$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/34352e3235312e35332e302f32342d3234203d3e203633353939.roa File: 34352e3235312e35332e302f32342d3234203d3e203633353939.roa (raw, json) Hash identifier: gpdB2M4QzC5+FVSJ96SLxf+q0nMlU6vsNa1+V19UGpU= Subject key identifier: 52:2A:DC:D6:49:0D:43:67:D2:A2:61:87:E3:51:ED:FB:46:91:78:2D Certificate issuer: /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133 Certificate serial: 4AAEE0489972081D65FB99641196FAEBD0CCD99F Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/34352e3235312e35332e302f32342d3234203d3e203633353939.roa Signing time: Thu 30 Apr 2026 07:05:03 +0000 ROA not before: Thu 30 Apr 2026 07:00:03 +0000 ROA not after: Thu 29 Apr 2027 07:05:03 +0000 asID: 63599 IP address blocks: 45.251.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ae:e0:48:99:72:08:1d:65:fb:99:64:11:96:fa:eb:d0:cc:d9:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133 Validity Not Before: Apr 30 07:00:03 2026 GMT Not After : Apr 29 07:05:03 2027 GMT Subject: CN=522ADCD6490D4367D2A26187E351EDFB4691782D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f0:aa:de:5d:6f:ef:3a:c8:4e:c1:84:8a:8b: af:7d:a2:88:80:9b:bb:ad:f8:d7:61:1d:a8:35:ab: d3:37:2c:5f:22:57:ff:90:e7:0b:aa:33:d5:2f:b2: 3c:c7:4e:f1:f8:64:b6:f1:05:5c:46:70:ef:c9:00: e6:8f:97:f4:46:0e:b3:d3:50:9d:0c:f0:89:d7:b1: 72:48:7e:ca:09:44:d1:26:6d:1b:63:7f:5e:e5:c3: 59:33:6d:55:2d:4b:2c:4e:fa:f9:d4:3a:43:6f:4e: 43:77:44:e0:a4:41:8a:80:04:e6:ac:c6:4c:b9:6a: a4:46:2d:bf:fb:fc:ef:2b:e0:5c:bf:50:0c:ce:1e: 78:05:07:f9:f6:82:9f:c3:03:b5:73:6e:ea:c0:a7: 66:f4:15:d0:d8:ce:86:64:1c:9e:14:f0:23:a7:ba: ed:39:2f:95:c6:c5:f1:4d:22:a8:df:cc:94:f5:70: 52:04:34:c7:0f:79:be:33:fb:d8:5a:35:08:31:9c: 5b:13:07:3f:7a:b6:a4:94:0e:35:66:f3:d7:e9:3d: 1d:4b:4e:df:8c:58:42:79:b8:43:bb:37:38:25:0e: 26:0b:c0:43:16:21:26:d6:ec:e9:03:89:32:f8:d6: 37:dc:0f:9d:bd:d5:20:a8:93:10:7e:b8:de:a7:ad: 80:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2A:DC:D6:49:0D:43:67:D2:A2:61:87:E3:51:ED:FB:46:91:78:2D X509v3 Authority Key Identifier: keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/34352e3235312e35332e302f32342d3234203d3e203633353939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.251.53.0/24 Signature Algorithm: sha256WithRSAEncryption 67:cd:a7:f3:0a:b0:50:0e:76:c4:fb:73:9a:25:1f:40:bc:23: ba:14:54:de:35:17:10:a9:3d:c1:52:9d:61:19:0c:d0:bf:78: 