$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e203233363530.roa File: 3131312e3232332e31322e302f32322d3232203d3e203233363530.roa (raw, json) Hash identifier: 3nztTFR0jh/clEh7Ub2uD1K6HhugjlTVK3A3e/ke3Ec= Subject key identifier: 97:B3:1E:56:CD:17:35:D8:46:A2:E5:AB:FA:F6:2F:C5:4E:D7:E4:A3 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 5AB9EBC66E234DE2FC06BC0ABA765804CF20126C Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e203233363530.roa Signing time: Mon 28 Sep 2026 01:00:39 +0000 ROA not before: Mon 28 Sep 2026 00:55:39 +0000 ROA not after: Mon 27 Sep 2027 01:00:39 +0000 asID: 23650 IP address blocks: 111.223.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b9:eb:c6:6e:23:4d:e2:fc:06:bc:0a:ba:76:58:04:cf:20:12:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:39 2026 GMT Not After : Sep 27 01:00:39 2027 GMT Subject: CN=97B31E56CD1735D846A2E5ABFAF62FC54ED7E4A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3e:f8:ed:b0:fa:40:7e:fd:57:fa:9c:36:2b: d9:9b:3c:6b:a9:fb:93:c4:89:3b:96:8e:09:ea:30: 7b:69:32:93:21:db:47:56:cf:48:f9:7d:79:0e:5b: ce:fb:a2:07:e5:ad:71:e9:bb:5a:9f:a0:f1:fe:cd: 2a:7b:03:6c:c4:50:86:74:57:6b:65:7f:dd:a0:d6: 41:77:d8:a4:13:6e:b4:f6:ec:0e:81:1b:b1:94:5e: e3:45:26:60:8a:97:4d:02:76:92:cc:29:37:f7:dc: 20:e0:c5:d7:e7:85:bc:c6:2e:fc:36:84:44:c5:4b: a0:b1:20:fd:42:61:b2:a5:d3:5b:6e:2a:60:99:3f: cf:aa:d1:bf:36:f9:47:ea:9e:6e:27:3c:50:1c:8c: 3a:fd:f5:1d:9e:5d:71:6b:ba:b1:df:0f:ed:fc:26: 35:cd:54:0c:73:04:9d:9c:b0:43:79:32:73:47:09: 6e:91:5c:e1:4e:92:f2:7c:5f:0e:fb:00:c3:b4:b5: 38:89:6e:35:fa:07:34:6c:9a:82:25:d8:73:c0:94: 6d:64:72:b9:8e:47:ad:8a:7f:5b:3d:a9:32:df:a8: 35:e7:93:5b:34:29:00:63:19:c0:98:a4:4e:36:3b: ff:59:c7:1e:b5:a7:1e:8b:1a:09:07:19:40:da:82: f3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B3:1E:56:CD:17:35:D8:46:A2:E5:AB:FA:F6:2F:C5:4E:D7:E4:A3 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e203233363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 111.223.12.0/22 Signature Algorithm: sha256WithRSAEncryption 51:4d:27:d4:f2:dc:18:af:1f:76:46:04:06:67:68:21:e3:08: 63:a9:de:98:ac:02:a0:c3:ed:fd:c3:8f:aa:0f:04:9d:8b:4d: b1:76:bd:56:25:f2:fc:8d:bd:db:b1:65:e4:08:bc:14:37:24: dd:bf:34:2f:6d:ef:5f:65:06:da:e3:f3:4f:ac:c9:f9:4e:d2: 00:42:b2:92:fb:78:98:0d:b4:b7:e1:b5:c8:bf:15:8f:8f:67: 9c:b7:2f:c4:a0:a2:9a:5e:f1:01:8d:22:af:f4:f3:ce:14:de: bf:a5:e2:a3:c6:b6:09:ec:1a:bf:b3:07:d7:71:bf:b1:c5:ab: 98:30:4d:0b:51:01:c3:2a:dd:a8:42:9c:89:93:91:32:79:0c: 5f:7b:b5:6e:53:71:61:1f:5d:31:79:f9:e0:29:9d:f4:9e:d1: 26:ac:04:b7:71:6c:2b:d6:c9:d0:82:46:8d:4a:11:b3:c9:9f: e9:c2:ab:ca:dd:bf:0e:37:a6:6f:18:20:9e:5e:04:d4:a7:bb: 52:dd:d4:d9:d5:f7:d6:41:a0:4a:00:71:d7:a8:37:aa:b6:90: ae:8a:c2:91:88:d0:bc:b0:c8:7c:c9:01:9c:c5:e9:8b:5d:93: e8:99:ef:5f:4b:ec:eb:0e:b6:86:2c:94:b8:21:c6:cc:a0:98: d8:f6:84:30 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUWrnrxm4jTeL8BrwKunZYBM8gEmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzlaFw0yNzA5MjcwMTAwMzlaMDMxMTAvBgNV BAMTKDk3QjMxRTU2Q0QxNzM1RDg0NkEyRTVBQkZBRjYyRkM1NEVEN0U0QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1PvjtsPpAfv1X+pw2K9mbPGup +5PEiTuWjgnqMHtpMpMh20dWz0j5fXkOW877ogflrXHpu1qfoPH+zSp7A2zEUIZ0 V2tlf92g1kF32KQTbrT27A6BG7GUXuNFJmCKl00CdpLMKTf33CDgxdfnhbzGLvw2 hETFS6CxIP1CYbKl01tuKmCZP8+q0b82+Ufqnm4nPFAcjDr99R2eXXFrurHfD+38 JjXNVAxzBJ2csEN5MnNHCW6RXOFOkvJ8Xw77AMO0tTiJbjX6BzRsmoIl2HPAlG1k crmOR62Kf1s9qTLfqDXnk1s0KQBjGcCYpE42O/9Zxx61px6LGgkHGUDagvMFAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUl7MeVs0XNdhGouWr+vYvxU7X5KMwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDc4NTc5NS8wLzMxMzEzMTJlMzIz MjMzMmUzMTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzMzM2MzUzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAm/fDDANBgkqhkiG9w0BAQsFAAOCAQEAUU0n1PLcGK8fdkYEBmdoIeMI Y6nemKwCoMPt/cOPqg8EnYtNsXa9ViXy/I2927Fl5Ai8FDck3b80L23vX2UG2uPz T6zJ+U7SAEKykvt4mA20t+G1yL8Vj49nnLcvxKCiml7xAY0ir/TzzhTev6Xio8a2 Cewav7MH13G/scWrmDBNC1EBwyrdqEKciZORMnkMX3u1blNxYR9dMXn54Cmd9J7R JqwEt3FsK9bJ0IJGjUoRs8mf6cKryt2/Djembxggnl4E1Ke7Ut3U2dX31kGgSgBx 16g3qraQrorCkYjQvLDIfMkBnMXpi12T6JnvX0vs6w62hiyUuCHGzKCY2PaEMA== -----END CERTIFICATE-----Generated at Fri Oct 9 21:38:52 2026 by rpki-client