$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3135302e3234322e39362e302f32322d3232203d3e20313333373734.roa File: 3135302e3234322e39362e302f32322d3232203d3e20313333373734.roa (raw, json) Hash identifier: E4lAz1S/muh0tSxxpwW01U7VqwUZl+TwwxwZTCkuE8Y= Subject key identifier: B2:BC:37:5A:D9:58:2F:93:BB:D8:16:6A:B5:08:AA:1F:81:CA:B4:61 Certificate issuer: /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Certificate serial: 0D4FF2D1676CEB26BB9FB123FAC6CE9E71736316 Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3135302e3234322e39362e302f32322d3232203d3e20313333373734.roa Signing time: Mon 11 May 2026 02:49:04 +0000 ROA not before: Mon 11 May 2026 02:44:04 +0000 ROA not after: Mon 10 May 2027 02:49:04 +0000 asID: 133774 IP address blocks: 150.242.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:4f:f2:d1:67:6c:eb:26:bb:9f:b1:23:fa:c6:ce:9e:71:73:63:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Validity Not Before: May 11 02:44:04 2026 GMT Not After : May 10 02:49:04 2027 GMT Subject: CN=B2BC375AD9582F93BBD8166AB508AA1F81CAB461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dd:c6:5f:71:97:f2:a5:c5:2d:e9:a5:fa:23: 64:ef:39:46:27:87:d1:c2:14:41:ee:d8:8b:5b:bd: eb:af:24:5d:ed:e8:53:16:cb:db:fa:49:24:cc:2d: c2:41:cc:90:8b:5f:6a:88:d6:5b:2c:6c:c9:57:b2: b3:cc:50:2b:89:73:85:27:ec:70:2a:73:50:65:32: a2:ba:62:19:f0:11:3d:69:75:65:64:99:a5:d7:3f: 2c:9c:69:ef:81:80:a4:50:32:74:7c:58:a8:45:85: 43:74:3d:5f:39:97:a9:bd:a1:ea:59:8c:c6:de:0d: 7f:1f:1b:b0:c3:66:2d:c2:1e:5f:72:3a:f2:5f:ec: d5:2f:92:81:5f:6c:04:ea:b1:50:80:42:49:e1:bf: 7d:2d:96:ad:66:9f:72:a9:a8:6e:18:91:33:56:78: d4:af:a1:c2:18:83:e2:13:79:84:61:c7:e1:4f:e3: 4b:08:f1:2b:66:de:ca:17:ad:54:a7:03:be:1b:f4: d9:5c:4e:ad:4f:7a:db:e2:bd:85:36:22:12:e0:6f: b6:ad:ce:91:35:cc:e9:8d:0a:55:5a:ef:2b:ad:3c: 1c:50:0d:50:d7:c9:67:36:45:9e:f9:3f:88:7d:23: 9b:1a:47:96:40:b6:0f:0b:fb:d5:18:d6:d0:14:5d: 79:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:BC:37:5A:D9:58:2F:93:BB:D8:16:6A:B5:08:AA:1F:81:CA:B4:61 X509v3 Authority Key Identifier: keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3135302e3234322e39362e302f32322d3232203d3e20313333373734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.242.96.0/22 Signature Algorithm: sha256WithRSAEncryption 91:5d:9a:b1:ab:92:12:1e:b2:8b:8b:39:23:33:ac:96:91:6f: d6:37:4e:2c:23:93:78:04:53:d1:62:6b:2a:75:f5:1b:12:3b: 28:5d:e5:12:b2:22:e2:2c:f0:ef:89:56:0c:2c:2f:dd:21:10: 9a:bf:b6:c9:7d:83:2c:42:85:07:74:1e:9e:1e:26:0a:66:e5: 7d:fa:39:f4:dd:06:cc:ce:a9:c3:b7:ba:1d:0d:f9:8b:ee:f3: 1f:24:74:cb:51:a2:61:12:57:a6:ba:55:3b:58:e2:a5:dc:b4: 56:45:7b:94:e2:13:97:1d:06:ed:65:d2:79:ca:ed:a4:da:91: 32:1f:0a:32:ef:44:fc:a0:f2:c2:61:b9:73:9c:a1:70:aa:30: c3:14:cf:db:28:19:9d:b6:4b:37:39:5b:15:4e:d3:67:63:0e: 94:21:c9:72:47:a1:9a:30:2d:03:62:50:45:f2:fc:32:17:bd: bd:36:35:14:11:cf:54:ed:22:37:ea:f3:00:51:06:e0:06:85: db:b0:b2:d2:9a:8f:78:2e:57:a1:15:0a:05:c7:c8:40:61:c9: d5:28:ab:0b:9b:b3:b6:61:7f:9a:89:20:31:d1:c9:aa:8c:b7: cc:44:bd:67:5a:63:69:f7:be:ba:da:eb:f5:78:69:1c:18:54: 52:cc:bf:b1 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUDU/y0Wds6ya7n7Ej+sbOnnFzYxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlE NzgxMDFENDAeFw0yNjA1MTEwMjQ0MDRaFw0yNzA1MTAwMjQ5MDRaMDMxMTAvBgNV BAMTKEIyQkMzNzVBRDk1ODJGOTNCQkQ4MTY2QUI1MDhBQTFGODFDQUI0NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD3cZfcZfypcUt6aX6I2TvOUYn h9HCFEHu2ItbveuvJF3t6FMWy9v6SSTMLcJBzJCLX2qI1lssbMlXsrPMUCuJc4Un 7HAqc1BlMqK6YhnwET1pdWVkmaXXPyycae+BgKRQMnR8WKhFhUN0PV85l6m9oepZ jMbeDX8fG7DDZi3CHl9yOvJf7NUvkoFfbATqsVCAQknhv30tlq1mn3KpqG4YkTNW eNSvocIYg+ITeYRhx+FP40sI8Stm3soXrVSnA74b9NlcTq1PetvivYU2IhLgb7at zpE1zOmNClVa7yutPBxQDVDXyWc2RZ75P4h9I5saR5ZAtg8L+9UY1tAUXXnPAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUsrw3WtlYL5O72BZqtQiqH4HKtGEwHwYDVR0j BBgwFoAU7J4chAyHBedUwuP/MqRPudeBAdQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDQ4NzgwOS8wL0VDOUUxQzg0MEM4NzA1RTc1NEMyRTNGRjMyQTQ0 RkI5RDc4MTAxRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlENzgxMDFENC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ0ODc4MDkvMC8zMTM1MzAyZTMy MzQzMjJlMzkzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzMzM3MzczNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEApbyYDANBgkqhkiG9w0BAQsFAAOCAQEAkV2asauSEh6yi4s5IzOs lpFv1jdOLCOTeART0WJrKnX1GxI7KF3lErIi4izw74lWDCwv3SEQmr+2yX2DLEKF B3Qenh4mCmblffo59N0GzM6pw7e6HQ35i+7zHyR0y1GiYRJXprpVO1jipdy0VkV7 lOITlx0G7WXSecrtpNqRMh8KMu9E/KDywmG5c5yhcKowwxTP2ygZnbZLNzlbFU7T Z2MOlCHJckehmjAtA2JQRfL8Mhe9vTY1FBHPVO0iN+rzAFEG4AaF27Cy0pqPeC5X oRUKBcfIQGHJ1SirC5uztmF/mokgMdHJqoy3zES9Z1pjafe+utrr9XhpHBhUUsy/ sQ== -----END CERTIFICATE-----Generated at Wed May 13 13:45:38 2026 by rpki-client