$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096962404895424515/0/34352e3235322e302e302f32332d3233203d3e2034383337.roa File: 34352e3235322e302e302f32332d3233203d3e2034383337.roa (raw, json) Hash identifier: Girfmzj3SgStMMY9QQQlekVZITn+b5VccIqS4mZXqQI= Subject key identifier: F3:BD:C6:18:30:4D:0D:6E:A7:DD:27:3B:18:C8:61:9F:94:BC:08:A5 Certificate issuer: /CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Certificate serial: 46278EE5EFF7F0F0BCFA5BEBAE25B4B24875F2DB Authority key identifier: 40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/34352e3235322e302e302f32332d3233203d3e2034383337.roa Signing time: Thu 16 Apr 2026 07:20:30 +0000 ROA not before: Thu 16 Apr 2026 07:15:30 +0000 ROA not after: Thu 15 Apr 2027 07:20:30 +0000 asID: 4837 IP address blocks: 45.252.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:27:8e:e5:ef:f7:f0:f0:bc:fa:5b:eb:ae:25:b4:b2:48:75:f2:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Validity Not Before: Apr 16 07:15:30 2026 GMT Not After : Apr 15 07:20:30 2027 GMT Subject: CN=F3BDC618304D0D6EA7DD273B18C8619F94BC08A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:20:b4:97:e7:dc:88:1d:84:d7:69:24:30:9d: b5:69:b7:89:65:c5:a6:60:27:44:db:57:72:5b:f7: 18:3d:e6:22:54:c3:e2:f8:6a:38:54:0a:53:f6:14: f4:a5:d3:11:3e:60:9d:5f:24:a9:f6:ab:91:21:27: 8c:f7:04:2c:34:67:97:dc:1d:cc:ff:52:3c:c4:80: 8e:b7:bb:29:11:22:2b:dc:af:3b:df:21:36:e5:a5: 85:9e:eb:2b:02:1e:3e:41:c5:e6:cc:22:89:88:07: 36:46:3a:97:84:69:9e:12:ef:95:ea:5e:01:09:96: 23:f2:72:2b:5b:da:de:dc:cb:37:7c:74:27:41:19: e9:5e:75:4e:98:7e:64:0e:8e:da:7f:7e:57:92:ce: 72:35:03:1a:b5:d1:17:13:d3:e2:22:18:df:57:48: eb:b8:45:30:4f:cb:6e:77:21:fa:6d:f8:1b:27:25: 2b:07:54:0e:6e:86:e7:15:0e:39:46:43:27:7a:d3: 7e:54:2c:d0:41:c7:09:03:b1:b6:06:da:ce:b5:43: ed:5a:9c:07:6e:f5:e4:85:0b:ec:22:15:ad:89:19: 67:0f:75:cc:72:5c:40:84:5b:83:5e:3d:07:f4:91: a0:46:0b:80:e4:12:ed:46:5f:fc:e2:34:01:e9:67: b5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BD:C6:18:30:4D:0D:6E:A7:DD:27:3B:18:C8:61:9F:94:BC:08:A5 X509v3 Authority Key Identifier: keyid:40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/34352e3235322e302e302f32332d3233203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.252.0.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:ee:23:9b:fb:86:1f:df:a2:10:bf:af:d8:3d:f3:a3:58:dc: 65:14:bd:f6:87:d4:58:74:44:3c:d8:65:d7:90:d1:88:57:44: 48:1c:74:e8:a3:c4:97:30:4f:4c:0c:cb:3b:49:6e:45:ae:0c: 7c:42:b5:6f:c8:af:3c:46:10:7a:c4:59:79:30:5b:6e:6c:d4: cc:9b:12:6d:ee:f2:49:41:11:28:e4:49:7d:08:c6:0e:8c:94: 9e:1c:fb:20:c4:1c:95:59:af:2b:c6:e0:03:1c:e4:53:7a:4e: c5:8a:ea:58:9f:59:a5:5d:8d:cb:a6:ac:e3:cf:89:18:f6:0f: 6f:c2:7c:c8:2c:8c:35:c7:24:19:f3:39:95:05:e4:03:d2:41: bb:01:43:a8:43:6a:27:d2:b8:1c:d6:9b:69:fa:3c:9f:d9:7f: ee:38:1c:a9:87:46:09:7f:dc:49:c9:42:0e:4e:15:58:1d:97: 44:e9:b5:bc:87:81:57:0e:3f:40:22:f3:f3:94:ff:bf:2e:70: a9:e3:ce:f8:ee:ad:fb:eb:49:33:5a:34:38:dd:15:1a:7e:16: 88:3d:64:4e:ce:ac:ee:a1:12:5e:3e:dc:40:53:54:ea:52:b0: 8c:66:84:f3:b1:54:01:46:5f:19:a0:85:81:c2:85:14:72:25: 36:3d:a4:2b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIURieO5e/38PC8+lvrriW0skh18tswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJG Q0I3M0Q3MTAeFw0yNjA0MTYwNzE1MzBaFw0yNzA0MTUwNzIwMzBaMDMxMTAvBgNV BAMTKEYzQkRDNjE4MzA0RDBENkVBN0REMjczQjE4Qzg2MTlGOTRCQzA4QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiILSX59yIHYTXaSQwnbVpt4ll xaZgJ0TbV3Jb9xg95iJUw+L4ajhUClP2FPSl0xE+YJ1fJKn2q5EhJ4z3BCw0Z5fc Hcz/UjzEgI63uykRIivcrzvfITblpYWe6ysCHj5BxebMIomIBzZGOpeEaZ4S75Xq XgEJliPycitb2t7cyzd8dCdBGeledU6YfmQOjtp/fleSznI1Axq10RcT0+IiGN9X SOu4RTBPy253Ifpt+BsnJSsHVA5uhucVDjlGQyd6035ULNBBxwkDsbYG2s61Q+1a nAdu9eSFC+wiFa2JGWcPdcxyXECEW4NePQf0kaBGC4DkEu1GX/ziNAHpZ7UTAgMB AAGjggINMIICCTAdBgNVHQ4EFgQU873GGDBNDW6n3Sc7GMhhn5S8CKUwHwYDVR0j BBgwFoAUQKv0E80zDgpNK66PHmavi/y3PXEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk2MjQwNDg5NTQyNDUxNS8wLzQwQUJGNDEzQ0QzMzBFMEE0RDJCQUU4RjFFNjZB RjhCRkNCNzNENzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJGQ0I3M0Q3MS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2OTYyNDA0ODk1NDI0NTE1LzAvMzQzNTJlMzIzNTMy MmUzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM0MzgzMzM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB LfwAMA0GCSqGSIb3DQEBCwUAA4IBAQB97iOb+4Yf36IQv6/YPfOjWNxlFL32h9RY dEQ82GXXkNGIV0RIHHToo8SXME9MDMs7SW5Frgx8QrVvyK88RhB6xFl5MFtubNTM mxJt7vJJQREo5El9CMYOjJSeHPsgxByVWa8rxuADHORTek7FiupYn1mlXY3Lpqzj z4kY9g9vwnzILIw1xyQZ8zmVBeQD0kG7AUOoQ2on0rgc1ptp+jyf2X/uOByph0YJ f9xJyUIOThVYHZdE6bW8h4FXDj9AIvPzlP+/LnCp48747q3760kzWjQ43RUafhaI PWROzqzuoRJePtxAU1TqUrCMZoTzsVQBRl8ZoIWBwoUUciU2PaQr -----END CERTIFICATE-----Generated at Fri Apr 17 22:56:42 2026 by rpki-client