$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231332e302f32342d3234203d3e203633363535.roa File: 34352e3234392e3231332e302f32342d3234203d3e203633363535.roa (raw, json) Hash identifier: afjN7HVsTkBDFALMizH5frvoP1K7UkE1HOatng2gxcA= Subject key identifier: 2D:77:60:9C:BA:95:A1:64:A4:95:68:35:8E:29:87:FB:7B:BF:00:23 Certificate issuer: /CN=04CFDCD1650DD854FF0F6840232427716459F9F6 Certificate serial: 0DE4B39C32674DADB904E26B9A8CBF0E0D74E260 Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231332e302f32342d3234203d3e203633363535.roa Signing time: Sat 06 Jun 2026 15:50:39 +0000 ROA not before: Sat 06 Jun 2026 15:45:39 +0000 ROA not after: Sat 05 Jun 2027 15:50:39 +0000 asID: 63655 IP address blocks: 45.249.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 11:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:e4:b3:9c:32:67:4d:ad:b9:04:e2:6b:9a:8c:bf:0e:0d:74:e2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6 Validity Not Before: Jun 6 15:45:39 2026 GMT Not After : Jun 5 15:50:39 2027 GMT Subject: CN=2D77609CBA95A164A49568358E2987FB7BBF0023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3e:fd:84:6f:ee:8a:59:a6:e0:75:9e:cf:2e: 1b:9a:70:6a:af:9a:56:f9:d4:da:0b:12:99:78:e2: bd:43:e9:2d:03:df:ca:b7:05:9c:4e:ec:8f:a0:6a: 99:4d:25:d9:61:a3:68:5d:f2:71:c5:50:2c:40:e5: 59:46:bf:d7:28:e6:61:d8:69:ad:4c:72:8d:49:f8: 8f:0f:50:25:d6:98:9d:04:dd:03:ef:a5:5c:12:8d: fd:c2:b5:b0:3a:37:61:e8:58:67:5a:53:e5:be:67: 21:63:d3:c4:dc:c0:4c:fe:82:39:ec:9a:c5:06:9f: 53:da:83:94:e3:46:49:10:b1:9a:89:f0:91:5f:c0: 21:72:03:6d:41:67:d8:31:1d:c1:cc:9c:4e:15:32: 9f:9d:60:11:72:82:81:72:5a:b1:91:1b:e3:c3:f4: fe:5b:fb:a6:a6:47:95:9c:ce:50:58:40:cd:27:18: 46:32:53:6c:19:f1:c5:19:d7:bc:82:2d:4d:b0:20: 9f:04:ee:ec:87:29:65:9b:43:e1:1e:f0:f8:11:cf: 5f:eb:8a:f6:1f:fa:34:4d:7c:36:87:c7:54:76:bc: 08:d3:d2:78:ff:f8:5e:e3:dc:f3:87:60:88:24:87: f5:fa:46:75:58:8c:cc:9e:37:aa:a3:13:da:79:67: b0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:77:60:9C:BA:95:A1:64:A4:95:68:35:8E:29:87:FB:7B:BF:00:23 X509v3 Authority Key Identifier: keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231332e302f32342d3234203d3e203633363535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.249.213.0/24 Signature Algorithm: sha256WithRSAEncryption 41:15:60:aa:ed:72:64:9e:eb:b9:85:dc:f2:c5:09:f2:f8:56: fa:b0:9b:fd:1c:f5:7b:bd:9f:25:8e:c3:e0:73:f9:06:8b:8b: 