$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3135352e3234302e302f32312d3231203d3e2034383038.roa File: 3231312e3135352e3234302e302f32312d3231203d3e2034383038.roa (raw, json) Hash identifier: E1U6gS2Posr+r7jSvGchKE01bMOoCEK1VqvaUNn10wI= Subject key identifier: 87:56:5B:60:14:2D:31:F3:C5:13:9A:E7:C9:66:F9:7E:48:5F:7E:49 Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Certificate serial: 40B4C801F3F8744F173F5CA0928AAC84B9DE8C4F Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3135352e3234302e302f32312d3231203d3e2034383038.roa Signing time: Wed 13 May 2026 01:59:47 +0000 ROA not before: Wed 13 May 2026 01:54:47 +0000 ROA not after: Wed 12 May 2027 01:59:47 +0000 asID: 4808 IP address blocks: 211.155.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:b4:c8:01:f3:f8:74:4f:17:3f:5c:a0:92:8a:ac:84:b9:de:8c:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Validity Not Before: May 13 01:54:47 2026 GMT Not After : May 12 01:59:47 2027 GMT Subject: CN=87565B60142D31F3C5139AE7C966F97E485F7E49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:76:e6:ef:a4:d3:25:80:75:33:28:ab:ae:2c: 1a:46:6f:ea:85:1a:6d:85:91:f6:27:86:c1:8e:36: 5c:a6:53:b1:fb:ae:91:2e:8c:ab:00:d4:81:01:21: 64:93:1f:fb:cb:53:7e:c3:b2:27:0e:48:41:61:1c: 42:77:dc:24:3f:18:c6:f4:ba:5d:82:49:1c:b7:52: 1c:1f:8c:52:f6:6c:3f:90:67:ec:91:f7:19:07:69: 22:d9:89:db:2f:4d:ca:7f:90:2b:b4:2e:47:50:39: 20:a4:aa:35:d1:50:bf:0d:e3:43:cb:30:01:37:38: f0:2a:65:ab:fb:07:40:aa:49:1e:3e:85:1d:17:83: 52:07:8f:93:eb:fe:b6:01:14:f1:da:e6:e0:a1:3e: 99:f7:10:16:79:5f:89:59:5a:28:45:ec:fe:7c:7a: 00:af:41:df:06:72:84:fd:22:25:4e:1b:ea:db:0d: c4:43:1b:d5:a3:79:92:2c:5b:b0:31:44:a9:79:96: 60:0d:3b:b8:54:be:1a:f3:ac:2f:dc:0d:d3:3f:c1: 16:f1:a3:78:f4:3c:bb:83:cb:1c:6e:a0:66:a8:2d: 56:f0:22:63:43:06:ca:31:0c:ff:84:25:e9:85:77: 83:d3:c9:e0:8a:c1:61:66:fe:9c:d8:cb:57:06:fe: e0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:56:5B:60:14:2D:31:F3:C5:13:9A:E7:C9:66:F9:7E:48:5F:7E:49 X509v3 Authority Key Identifier: keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3135352e3234302e302f32312d3231203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.155.240.0/21 Signature Algorithm: sha256WithRSAEncryption 8d:e5:ee:f0:a8:e9:08:e4:12:fe:3f:7b:5c:d8:e0:bc:06:8c: ea:a8:f6:58:85:a9:54:bd:d3:eb:7d:71:bd:28:74:8d:e1:7b: da:38:50:b2:a4:df:d7:c9:85:9d:92:93:b8:c4:22:42:7b:06: 84:e2:76:87:b5:27:42:ae:81:9c:bb:53:a0:3d:fa:2c:51:1c: fb:f6:5e:e8:ab:69:e9:14:d1:e9:6f:34:65:0a:3b:5a:8a:67: 3c:0e:11:eb:26:a2:5f:54:33:83:18:52:17:46:1b:01:94:b9: ec:75:8f:e8:b0:32:a6:16:51:dc:6b:b8:57:a3:81:12:76:24: 7b:df:3d:34:d2:64:c1:8c:98:03:5b:08:0f:dc:d9:48:be:38: 32:f0:43:eb:b4:0c:d9:d8:c0:e7:d0:2d:a2:31:61:59:32:dd: 83:b1:4d:40:a6:0f:af:d2:bf:11:47:b5:44:c0:34:08:99:e1: 7d:3a:94:ea:58:82:09:d2:37:78:5e:69:2a:4d:32:ac:a6:0e: b3:8b:f1:c3:48:f1:f6:ac:be:2e:a0:1f:eb:cd:0e:9c:94:2d: 85:6d:f1:43:3a:4e:06:dc:b9:8d:83:2f:4c:55:1b:49:c8:5e: 2f:89:5a:65:62:81:c0:bc:fb:d6:3f:59:6f:e3:61:3f:9d:99: 40:47:27:53 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUQLTIAfP4dE8XP1ygkoqshLnejE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw NUJEOTUxNTAeFw0yNjA1MTMwMTU0NDdaFw0yNzA1MTIwMTU5NDdaMDMxMTAvBgNV BAMTKDg3NTY1QjYwMTQyRDMxRjNDNTEzOUFFN0M5NjZGOTdFNDg1RjdFNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5dubvpNMlgHUzKKuuLBpGb+qF Gm2FkfYnhsGONlymU7H7rpEujKsA1IEBIWSTH/vLU37DsicOSEFhHEJ33CQ/GMb0 ul2CSRy3UhwfjFL2bD+QZ+yR9xkHaSLZidsvTcp/kCu0LkdQOSCkqjXRUL8N40PL MAE3OPAqZav7B0CqSR4+hR0Xg1IHj5Pr/rYBFPHa5uChPpn3EBZ5X4lZWihF7P58 egCvQd8GcoT9IiVOG+rbDcRDG9WjeZIsW7AxRKl5lmANO7hUvhrzrC/cDdM/wRbx o3j0PLuDyxxuoGaoLVbwImNDBsoxDP+EJemFd4PTyeCKwWFm/pzYy1cG/uA9AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUh1ZbYBQtMfPFE5rnyWb5fkhffkkwHwYDVR0j BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3 NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0Nzk0MzkzOS8wLzMyMzEzMTJlMzEz NTM1MmUzMjM0MzAyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA9Ob8DANBgkqhkiG9w0BAQsFAAOCAQEAjeXu8KjpCOQS/j97XNjgvAaM 6qj2WIWpVL3T631xvSh0jeF72jhQsqTf18mFnZKTuMQiQnsGhOJ2h7UnQq6BnLtT oD36LFEc+/Ze6Ktp6RTR6W80ZQo7WopnPA4R6yaiX1QzgxhSF0YbAZS57HWP6LAy phZR3Gu4V6OBEnYke989NNJkwYyYA1sID9zZSL44MvBD67QM2djA59AtojFhWTLd g7FNQKYPr9K/EUe1RMA0CJnhfTqU6liCCdI3eF5pKk0yrKYOs4vxw0jx9qy+LqAf 680OnJQthW3xQzpOBty5jYMvTFUbScheL4laZWKBwLz71j9Zb+NhP52ZQEcnUw== -----END CERTIFICATE-----Generated at Wed May 13 17:32:28 2026 by rpki-client