$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3131392e3233352e3134352e302f32342d3234203d3e203234343237.roa File: 3131392e3233352e3134352e302f32342d3234203d3e203234343237.roa (raw, json) Hash identifier: cRHV7X3G/PQJ92A12wotA3DpyVsL+d9PuLjA/A0Nb9c= Subject key identifier: CB:2D:38:B8:43:92:08:58:8B:CB:75:53:C2:E0:B3:3D:B4:E8:91:B7 Certificate issuer: /CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5 Certificate serial: 4F08E52FAFC48B1A3F39375405DDB2D8CA8F0AAD Authority key identifier: 23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3131392e3233352e3134352e302f32342d3234203d3e203234343237.roa Signing time: Thu 23 Apr 2026 04:45:47 +0000 ROA not before: Thu 23 Apr 2026 04:40:47 +0000 ROA not after: Thu 22 Apr 2027 04:45:47 +0000 asID: 24427 IP address blocks: 119.235.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:08:e5:2f:af:c4:8b:1a:3f:39:37:54:05:dd:b2:d8:ca:8f:0a:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5 Validity Not Before: Apr 23 04:40:47 2026 GMT Not After : Apr 22 04:45:47 2027 GMT Subject: CN=CB2D38B8439208588BCB7553C2E0B33DB4E891B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:48:64:84:d9:1a:8a:f0:32:49:02:19:00:be: c3:1a:6e:2f:85:08:42:d7:9d:3e:b4:a6:b3:7f:3d: bf:f6:15:1a:3a:47:86:a9:29:9b:d2:d6:12:8e:5a: 50:c0:60:50:9e:e7:8c:95:54:bc:fb:27:60:c0:f4: 7e:c6:51:a0:79:57:c7:c6:fb:4b:1a:bc:76:98:23: 98:d0:e8:bf:ee:9f:26:4b:17:1c:93:1b:ca:96:a6: a2:9f:f0:8c:1b:d6:e1:c9:23:f4:4b:13:a3:ee:5f: 29:7c:c3:19:2a:fc:cb:72:d9:46:bb:f0:20:5a:71: ff:f6:aa:9f:f1:54:69:6d:dc:42:46:66:4f:37:68: 42:30:da:28:9d:7b:a9:30:76:1a:3e:66:b7:c6:d2: 50:da:4d:d4:0e:0c:e5:6d:8e:8a:fd:9b:b3:c3:66: 2b:b5:7f:8c:3a:a6:a8:8b:3d:81:e1:51:ba:3d:e9: 9f:c5:11:14:c8:79:f4:70:fd:ca:2d:52:37:54:17: 20:9a:13:68:6c:a8:ba:85:2b:fc:b6:18:f0:51:5d: 53:d7:e0:9f:2d:ab:73:79:9a:42:59:b3:a9:1b:d8: 8c:f7:60:c0:fd:fd:dc:43:f2:80:3b:95:0d:32:7b: 04:9a:25:17:0d:16:30:74:88:04:e8:ea:ba:6c:66: b3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2D:38:B8:43:92:08:58:8B:CB:75:53:C2:E0:B3:3D:B4:E8:91:B7 X509v3 Authority Key Identifier: keyid:23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3131392e3233352e3134352e302f32342d3234203d3e203234343237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.235.145.0/24 Signature Algorithm: sha256WithRSAEncryption 19:af:48:b8:92:65:cb:06:c9:15:34:7a:56:c7:6c:f2:77:1a: 