2c:6c:9e:72:09:4e:f9:87:ad:5d:29:77:a5:3e:df:7c:0e:43: af:cf:87:4e:d9:5b:75:7e:d1:b5:5f:e6:f7:49:d3:70:ee:53: 1f:fa:9b:4f:f5:0d:cf:2a:44:4b:83:47:a2:96:88:b8:f7:2d: d2:f5:c3:f7:d9:fc:69:6a:de:38:f6:a5:94:07:4d:74:e2:bb: c4:37:20:ae:9a:49:90:9e:bd:c1:44:a0:37:68:af:8a:4a:d5: 7f:66:5f:3e:23:22:26:b3:2a:85:0d:86:0e:36:69:64:ca:ca: ab:fa:3a:1d:ea:b7:d2:db:87:4d:a4:a2:34:54:fd:9f:6a:a0: 81:36:2e:99:61:dc:d0:a9:68:a2:9e:6f:6f:c8:b7:6d:f5:59: be:83:85:42:a2:57:fd:0c:07:ce:a5:d3:4d:fa:f7:82:05:49: 04:e5:6a:d2:57:c7:5c:67:c2:8f:e7:e2:39:7f:a4:3e:0f:7b: 7e:c8:ca:c8:1c:68:d3:17:73:31:21:13:26:a3:a7:61:60:ba: a5:9a:44:71:00:a3:1b:3a:57:4e:19:ef:4a:19:be:a2:15:87: 5d:53:af:05 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUSq7gSJlyCB1l+5lkEZb669DM2Z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1M0ExQjMxN0M0N0FBNzJCNDVGRDA4NkIxQkQ5RTJG NUFCNjEzMzAeFw0yNjA0MzAwNzAwMDNaFw0yNzA0MjkwNzA1MDNaMDMxMTAvBgNV BAMTKDUyMkFEQ0Q2NDkwRDQzNjdEMkEyNjE4N0UzNTFFREZCNDY5MTc4MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC68KreXW/vOshOwYSKi699ooiA m7ut+NdhHag1q9M3LF8iV/+Q5wuqM9UvsjzHTvH4ZLbxBVxGcO/JAOaPl/RGDrPT UJ0M8InXsXJIfsoJRNEmbRtjf17lw1kzbVUtSyxO+vnUOkNvTkN3ROCkQYqABOas xky5aqRGLb/7/O8r4Fy/UAzOHngFB/n2gp/DA7VzburAp2b0FdDYzoZkHJ4U8COn uu05L5XGxfFNIqjfzJT1cFIENMcPeb4z+9haNQgxnFsTBz96tqSUDjVm89fpPR1L Tt+MWEJ5uEO7NzglDiYLwEMWISbW7OkDiTL41jfcD5291SCokxB+uN6nrYCBAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUUirc1kkNQ2fSomGH41Ht+0aReC0wHwYDVR0j BBgwFoAUSFOhsxfEeqcrRf0IaxvZ4vWrYTMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0NzQzMDc0ODI0MTkyMy8wLzQ4NTNBMUIzMTdDNDdBQTcyQjQ1RkQwODZCMUJE OUUyRjVBQjYxMzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDg1M0ExQjMxN0M0N0FBNzJCNDVGRDA4NkIxQkQ5RTJGNUFCNjEzMy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3MDQ3NDMwNzQ4MjQxOTIzLzAvMzQzNTJlMzIzNTMx MmUzNTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM1MzkzOS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAC37NTANBgkqhkiG9w0BAQsFAAOCAQEAZ82n8wqwUA52xPtzmiUfQLwjuhRU 3jUXEKk9wVKdYRkM0L94LGyecglO+YetXSl3pT7ffA5Dr8+HTtlbdX7RtV/m90nT cO5TH/qbT/UNzypES4NHopaIuPct0vXD99n8aWreOPallAdNdOK7xDcgrppJkJ69 wUSgN2ivikrVf2ZfPiMiJrMqhQ2GDjZpZMrKq/o6Heq30tuHTaSiNFT9n2qggTYu mWHc0Kloop5vb8i3bfVZvoOFQqJX/QwHzqXTTfr3ggVJBOVq0lfHXGfCj+fiOX+k Pg97fsjKyBxo0xdzMSETJqOnYWC6pZpEcQCjGzpXThnvShm+ohWHXVOvBQ== -----END CERTIFICATE-----Generated at Wed May 13 14:49:52 2026 by rpki-client