$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3131392e3233352e3132382e302f32342d3234203d3e203234343237.roa File: 3131392e3233352e3132382e302f32342d3234203d3e203234343237.roa (raw, json) Hash identifier: gKGf9ncPC0mDmhttmgm4Nc+M5A6UymruGAO1ADoEIsY= Subject key identifier: 9A:F0:8A:D8:2B:E9:96:BA:DD:21:CC:1D:A9:EE:5A:47:F8:C8:46:39 Certificate issuer: /CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5 Certificate serial: 3F3789CD04EDE0D7A0A8605C556B3063D08B8FA2 Authority key identifier: 23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3131392e3233352e3132382e302f32342d3234203d3e203234343237.roa Signing time: Mon 20 Apr 2026 13:16:42 +0000 ROA not before: Mon 20 Apr 2026 13:11:42 +0000 ROA not after: Mon 19 Apr 2027 13:16:42 +0000 asID: 24427 IP address blocks: 119.235.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:37:89:cd:04:ed:e0:d7:a0:a8:60:5c:55:6b:30:63:d0:8b:8f:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5 Validity Not Before: Apr 20 13:11:42 2026 GMT Not After : Apr 19 13:16:42 2027 GMT Subject: CN=9AF08AD82BE996BADD21CC1DA9EE5A47F8C84639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6b:59:8d:f9:0f:20:fd:7c:c0:08:3a:2f:6f: 94:59:15:39:98:74:08:ba:b2:50:da:ac:c4:56:da: c7:d3:c4:9b:87:16:70:de:4a:68:39:57:c9:0a:cc: 36:24:32:71:b9:e6:8e:e5:45:ab:84:58:7b:38:7a: 56:07:33:b5:8b:b1:24:a8:e9:0d:1e:95:1f:be:ca: a8:56:99:d6:04:de:f1:56:40:bc:f8:52:88:77:94: 70:05:7a:a5:59:45:3f:42:e8:0c:28:7c:17:eb:1e: b2:7b:3f:bf:1a:94:bc:62:18:12:fb:af:17:2a:1f: 78:d3:c5:68:af:87:3f:bf:eb:18:74:ac:17:80:d3: 22:4a:a6:c1:86:9f:b4:d3:34:3f:02:a3:5f:fc:9b: af:9a:5f:d2:97:a6:9e:3a:3f:3f:71:2c:65:d1:8a: 26:cf:87:f2:a1:f0:75:67:8c:ff:c1:21:ee:6e:c3: c1:ef:0c:22:57:65:eb:c4:7c:62:8c:e4:f3:27:c3: 83:05:9f:64:7c:1a:42:e1:ca:27:9e:45:89:97:d4: dd:92:e2:d3:d5:0d:c6:ed:fe:ac:b5:a0:e8:af:ed: dd:7d:d9:54:81:2a:93:01:97:f7:cd:cb:12:00:a6: d6:6e:48:2a:94:1e:88:4d:ce:29:74:2c:57:cd:25: 51:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F0:8A:D8:2B:E9:96:BA:DD:21:CC:1D:A9:EE:5A:47:F8:C8:46:39 X509v3 Authority Key Identifier: keyid:23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3131392e3233352e3132382e302f32342d3234203d3e203234343237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.235.128.0/24 Signature Algorithm: sha256WithRSAEncryption 68:d4:87:fc:bc:41:87:96:ce:19:26:25:b1:99:e9:1a:57:15: