$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3231302e38372e3138392e302f32342d3234203d3e203233373731.roa File: 3231302e38372e3138392e302f32342d3234203d3e203233373731.roa (raw, json) Hash identifier: Ee8aaz92ZWetKtYyAk620slb7NqU3K/ZZBj9lrXc9ss= Subject key identifier: 78:DC:68:3D:36:67:FC:D8:47:2A:E2:90:9C:AD:BA:B0:2F:7B:5B:04 Certificate issuer: /CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C Certificate serial: 7E34F3FE05BE68900FCCA070B659C343F5895F58 Authority key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3231302e38372e3138392e302f32342d3234203d3e203233373731.roa Signing time: Mon 20 Apr 2026 02:20:46 +0000 ROA not before: Mon 20 Apr 2026 02:15:46 +0000 ROA not after: Mon 19 Apr 2027 02:20:46 +0000 asID: 23771 IP address blocks: 210.87.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:34:f3:fe:05:be:68:90:0f:cc:a0:70:b6:59:c3:43:f5:89:5f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C Validity Not Before: Apr 20 02:15:46 2026 GMT Not After : Apr 19 02:20:46 2027 GMT Subject: CN=78DC683D3667FCD8472AE2909CADBAB02F7B5B04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6d:ff:ca:ea:56:87:9d:5f:44:ce:eb:eb:60: 26:c7:ab:e0:25:83:a1:ee:69:85:0b:a8:cf:65:f2: 48:91:51:2f:20:b4:86:b7:85:f9:b2:77:c2:e7:98: 94:ed:97:76:4a:4d:86:0f:72:3c:1c:e0:2e:e4:5f: f7:6c:91:8a:49:33:f3:b7:17:b8:0d:e1:4a:3c:43: 2f:41:33:42:c1:07:6d:e6:a3:f8:da:57:e1:de:f7: 85:07:ad:5a:a4:14:c9:93:08:3d:19:3c:6d:66:97: eb:4d:0e:bb:a4:00:84:2c:f4:06:82:7b:b0:a2:2e: 5f:f2:05:05:23:20:fc:41:7a:ac:f2:8f:01:e2:43: 2d:c9:af:85:b0:06:f1:c1:63:29:3b:31:88:4e:f1: 0b:89:38:20:33:3a:98:87:83:29:f1:a0:de:73:1b: 2e:03:b3:d8:0a:92:bc:ab:d0:5e:8d:8d:22:33:74: 6f:fd:b7:46:06:28:cc:13:44:45:d3:cf:82:36:54: 0b:03:7c:3b:2e:88:c7:d1:75:93:c1:00:e6:b4:18: ac:a7:78:01:1f:ce:f7:79:05:9d:2b:57:fd:12:21: 1c:27:bd:e4:d8:04:ee:da:22:84:ea:72:30:30:90: 17:f8:fd:53:37:aa:15:b7:0d:d8:1b:08:82:27:13: 1d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DC:68:3D:36:67:FC:D8:47:2A:E2:90:9C:AD:BA:B0:2F:7B:5B:04 X509v3 Authority Key Identifier: keyid:FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3231302e38372e3138392e302f32342d3234203d3e203233373731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.87.189.0/24 Signature Algorithm: sha256WithRSAEncryption 59:e7:3b:84:9f:ed:ad:79:92:bb:1d:79:78:f2:7e:b2:9e:15: 7d:68:ea:ee:b2:f0:1c:2b:49:c2:14:53:1e:32:21:74:ec:6c: 54:cb:68:7a:1f:ef:c8:d4:5a:04:09:c6:dc:79:05:a8:67:bc: 3c:13:e5:fe:e2:07:08:2b:65:4b:e2:62:d8:b9:47:de:33:97: 60:9d:aa:d6:41:50:81:1b:62:4f:d1:6a:bc:4f:c3:e5:b7:20: 8a:2e:27:4f:a5:75:29:71:df:d5:93:b3:77:74:9a:80:f0:82: 19:26:42:d8:37:86:91:84:7e:da:ae:c4:a4:7f:84:7e:59:72: e9:0a:98:62:48:2b:6b:e0:1c:44:34:da:f5:44:cf:65:72:2f: 30:9e:5b:cf:f4:39:44:53:11:d5:cc:c9:7f:f7:bb:84:1a:4e: 76:12:e4:0b:f4:33:6b:68:a5:42:c1:95:38:c4:2f:33:85:41: 1e:8c:83:c8:b4:c7:2f:0f:83:72:d0:5f:85:61:1f:35:8e:45: 78:f5:43:2d:b8:5c:2a:ed:c3:fa:d1:37:a6:f9:c0:e5:c3:8a: f8:11:11:b2:a6:b0:52:44:64:89:5e:ee:9a:86:75:39:4a:2d: 75:e7:8f:02:69:d3:0f:ed:a3:f7:22:80:2f:c0:23:c7:32:17: 54:75:be:57 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUfjTz/gW+aJAPzKBwtlnDQ/WJX1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5 QjFGNUIyQzAeFw0yNjA0MjAwMjE1NDZaFw0yNzA0MTkwMjIwNDZaMDMxMTAvBgNV BAMTKDc4REM2ODNEMzY2N0ZDRDg0NzJBRTI5MDlDQURCQUIwMkY3QjVCMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6bf/K6laHnV9EzuvrYCbHq+Al g6HuaYULqM9l8kiRUS8gtIa3hfmyd8LnmJTtl3ZKTYYPcjwc4C7kX/dskYpJM/O3 F7gN4Uo8Qy9BM0LBB23mo/jaV+He94UHrVqkFMmTCD0ZPG1ml+tNDrukAIQs9AaC e7CiLl/yBQUjIPxBeqzyjwHiQy3Jr4WwBvHBYyk7MYhO8QuJOCAzOpiHgynxoN5z Gy4Ds9gKkryr0F6NjSIzdG/9t0YGKMwTREXTz4I2VAsDfDsuiMfRdZPBAOa0GKyn eAEfzvd5BZ0rV/0SIRwnveTYBO7aIoTqcjAwkBf4/VM3qhW3DdgbCIInEx21AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUeNxoPTZn/NhHKuKQnK26sC97WwQwHwYDVR0j BBgwFoAU+3t5TxI3Jf6ACmR/P36L6ZsfWywwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjA0ODM4Ni8wL0ZCN0I3OTRGMTIzNzI1RkU4MDBBNjQ3RjNGN0U4 QkU5OUIxRjVCMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5QjFGNUIyQy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjcyMzM3MjA0ODM4Ni8wLzMyMzEzMDJlMzgz NzJlMzEzODM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM3MzczMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEANJXvTANBgkqhkiG9w0BAQsFAAOCAQEAWec7hJ/trXmSux15ePJ+sp4V fWjq7rLwHCtJwhRTHjIhdOxsVMtoeh/vyNRaBAnG3HkFqGe8PBPl/uIHCCtlS+Ji 2LlH3jOXYJ2q1kFQgRtiT9FqvE/D5bcgii4nT6V1KXHf1ZOzd3SagPCCGSZC2DeG kYR+2q7EpH+Eflly6QqYYkgra+AcRDTa9UTPZXIvMJ5bz/Q5RFMR1czJf/e7hBpO dhLkC/Qza2ilQsGVOMQvM4VBHoyDyLTHLw+DctBfhWEfNY5FePVDLbhcKu3D+tE3 pvnA5cOK+BERsqawUkRkiV7umoZ1OUotdeePAmnTD+2j9yKAL8AjxzIXVHW+Vw== -----END CERTIFICATE-----Generated at Wed May 13 19:53:45 2026 by rpki-client