9e:9e:65:a1:72:39:5a:8a:9b:77:06:70:2f:6c:03:31:39:b2: 3f:89:78:f1:04:cc:67:9e:12:85:bf:b3:65:a9:82:ab:9e:b8: 0b:fb:b2:b1:98:bb:e4:30:02:59:cf:17:dc:af:bd:d9:22:79: 9b:e3:12:6a:3a:42:23:ad:9b:f2:59:71:14:17:ab:24:10:2c: 0b:88:cd:bd:89:0b:3f:fb:fe:73:ea:1f:3d:10:03:13:8b:dc: c7:1a:ef:55:e0:d5:59:28:33:2b:db:53:a2:cc:02:be:d4:ed: 7f:1f:49:45:72:6b:62:5f:24:af:cc:21:61:bd:7e:cc:28:3c: 15:5a:8f:27:d9:31:64:91:cd:6e:40:86:7b:50:69:71:b7:4c: 63:39:59:13:90:70:7b:7d:b7:36:db:96:e5:e8:ff:cf:f5:5b: 25:8b:6d:c4:7c:a9:2f:81:5e:ea:48:38:6f:2e:68:ba:1a:bc: c7:8a:d9:f5:94:17:5a:f9:c3:5e:cb:11:54:66:4b:be:38:5a: 07:7f:fb:18:4c:b5:3c:ba:86:9c:ec:dd:fa:45:35:00:26:67: 49:b6:6d:f2 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUDeSznDJnTa25BOJrmoy/Dg104mAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRDRkRDRDE2NTBERDg1NEZGMEY2ODQwMjMyNDI3NzE2 NDU5RjlGNjAeFw0yNjA2MDYxNTQ1MzlaFw0yNzA2MDUxNTUwMzlaMDMxMTAvBgNV BAMTKDJENzc2MDlDQkE5NUExNjRBNDk1NjgzNThFMjk4N0ZCN0JCRjAwMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUPv2Eb+6KWabgdZ7PLhuacGqv mlb51NoLEpl44r1D6S0D38q3BZxO7I+gaplNJdlho2hd8nHFUCxA5VlGv9co5mHY aa1Mco1J+I8PUCXWmJ0E3QPvpVwSjf3CtbA6N2HoWGdaU+W+ZyFj08TcwEz+gjns msUGn1Pag5TjRkkQsZqJ8JFfwCFyA21BZ9gxHcHMnE4VMp+dYBFygoFyWrGRG+PD 9P5b+6amR5WczlBYQM0nGEYyU2wZ8cUZ17yCLU2wIJ8E7uyHKWWbQ+Ee8PgRz1/r ivYf+jRNfDaHx1R2vAjT0nj/+F7j3POHYIgkh/X6RnVYjMyeN6qjE9p5Z7CLAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQULXdgnLqVoWSklWg1jimH+3u/ACMwHwYDVR0j BBgwFoAUBM/c0WUN2FT/D2hAIyQncWRZ+fYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDExMzA0OTk2MDEyMDMzOS8wLzA0Q0ZEQ0QxNjUwREQ4NTRGRjBGNjg0MDIzMjQy NzcxNjQ1OUY5RjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDRDRkRDRDE2NTBERDg1NEZGMEY2ODQwMjMyNDI3NzE2NDU5RjlGNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTExNDExMzA0OTk2MDEyMDMzOS8wLzM0MzUyZTMyMzQz OTJlMzIzMTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzUzNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAC351TANBgkqhkiG9w0BAQsFAAOCAQEAQRVgqu1yZJ7ruYXc8sUJ8vhW +rCb/Rz1e72fJY7D4HP5BouLnp5loXI5WoqbdwZwL2wDMTmyP4l48QTMZ54Shb+z ZamCq564C/uysZi75DACWc8X3K+92SJ5m+MSajpCI62b8llxFBerJBAsC4jNvYkL P/v+c+ofPRADE4vcxxrvVeDVWSgzK9tToswCvtTtfx9JRXJrYl8kr8whYb1+zCg8 FVqPJ9kxZJHNbkCGe1BpcbdMYzlZE5Bwe323NtuW5ej/z/VbJYttxHypL4Fe6kg4 by5ouhq8x4rZ9ZQXWvnDXssRVGZLvjhaB3/7GEy1PLqGnOzd+kU1ACZnSbZt8g== -----END CERTIFICATE-----Generated at Sun Jun 14 05:19:01 2026 by rpki-client