$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/34352e3132372e3134342e302f32312d3231203d3e2034383038.roa File: 34352e3132372e3134342e302f32312d3231203d3e2034383038.roa (raw, json) Hash identifier: hXwk2GKDErcKlJU8gELUl9SQbs7cUzuoqY0ENuHWVpI= Subject key identifier: EB:63:CF:0C:25:0A:58:B2:E0:63:5A:59:56:FE:40:D6:BA:52:F4:45 Certificate issuer: /CN=40D86726DB14F9E5E06610928FF6C77226F14874 Certificate serial: 662CD89517CB01E2ED2F523B540B2548C3D2D099 Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/34352e3132372e3134342e302f32312d3231203d3e2034383038.roa Signing time: Tue 12 May 2026 09:01:32 +0000 ROA not before: Tue 12 May 2026 08:56:32 +0000 ROA not after: Tue 11 May 2027 09:01:32 +0000 asID: 4808 IP address blocks: 45.127.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:2c:d8:95:17:cb:01:e2:ed:2f:52:3b:54:0b:25:48:c3:d2:d0:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874 Validity Not Before: May 12 08:56:32 2026 GMT Not After : May 11 09:01:32 2027 GMT Subject: CN=EB63CF0C250A58B2E0635A5956FE40D6BA52F445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c9:f2:b7:f4:81:85:5f:cd:b0:56:78:23:54: 25:fd:f5:81:51:cd:49:67:df:ea:98:df:53:18:3f: 63:41:55:af:64:b1:ad:dd:94:1c:26:55:56:81:b7: 03:08:d7:a6:f8:d9:c4:6f:86:63:a0:a9:8a:7a:1b: c8:5d:86:ed:e7:2c:bb:14:0a:57:7b:ec:a1:0b:54: b3:42:07:57:80:34:96:05:4e:32:b7:ff:14:7e:2c: a2:34:e0:23:02:d7:fd:88:f3:98:8a:94:d5:23:60: 93:f1:c5:59:32:cd:57:e1:25:e7:0c:e3:a8:22:c0: de:64:e4:d7:3f:11:f5:b7:41:3e:b8:3c:ef:9b:f2: 42:2d:f6:56:e4:44:38:ef:df:70:cb:72:97:b2:7c: e9:4a:89:c1:cd:43:18:2b:f6:e1:2d:60:64:f3:c2: b3:32:3a:8b:f5:c8:22:ec:88:f7:6e:01:cd:1b:da: 5b:19:87:65:b2:9c:02:d1:93:81:2a:11:a4:07:da: 57:77:9f:f1:a4:85:a6:f0:9d:52:0a:80:cb:9a:4e: a6:ae:e0:48:53:6f:38:f9:75:db:95:8e:78:58:16: d5:1f:b0:96:13:75:54:f2:fe:18:a5:64:8c:ea:76: d8:f1:c4:9c:72:db:8f:34:74:64:3f:47:29:37:e3: 37:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:63:CF:0C:25:0A:58:B2:E0:63:5A:59:56:FE:40:D6:BA:52:F4:45 X509v3 Authority Key Identifier: keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/34352e3132372e3134342e302f32312d3231203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.127.144.0/21 Signature Algorithm: sha256WithRSAEncryption 05:ce:76:7a:eb:f4:05:81:a0:02:e8:60:cb:33:78:df:54:91: b5:64:d7:5a:47:e9:eb:07:02:12:93:7c:30:22:b3:71:f6:f8: 