$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230382e302f32342d3332203d3e20313334373839.roa File: 3131342e32382e3230382e302f32342d3332203d3e20313334373839.roa (raw, json) Hash identifier: /CpHXyLXFKlwp45fsVOR8/sN9c3YlKbckpDv3R+SfkA= Subject key identifier: 29:01:33:D6:C0:C7:6C:FB:B7:94:6F:38:94:8A:9F:6C:2F:42:18:27 Certificate issuer: /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13 Certificate serial: 7D410068CB8BF42A81C3D4C035CB1E0ABDDE9791 Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230382e302f32342d3332203d3e20313334373839.roa Signing time: Mon 11 May 2026 06:30:31 +0000 ROA not before: Mon 11 May 2026 06:25:31 +0000 ROA not after: Mon 10 May 2027 06:30:31 +0000 asID: 134789 IP address blocks: 114.28.208.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:41:00:68:cb:8b:f4:2a:81:c3:d4:c0:35:cb:1e:0a:bd:de:97:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13 Validity Not Before: May 11 06:25:31 2026 GMT Not After : May 10 06:30:31 2027 GMT Subject: CN=290133D6C0C76CFBB7946F38948A9F6C2F421827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9d:ad:25:ea:d3:16:41:bc:31:3f:7f:98:a6: 13:2a:80:cb:f9:24:b3:4a:73:4c:ec:5a:ee:6f:d0: 48:de:d0:be:26:dd:06:53:20:b7:1d:16:0f:f0:09: 86:fb:06:09:09:fc:93:33:b9:29:85:b7:79:9b:96: c1:87:11:43:9c:b6:14:a4:de:d0:2f:42:ee:5d:73: 40:fa:f8:48:59:01:01:0b:45:2c:bb:35:fd:43:e2: 4f:ea:61:8c:33:1f:e8:b6:b8:63:66:3e:d9:50:e6: a1:42:5b:6d:f5:f1:70:a4:6f:be:58:eb:7a:f3:3e: 78:bb:33:a8:a5:e3:4e:75:84:a4:39:9a:87:32:8e: f4:98:dc:98:f3:7d:36:f7:98:07:48:fd:4c:ce:73: c0:aa:d0:bb:b8:30:1b:4d:3c:fc:25:00:01:5b:12: 5b:30:37:c0:37:0c:3d:25:da:2f:2a:5e:2e:40:a6: e2:55:2e:37:a3:fa:7f:78:1d:7a:29:a6:e6:a4:5f: 7c:6c:94:5a:7a:35:42:5a:5f:92:b0:96:7e:41:26: fc:f9:5b:6f:37:51:fe:50:4e:4d:ea:76:55:7f:57: a0:b2:e9:d5:57:88:83:98:2e:20:52:d0:82:61:ce: 96:ae:74:b6:ed:8e:5f:9e:ee:1c:f6:1f:4b:05:c8: b3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:01:33:D6:C0:C7:6C:FB:B7:94:6F:38:94:8A:9F:6C:2F:42:18:27 X509v3 Authority Key Identifier: keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230382e302f32342d3332203d3e20313334373839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.28.208.0/24 Signature Algorithm: sha256WithRSAEncryption 32:96:34:a1:de:0f:ec:e6:a2:26:4e:b0:d9:d0:b4:cd:c4:1d: 13:6c:87:81:d1:79:9a:ef:ba:29:fb:b2:52:7b:9c:f1:bd:2f: f9:d7:ec:e4:ad:e8:bd:ed:a1:74:52:39:f9:53:a8:4a:f2:6f: 46:8a:35:50:68:f0:42:32:b1:fe:f5:5d:50:b1:8c:2f:30:d9: 62:39:1e:8b:cb:10:35:a2:96:89:58:6b:f9:29:ed:75:c4:95: 11:10:a2:56:fd:3a:0c:6d:5b:48:7c:2d:47:d3:29:79:ba:fe: 35:cc:08:cd:e9:06:06:83:84:29:ee:17:3d:cd:ca:3b:7b:c6: 2f:90:e4:03:ac:c6:15:ac:dd:57:d3:2a:11:80:3f:12:64:a2: 33:e4:2e:35:14:80:ae:79:8d:df:87:52:5e:26:46:30:a4:0e: 14:91:f4:35:6b:64:1e:52:93:b8:f6:ce:ce:29:5f:04:f6:d2: f4:56:81:e9:ec:9c:ec:5b:97:53:dd:fb:7c:74:1f:52:2e:0b: 78:ba:9c:ad:4b:01:df:4b:85:a8:36:97:55:82:ef:6a:e8:46: 14:6c:c8:4d:84:cf:9d:b8:5d:f5:86:2b:df:af:30:13:74:eb: 6b:cb:e2:20:f2:fa:d7:df:56:a6:3b:18:e2:ac:77:58:4b:2b: ee:f1:60:b4 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUfUEAaMuL9CqBw9TANcseCr3el5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5 OUVBQkQxMzAeFw0yNjA1MTEwNjI1MzFaFw0yNzA1MTAwNjMwMzFaMDMxMTAvBgNV BAMTKDI5MDEzM0Q2QzBDNzZDRkJCNzk0NkYzODk0OEE5RjZDMkY0MjE4MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXna0l6tMWQbwxP3+YphMqgMv5 JLNKc0zsWu5v0Eje0L4m3QZTILcdFg/wCYb7BgkJ/JMzuSmFt3mblsGHEUOcthSk 3tAvQu5dc0D6+EhZAQELRSy7Nf1D4k/qYYwzH+i2uGNmPtlQ5qFCW2318XCkb75Y 63rzPni7M6il4051hKQ5mocyjvSY3JjzfTb3mAdI/UzOc8Cq0Lu4MBtNPPwlAAFb ElswN8A3DD0l2i8qXi5ApuJVLjej+n94HXoppuakX3xslFp6NUJaX5Kwln5BJvz5 W283Uf5QTk3qdlV/V6Cy6dVXiIOYLiBS0IJhzpaudLbtjl+e7hz2H0sFyLPhAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUKQEz1sDHbPu3lG84lIqfbC9CGCcwHwYDVR0j BBgwFoAU72ohkcRV2UMu+Hr4JnXV9JnqvRMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDQ1ODExNS8wL0VGNkEyMTkxQzQ1NUQ5NDMyRUY4N0FGODI2NzVE NUY0OTlFQUJEMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5OUVBQkQxMy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ0NTgxMTUvMC8zMTMxMzQyZTMy MzgyZTMyMzAzODJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzMzNDM3MzgzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAHIc0DANBgkqhkiG9w0BAQsFAAOCAQEAMpY0od4P7OaiJk6w2dC0 zcQdE2yHgdF5mu+6KfuyUnuc8b0v+dfs5K3ove2hdFI5+VOoSvJvRoo1UGjwQjKx /vVdULGMLzDZYjkei8sQNaKWiVhr+SntdcSVERCiVv06DG1bSHwtR9Mpebr+NcwI zekGBoOEKe4XPc3KO3vGL5DkA6zGFazdV9MqEYA/EmSiM+QuNRSArnmN34dSXiZG MKQOFJH0NWtkHlKTuPbOzilfBPbS9FaB6eyc7FuXU937fHQfUi4LeLqcrUsB30uF qDaXVYLvauhGFGzITYTPnbhd9YYr368wE3Tra8viIPL6199WpjsY4qx3WEsr7vFg tA== -----END CERTIFICATE-----Generated at Wed May 13 13:20:41 2026 by rpki-client