$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096638331497742338/0/34352e3132302e3134302e302f32322d3232203d3e20313436383034.roa File: 34352e3132302e3134302e302f32322d3232203d3e20313436383034.roa (raw, json) Hash identifier: C5IoIDXsiVzDtG0jHDsZEeiVvmF1F7nfEOq0sQ0YHns= Subject key identifier: 08:F6:5D:68:32:7E:11:5F:64:FE:5D:40:DE:99:19:04:7F:EB:A4:5D Certificate issuer: /CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B Certificate serial: 496766C7F5C9382EBD169DC932DEB603D9C638B2 Authority key identifier: A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/34352e3132302e3134302e302f32322d3232203d3e20313436383034.roa Signing time: Wed 15 Apr 2026 03:32:43 +0000 ROA not before: Wed 15 Apr 2026 03:27:43 +0000 ROA not after: Wed 14 Apr 2027 03:32:43 +0000 asID: 146804 IP address blocks: 45.120.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:67:66:c7:f5:c9:38:2e:bd:16:9d:c9:32:de:b6:03:d9:c6:38:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B Validity Not Before: Apr 15 03:27:43 2026 GMT Not After : Apr 14 03:32:43 2027 GMT Subject: CN=08F65D68327E115F64FE5D40DE9919047FEBA45D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fe:10:02:00:ed:0d:33:be:5d:bb:45:41:89: d5:75:69:37:36:25:b5:17:05:e9:ef:9a:24:d0:3e: 9c:5d:21:01:cc:b1:4b:95:21:12:b6:ec:f4:ae:8b: 11:26:e6:55:6c:82:56:38:0b:8d:84:31:89:7e:b1: bf:3a:96:53:6e:61:26:da:b7:32:3b:21:b8:8e:b8: e5:8a:f4:b9:b0:6a:04:8c:96:fd:ba:89:bf:34:9a: fb:92:25:28:4f:48:08:a9:41:10:2c:99:61:da:3a: 9b:4f:bc:09:39:50:45:08:f4:a9:69:3f:83:b7:80: e7:9f:d7:e9:94:ba:11:d2:1a:d9:11:93:b2:d7:ee: 1d:8a:68:d3:cc:be:bc:b1:4c:3c:51:91:6b:36:c0: d3:ea:cf:81:02:81:b4:70:b9:8b:3e:03:6f:62:e9: a2:8d:d0:14:fc:48:9a:a4:08:07:a7:72:21:8d:05: 2f:77:7b:a6:3a:ec:4b:40:62:83:1f:71:23:39:dc: 25:6b:48:3a:5a:c3:47:4c:65:29:41:32:df:85:dc: 35:9f:ba:85:34:9a:78:64:29:96:e9:bb:3c:7f:96: 73:a7:0f:33:93:c6:f3:f7:1c:70:1f:d2:27:c5:95: 3f:5f:00:95:ee:e6:a1:66:01:92:b5:b2:16:e8:2c: 3b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F6:5D:68:32:7E:11:5F:64:FE:5D:40:DE:99:19:04:7F:EB:A4:5D X509v3 Authority Key Identifier: keyid:A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/34352e3132302e3134302e302f32322d3232203d3e20313436383034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.120.140.0/22 Signature Algorithm: sha256WithRSAEncryption c4:67:ce:0f:32:9a:33:92:8c:c7:fb:c8:b0:31:fc:0f:e8:d9: c1:eb:cf:0f:40:d7:c1:5d:28:d6:f5:02:35:4b:43:28:71:80: 