$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/34352e3235312e35322e302f32322d3332203d3e203633353939.roa File: 34352e3235312e35322e302f32322d3332203d3e203633353939.roa (raw, json) Hash identifier: N5+bTQYYbzKAxO/rwqjbtnXxs3J/0xvonZjOU6VKUq8= Subject key identifier: 45:FE:27:DE:32:6C:33:D6:67:04:99:27:87:F7:2A:7D:80:12:71:31 Certificate issuer: /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133 Certificate serial: 5CEA02E2709746DD52C54A55999E4D536BDA6E6A Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/34352e3235312e35322e302f32322d3332203d3e203633353939.roa Signing time: Thu 16 Apr 2026 06:45:38 +0000 ROA not before: Thu 16 Apr 2026 06:40:38 +0000 ROA not after: Thu 15 Apr 2027 06:45:38 +0000 asID: 63599 IP address blocks: 45.251.52.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 07:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ea:02:e2:70:97:46:dd:52:c5:4a:55:99:9e:4d:53:6b:da:6e:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133 Validity Not Before: Apr 16 06:40:38 2026 GMT Not After : Apr 15 06:45:38 2027 GMT Subject: CN=45FE27DE326C33D66704992787F72A7D80127131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7a:8d:a0:e5:09:0b:92:a8:1f:5c:34:af:56: e6:86:53:23:d7:b7:33:da:d3:a2:ee:e0:58:bd:4a: 14:65:f2:4f:6b:de:73:62:6d:35:3d:9e:84:0e:df: 14:d6:5a:e2:a3:9e:1b:11:a9:78:44:bd:27:3b:b0: 0e:5b:1e:be:6c:8f:60:d0:95:84:74:40:54:58:64: ca:9a:ff:fa:3a:ef:cb:04:2a:f2:0a:c1:54:f7:fe: c9:ad:d3:ba:08:22:28:40:4d:2f:44:7d:ba:30:22: 11:fb:87:47:41:5f:5e:a1:31:a5:8c:12:b2:27:b5: dc:22:83:4d:e5:b1:f9:61:c6:1c:4c:0f:a6:d8:31: 05:14:0c:88:5a:41:5d:48:e8:5c:b7:98:44:07:75: eb:4f:d4:3a:40:a4:af:1c:16:84:9c:91:3b:a5:62: 70:7a:02:8c:b1:7f:ed:0a:c4:be:1a:15:1e:19:90: 48:c7:65:04:f0:66:0e:7f:a1:f1:14:5f:75:f8:3f: 52:aa:07:9c:8c:9e:91:b9:5b:30:9c:03:ac:34:b6: e7:70:1b:e4:f7:ed:78:df:57:a5:c6:24:8f:d5:6b: e3:9c:71:92:9a:fe:9c:11:e3:1b:6b:57:6a:2c:91: 78:a5:49:fb:e3:80:3b:1d:f4:01:46:61:c1:fb:8b: da:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FE:27:DE:32:6C:33:D6:67:04:99:27:87:F7:2A:7D:80:12:71:31 X509v3 Authority Key Identifier: keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/34352e3235312e35322e302f32322d3332203d3e203633353939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.251.52.