$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096962404895424515/0/34352e3235322e322e302f32332d3233203d3e2034383337.roa File: 34352e3235322e322e302f32332d3233203d3e2034383337.roa (raw, json) Hash identifier: ogJ8b/pu/yvvBpwQjJD7aR2MKAiB2NVSNAKv0EvNExs= Subject key identifier: 2A:FB:4D:39:B6:23:B9:97:1B:AC:FE:F7:F6:B1:4A:60:E2:39:99:E4 Certificate issuer: /CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Certificate serial: 74B63D04E3C5DB9EB26BAC3938C3ACF41E7AC54A Authority key identifier: 40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/34352e3235322e322e302f32332d3233203d3e2034383337.roa Signing time: Thu 16 Apr 2026 07:20:29 +0000 ROA not before: Thu 16 Apr 2026 07:15:29 +0000 ROA not after: Thu 15 Apr 2027 07:20:29 +0000 asID: 4837 IP address blocks: 45.252.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:b6:3d:04:e3:c5:db:9e:b2:6b:ac:39:38:c3:ac:f4:1e:7a:c5:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Validity Not Before: Apr 16 07:15:29 2026 GMT Not After : Apr 15 07:20:29 2027 GMT Subject: CN=2AFB4D39B623B9971BACFEF7F6B14A60E23999E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1b:74:bb:90:9d:62:cb:f0:69:a6:c4:b9:77: 9b:42:9b:3b:e7:2f:97:83:ea:8a:58:71:3f:db:43: 8a:fb:d8:68:33:39:53:29:bf:ec:47:e2:48:65:54: 0c:c1:99:c8:84:36:83:ac:a1:69:ac:b8:0d:d6:63: fb:d4:e0:d4:70:0d:55:33:c5:4b:ca:f3:6c:59:8a: 9c:3f:cd:dc:97:80:14:8d:f8:89:2b:92:a1:7c:54: 45:84:70:cf:ea:c6:c4:86:27:36:70:89:c9:3e:d2: b6:cf:c2:a6:0d:a1:04:c6:6a:12:92:25:c4:ef:0d: 8f:01:46:23:d6:5c:6f:8e:e7:b2:99:75:55:43:4b: e1:69:22:b2:67:4c:c6:5a:e0:94:d3:82:5b:42:04: 9f:98:90:52:1d:b8:68:3f:41:0e:8f:94:83:5d:87: 22:f2:f2:52:48:58:43:6f:8c:d2:ec:ea:c3:53:53: 1c:d9:33:89:93:f4:67:b4:96:ef:4f:7a:0b:40:18: 31:9d:3f:57:24:45:e1:51:6a:d6:0d:c5:ec:e7:a5: 65:56:76:29:0a:8c:d5:50:95:0f:08:f6:6c:d2:21: 78:0d:14:70:bb:57:60:92:6e:e0:1f:0d:4e:e1:35: eb:70:31:25:29:87:08:23:f2:3f:c2:19:a3:7b:e7: 6c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FB:4D:39:B6:23:B9:97:1B:AC:FE:F7:F6:B1:4A:60:E2:39:99:E4 X509v3 Authority Key Identifier: keyid:40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/34352e3235322e322e302f32332d3233203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.252.2.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:31:69:08:4e:b9:91:95:e5:f3:76:74:61:7e:96:8a:c3:b0: ba:84:09:64:2b:56:c2:85:03:e4:12:f0:73:18:c5:d2:eb:a6: 3b:bd:a0:49:3a:90:e4:82:0a:5a:02:7c:a8:07:aa:56:b2:b4: 79:f7:9d:02:29:7f:21:15:87:8e:42:f8:0c:c7:93:bf:da:ec: 7f:48:80:8c:e9:13:f0:ba:7c:e6:68:a0:af:7d:48:ad:7f:ea: fa:7c:41:ee:50:ed:e7:ae:a4:53:61:3c:68:69:67:87:19:9e: c1:53:03:52:b4:60:9d:49:e6:60:e7:a3:c6:f4:8d:98:f1:05: 85:a7:7d:13:02:57:73:81:e1:a6:cb:30:b1:75:37:4a:41:f0: 78:8a:b6:67:65:fb:12:31:94:b0:a3:cd:8e:02:54:a3:54:c8: 17:a5:88:15:d8:08:75:e3:64:cc:74:a6:fc:69:18:f9:bb:1c: d0:e6:96:e9:d5:58:9e:76:a7:84:de:e1:08:3a:6b:57:e9:3d: 6f:58:06:09:25:38:c7:e3:2f:6c:a7:df:6f:e1:e4:3b:7a:a2: 23:cb:fe:d1:ae:b0:0c:8a:98:ae:01:16:c8:d9:8d:67:76:d7: 28:a1:9c:f4:d1:b1:22:d3:2e:7a:e6:bc:76:d3:cf:5c:34:93: 32:e9:e4:52 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUdLY9BOPF256ya6w5OMOs9B56xUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJG Q0I3M0Q3MTAeFw0yNjA0MTYwNzE1MjlaFw0yNzA0MTUwNzIwMjlaMDMxMTAvBgNV BAMTKDJBRkI0RDM5QjYyM0I5OTcxQkFDRkVGN0Y2QjE0QTYwRTIzOTk5RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvG3S7kJ1iy/BppsS5d5tCmzvn L5eD6opYcT/bQ4r72GgzOVMpv+xH4khlVAzBmciENoOsoWmsuA3WY/vU4NRwDVUz xUvK82xZipw/zdyXgBSN+IkrkqF8VEWEcM/qxsSGJzZwick+0rbPwqYNoQTGahKS JcTvDY8BRiPWXG+O57KZdVVDS+FpIrJnTMZa4JTTgltCBJ+YkFIduGg/QQ6PlINd hyLy8lJIWENvjNLs6sNTUxzZM4mT9Ge0lu9PegtAGDGdP1ckReFRatYNxeznpWVW dikKjNVQlQ8I9mzSIXgNFHC7V2CSbuAfDU7hNetwMSUphwgj8j/CGaN752xTAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUKvtNObYjuZcbrP739rFKYOI5meQwHwYDVR0j BBgwFoAUQKv0E80zDgpNK66PHmavi/y3PXEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk2MjQwNDg5NTQyNDUxNS8wLzQwQUJGNDEzQ0QzMzBFMEE0RDJCQUU4RjFFNjZB RjhCRkNCNzNENzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJGQ0I3M0Q3MS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2OTYyNDA0ODk1NDI0NTE1LzAvMzQzNTJlMzIzNTMy MmUzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM0MzgzMzM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB LfwCMA0GCSqGSIb3DQEBCwUAA4IBAQAfMWkITrmRleXzdnRhfpaKw7C6hAlkK1bC hQPkEvBzGMXS66Y7vaBJOpDkggpaAnyoB6pWsrR5950CKX8hFYeOQvgMx5O/2ux/ SICM6RPwunzmaKCvfUitf+r6fEHuUO3nrqRTYTxoaWeHGZ7BUwNStGCdSeZg56PG 9I2Y8QWFp30TAldzgeGmyzCxdTdKQfB4irZnZfsSMZSwo82OAlSjVMgXpYgV2Ah1 42TMdKb8aRj5uxzQ5pbp1ViedqeE3uEIOmtX6T1vWAYJJTjH4y9sp99v4eQ7eqIj y/7RrrAMipiuARbI2Y1ndtcooZz00bEi0y565rx2089cNJMy6eRS -----END CERTIFICATE-----Generated at Fri Apr 17 22:01:36 2026 by rpki-client