3c:40:68:e5:e1:4a:12:31:63:ac:87:d4:d0:c3:2f:04:d2:85: 6e:8c:f9:21:9c:0c:1d:d5:7e:0b:5f:bd:71:b3:56:0b:2f:7b: a5:a6:6a:f4:00:43:91:d9:b0:26:bf:84:3b:b4:25:1f:1e:44: 2f:79:e6:1a:5e:9f:fd:fd:df:07:d1:50:18:cc:cd:cf:9e:79: 41:0b:72:14:5b:0e:7f:f7:bc:2f:fd:62:af:48:57:10:b5:84: fa:22:61:21:be:ed:3e:4b:34:30:47:46:3c:cc:e9:88:75:75: 6a:5f:e4:99:c9:87:1b:62:e3:bb:e3:7c:ac:ee:46:b7:1b:34: 82:73:7c:e7:15:1c:3c:c6:51:c8:e5:6f:a7:64:be:cb:22:21: e1:ac:f0:5a:8c:05:d8:7d:37:3c:8c:e4:13:5a:0b:84:d0:5b: 16:ac:d1:d7:81:10:fb:7b:10:57:e7:fa:a6:d8:2f:24:d9:c0: 7f:2f:05:55:db:9a:d5:57:f8:b5:aa:c3:d4:4f:f5:cf:b2:56: 24:c8:5d:4f:24:c0:8e:05:dc:f3:63:d9:d6:eb:ee:f7:c8:a9: f2:bf:6e:21:21:0e:de:c3:46:4f:e1:13:b7:6c:49:72:e4:c9: c2:8b:05:78 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUTwjlL6/Eixo/OTdUBd2y2MqPCq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFG NDgyRDhENTAeFw0yNjA0MjMwNDQwNDdaFw0yNzA0MjIwNDQ1NDdaMDMxMTAvBgNV BAMTKENCMkQzOEI4NDM5MjA4NTg4QkNCNzU1M0MyRTBCMzNEQjRFODkxQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfSGSE2RqK8DJJAhkAvsMabi+F CELXnT60prN/Pb/2FRo6R4apKZvS1hKOWlDAYFCe54yVVLz7J2DA9H7GUaB5V8fG +0savHaYI5jQ6L/unyZLFxyTG8qWpqKf8Iwb1uHJI/RLE6PuXyl8wxkq/Mty2Ua7 8CBacf/2qp/xVGlt3EJGZk83aEIw2iide6kwdho+ZrfG0lDaTdQODOVtjor9m7PD Ziu1f4w6pqiLPYHhUbo96Z/FERTIefRw/cotUjdUFyCaE2hsqLqFK/y2GPBRXVPX 4J8tq3N5mkJZs6kb2Iz3YMD9/dxD8oA7lQ0yewSaJRcNFjB0iATo6rpsZrNFAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUyy04uEOSCFiLy3VTwuCzPbTokbcwHwYDVR0j BBgwFoAUIzmSE2P3ADw960fthTSv4fSC2NUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzI3NTI2NS8wLzIzMzk5MjEzNjNGNzAwM0MzREVCNDdFRDg1MzRB RkUxRjQ4MkQ4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFGNDgyRDhENS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDcyNzUyNjUvMC8zMTMxMzkyZTMy MzMzNTJlMzEzNDM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNDM0MzIzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAHfrkTANBgkqhkiG9w0BAQsFAAOCAQEAGa9IuJJlywbJFTR6Vsds 8ncaPEBo5eFKEjFjrIfU0MMvBNKFboz5IZwMHdV+C1+9cbNWCy97paZq9ABDkdmw Jr+EO7QlHx5EL3nmGl6f/f3fB9FQGMzNz555QQtyFFsOf/e8L/1ir0hXELWE+iJh Ib7tPks0MEdGPMzpiHV1al/kmcmHG2Lju+N8rO5Gtxs0gnN85xUcPMZRyOVvp2S+ yyIh4azwWowF2H03PIzkE1oLhNBbFqzR14EQ+3sQV+f6ptgvJNnAfy8FVdua1Vf4 tarD1E/1z7JWJMhdTyTAjgXc82PZ1uvu98ip8r9uISEO3sNGT+ETt2xJcuTJwosF eA== -----END CERTIFICATE-----Generated at Wed May 13 20:20:32 2026 by rpki-client