f0:d1:87:a4:eb:f0:10:f7:76:02:62:5a:cd:96: b6:40:be:db:8c:ca:50:da:a5:88:05:45:13:a2:82: b8:d6:8b:14:ec:89:92:b2:5a:f8:41:fe:ca:7f:50: b6:6b:cd:00:1c:6d:b1:86:cf:99:ef:23:b5:1c:54: 1d:a1:18:7f:12:6e:de:88:54:e6:76:e7:ff:ae:da: bc:81:2b:66:2d:97:c7:c2:51:62:24:fc:89:34:fd: e8:f3:20:3b:24:a7:1f:30:41:ef:d7:4c:df:b5:cb: 5f:ab:b8:ed:15:a8:44:cb:17:81:37:27:aa:ec:a8: f6:af:7b:59:51:a0:e1:20:dc:72:88:6e:e0:d5:df: a9:7a:bd:88:91:be:36:c2:f5:7b:e5:8f:3c:57:bf: 4e:18:02:36:0a:14:64:dd:9f:ef:b3:26:74:06:de: 2c:a5:78:a3:ea:98:94:f2:f7:ec:ec:ac:0a:e1:45: 55:cd:b5:8e:a2:3a:07:2d:88:69:48:46:60:4d:f2: 81:90:eb:73:c2:2b:32:14:08:63:56:9c:7b:59:eb: f3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4B:00:E7:C4:82:C4:48:3E:98:FD:56:AE:DF:E8:F8:A1:59:44:49 X509v3 Authority Key Identifier: keyid:0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34352e3235332e32362e302f32342d3234203d3e20313338343231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.253.26.0/24 Signature Algorithm: sha256WithRSAEncryption 53:fe:d8:40:37:e8:08:d9:96:64:5b:27:ea:d0:4a:83:70:0b: 06:58:2c:9e:90:77:99:22:d7:80:5b:5b:cf:1a:1b:2e:87:23: cb:59:a4:c8:1b:90:2d:e6:3a:02:6a:9e:53:e1:72:5c:c8:0b: fb:0e:d9:8e:22:87:ed:1e:a9:22:7f:90:d9:17:bd:21:58:da: ce:07:c7:f9:76:2b:bd:04:ec:c8:bc:3d:2d:33:5a:56:f7:40: 83:c4:ad:07:15:fa:1a:92:66:2a:9f:4a:aa:bd:23:58:50:3e: 7a:b4:36:5a:3f:58:3b:b0:0b:1f:35:cd:4e:fc:0f:f6:93:3e: 16:e8:7d:42:e9:b8:e5:73:95:cb:78:a0:5e:9f:98:14:2c:33: 6a:8e:d1:9f:d3:97:6b:85:da:2d:be:b7:4d:a4:9d:9d:31:ea: 06:02:5f:4c:b5:26:e6:09:1e:da:cd:13:33:70:8f:e8:3b:83: d5:81:4a:39:80:4f:de:8f:00:fa:18:6f:68:20:a7:f4:26:28: 46:f6:d1:2a:1c:07:f7:81:0d:5f:28:53:e3:d2:e0:38:6a:d3: 10:dd:30:0e:56:c3:a7:c0:97:73:3b:22:2b:e1:5b:e7:d3:06: 31:2c:86:f5:c0:bf:c5:70:32:13:d0:ae:36:71:97:a9:13:a9: ed:04:45:0b -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUTK/S0QgqAcmtOO4XP+8MK3ec7aUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3 NjlGREY4QjAeFw0yNjA1MTEwNjU1NDlaFw0yNzA1MTAwNzAwNDlaMDMxMTAvBgNV BAMTKDdENEIwMEU3QzQ4MkM0NDgzRTk4RkQ1NkFFREZFOEY4QTE1OTQ0NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwToWDDrE/x4qLKg1qYynjZn3V Ws1Py31hWZ8BzEOjLZSd2pOflKPWIobUum7w0Yek6/AQ93YCYlrNlrZAvtuMylDa pYgFRROigrjWixTsiZKyWvhB/sp/ULZrzQAcbbGGz5nvI7UcVB2hGH8Sbt6IVOZ2 5/+u2ryBK2Ytl8fCUWIk/Ik0/ejzIDskpx8wQe/XTN+1y1+ruO0VqETLF4E3J6rs qPave1lRoOEg3HKIbuDV36l6vYiRvjbC9XvljzxXv04YAjYKFGTdn++zJnQG3iyl eKPqmJTy9+zsrArhRVXNtY6iOgctiGlIRmBN8oGQ63PCKzIUCGNWnHtZ6/MlAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUfUsA58SCxEg+mP1Wrt/o+KFZREkwHwYDVR0j BBgwFoAUDkpkqQtIyO1KooboiD1ZW3af34swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkxMjQxMDg1OTk2MjM3MS8wLzBFNEE2NEE5MEI0OEM4RUQ0QUEyODZFODg4M0Q1 OTVCNzY5RkRGOEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3NjlGREY4Qi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTkxMjQxMDg1OTk2MjM3MS8wLzM0MzUyZTMyMzUz MzJlMzIzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzODM0MzIzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAC39GjANBgkqhkiG9w0BAQsFAAOCAQEAU/7YQDfoCNmWZFsn6tBKg3AL BlgsnpB3mSLXgFtbzxobLocjy1mkyBuQLeY6AmqeU+FyXMgL+w7ZjiKH7R6pIn+Q 2Re9IVjazgfH+XYrvQTsyLw9LTNaVvdAg8StBxX6GpJmKp9Kqr0jWFA+erQ2Wj9Y O7ALHzXNTvwP9pM+Fuh9Qum45XOVy3igXp+YFCwzao7Rn9OXa4XaLb63TaSdnTHq BgJfTLUm5gke2s0TM3CP6DuD1YFKOYBP3o8A+hhvaCCn9CYoRvbRKhwH94ENXyhT 49LgOGrTEN0wDlbDp8CXczsiK+Fb59MGMSyG9cC/xXAyE9CuNnGXqROp7QRFCw== -----END CERTIFICATE-----Generated at Wed May 13 14:34:44 2026 by rpki-client