$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e32382e3134342e302f32302d3230203d3e2034383131.roa File: 3131342e32382e3134342e302f32302d3230203d3e2034383131.roa (raw, json) Hash identifier: E1m38mZb/SG7oWaFlqcUfpVkwaATD41p5lliHG3KeOw= Subject key identifier: 06:FF:B9:7D:9C:CE:7A:1A:E6:6A:F8:D3:5C:FC:2C:32:DB:4A:C9:9E Certificate issuer: /CN=8421F0680EB1B3756485D0F7681F78067E9C172E Certificate serial: 0C10501E695683CA05F0B37A9E566305FA0059E5 Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e32382e3134342e302f32302d3230203d3e2034383131.roa Signing time: Tue 24 Mar 2026 05:46:28 +0000 ROA not before: Tue 24 Mar 2026 05:41:28 +0000 ROA not after: Tue 23 Mar 2027 05:46:28 +0000 asID: 4811 IP address blocks: 114.28.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:10:50:1e:69:56:83:ca:05:f0:b3:7a:9e:56:63:05:fa:00:59:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E Validity Not Before: Mar 24 05:41:28 2026 GMT Not After : Mar 23 05:46:28 2027 GMT Subject: CN=06FFB97D9CCE7A1AE66AF8D35CFC2C32DB4AC99E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:50:ea:d9:e2:fe:3f:4c:40:c6:b1:95:e6:16: f2:27:79:25:66:21:c3:0e:be:5a:eb:db:65:42:93: d1:2f:92:3a:15:f5:77:f9:84:64:d8:91:d2:b2:80: b2:e7:77:a0:72:9e:26:c1:45:9c:56:fe:1c:45:79: f3:8a:ec:47:01:f5:24:03:c0:d5:28:2a:1c:b4:aa: ba:16:ed:32:db:4f:ee:b6:32:24:17:9c:23:ac:71: fe:82:be:02:71:90:60:b2:c0:6e:95:3d:2a:e6:84: 1b:a3:c4:a4:ab:1a:47:ce:f5:00:aa:af:bc:f2:90: 78:3f:af:48:5c:37:49:c0:3f:29:49:8d:f3:f1:62: f0:2a:16:bf:5f:96:95:a8:1c:d8:e3:b3:19:1f:48: a2:fc:a8:53:84:87:f2:a0:d3:16:37:47:a8:cf:d3: cf:af:67:79:96:c0:d4:1b:0a:c4:3d:9b:c5:97:94: bc:26:a1:a7:33:d5:33:50:28:bc:9c:be:78:5d:66: 33:58:47:1e:84:89:d9:ae:83:3f:99:d5:ab:57:c0: 36:9b:1e:b4:e0:13:a9:58:1d:7f:6d:c0:e9:59:30: a6:1c:4c:f6:be:0f:bb:34:2c:0e:09:7d:19:8c:3f: 90:f4:3d:cc:55:03:f1:3e:36:e7:0a:dd:42:2c:b8: ef:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:FF:B9:7D:9C:CE:7A:1A:E6:6A:F8:D3:5C:FC:2C:32:DB:4A:C9:9E X509v3 Authority Key Identifier: keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e32382e3134342e302f32302d3230203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.28.144.0/20 Signature Algorithm: sha256WithRSAEncryption a5:78:4a:18:b2:b0:8a:c7:00:94:b2:9c:78:7b:fb:87:c2:d7: d3:52:ce:f2:2e:f3:fe:fc:08:b2:a3:26:d2:b7:99:f1:84:9b: 71:69:69:38:14:81:97:3b:10:35:62:21:18:98:c9:0c:91:b3: 67:df:b5:1d:2e:29:68:aa:05:5f:7e:97:3e:cc:b9:b6:81:b6: 28:f5:a9:43:4b:9e:94:ba:89:44:8e:62:cf:61:65:f8:86:39: 6b:e9:cd:9d:f1:86:b5:eb:f4:8a:07:80:74:00:65:a9:f7:c2: c2:97:16:6d:67:5e:99:e6:e0:e3:4a:a4:77:94:c9:d8:58:4d: 31:7b:43:56:bd:3a:bf:0a:61:20:56:7a:2f:2c:f9:47:b7:43: e0:f0:5c:b8:63:ce:e0:f1:a8:23:1b:37:e5:8e:32:ee:71:55: db:35:03:83:e1:85:09:63:b0:45:37:f2:a6:25:48:f5:f6:f0: 8a:5c:f2:7c:09:44:66:26:cd:b6:f9:0b:46:91:55:56:7d:a0: 0e:63:0d:22:c0:db:6b:65:cb:bc:14:ae:db:34:c2:5f:f1:80: ec:e4:fa:10:bf:fc:52:18:20:4f:c9:f9:43:8e:8d:08:9b:bf: a0:90:e3:6b:e1:76:1f:0d:6c:26:0a:d8:f6:25:ee:38:3f:b7: bf:28:79:4a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUDBBQHmlWg8oF8LN6nlZjBfoAWeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3 RTlDMTcyRTAeFw0yNjAzMjQwNTQxMjhaFw0yNzAzMjMwNTQ2MjhaMDMxMTAvBgNV BAMTKDA2RkZCOTdEOUNDRTdBMUFFNjZBRjhEMzVDRkMyQzMyREI0QUM5OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWUOrZ4v4/TEDGsZXmFvIneSVm IcMOvlrr22VCk9EvkjoV9Xf5hGTYkdKygLLnd6BynibBRZxW/hxFefOK7EcB9SQD wNUoKhy0qroW7TLbT+62MiQXnCOscf6CvgJxkGCywG6VPSrmhBujxKSrGkfO9QCq r7zykHg/r0hcN0nAPylJjfPxYvAqFr9flpWoHNjjsxkfSKL8qFOEh/Kg0xY3R6jP 08+vZ3mWwNQbCsQ9m8WXlLwmoacz1TNQKLycvnhdZjNYRx6Eidmugz+Z1atXwDab HrTgE6lYHX9twOlZMKYcTPa+D7s0LA4JfRmMP5D0PcxVA/E+NucK3UIsuO+lAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUBv+5fZzOehrmavjTXPwsMttKyZ4wHwYDVR0j BBgwFoAUhCHwaA6xs3VkhdD3aB94Bn6cFy4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzQ3MTg3My8wLzg0MjFGMDY4MEVCMUIzNzU2NDg1RDBGNzY4MUY3 ODA2N0U5QzE3MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3RTlDMTcyRS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NDcxODczLzAvMzEzMTM0MmUzMjM4 MmUzMTM0MzQyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNDM4MzEzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBHIckDANBgkqhkiG9w0BAQsFAAOCAQEApXhKGLKwiscAlLKceHv7h8LX01LO 8i7z/vwIsqMm0reZ8YSbcWlpOBSBlzsQNWIhGJjJDJGzZ9+1HS4paKoFX36XPsy5 toG2KPWpQ0uelLqJRI5iz2Fl+IY5a+nNnfGGtev0igeAdABlqffCwpcWbWdemebg 40qkd5TJ2FhNMXtDVr06vwphIFZ6Lyz5R7dD4PBcuGPO4PGoIxs35Y4y7nFV2zUD g+GFCWOwRTfypiVI9fbwilzyfAlEZibNtvkLRpFVVn2gDmMNIsDba2XLvBSu2zTC X/GA7OT6EL/8UhggT8n5Q46NCJu/oJDja+F2Hw1sJgrY9iXuOD+3vyh5Sg== -----END CERTIFICATE-----Generated at Thu Mar 26 21:32:01 2026 by rpki-client