$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3130342e302f32322d3232203d3e203538383534.roa File: 3231312e3135352e3130342e302f32322d3232203d3e203538383534.roa (raw, json) Hash identifier: ZvvpEEOuSCVRSI9C2BZN47oe6i/TIVMXv0WiVVEFrdA= Subject key identifier: 2C:84:B6:B9:CB:31:57:F6:9B:3D:BC:C0:12:59:B9:A3:84:5A:2A:08 Certificate issuer: /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Certificate serial: 37B377631B255473E65B15387ADA4B6EEF774B00 Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3130342e302f32322d3232203d3e203538383534.roa Signing time: Tue 12 May 2026 08:28:28 +0000 ROA not before: Tue 12 May 2026 08:23:28 +0000 ROA not after: Tue 11 May 2027 08:28:28 +0000 asID: 58854 IP address blocks: 211.155.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b3:77:63:1b:25:54:73:e6:5b:15:38:7a:da:4b:6e:ef:77:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Validity Not Before: May 12 08:23:28 2026 GMT Not After : May 11 08:28:28 2027 GMT Subject: CN=2C84B6B9CB3157F69B3DBCC01259B9A3845A2A08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6d:16:8d:53:42:93:0a:5c:91:61:57:63:d7: ce:c6:ad:c7:45:d6:80:ef:9f:a1:17:7b:72:bc:89: a7:2a:32:c2:cb:03:48:cf:95:95:cd:53:71:57:c4: ef:f4:bf:b6:c6:db:46:a8:c8:4f:8e:bd:c4:1f:08: 0f:ce:77:02:32:11:1e:20:8d:fc:ed:2b:c9:2e:30: 21:e1:31:95:f3:72:7f:1f:64:f1:b0:80:ae:1f:a9: 84:16:42:61:48:08:f6:d0:cc:c6:03:bf:f6:5d:16: 41:ba:dd:5f:03:d0:dc:b7:90:7a:96:20:1e:fc:76: 72:01:6a:de:7d:12:65:6d:14:ac:31:56:6f:69:13: 31:40:36:1c:f5:1b:fc:b1:18:93:d7:c1:56:fe:98: c3:54:14:8b:b1:82:23:81:f6:ea:e2:2d:ac:47:5b: e9:9e:6c:10:93:55:6c:16:50:3c:b9:17:65:50:02: 55:e5:e4:47:61:24:1d:db:a3:50:a0:2d:ea:74:73: ba:32:13:b5:0f:46:a7:c9:b7:2a:64:37:4c:59:dc: 05:c9:69:f3:3a:40:55:da:1c:13:fe:98:f6:3e:f7: da:6c:45:86:c1:ee:f8:9d:6d:f2:2b:30:6d:5c:c6: 06:d4:e6:20:66:ae:9a:75:26:fe:86:bf:07:f8:2e: 41:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:84:B6:B9:CB:31:57:F6:9B:3D:BC:C0:12:59:B9:A3:84:5A:2A:08 X509v3 Authority Key Identifier: keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3130342e302f32322d3232203d3e203538383534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.155.104.0/22 Signature Algorithm: sha256WithRSAEncryption 72:fd:b3:01:24:58:b0:eb:0b:08:42:04:09:dc:eb:ff:57:c5: aa:84:c2:e1:f2:5f:e6:0b:d2:f7:f7:8d:7b:57:e4:da:a2:bb: 6d:ea:bb:b0:78:39:54:aa:dc:c0:42:25:1f:8f:2c:9b:23:4a: 0d:dc:7d:53:fa:e8:2a:4c:96:af:3a:53:e7:33:1c:f4:ed:d1: 09:50:5b:10:b4:59:fb:d0:59:ee:c5:01:c4:46:e0:fc:b9:da: 33:f4:40:9c:03:e4:da:de:2e:5c:5e:fe:5e:96:49:77:8a:18: 0b:4f:c4:39:0d:62:b6:d9:44:11:ba:f2:1f:70:45:18:3d:c2: 1e:08:e0:83:4d:4d:b8:c0:e7:82:f0:1e:07:e5:4a:79:e6:b8: ca:38:b8:80:74:6c:5c:3f:b1:f4:25:0d:cd:48:b9:55:82:48: db:ca:83:df:cc:b9:ea:31:1d:03:41:5d:ed:d9:6f:b9:c4:2f: 35:81:0a:76:2c:26:50:81:20:e6:b2:99:9f:14:e4:7e:23:22: 67:70:34:e2:b4:90:a9:1c:4c:e9:b2:fc:85:fe:fc:d1:09:f8: 9d:6c:92:8c:39:04:03:2f:8a:b7:a3:b2:0f:6b:c8:7d:14:ec: 69:98:1c:6a:1a:f7:70:d0:f0:3d:6c:16:8f:8b:e5:70:74:ee: 08:13:d9:4d -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUN7N3YxslVHPmWxU4etpLbu93SwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlE NzgxMDFENDAeFw0yNjA1MTIwODIzMjhaFw0yNzA1MTEwODI4MjhaMDMxMTAvBgNV BAMTKDJDODRCNkI5Q0IzMTU3RjY5QjNEQkNDMDEyNTlCOUEzODQ1QTJBMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdbRaNU0KTClyRYVdj187GrcdF 1oDvn6EXe3K8iacqMsLLA0jPlZXNU3FXxO/0v7bG20aoyE+OvcQfCA/OdwIyER4g jfztK8kuMCHhMZXzcn8fZPGwgK4fqYQWQmFICPbQzMYDv/ZdFkG63V8D0Ny3kHqW IB78dnIBat59EmVtFKwxVm9pEzFANhz1G/yxGJPXwVb+mMNUFIuxgiOB9uriLaxH W+mebBCTVWwWUDy5F2VQAlXl5EdhJB3bo1CgLep0c7oyE7UPRqfJtypkN0xZ3AXJ afM6QFXaHBP+mPY+99psRYbB7vidbfIrMG1cxgbU5iBmrpp1Jv6Gvwf4LkHzAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQULIS2ucsxV/abPbzAElm5o4RaKggwHwYDVR0j BBgwFoAU7J4chAyHBedUwuP/MqRPudeBAdQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDQ4NzgwOS8wL0VDOUUxQzg0MEM4NzA1RTc1NEMyRTNGRjMyQTQ0 RkI5RDc4MTAxRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlENzgxMDFENC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ0ODc4MDkvMC8zMjMxMzEyZTMx MzUzNTJlMzEzMDM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzODM4MzUzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAtObaDANBgkqhkiG9w0BAQsFAAOCAQEAcv2zASRYsOsLCEIECdzr /1fFqoTC4fJf5gvS9/eNe1fk2qK7beq7sHg5VKrcwEIlH48smyNKDdx9U/roKkyW rzpT5zMc9O3RCVBbELRZ+9BZ7sUBxEbg/LnaM/RAnAPk2t4uXF7+XpZJd4oYC0/E OQ1ittlEEbryH3BFGD3CHgjgg01NuMDngvAeB+VKeea4yji4gHRsXD+x9CUNzUi5 VYJI28qD38y56jEdA0Fd7dlvucQvNYEKdiwmUIEg5rKZnxTkfiMiZ3A04rSQqRxM 6bL8hf780Qn4nWySjDkEAy+Kt6OyD2vIfRTsaZgcahr3cNDwPWwWj4vlcHTuCBPZ TQ== -----END CERTIFICATE-----Generated at Wed May 13 20:17:14 2026 by rpki-client