$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3132312e35352e302e302f31382d3138203d3e203435303631.roa File: 3132312e35352e302e302f31382d3138203d3e203435303631.roa (raw, json) Hash identifier: NhqqQJvDACKCKhJecfErnOqf7SHXIpNF0kxLCWZji7g= Subject key identifier: AE:4A:E0:49:52:9F:3A:75:AB:DF:38:F6:03:02:60:E5:91:67:B6:59 Certificate issuer: /CN=8421F0680EB1B3756485D0F7681F78067E9C172E Certificate serial: 17438F91913E11FB3BCCDB2FDF431C3872EFE3B6 Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3132312e35352e302e302f31382d3138203d3e203435303631.roa Signing time: Sat 09 May 2026 11:55:54 +0000 ROA not before: Sat 09 May 2026 11:50:54 +0000 ROA not after: Sat 08 May 2027 11:55:54 +0000 asID: 45061 IP address blocks: 121.55.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:43:8f:91:91:3e:11:fb:3b:cc:db:2f:df:43:1c:38:72:ef:e3:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E Validity Not Before: May 9 11:50:54 2026 GMT Not After : May 8 11:55:54 2027 GMT Subject: CN=AE4AE049529F3A75ABDF38F6030260E59167B659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:35:44:68:b2:f9:d2:42:c3:10:70:4e:34:73: 2c:06:a7:8f:d2:05:de:a7:43:24:b6:24:3b:8c:97: e0:ec:f3:ef:ac:87:8e:0b:15:f8:30:48:27:d5:e6: 06:d3:47:db:cb:78:a0:5c:ab:59:7a:66:59:7b:a0: a7:34:6a:7f:ea:e2:52:ad:1f:5f:e5:36:da:43:a1: 9a:40:29:17:17:1b:56:59:67:c1:58:80:60:f2:80: af:0f:d7:e9:99:60:12:10:2a:2b:96:bb:76:1c:8b: fd:61:f4:f0:8c:10:3d:a1:17:00:32:0c:b1:83:4c: 8a:1a:53:e4:45:df:ea:2f:d9:20:5b:9f:19:96:91: b8:91:a8:80:48:fa:5f:7c:c6:4e:f0:c7:b8:d1:1f: 25:75:f7:c1:83:22:13:39:26:21:4f:8e:69:00:df: 6e:e5:96:1c:bc:e2:96:69:dd:15:c6:8c:41:4b:eb: ba:13:1b:bf:84:a0:8f:b6:b0:9b:ec:be:52:59:06: 5d:5b:74:bc:18:3a:16:77:b1:86:12:e1:ce:f9:6d: 70:09:c7:8b:c8:93:c9:93:92:38:68:da:b5:93:20: fa:74:3e:fe:c7:9f:84:9b:d1:b4:08:f9:3b:89:ce: 70:f4:a7:4c:15:dd:e1:c8:cf:77:85:96:24:3e:95: e3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4A:E0:49:52:9F:3A:75:AB:DF:38:F6:03:02:60:E5:91:67:B6:59 X509v3 Authority Key Identifier: keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3132312e35352e302e302f31382d3138203d3e203435303631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.55.0.0/18 Signature Algorithm: sha256WithRSAEncryption a4:c2:66:02:30:cc:7d:f9:84:7d:f4:f4:2c:09:ae:22:e1:63: 70:03:60:ab:30:8f:56:c7:2f:8a:ea:90:b0:ad:02:c3:3b:60: 62:0a:26:c0:ce:89:69:a5:02:01:30:d5:ae:05:7a:48:51:c3: 4e:c4:a0:9b:bb:0f:42:dc:b3:6b:6b:d7:eb:99:d9:d8:63:b8: f6:9f:ee:4a:be:8a:a0:29:3e:56:1f:8e:69:23:2d:95:1b:e1: 15:02:19:ff:f7:58:dc:eb:37:7e:b3:66:cd:87:a6:18:1c:27: e5:a9:07:2e:90:1e:ab:25:90:ae:38:cb:27:95:6d:63:2c:fe: 30:67:fb:1c:fe:6f:f7:bf:45:33:e0:01:bf:c7:ef:0e:aa:84: 5d:38:2e:bb:04:f7:9b:78:0e:b3:bc:db:d6:0e:22:84:3b:7c: 25:f5:fe:84:57:5f:42:18:29:50:9e:cc:20:9f:71:d3:ea:45: cd:f9:a1:fd:6e:c1:74:5f:02:6a:39:6c:a7:08:f6:8a:a4:9f: 90:28:08:e7:06:39:fc:12:8c:c0:cc:6b:c7:42:a7:a9:3d:7a: e6:85:dd:28:5d:9d:f6:f6:7f:5c:08:f1:3a:d6:e7:2b:cf:17: 15:f0:2b:0e:5d:cc:4a:42:ac:9d:6c:0c:21:d0:0c:85:43:0e: f0:13:11:0b -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUF0OPkZE+Efs7zNsv30McOHLv47YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3 RTlDMTcyRTAeFw0yNjA1MDkxMTUwNTRaFw0yNzA1MDgxMTU1NTRaMDMxMTAvBgNV BAMTKEFFNEFFMDQ5NTI5RjNBNzVBQkRGMzhGNjAzMDI2MEU1OTE2N0I2NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpNURosvnSQsMQcE40cywGp4/S Bd6nQyS2JDuMl+Ds8++sh44LFfgwSCfV5gbTR9vLeKBcq1l6Zll7oKc0an/q4lKt H1/lNtpDoZpAKRcXG1ZZZ8FYgGDygK8P1+mZYBIQKiuWu3Yci/1h9PCMED2hFwAy DLGDTIoaU+RF3+ov2SBbnxmWkbiRqIBI+l98xk7wx7jRHyV198GDIhM5JiFPjmkA 327llhy84pZp3RXGjEFL67oTG7+EoI+2sJvsvlJZBl1bdLwYOhZ3sYYS4c75bXAJ x4vIk8mTkjho2rWTIPp0Pv7Hn4Sb0bQI+TuJznD0p0wV3eHIz3eFliQ+leM7AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUrkrgSVKfOnWr3zj2AwJg5ZFntlkwHwYDVR0j BBgwFoAUhCHwaA6xs3VkhdD3aB94Bn6cFy4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzQ3MTg3My8wLzg0MjFGMDY4MEVCMUIzNzU2NDg1RDBGNzY4MUY3 ODA2N0U5QzE3MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3RTlDMTcyRS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NDcxODczLzAvMzEzMjMxMmUzNTM1 MmUzMDJlMzAyZjMxMzgyZDMxMzgyMDNkM2UyMDM0MzUzMDM2MzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAZ5NwAwDQYJKoZIhvcNAQELBQADggEBAKTCZgIwzH35hH309CwJriLhY3ADYKsw j1bHL4rqkLCtAsM7YGIKJsDOiWmlAgEw1a4FekhRw07EoJu7D0Lcs2tr1+uZ2dhj uPaf7kq+iqApPlYfjmkjLZUb4RUCGf/3WNzrN36zZs2HphgcJ+WpBy6QHqslkK44 yyeVbWMs/jBn+xz+b/e/RTPgAb/H7w6qhF04LrsE95t4DrO829YOIoQ7fCX1/oRX X0IYKVCezCCfcdPqRc35of1uwXRfAmo5bKcI9oqkn5AoCOcGOfwSjMDMa8dCp6k9 euaF3Shdnfb2f1wI8TrW5yvPFxXwKw5dzEpCrJ1sDCHQDIVDDvATEQs= -----END CERTIFICATE-----Generated at Wed May 13 12:25:36 2026 by rpki-client