$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/34352e3132342e37362e302f32342d3234203d3e203535393931.roa File: 34352e3132342e37362e302f32342d3234203d3e203535393931.roa (raw, json) Hash identifier: U4tmDQhb9Ol98/9L64VDYt4HNIjh93kgrKwzoQS/mhE= Subject key identifier: D6:25:D7:F4:0E:9E:72:A4:1D:D7:12:70:78:3D:C5:6B:17:1B:09:8E Certificate issuer: /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB Certificate serial: 3BD0FB7D82814289014C2B3DEF37697E245CE944 Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/34352e3132342e37362e302f32342d3234203d3e203535393931.roa Signing time: Wed 15 Apr 2026 07:19:36 +0000 ROA not before: Wed 15 Apr 2026 07:14:36 +0000 ROA not after: Wed 14 Apr 2027 07:19:36 +0000 asID: 55991 IP address blocks: 45.124.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 01:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d0:fb:7d:82:81:42:89:01:4c:2b:3d:ef:37:69:7e:24:5c:e9:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB Validity Not Before: Apr 15 07:14:36 2026 GMT Not After : Apr 14 07:19:36 2027 GMT Subject: CN=D625D7F40E9E72A41DD71270783DC56B171B098E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:59:f6:e0:ee:d6:d1:e5:12:50:a6:03:bf:df: 80:11:70:ea:14:d7:3b:c8:43:ca:01:3f:bc:51:f0: 88:12:e2:53:29:95:4e:97:1e:4c:3c:b2:02:9e:39: 88:44:d5:42:04:a9:8c:9b:5c:50:92:34:52:92:4f: 6c:1f:58:c2:b8:49:ab:bf:93:5b:0f:b0:8e:26:8e: cd:9c:2b:70:f4:9b:c7:bb:cc:5c:20:dc:1f:f8:8b: a2:6d:d1:f9:6f:c6:fd:05:ee:e7:fd:8f:d7:54:6d: 16:9d:d6:d2:2d:41:71:34:f9:aa:bc:46:98:a2:91: 86:4f:fb:ca:8c:7f:e1:2a:9e:39:09:34:29:e0:c3: 3c:80:48:05:46:49:12:31:6d:ca:f6:f7:f8:8d:0b: 73:a9:79:02:af:33:aa:e7:9b:71:0e:03:f5:93:c4: 20:b9:26:fa:6b:19:33:61:ef:64:92:52:2a:ff:d6: e0:b7:b9:8a:78:c2:4f:01:25:c6:d3:54:06:12:03: 92:ad:c1:08:8e:a8:95:64:46:d7:f7:49:55:b3:b3: fe:ea:07:82:4e:0d:42:15:91:a4:c6:7b:ec:ec:c9: 05:cc:0f:9d:68:ba:11:ec:5b:71:f1:4e:e5:84:76: a6:17:f0:1f:93:af:cd:0a:ff:3a:68:0d:53:3e:14: 92:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:25:D7:F4:0E:9E:72:A4:1D:D7:12:70:78:3D:C5:6B:17:1B:09:8E X509v3 Authority Key Identifier: keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/34352e3132342e37362e302f32342d3234203d3e203535393931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.124.76.0/24 Signature Algorithm: sha256WithRSAEncryption a1:02:25:06:3a:16:8d:61:c9:d4:82:fd:ca:43:0f:22:44:e8: 44:d9:11:e9:94:ba:90:76:aa:3b:c5:24:66:e2:5a:fe:0f:dc: 55:31:33:5f:e2:fb:a8:e2:f2:4e:69:71:46:a9:69:5b:af:b0: 32:70:52:d4:db:71:1d:81:ab:29:11:56:98:95:8a:19:bf:0f: 72:f6:9c:8f:0d:ce:94:00:c9:8f:75:c3:67:5f:3a:4f:74:b1: 80:1a:15:c0:7d:49:bb:ef:68:5c:0c:f0:43:f0:93:3d:e6:a9: 0e:80:7b:3a:d6:21:09:7f:2b:4b:b2:be:25:a3:19:d4:8c:ea: 79:92:31:da:8a:38:f8:90:6a:e9:09:ce:4d:cd:79:ee:40:39: 17:a4:0b:73:ab:37:4f:36:6a:ce:ee:00:08:64:ae:68:ac:62: 7d:85:fa:7a:09:6f:50:97:bc:bb:18:70:33:5e:b4:2a:ec:cc: 5c:d1:8a:c8:13:75:fc:b1:05:2a:6a:3b:61:6c:ac:c6:3f:87: 8f:08:05:03:2b:c3:0e:fc:6d:54:2c:be:06:23:4f:26:f2:c6: 32:9b:4f:55:6b:10:04:fb:c2:7a:93:cb:af:46:46:5e:d3:4b: 9e:86:39:f8:d0:a7:9c:2b:1a:84:4c:9b:7f:29:85:d4:02:f9: d4:6b:cd:35 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUO9D7fYKBQokBTCs97zdpfiRc6UQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRC QTcwMTlCQjAeFw0yNjA0MTUwNzE0MzZaFw0yNzA0MTQwNzE5MzZaMDMxMTAvBgNV BAMTKEQ2MjVEN0Y0MEU5RTcyQTQxREQ3MTI3MDc4M0RDNTZCMTcxQjA5OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChWfbg7tbR5RJQpgO/34ARcOoU 1zvIQ8oBP7xR8IgS4lMplU6XHkw8sgKeOYhE1UIEqYybXFCSNFKST2wfWMK4Sau/ k1sPsI4mjs2cK3D0m8e7zFwg3B/4i6Jt0flvxv0F7uf9j9dUbRad1tItQXE0+aq8 RpiikYZP+8qMf+EqnjkJNCngwzyASAVGSRIxbcr29/iNC3OpeQKvM6rnm3EOA/WT xCC5JvprGTNh72SSUir/1uC3uYp4wk8BJcbTVAYSA5KtwQiOqJVkRtf3SVWzs/7q B4JODUIVkaTGe+zsyQXMD51ouhHsW3HxTuWEdqYX8B+Tr80K/zpoDVM+FJKRAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU1iXX9A6ecqQd1xJweD3FaxcbCY4wHwYDVR0j BBgwFoAUakXYMiw2SPkeISRy9gTK/bpwGbswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTI4OTIxNy8wLzZBNDVEODMyMkMzNjQ4RjkxRTIxMjQ3MkY2MDRD QUZEQkE3MDE5QkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRCQTcwMTlCQi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1Mjg5MjE3LzAvMzQzNTJlMzEzMjM0 MmUzNzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTM5MzkzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAC18TDANBgkqhkiG9w0BAQsFAAOCAQEAoQIlBjoWjWHJ1IL9ykMPIkToRNkR 6ZS6kHaqO8UkZuJa/g/cVTEzX+L7qOLyTmlxRqlpW6+wMnBS1NtxHYGrKRFWmJWK Gb8Pcvacjw3OlADJj3XDZ186T3SxgBoVwH1Ju+9oXAzwQ/CTPeapDoB7OtYhCX8r S7K+JaMZ1IzqeZIx2oo4+JBq6QnOTc157kA5F6QLc6s3TzZqzu4ACGSuaKxifYX6 eglvUJe8uxhwM160KuzMXNGKyBN1/LEFKmo7YWysxj+HjwgFAyvDDvxtVCy+BiNP JvLGMptPVWsQBPvCepPLr0ZGXtNLnoY5+NCnnCsahEybfymF1AL51GvNNQ== -----END CERTIFICATE-----Generated at Fri Apr 17 14:53:26 2026 by rpki-client