b2:f2:fd:f4:e6:5c:d2:ca:6e:35:b2:eb:b5:45:fd:8d:8d:da: ad:c9:e3:03:8d:ee:11:73:0a:b0:6a:d1:4e:f1:bd:9f:b2:19: 89:1d:6a:cc:97:69:a8:34:d3:f9:cd:7c:9d:76:a1:5b:19:d0: 5f:d2:cb:10:f8:c4:bb:24:fd:11:83:6e:d9:78:b9:2b:66:88: 6c:57:58:ba:75:61:15:bb:db:ed:9b:4c:c0:59:f3:0c:7a:15: fe:c9:3a:63:a6:0a:13:4c:80:0b:cf:a0:a1:28:61:cc:4b:b3: d5:de:58:c3:68:d7:27:d1:89:7b:39:24:63:1e:58:a4:63:50: 5a:27:20:cf:49:0b:dc:b4:96:55:28:9f:ea:7a:c4:ed:13:e9: 14:b4:69:e2:48:da:ef:dd:b6:e0:fe:0a:c3:80:dc:b1:1d:5a: 12:a5:d3:9f:bf:18:9e:41:ee:88:5b:77:97:66:ca:c9:7b:c1: b8:22:e8:ea:af:9c:21:4b:18:0f:c7:0c:b9:e5:8a:af:47:86: c1:e3:d3:9c:0b:a8:0e:31:8f:d5:76:c0:20:f1:84:3a:b0:38: 26:72:1d:96:59:c3:e0:ad:bf:0b:1e:06:77:c1:68:ea:8d:ce: f4:9a:27:6f -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUPzeJzQTt4NegqGBcVWswY9CLj6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFG NDgyRDhENTAeFw0yNjA0MjAxMzExNDJaFw0yNzA0MTkxMzE2NDJaMDMxMTAvBgNV BAMTKDlBRjA4QUQ4MkJFOTk2QkFERDIxQ0MxREE5RUU1QTQ3RjhDODQ2MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2a1mN+Q8g/XzACDovb5RZFTmY dAi6slDarMRW2sfTxJuHFnDeSmg5V8kKzDYkMnG55o7lRauEWHs4elYHM7WLsSSo 6Q0elR++yqhWmdYE3vFWQLz4Uoh3lHAFeqVZRT9C6AwofBfrHrJ7P78alLxiGBL7 rxcqH3jTxWivhz+/6xh0rBeA0yJKpsGGn7TTND8Co1/8m6+aX9KXpp46Pz9xLGXR iibPh/Kh8HVnjP/BIe5uw8HvDCJXZevEfGKM5PMnw4MFn2R8GkLhyieeRYmX1N2S 4tPVDcbt/qy1oOiv7d192VSBKpMBl/fNyxIAptZuSCqUHohNzil0LFfNJVFhAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUmvCK2CvplrrdIcwdqe5aR/jIRjkwHwYDVR0j BBgwFoAUIzmSE2P3ADw960fthTSv4fSC2NUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzI3NTI2NS8wLzIzMzk5MjEzNjNGNzAwM0MzREVCNDdFRDg1MzRB RkUxRjQ4MkQ4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFGNDgyRDhENS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDcyNzUyNjUvMC8zMTMxMzkyZTMy MzMzNTJlMzEzMjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNDM0MzIzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAHfrgDANBgkqhkiG9w0BAQsFAAOCAQEAaNSH/LxBh5bOGSYlsZnp GlcVsvL99OZc0spuNbLrtUX9jY3arcnjA43uEXMKsGrRTvG9n7IZiR1qzJdpqDTT +c18nXahWxnQX9LLEPjEuyT9EYNu2Xi5K2aIbFdYunVhFbvb7ZtMwFnzDHoV/sk6 Y6YKE0yAC8+goShhzEuz1d5Yw2jXJ9GJezkkYx5YpGNQWicgz0kL3LSWVSif6nrE 7RPpFLRp4kja79224P4Kw4DcsR1aEqXTn78YnkHuiFt3l2bKyXvBuCLo6q+cIUsY D8cMueWKr0eGwePTnAuoDjGP1XbAIPGEOrA4JnIdllnD4K2/Cx4Gd8Fo6o3O9Jon bw== -----END CERTIFICATE-----Generated at Wed May 13 20:20:33 2026 by rpki-client