22:d5:6b:73:cb:58:e1:ea:99:28:3e:32:3b:59:84:dc:e7:5e: 7c:05:fb:b4:17:be:e4:5f:0a:71:80:40:38:76:62:89:7f:1d: 7d:f6:96:94:8d:3f:fc:b3:83:89:fe:f5:fd:7b:55:b5:81:a2: f2:2a:fb:7b:bc:66:24:a3:3a:56:c4:c0:07:01:d9:09:47:2e: 8f:51:a7:7b:d3:62:29:d6:7a:f5:92:dc:3e:9e:21:fc:19:00: 6f:fb:f3:e4:7c:a0:59:0a:d1:d5:44:71:6d:8a:5c:f7:bc:78: 0a:53:70:71:5c:80:b4:2b:b2:3f:0a:35:58:38:79:4e:6b:dc: 45:30:cb:8a:e9:9f:a2:f4:19:9d:0a:fe:3a:99:24:cd:d8:b8: 46:d4:ee:6f:ad:88:1a:02:f1:d5:2e:3b:7f:ae:a9:b3:6e:2d: f1:7b:d7:dc:fc:b0:e6:d9:a3:63:18:c9:16:6c:d0:cf:7c:09: 85:be:43:05:bc:26:63:fd:b8:16:ea:cc:7d:25:95:f9:f2:d3: bd:47:60:bc:e6:21:8c:82:46:05:02:18:23:74:16:ab:bb:85: 35:48:04:83 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUZizYlRfLAeLtL1I7VAslSMPS0JkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBEODY3MjZEQjE0RjlFNUUwNjYxMDkyOEZGNkM3NzIy NkYxNDg3NDAeFw0yNjA1MTIwODU2MzJaFw0yNzA1MTEwOTAxMzJaMDMxMTAvBgNV BAMTKEVCNjNDRjBDMjUwQTU4QjJFMDYzNUE1OTU2RkU0MEQ2QkE1MkY0NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIyfK39IGFX82wVngjVCX99YFR zUln3+qY31MYP2NBVa9ksa3dlBwmVVaBtwMI16b42cRvhmOgqYp6G8hdhu3nLLsU Cld77KELVLNCB1eANJYFTjK3/xR+LKI04CMC1/2I85iKlNUjYJPxxVkyzVfhJecM 46giwN5k5Nc/EfW3QT64PO+b8kIt9lbkRDjv33DLcpeyfOlKicHNQxgr9uEtYGTz wrMyOov1yCLsiPduAc0b2lsZh2WynALRk4EqEaQH2ld3n/GkhabwnVIKgMuaTqau 4EhTbzj5dduVjnhYFtUfsJYTdVTy/hilZIzqdtjxxJxy2480dGQ/Ryk34zd5AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU62PPDCUKWLLgY1pZVv5A1rpS9EUwHwYDVR0j BBgwFoAUQNhnJtsU+eXgZhCSj/bHcibxSHQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjUwMzE1NTY2MDYxOTc5My8wLzQwRDg2NzI2REIxNEY5RTVFMDY2MTA5MjhGRjZD NzcyMjZGMTQ4NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDBEODY3MjZEQjE0RjlFNUUwNjYxMDkyOEZGNkM3NzIyNkYxNDg3NC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA2NTAzMTU1NjYwNjE5NzkzLzAvMzQzNTJlMzEzMjM3 MmUzMTM0MzQyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAy1/kDANBgkqhkiG9w0BAQsFAAOCAQEABc52euv0BYGgAuhgyzN431SRtWTX Wkfp6wcCEpN8MCKzcfb4ItVrc8tY4eqZKD4yO1mE3OdefAX7tBe+5F8KcYBAOHZi iX8dffaWlI0//LODif71/XtVtYGi8ir7e7xmJKM6VsTABwHZCUcuj1Gne9NiKdZ6 9ZLcPp4h/BkAb/vz5HygWQrR1URxbYpc97x4ClNwcVyAtCuyPwo1WDh5TmvcRTDL iumfovQZnQr+Opkkzdi4RtTub62IGgLx1S47f66ps24t8XvX3Pyw5tmjYxjJFmzQ z3wJhb5DBbwmY/24FurMfSWV+fLTvUdgvOYhjIJGBQIYI3QWq7uFNUgEgw== -----END CERTIFICATE-----Generated at Wed May 13 14:03:29 2026 by rpki-client