$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e203633353637.roa File: 3131312e3232332e31322e302f32322d3232203d3e203633353637.roa (raw, json) Hash identifier: 7ow/0eNqaINGTw7w/SsPGobFIQPp639CU4qXVo8WrJY= Subject key identifier: 05:32:37:34:2A:C3:12:F6:82:48:57:C4:42:EC:27:58:BC:98:1F:FA Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 0FA2808B3AD425D0A0153B886704B061DD82756B Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e203633353637.roa Signing time: Thu 26 Mar 2026 07:44:15 +0000 ROA not before: Thu 26 Mar 2026 07:39:15 +0000 ROA not after: Thu 25 Mar 2027 07:44:15 +0000 asID: 63567 IP address blocks: 111.223.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:a2:80:8b:3a:d4:25:d0:a0:15:3b:88:67:04:b0:61:dd:82:75:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Mar 26 07:39:15 2026 GMT Not After : Mar 25 07:44:15 2027 GMT Subject: CN=053237342AC312F6824857C442EC2758BC981FFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f4:31:af:7b:99:80:cf:1d:f9:35:b5:a0:d4: e2:97:16:eb:8b:30:87:3c:09:e3:62:d7:a6:b1:89: e9:da:b7:98:e7:47:9e:e1:00:e5:0a:d5:24:b2:e2: e8:c1:f7:60:f2:89:90:99:da:41:f1:c5:16:84:08: 88:06:06:85:91:91:f5:23:e9:68:73:65:35:c4:b0: 4e:ba:d2:42:6d:61:72:55:61:08:ed:79:ea:9a:9e: c3:46:5e:01:5d:85:de:f5:8e:de:28:4e:48:c5:d3: 1b:5e:c7:9f:5c:9d:01:d9:a0:32:ff:59:3d:8c:f9: 1c:d8:30:7f:24:73:0c:57:5b:cb:1d:72:5d:9d:96: 01:ab:49:7d:4c:c2:c3:f1:c9:20:13:0a:43:c2:c6: 39:97:18:63:ee:43:ab:73:c1:b0:39:41:63:1a:30: 12:38:f2:b9:80:fb:7a:a0:14:71:f8:fd:28:cf:80: 82:18:b3:b8:eb:80:51:94:90:8a:2c:8e:07:97:5e: a1:a6:84:66:86:62:90:df:76:3c:ea:4c:f0:e6:28: ee:d6:22:4f:80:a9:f2:cb:30:f2:a4:56:e4:d1:8f: ee:04:ee:36:8b:72:65:f0:9f:6c:53:63:d6:50:80: 75:25:ee:84:85:ce:0a:bc:1b:3e:ab:65:ee:63:c8: 0f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:32:37:34:2A:C3:12:F6:82:48:57:C4:42:EC:27:58:BC:98:1F:FA X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e203633353637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 111.223.12.0/22 Signature Algorithm: sha256WithRSAEncryption a3:38:f8:2c:8d:4f:60:4a:01:ff:6a:f3:03:0d:73:03:d4:bb: 03:94:e7:01:65:d4:69:18:3c:5c:7b:d2:1a:f9:d9:56:27:ad: 84:28:5b:75:8c:49:dc:2d:b1:d5:61:2f:48:83:e2:fc:90:f0: 1d:a9:b0:36:b7:a4:e9:f1:b4:bb:0e:28:2c:16:53:2a:50:44: f0:0d:3e:b9:77:d9:d1:9f:2e:06:da:dc:cd:93:ff:80:c5:ac: d0:fd:23:1a:48:aa:ab:c5:c7:9d:99:f5:0b:99:79:ca:f2:b0: f9:1d:a2:45:21:cc:db:38:f5:0f:a8:62:9a:79:41:6a:57:cf: 2e:3a:55:c1:3a:8b:22:c6:91:5e:b5:44:d0:74:b6:91:02:e3: 9f:58:b3:fb:42:b0:d8:f3:6b:f8:9b:be:0a:41:e1:7b:e3:26: d4:c5:ad:32:b2:43:f3:18:a4:6f:bc:3e:0e:a4:f2:71:08:67: b5:03:de:d5:52:74:50:2c:f9:06:d9:f0:a0:6e:30:03:dd:ef: 28:5b:cf:a4:21:e2:d0:7f:94:de:26:bf:47:e8:5f:c8:34:f7: 11:36:95:44:72:af:e7:99:ee:9e:1b:42:2c:4e:10:05:a2:e8: 3c:52:14:68:16:6f:56:bb:32:ff:46:21:a7:0c:82:ab:10:ac: 33:af:c7:f7 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUD6KAizrUJdCgFTuIZwSwYd2CdWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjAzMjYwNzM5MTVaFw0yNzAzMjUwNzQ0MTVaMDMxMTAvBgNV BAMTKDA1MzIzNzM0MkFDMzEyRjY4MjQ4NTdDNDQyRUMyNzU4QkM5ODFGRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+9DGve5mAzx35NbWg1OKXFuuL MIc8CeNi16axienat5jnR57hAOUK1SSy4ujB92DyiZCZ2kHxxRaECIgGBoWRkfUj 6WhzZTXEsE660kJtYXJVYQjteeqansNGXgFdhd71jt4oTkjF0xtex59cnQHZoDL/ WT2M+RzYMH8kcwxXW8sdcl2dlgGrSX1MwsPxySATCkPCxjmXGGPuQ6tzwbA5QWMa MBI48rmA+3qgFHH4/SjPgIIYs7jrgFGUkIosjgeXXqGmhGaGYpDfdjzqTPDmKO7W Ik+AqfLLMPKkVuTRj+4E7jaLcmXwn2xTY9ZQgHUl7oSFzgq8Gz6rZe5jyA8rAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUBTI3NCrDEvaCSFfEQuwnWLyYH/owHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDc4NTc5NS8wLzMxMzEzMTJlMzIz MjMzMmUzMTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMzM1MzYzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAm/fDDANBgkqhkiG9w0BAQsFAAOCAQEAozj4LI1PYEoB/2rzAw1zA9S7 A5TnAWXUaRg8XHvSGvnZViethChbdYxJ3C2x1WEvSIPi/JDwHamwNrek6fG0uw4o LBZTKlBE8A0+uXfZ0Z8uBtrczZP/gMWs0P0jGkiqq8XHnZn1C5l5yvKw+R2iRSHM 2zj1D6himnlBalfPLjpVwTqLIsaRXrVE0HS2kQLjn1iz+0Kw2PNr+Ju+CkHhe+Mm 1MWtMrJD8xikb7w+DqTycQhntQPe1VJ0UCz5BtnwoG4wA93vKFvPpCHi0H+U3ia/ R+hfyDT3ETaVRHKv55nunhtCLE4QBaLoPFIUaBZvVrsy/0YhpwyCqxCsM6/H9w== -----END CERTIFICATE-----Generated at Fri Mar 27 06:58:02 2026 by rpki-client