$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230392e302f32342d3332203d3e20313432313332.roa File: 3131342e32382e3230392e302f32342d3332203d3e20313432313332.roa (raw, json) Hash identifier: ULZQMist3tBKjcZ6aVFslmEOEuXR2DsCL1T+Zt/oKfI= Subject key identifier: 17:21:EB:A6:D1:7E:B5:61:68:DD:7C:A7:78:43:BC:A4:1C:E8:2E:0C Certificate issuer: /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13 Certificate serial: 500CA4B0378D4D1935AC4E3E2DDBD7B41FE08C34 Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230392e302f32342d3332203d3e20313432313332.roa Signing time: Wed 13 May 2026 03:03:32 +0000 ROA not before: Wed 13 May 2026 02:58:32 +0000 ROA not after: Wed 12 May 2027 03:03:32 +0000 asID: 142132 IP address blocks: 114.28.209.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:0c:a4:b0:37:8d:4d:19:35:ac:4e:3e:2d:db:d7:b4:1f:e0:8c:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13 Validity Not Before: May 13 02:58:32 2026 GMT Not After : May 12 03:03:32 2027 GMT Subject: CN=1721EBA6D17EB56168DD7CA77843BCA41CE82E0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:29:e3:62:98:02:3c:18:6a:00:dc:7a:2c:c6: ea:63:75:9d:3e:75:80:14:67:7c:00:58:20:9d:0b: b6:7e:82:f5:77:1d:fa:59:55:d4:81:a3:36:7b:2e: bd:1a:87:22:cf:0f:bf:9e:ff:a1:83:ad:7c:50:c6: 3b:d3:cb:ed:21:72:01:ab:f3:c1:e5:39:c9:75:60: e8:1c:ad:c9:dd:84:21:a0:c0:76:71:44:72:1a:39: 19:c1:17:0a:59:f5:68:0d:49:53:40:bb:33:47:78: 0c:3f:a1:7c:45:ef:e8:9d:75:8e:db:f1:e8:c1:f1: b2:ee:fb:d0:48:2f:f2:fc:fe:5a:34:b7:7d:be:6e: 80:b0:33:af:98:75:fe:bd:60:88:e6:a0:e8:73:67: bf:c5:63:a5:1d:6a:d9:7e:d3:ac:2b:43:05:71:b8: fa:12:13:29:21:27:f6:ad:4a:7f:7a:dd:8c:ce:15: b3:15:78:4c:23:d4:17:ae:4a:dd:66:33:34:d0:ea: bd:d1:ec:b3:5f:4b:0e:3e:30:98:7d:9a:d3:f7:68: da:8b:75:a3:e5:2d:91:89:57:42:70:a0:66:f0:1f: 13:78:6d:94:b3:f4:71:8b:e9:c3:6b:97:45:f8:00: 34:5c:67:c9:79:b1:21:8f:e2:76:d9:53:1d:75:4f: ad:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:21:EB:A6:D1:7E:B5:61:68:DD:7C:A7:78:43:BC:A4:1C:E8:2E:0C X509v3 Authority Key Identifier: keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230392e302f32342d3332203d3e20313432313332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.28.209.0/24 Signature Algorithm: sha256WithRSAEncryption c6:88:28:49:8b:05:e3:b9:5e:4a:46:92:b4:5a:f7:2c:f6:ce: e1:46:3f:7e:16:d5:e1:29:a5:3f:c4:d3:95:c1:84:1c:3d:48: 49:02:6d:99:46:9c:a7:94:6f:05:e3:ec:29:bf:db:a7:25:f0: a8:a2:cc:8f:2d:95:ab:48:98:22:45:36:03:e4:72:f4:22:2f: 12:12:7d:82:d8:da:6d:a5:b5:09:7b:63:ce:45:ef:e4:e0:e0: 4e:08:55:e0:6f:65:7a:a7:3b:13:c0:e8:66:27:46:34:11:99: a1:a6:5c:92:41:b6:49:3a:28:fa:6f:a3:0d:d7:25:4b:b1:cd: cb:cf:f9:66:61:e4:74:cf:22:3c:9a:d2:40:4e:24:f5:ff:50: 43:b4:51:f2:e9:bd:46:10:8b:c1:c7:fa:90:b5:94:ac:97:2d: d2:cc:0a:f6:6d:af:4c:e8:2b:c0:6f:16:3b:31:cf:d0:c3:f6: cb:f3:b7:ab:4e:b8:04:46:ed:b9:4a:94:f9:df:d9:a3:db:eb: 41:ac:f1:1f:a7:e9:56:7a:8f:da:4e:96:fe:4b:a7:c0:fd:5f: d1:34:9e:c9:25:10:0d:d3:cf:43:af:d9:e8:06:13:e6:44:66: 89:d1:bd:e9:54:54:71:d3:6e:0a:b8:46:46:dc:51:45:de:fd: e9:a2:0b:63 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUUAyksDeNTRk1rE4+LdvXtB/gjDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5 OUVBQkQxMzAeFw0yNjA1MTMwMjU4MzJaFw0yNzA1MTIwMzAzMzJaMDMxMTAvBgNV BAMTKDE3MjFFQkE2RDE3RUI1NjE2OEREN0NBNzc4NDNCQ0E0MUNFODJFMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSKeNimAI8GGoA3HosxupjdZ0+ dYAUZ3wAWCCdC7Z+gvV3HfpZVdSBozZ7Lr0ahyLPD7+e/6GDrXxQxjvTy+0hcgGr 88HlOcl1YOgcrcndhCGgwHZxRHIaORnBFwpZ9WgNSVNAuzNHeAw/oXxF7+iddY7b 8ejB8bLu+9BIL/L8/lo0t32+boCwM6+Ydf69YIjmoOhzZ7/FY6Udatl+06wrQwVx uPoSEykhJ/atSn963YzOFbMVeEwj1BeuSt1mMzTQ6r3R7LNfSw4+MJh9mtP3aNqL daPlLZGJV0JwoGbwHxN4bZSz9HGL6cNrl0X4ADRcZ8l5sSGP4nbZUx11T63TAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUFyHrptF+tWFo3XyneEO8pBzoLgwwHwYDVR0j BBgwFoAU72ohkcRV2UMu+Hr4JnXV9JnqvRMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDQ1ODExNS8wL0VGNkEyMTkxQzQ1NUQ5NDMyRUY4N0FGODI2NzVE NUY0OTlFQUJEMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5OUVBQkQxMy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ0NTgxMTUvMC8zMTMxMzQyZTMy MzgyZTMyMzAzOTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzQzMjMxMzMzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAHIc0TANBgkqhkiG9w0BAQsFAAOCAQEAxogoSYsF47leSkaStFr3 LPbO4UY/fhbV4SmlP8TTlcGEHD1ISQJtmUacp5RvBePsKb/bpyXwqKLMjy2Vq0iY IkU2A+Ry9CIvEhJ9gtjabaW1CXtjzkXv5ODgTghV4G9leqc7E8DoZidGNBGZoaZc kkG2SToo+m+jDdclS7HNy8/5ZmHkdM8iPJrSQE4k9f9QQ7RR8um9RhCLwcf6kLWU rJct0swK9m2vTOgrwG8WOzHP0MP2y/O3q064BEbtuUqU+d/Zo9vrQazxH6fpVnqP 2k6W/kunwP1f0TSeySUQDdPPQ6/Z6AYT5kRmidG96VRUcdNuCrhGRtxRRd796aIL Yw== -----END CERTIFICATE-----Generated at Wed May 13 15:57:19 2026 by rpki-client