$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3131392e3136312e3132342e302f32342d3234203d3e2034383437.roa File: 3131392e3136312e3132342e302f32342d3234203d3e2034383437.roa (raw, json) Hash identifier: kqCY/MIe/lwTm0Es2VrpEnnkLl0cDswFJ+HfSO62HpI= Subject key identifier: AF:0F:21:5F:19:46:94:24:8C:60:1C:7D:E8:88:CA:C9:CE:D5:FD:53 Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Certificate serial: 1F354DDA1481495927555A11564F6BF8EB9B0C18 Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3131392e3136312e3132342e302f32342d3234203d3e2034383437.roa Signing time: Mon 11 May 2026 11:10:18 +0000 ROA not before: Mon 11 May 2026 11:05:18 +0000 ROA not after: Mon 10 May 2027 11:10:18 +0000 asID: 4847 IP address blocks: 119.161.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:35:4d:da:14:81:49:59:27:55:5a:11:56:4f:6b:f8:eb:9b:0c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Validity Not Before: May 11 11:05:18 2026 GMT Not After : May 10 11:10:18 2027 GMT Subject: CN=AF0F215F194694248C601C7DE888CAC9CED5FD53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c0:07:0d:c6:c8:2b:d6:e0:1d:11:33:45:e8: d3:e8:00:ae:73:2b:4f:25:fd:ac:cf:9e:c7:5d:bb: 11:1b:c5:9a:f0:a3:0d:7f:e8:80:92:48:a4:74:89: 29:89:6f:ce:6a:bb:99:56:c0:17:b1:f0:3a:34:da: 51:22:a1:bd:1b:9f:6e:83:29:05:e3:ab:51:55:44: 64:f9:a2:28:fe:2c:04:1b:84:8e:e3:ff:0d:44:af: 5a:17:8d:6b:22:14:ed:a5:7e:be:a0:ca:45:6d:fc: f8:b8:fd:4c:9b:c7:05:91:74:08:b6:fb:69:f8:e7: 0c:05:fb:18:24:07:4a:8a:3b:5a:25:c4:85:12:0a: 66:83:89:91:f5:ed:d5:4f:eb:16:61:18:00:97:da: 05:06:29:d7:5f:78:96:e6:49:1a:9e:30:df:5b:12: 44:31:00:ac:05:06:66:05:be:fc:40:f7:21:08:3a: 2a:c5:58:1f:d7:90:d5:8b:1f:44:29:c6:c5:25:ff: 35:08:0f:2c:65:ff:82:5c:36:4d:20:9b:86:6f:8d: cf:31:36:ba:4f:e7:7a:b5:b9:99:21:4c:ae:7c:e5: 64:63:cb:42:2d:ea:d1:96:17:3d:d5:67:38:e7:2c: 80:51:d4:df:46:a8:51:cd:e9:e8:83:02:fd:92:aa: 8f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0F:21:5F:19:46:94:24:8C:60:1C:7D:E8:88:CA:C9:CE:D5:FD:53 X509v3 Authority Key Identifier: keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3131392e3136312e3132342e302f32342d3234203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.161.124.0/24 Signature Algorithm: sha256WithRSAEncryption 07:64:f8:f3:ab:72:e2:c1:fd:33:c1:b3:60:24:03:40:90:7c: e4:ee:f4:09:2c:de:8b:31:cf:b9:f1:ad:02:0b:ab:c5:f5:76: cf:be:ab:f9:66:d2:48:11:47:88:07:01:7a:db:28:3f:07:30: 37:28:9f:5b:99:74:a9:ae:26:33:26:9f:20:10:9f:a6:6b:c3: 09:e7:f5:02:46:1a:b0:a8:50:7d:f6:b5:f5:69:4c:46:7d:72: 82:c1:22:de:74:4f:aa:7f:b2:9d:36:d8:ea:6f:91:f0:51:9c: 0a:c3:a4:43:ee:36:90:06:ed:9a:da:1c:f7:e0:a8:9c:47:7b: c4:47:a5:99:09:64:80:a0:89:3e:c1:41:f5:e3:b7:38:5e:cd: bd:2d:42:7d:b5:39:e1:5e:64:57:6c:09:1d:ce:fd:9e:9a:95: 75:fb:ca:2a:ab:93:15:1b:32:bf:3f:aa:d6:e0:cb:a1:3c:95: 9e:56:90:15:02:0f:b4:5f:e4:92:7c:fd:8c:67:08:4a:83:d1: c2:a5:be:d1:7e:67:ff:3e:cc:f8:7f:b1:5d:98:61:e7:ae:22: ce:13:80:c3:f6:48:c6:65:34:78:65:01:ac:2c:6a:85:6b:82: 78:2a:8a:a1:ac:c2:b3:54:9e:33:d4:43:f2:83:d7:f3:61:e3: 15:f0:95:4b -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUHzVN2hSBSVknVVoRVk9r+OubDBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4 RkJFN0VBRTAeFw0yNjA1MTExMTA1MThaFw0yNzA1MTAxMTEwMThaMDMxMTAvBgNV BAMTKEFGMEYyMTVGMTk0Njk0MjQ4QzYwMUM3REU4ODhDQUM5Q0VENUZENTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWwAcNxsgr1uAdETNF6NPoAK5z K08l/azPnsdduxEbxZrwow1/6ICSSKR0iSmJb85qu5lWwBex8Do02lEiob0bn26D KQXjq1FVRGT5oij+LAQbhI7j/w1Er1oXjWsiFO2lfr6gykVt/Pi4/UybxwWRdAi2 +2n45wwF+xgkB0qKO1olxIUSCmaDiZH17dVP6xZhGACX2gUGKddfeJbmSRqeMN9b EkQxAKwFBmYFvvxA9yEIOirFWB/XkNWLH0QpxsUl/zUIDyxl/4JcNk0gm4Zvjc8x NrpP53q1uZkhTK585WRjy0It6tGWFz3VZzjnLIBR1N9GqFHN6eiDAv2Sqo8BAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUrw8hXxlGlCSMYBx96IjKyc7V/VMwHwYDVR0j BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0 Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjcyMzM3MjE3OTQ1OC8wLzMxMzEzOTJlMzEz NjMxMmUzMTMyMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHehfDANBgkqhkiG9w0BAQsFAAOCAQEAB2T486ty4sH9M8GzYCQDQJB8 5O70CSzeizHPufGtAgurxfV2z76r+WbSSBFHiAcBetsoPwcwNyifW5l0qa4mMyaf IBCfpmvDCef1AkYasKhQffa19WlMRn1ygsEi3nRPqn+ynTbY6m+R8FGcCsOkQ+42 kAbtmtoc9+ConEd7xEelmQlkgKCJPsFB9eO3OF7NvS1CfbU54V5kV2wJHc79npqV dfvKKquTFRsyvz+q1uDLoTyVnlaQFQIPtF/kknz9jGcISoPRwqW+0X5n/z7M+H+x XZhh564izhOAw/ZIxmU0eGUBrCxqhWuCeCqKoazCs1SeM9RD8oPX82HjFfCVSw== -----END CERTIFICATE-----Generated at Wed May 13 08:28:59 2026 by rpki-client