$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34352e3235332e32372e302f32342d3234203d3e2034383131.roa File: 34352e3235332e32372e302f32342d3234203d3e2034383131.roa (raw, json) Hash identifier: hlMB+p7/+vBDy4ABprM0J0dZ8yBskh/098ahdKuOvnk= Subject key identifier: 07:FA:D1:86:C7:E9:76:F4:E9:16:C3:9A:AB:DB:FA:D1:87:5F:9C:2E Certificate issuer: /CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Certificate serial: 2B88A2F95457B6E5BFA630AE22B2C25B900FF86B Authority key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34352e3235332e32372e302f32342d3234203d3e2034383131.roa Signing time: Mon 11 May 2026 07:00:47 +0000 ROA not before: Mon 11 May 2026 06:55:47 +0000 ROA not after: Mon 10 May 2027 07:00:47 +0000 asID: 4811 IP address blocks: 45.253.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:88:a2:f9:54:57:b6:e5:bf:a6:30:ae:22:b2:c2:5b:90:0f:f8:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Validity Not Before: May 11 06:55:47 2026 GMT Not After : May 10 07:00:47 2027 GMT Subject: CN=07FAD186C7E976F4E916C39AABDBFAD1875F9C2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:15:4d:6c:53:df:17:b6:87:75:ec:da:c2:83: 3d:55:cb:ae:16:b5:0d:0a:23:f6:c0:de:9f:7a:0c: a1:4c:ab:87:57:75:31:4f:8c:70:66:d9:1c:6a:4f: c2:cf:f3:3e:48:fa:6d:94:87:b1:42:f2:ee:30:cd: eb:d4:db:d2:1d:32:c4:2b:e5:c7:9a:bc:3a:3c:54: 0c:69:58:11:99:30:5b:7a:3b:5d:cf:d3:c7:07:60: 24:c6:4c:f9:89:e7:07:2b:0f:ce:78:13:1a:82:54: 42:a5:1e:b4:ef:3c:7e:9a:dd:74:5b:e2:8e:45:74: 7f:e6:7d:46:66:4b:1c:7e:1c:da:81:4f:37:14:d2: 39:61:83:e1:29:fd:5f:8c:d4:87:d2:96:4c:ae:2d: 9a:f5:b9:4e:c8:8d:8f:99:ad:92:95:57:52:5c:4f: 34:44:87:f3:9c:53:49:f8:17:9b:9b:7f:b7:53:da: aa:85:e8:79:c6:fa:bf:9d:c6:8c:20:49:1d:cf:47: 99:83:8a:6f:b2:0e:03:ef:a9:38:13:3f:73:97:4c: bf:2a:cf:8b:ab:df:d6:61:95:b3:ab:a6:21:29:4f: 3c:ef:39:6e:83:5e:08:ea:32:36:2f:ab:ae:e2:0f: 86:01:7f:5b:f7:22:74:5c:20:0b:7c:50:00:95:6f: b0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FA:D1:86:C7:E9:76:F4:E9:16:C3:9A:AB:DB:FA:D1:87:5F:9C:2E X509v3 Authority Key Identifier: keyid:0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34352e3235332e32372e302f32342d3234203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.253.27.0/24 Signature Algorithm: sha256WithRSAEncryption aa:8d:92:3d:3f:c5:9d:8c:cb:79:f9:c6:db:24:7d:85:37:82: 9b:ac:0e:0a:a4:bc:72:51:14:bb:7e:1b:e2:d6:5d:b3:e4:a6: cc:36:f0:57:14:47:5f:0a:40:93:ff:a3:79:b7:7c:2b:a0:2d: 2a:38:4f:1e:8a:e4:3b:28:5b:4e:98:35:3d:f0:87:b0:74:33: b5:dc:7e:e4:6d:11:f4:2d:93:ba:c8:6c:08:68:85:99:79:82: 75:dd:66:61:c1:4d:47:f9:cb:5d:43:e4:b4:9b:4c:ee:ab:a7: 44:d0:11:7c:fa:72:75:4b:c7:28:4f:de:0a:1c:40:c6:9b:64: a1:bf:c9:8a:90:55:af:f1:5d:11:13:75:3b:88:a4:d3:e2:8b: ab:79:cb:b5:86:82:d2:b9:45:1a:7e:74:3c:d5:9b:fe:65:dd: f9:7e:a7:7b:a1:eb:db:bc:cb:7b:13:00:dc:f1:b5:af:13:55: 57:8d:59:07:bd:96:08:a2:51:0c:b4:26:62:b2:a8:5a:95:fa: 46:53:ad:2c:c3:1f:0c:ed:e8:bb:e6:5a:2a:91:af:6a:47:3c: 0e:04:32:82:88:97:c6:90:f5:2f:44:73:d6:d3:a6:51:c6:96: 50:a2:4b:17:1d:df:dc:37:ac:c2:2c:81:05:ea:27:be:db:ce: 5d:78:c2:76 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUK4ii+VRXtuW/pjCuIrLCW5AP+GswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3 NjlGREY4QjAeFw0yNjA1MTEwNjU1NDdaFw0yNzA1MTAwNzAwNDdaMDMxMTAvBgNV BAMTKDA3RkFEMTg2QzdFOTc2RjRFOTE2QzM5QUFCREJGQUQxODc1RjlDMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoFU1sU98Xtod17NrCgz1Vy64W tQ0KI/bA3p96DKFMq4dXdTFPjHBm2RxqT8LP8z5I+m2Uh7FC8u4wzevU29IdMsQr 5ceavDo8VAxpWBGZMFt6O13P08cHYCTGTPmJ5wcrD854ExqCVEKlHrTvPH6a3XRb 4o5FdH/mfUZmSxx+HNqBTzcU0jlhg+Ep/V+M1IfSlkyuLZr1uU7IjY+ZrZKVV1Jc TzREh/OcU0n4F5ubf7dT2qqF6HnG+r+dxowgSR3PR5mDim+yDgPvqTgTP3OXTL8q z4ur39ZhlbOrpiEpTzzvOW6DXgjqMjYvq67iD4YBf1v3InRcIAt8UACVb7A7AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUB/rRhsfpdvTpFsOaq9v60YdfnC4wHwYDVR0j BBgwFoAUDkpkqQtIyO1KooboiD1ZW3af34swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkxMjQxMDg1OTk2MjM3MS8wLzBFNEE2NEE5MEI0OEM4RUQ0QUEyODZFODg4M0Q1 OTVCNzY5RkRGOEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3NjlGREY4Qi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1OTEyNDEwODU5OTYyMzcxLzAvMzQzNTJlMzIzNTMz MmUzMjM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMxMzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAt/RswDQYJKoZIhvcNAQELBQADggEBAKqNkj0/xZ2My3n5xtskfYU3gpusDgqk vHJRFLt+G+LWXbPkpsw28FcUR18KQJP/o3m3fCugLSo4Tx6K5DsoW06YNT3wh7B0 M7XcfuRtEfQtk7rIbAhohZl5gnXdZmHBTUf5y11D5LSbTO6rp0TQEXz6cnVLxyhP 3gocQMabZKG/yYqQVa/xXRETdTuIpNPii6t5y7WGgtK5RRp+dDzVm/5l3fl+p3uh 69u8y3sTANzxta8TVVeNWQe9lgiiUQy0JmKyqFqV+kZTrSzDHwzt6LvmWiqRr2pH PA4EMoKIl8aQ9S9Ec9bTplHGllCiSxcd39w3rMIsgQXqJ77bzl14wnY= -----END CERTIFICATE-----Generated at Wed May 13 14:08:30 2026 by rpki-client