$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e32382e36382e302f32322d3232203d3e2034383131.roa File: 3131342e32382e36382e302f32322d3232203d3e2034383131.roa (raw, json) Hash identifier: k2DANdr4kGbHw5DbBF4H016ZNcLf5+VxwPnYFQBum2I= Subject key identifier: 37:0E:6B:A2:D1:AB:1F:80:65:CF:DE:9F:23:C6:7C:C4:36:4A:CA:59 Certificate issuer: /CN=8421F0680EB1B3756485D0F7681F78067E9C172E Certificate serial: 4E271BD6C2BCBB325700D5D8F398E37A7B78BF20 Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e32382e36382e302f32322d3232203d3e2034383131.roa Signing time: Sat 09 May 2026 11:55:54 +0000 ROA not before: Sat 09 May 2026 11:50:54 +0000 ROA not after: Sat 08 May 2027 11:55:54 +0000 asID: 4811 IP address blocks: 114.28.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 13:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:27:1b:d6:c2:bc:bb:32:57:00:d5:d8:f3:98:e3:7a:7b:78:bf:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E Validity Not Before: May 9 11:50:54 2026 GMT Not After : May 8 11:55:54 2027 GMT Subject: CN=370E6BA2D1AB1F8065CFDE9F23C67CC4364ACA59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:da:41:46:d9:57:d2:c7:3c:8c:1c:28:0b:d1: bc:b6:3d:41:11:33:7b:b7:6d:5c:bd:59:fc:91:ef: 9f:bd:1e:86:4c:5c:49:0f:17:18:17:b2:ea:e3:d1: 8d:cf:f2:ae:1f:ca:0b:7b:1a:8a:57:4e:85:90:41: ec:7b:38:1e:63:52:7f:47:12:53:4b:00:fa:17:41: 87:91:53:a1:7d:60:67:96:1e:05:bc:b0:81:b8:23: ec:08:79:e9:64:c2:b1:72:24:b6:28:46:2e:3e:11: 13:28:cf:8c:ee:2b:c4:e2:d4:a8:18:89:68:a1:4c: 90:91:5b:9d:2b:21:99:78:7a:fc:83:4b:f9:ac:db: 44:7e:2e:a0:ff:d9:4b:61:29:06:8e:27:93:d7:14: e5:b5:11:11:c6:77:66:58:31:b1:ee:a4:aa:15:9c: e6:e9:5e:24:2a:2d:74:30:3b:b3:19:0d:d2:54:fe: fa:d7:6d:22:ff:b7:7a:1e:6a:06:bd:44:d3:dd:c8: c8:6e:c1:cb:2e:07:bc:f2:2e:4b:3d:73:96:05:80: e0:b2:0a:3b:7b:bc:af:5f:ef:74:bc:23:28:56:46: f1:81:f6:4f:31:b8:75:04:5b:cf:c0:6b:41:4f:9d: 7b:56:ba:58:fd:30:5e:50:0e:cc:78:32:ad:d4:f0: 83:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0E:6B:A2:D1:AB:1F:80:65:CF:DE:9F:23:C6:7C:C4:36:4A:CA:59 X509v3 Authority Key Identifier: keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131342e32382e36382e302f32322d3232203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.28.68.0/22 Signature Algorithm: sha256WithRSAEncryption 71:9e:9f:e0:c6:b7:62:d3:85:e8:7a:59:24:2d:a9:59:29:d1: 76:d4:9f:d1:7b:8c:1e:02:42:40:76:50:26:f2:ac:4a:be:57: 4c:58:23:31:ad:7e:14:ba:17:b2:26:00:ec:7c:36:86:dd:05: d6:bd:63:73:28:91:ac:f8:e9:b1:95:b3:3e:89:50:56:4b:f9: 68:6a:4a:41:05:77:7f:da:94:12:4e:51:50:29:50:75:2d:b2: 21:12:ad:ba:c3:cc:80:ef:ec:ca:dc:69:8c:7e:ab:58:08:b4: 87:79:d9:f1:32:df:bc:80:72:1b:91:43:5c:6c:54:f2:22:65: 3e:b9:c0:42:d5:c8:44:c1:af:52:d2:9f:8d:96:43:53:74:f0: 8a:0e:e8:31:f0:d6:51:21:66:d4:e3:0d:40:7b:2a:62:15:81: eb:39:8a:f4:5d:3c:77:2f:c6:68:1e:dd:93:f0:5c:7e:f8:4f: 97:b7:54:65:35:2f:8a:8c:22:99:d7:2c:84:c1:30:ea:72:d5: 9c:af:a0:c9:8f:04:a0:75:8e:99:fa:9b:6f:32:09:5c:21:61: 66:97:8e:f8:d8:dc:1c:6f:96:bb:ea:4b:cc:b5:2e:60:a0:fb: 78:5a:f6:55:51:18:eb:8e:69:27:ec:f5:1e:29:f9:94:42:61: 73:85:83:0f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUTicb1sK8uzJXANXY85jjent4vyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3 RTlDMTcyRTAeFw0yNjA1MDkxMTUwNTRaFw0yNzA1MDgxMTU1NTRaMDMxMTAvBgNV BAMTKDM3MEU2QkEyRDFBQjFGODA2NUNGREU5RjIzQzY3Q0M0MzY0QUNBNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh2kFG2VfSxzyMHCgL0by2PUER M3u3bVy9WfyR75+9HoZMXEkPFxgXsurj0Y3P8q4fygt7GopXToWQQex7OB5jUn9H ElNLAPoXQYeRU6F9YGeWHgW8sIG4I+wIeelkwrFyJLYoRi4+ERMoz4zuK8Ti1KgY iWihTJCRW50rIZl4evyDS/ms20R+LqD/2UthKQaOJ5PXFOW1ERHGd2ZYMbHupKoV nObpXiQqLXQwO7MZDdJU/vrXbSL/t3oeaga9RNPdyMhuwcsuB7zyLks9c5YFgOCy Cjt7vK9f73S8IyhWRvGB9k8xuHUEW8/Aa0FPnXtWulj9MF5QDsx4Mq3U8INpAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUNw5rotGrH4Blz96fI8Z8xDZKylkwHwYDVR0j BBgwFoAUhCHwaA6xs3VkhdD3aB94Bn6cFy4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzQ3MTg3My8wLzg0MjFGMDY4MEVCMUIzNzU2NDg1RDBGNzY4MUY3 ODA2N0U5QzE3MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3RTlDMTcyRS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NDcxODczLzAvMzEzMTM0MmUzMjM4 MmUzNjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzQzODMxMzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJyHEQwDQYJKoZIhvcNAQELBQADggEBAHGen+DGt2LTheh6WSQtqVkp0XbUn9F7 jB4CQkB2UCbyrEq+V0xYIzGtfhS6F7ImAOx8NobdBda9Y3Mokaz46bGVsz6JUFZL +WhqSkEFd3/alBJOUVApUHUtsiESrbrDzIDv7MrcaYx+q1gItId52fEy37yAchuR Q1xsVPIiZT65wELVyETBr1LSn42WQ1N08IoO6DHw1lEhZtTjDUB7KmIVges5ivRd PHcvxmge3ZPwXH74T5e3VGU1L4qMIpnXLITBMOpy1ZyvoMmPBKB1jpn6m28yCVwh YWaXjvjY3BxvlrvqS8y1LmCg+3ha9lVRGOuOaSfs9R4p+ZRCYXOFgw8= -----END CERTIFICATE-----Generated at Wed May 13 03:15:32 2026 by rpki-client