$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1088651015181303810/0/34352e3235332e36382e302f32322d3232203d3e2030.roa File: 34352e3235332e36382e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: mmMfzoUN1gpXnyhzt0vhchCEg6AvelT3TF2IUsxWxcM= Subject key identifier: 96:E8:52:7B:6B:DD:3D:02:1B:08:03:1B:61:4C:94:18:CD:10:82:04 Certificate issuer: /CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Certificate serial: 2F5F604C7D3498770CBD019F8F7948DB114BE630 Authority key identifier: D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/34352e3235332e36382e302f32322d3232203d3e2030.roa Signing time: Mon 13 Apr 2026 09:58:59 +0000 ROA not before: Mon 13 Apr 2026 09:53:59 +0000 ROA not after: Mon 12 Apr 2027 09:58:59 +0000 asID: 0 IP address blocks: 45.253.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 12:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:5f:60:4c:7d:34:98:77:0c:bd:01:9f:8f:79:48:db:11:4b:e6:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Validity Not Before: Apr 13 09:53:59 2026 GMT Not After : Apr 12 09:58:59 2027 GMT Subject: CN=96E8527B6BDD3D021B08031B614C9418CD108204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4a:9b:41:84:07:cb:a8:ac:14:43:ad:ad:f8: 5f:4c:16:68:f3:fa:29:57:7b:39:2c:65:69:e3:8f: fb:ff:47:3c:b7:b9:90:36:b7:a0:c7:d9:d2:30:1a: 2c:40:c1:d8:63:74:c8:89:a6:28:33:2f:15:bf:83: d2:1b:43:22:4a:d0:9d:04:69:82:c6:b7:9b:de:c1: 1e:cf:d1:64:7c:43:20:ad:87:50:78:bd:0d:7d:af: 5b:cc:80:4e:ac:39:91:47:f4:d7:70:49:47:7c:e7: 39:f0:74:0c:8d:e4:8b:8b:ba:09:44:cb:b5:4a:85: 6b:59:80:d6:4e:99:15:77:0b:78:23:c8:4c:94:3f: a1:27:07:92:95:10:10:ff:53:91:a3:34:3b:6c:92: 79:8d:a9:b8:fd:45:e6:fa:23:00:ef:4c:e5:9a:62: 4a:bf:b8:41:55:62:e6:10:7b:81:6c:1d:a8:4c:60: e9:71:ab:11:36:43:60:a0:93:16:66:88:ed:6a:74: c4:cc:4a:38:66:cf:71:db:bf:39:64:04:74:c9:32: f8:bc:b7:8c:3a:eb:ae:41:24:00:e4:8b:2c:dd:4a: 0b:e3:30:f0:3c:84:69:a8:76:30:aa:44:e1:11:90: 5d:78:dc:bb:86:36:e2:37:53:39:11:91:9a:9e:c1: 73:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E8:52:7B:6B:DD:3D:02:1B:08:03:1B:61:4C:94:18:CD:10:82:04 X509v3 Authority Key Identifier: keyid:D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/34352e3235332e36382e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.253.68.0/22 Signature Algorithm: sha256WithRSAEncryption 64:53:8e:ac:1d:53:58:e5:88:4a:24:3e:ef:ff:44:e9:37:35: 51:a2:09:c5:86:e4:c0:a2:29:45:42:b0:db:52:91:de:55:96: 6d:4d:f2:a9:f1:3c:34:00:bf:d9:59:b1:7a:d7:eb:73:cc:d4: a6:82:95:f4:d9:8f:88:90:81:a6:a0:b9:93:14:da:b2:cc:90: 4f:10:2c:da:1e:6b:29:2f:3c:42:bf:2d:20:62:ba:0c:fe:f7: a2:66:00:fb:4b:a0:5c:5f:13:16:74:1b:cb:5a:8b:6c:0d:76: 8e:57:1f:19:39:96:61:e4:bc:06:7a:ed:6f:04:42:cd:99:d1: c8:07:97:73:36:a0:15:56:95:73:ae:d3:cf:14:13:c4:8e:21: cc:23:a5:da:30:6e:1b:63:00:a1:86:d2:cf:3c:70:73:e6:3d: 31:55:21:89:71:ca:78:e1:b6:c7:b1:0a:5d:71:be:5d:6c:6d: 66:33:45:d4:c7:38:14:6e:4f:48:f5:c3:1a:f9:6f:f0:37:2c: 80:17:f8:ef:82:37:05:7b:38:1a:23:5c:2e:5f:fc:51:08:a3: b9:d4:0b:d3:7a:92:96:7b:9a:02:cf:ff:5d:6c:7f:5e:2f:18: 80:2d:61:db:84:a0:c8:6b:1a:77:ab:d4:f8:ab:86:4c:3c:80: f4:ef:f6:61 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUL19gTH00mHcMvQGfj3lI2xFL5jAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVE MkZDMkY4MDAeFw0yNjA0MTMwOTUzNTlaFw0yNzA0MTIwOTU4NTlaMDMxMTAvBgNV BAMTKDk2RTg1MjdCNkJERDNEMDIxQjA4MDMxQjYxNEM5NDE4Q0QxMDgyMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCySptBhAfLqKwUQ62t+F9MFmjz +ilXezksZWnjj/v/Rzy3uZA2t6DH2dIwGixAwdhjdMiJpigzLxW/g9IbQyJK0J0E aYLGt5vewR7P0WR8QyCth1B4vQ19r1vMgE6sOZFH9NdwSUd85znwdAyN5IuLuglE y7VKhWtZgNZOmRV3C3gjyEyUP6EnB5KVEBD/U5GjNDtsknmNqbj9Reb6IwDvTOWa Ykq/uEFVYuYQe4FsHahMYOlxqxE2Q2CgkxZmiO1qdMTMSjhmz3HbvzlkBHTJMvi8 t4w6665BJADkiyzdSgvjMPA8hGmodjCqROERkF143LuGNuI3UzkRkZqewXPRAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUluhSe2vdPQIbCAMbYUyUGM0QggQwHwYDVR0j BBgwFoAU1e8qeSFm+U++Mzd+AjkDTtL8L4AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 ODY1MTAxNTE4MTMwMzgxMC8wL0Q1RUYyQTc5MjE2NkY5NEZCRTMzMzc3RTAyMzkw MzRFRDJGQzJGODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVEMkZDMkY4MC5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDg4NjUxMDE1MTgxMzAzODEwLzAvMzQzNTJlMzIzNTMz MmUzNjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIt/UQw DQYJKoZIhvcNAQELBQADggEBAGRTjqwdU1jliEokPu//ROk3NVGiCcWG5MCiKUVC sNtSkd5Vlm1N8qnxPDQAv9lZsXrX63PM1KaClfTZj4iQgaaguZMU2rLMkE8QLNoe aykvPEK/LSBiugz+96JmAPtLoFxfExZ0G8tai2wNdo5XHxk5lmHkvAZ67W8EQs2Z 0cgHl3M2oBVWlXOu088UE8SOIcwjpdowbhtjAKGG0s88cHPmPTFVIYlxynjhtsex Cl1xvl1sbWYzRdTHOBRuT0j1wxr5b/A3LIAX+O+CNwV7OBojXC5f/FEIo7nUC9N6 kpZ7mgLP/11sf14vGIAtYduEoMhrGner1Pirhkw8gPTv9mE= -----END CERTIFICATE-----Generated at Thu Apr 16 22:35:32 2026 by rpki-client