92:59:47:9c:24:06:a9:1d:9b:97:f1:ec:26:85:ad:e4:62:f9: ca:c5:c0:d6:cf:51:34:66:2c:ca:ee:a4:96:ef:ef:25:0d:33: 90:b9:94:9a:70:fd:c2:44:9d:4a:d4:24:f6:1d:73:66:f3:4d: 0f:23:87:4e:13:ed:74:76:4c:f6:c6:1d:b5:86:33:d4:42:4e: b8:5b:6e:f6:04:59:24:dd:20:59:93:b6:10:b9:41:b5:6f:e3: be:f3:40:ab:9d:a0:e8:5f:c9:b3:50:80:f7:4d:a3:c4:28:06: 1f:d5:e0:5b:c8:b7:27:2e:8d:21:f6:c7:82:8d:d5:ee:f4:7a: 24:a6:17:53:43:bc:41:b7:4f:72:ab:f0:7a:41:7f:b5:3d:db: c4:b4:ab:63:73:c5:6c:49:91:ba:59:48:ab:42:99:4e:ca:ce: dc:c9:2e:44:b0:f9:71:02:0f:19:7a:ba:09:a1:3f:f6:ea:df: b8:9e:12:5a:65:80:d7:e8:05:44:22:98:27:14:dd:bc:f0:ea: ac:d2:a6:99:0c:4c:ec:86:13:d1:fc:97:03:cd:eb:08:87:56: 18:c2:0e:d0 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUSWdmx/XJOC69Fp3JMt62A9nGOLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg4NUFDNzkzRkI1RTAyQzNBRjEzNThDOEREMjM0MTJF QTI4Q0MwQjAeFw0yNjA0MTUwMzI3NDNaFw0yNzA0MTQwMzMyNDNaMDMxMTAvBgNV BAMTKDA4RjY1RDY4MzI3RTExNUY2NEZFNUQ0MERFOTkxOTA0N0ZFQkE0NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy/hACAO0NM75du0VBidV1aTc2 JbUXBenvmiTQPpxdIQHMsUuVIRK27PSuixEm5lVsglY4C42EMYl+sb86llNuYSba tzI7IbiOuOWK9LmwagSMlv26ib80mvuSJShPSAipQRAsmWHaOptPvAk5UEUI9Klp P4O3gOef1+mUuhHSGtkRk7LX7h2KaNPMvryxTDxRkWs2wNPqz4ECgbRwuYs+A29i 6aKN0BT8SJqkCAenciGNBS93e6Y67EtAYoMfcSM53CVrSDpaw0dMZSlBMt+F3DWf uoU0mnhkKZbpuzx/lnOnDzOTxvP3HHAf0ifFlT9fAJXu5qFmAZK1shboLDvdAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUCPZdaDJ+EV9k/l1A3pkZBH/rpF0wHwYDVR0j BBgwFoAUqIWseT+14Cw68TWMjdI0EuoozAswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzODMzMTQ5Nzc0MjMzOC8wL0E4ODVBQzc5M0ZCNUUwMkMzQUYxMzU4QzhERDIz NDEyRUEyOENDMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTg4NUFDNzkzRkI1RTAyQzNBRjEzNThDOEREMjM0MTJFQTI4Q0MwQi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTY2MzgzMzE0OTc3NDIzMzgvMC8zNDM1MmUzMTMy MzAyZTMxMzQzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzNjM4MzAzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAi14jDANBgkqhkiG9w0BAQsFAAOCAQEAxGfODzKaM5KMx/vIsDH8 D+jZwevPD0DXwV0o1vUCNUtDKHGAkllHnCQGqR2bl/HsJoWt5GL5ysXA1s9RNGYs yu6klu/vJQ0zkLmUmnD9wkSdStQk9h1zZvNNDyOHThPtdHZM9sYdtYYz1EJOuFtu 9gRZJN0gWZO2ELlBtW/jvvNAq52g6F/Js1CA902jxCgGH9XgW8i3Jy6NIfbHgo3V 7vR6JKYXU0O8QbdPcqvwekF/tT3bxLSrY3PFbEmRullIq0KZTsrO3MkuRLD5cQIP GXq6CaE/9urfuJ4SWmWA1+gFRCKYJxTdvPDqrNKmmQxM7IYT0fyXA83rCIdWGMIO 0A== -----END CERTIFICATE-----Generated at Sat Apr 18 01:21:28 2026 by rpki-client