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:87:71:90:9e:5b:99:34:da:ea:cf:7a:62:03:55:50:27:85: be:64:a1:41:7b:ff:68:f8:14:df:d7:aa:7e:58:ec:fb:6c:99: b1:d4:a6:36:d0:33:84:fe:d1:18:a8:1c:77:42:9b:26:38:8f: 72:bf:b0:72:1b:fa:57:33:37:0b:ef:83:6b:c7:fe:f6:48:e7: 96:77:7a:9a:9a:52:14:b5:b4:50:78:83:38:d2:fc:c9:28:ab: a2:b3:61:dd:25:49:fc:93:33:0e:62:62:73:dc:56:2d:7e:9e: fa:54:f6:08:16:d2:f9:2e:77:ca:5d:69:15:84:05:2e:96:08: 75:84:9e:d4:ba:63:98:7d:87:9d:6e:9f:e6:75:0c:9f:eb:9c: 53:4d:59:a2:95:ab:c7:8f:d3:a5:d0:4f:be:fb:a1:d8:ce:3f: 02:56:84:af:f5:f8:b8:d6:fd:4f:3b:ec:83:7b:86:10:dc:69: eb:5c:be:83:95:f4:d2:af:e4:6d:6d:e8:86:dd:80:53:29:6a: 0a:c0:31:e0:ed:79:2c:a1:92:2c:f8:05:c8:89:16:ce:82:f4: 85:cd:3d:67:37:c1:18:e5:c1:4e:83:4e:89:80:5d:cc:1a:df: c6:ce:16:d5:18:a7:67:dc:54:18:dc:d6:d4:91:4c:fd:a8:5f: 68:51:91:24 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUXOoC4nCXRt1SxUpVmZ5NU2vabmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1M0ExQjMxN0M0N0FBNzJCNDVGRDA4NkIxQkQ5RTJG NUFCNjEzMzAeFw0yNjA0MTYwNjQwMzhaFw0yNzA0MTUwNjQ1MzhaMDMxMTAvBgNV BAMTKDQ1RkUyN0RFMzI2QzMzRDY2NzA0OTkyNzg3RjcyQTdEODAxMjcxMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6eo2g5QkLkqgfXDSvVuaGUyPX tzPa06Lu4Fi9ShRl8k9r3nNibTU9noQO3xTWWuKjnhsRqXhEvSc7sA5bHr5sj2DQ lYR0QFRYZMqa//o678sEKvIKwVT3/smt07oIIihATS9EfbowIhH7h0dBX16hMaWM ErIntdwig03lsflhxhxMD6bYMQUUDIhaQV1I6Fy3mEQHdetP1DpApK8cFoSckTul YnB6Aoyxf+0KxL4aFR4ZkEjHZQTwZg5/ofEUX3X4P1KqB5yMnpG5WzCcA6w0tudw G+T37XjfV6XGJI/Va+OccZKa/pwR4xtrV2oskXilSfvjgDsd9AFGYcH7i9qHAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQURf4n3jJsM9ZnBJknh/cqfYAScTEwHwYDVR0j BBgwFoAUSFOhsxfEeqcrRf0IaxvZ4vWrYTMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0NzQzMDc0ODI0MTkyMy8wLzQ4NTNBMUIzMTdDNDdBQTcyQjQ1RkQwODZCMUJE OUUyRjVBQjYxMzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDg1M0ExQjMxN0M0N0FBNzJCNDVGRDA4NkIxQkQ5RTJGNUFCNjEzMy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3MDQ3NDMwNzQ4MjQxOTIzLzAvMzQzNTJlMzIzNTMx MmUzNTMyMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzYzMzM1MzkzOS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAi37NDANBgkqhkiG9w0BAQsFAAOCAQEAW4dxkJ5bmTTa6s96YgNVUCeFvmSh QXv/aPgU39eqfljs+2yZsdSmNtAzhP7RGKgcd0KbJjiPcr+wchv6VzM3C++Da8f+ 9kjnlnd6mppSFLW0UHiDONL8ySirorNh3SVJ/JMzDmJic9xWLX6e+lT2CBbS+S53 yl1pFYQFLpYIdYSe1LpjmH2HnW6f5nUMn+ucU01ZopWrx4/TpdBPvvuh2M4/AlaE r/X4uNb9Tzvsg3uGENxp61y+g5X00q/kbW3oht2AUylqCsAx4O15LKGSLPgFyIkW zoL0hc09ZzfBGOXBToNOiYBdzBrfxs4W1RinZ9xUGNzW1JFM/ahfaFGRJA== -----END CERTIFICATE-----Generated at Fri Apr 17 21:43:19 2026 by rpki-client