$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3131322e302f32322d3232203d3e20313333373734.roa File: 3231312e3135352e3131322e302f32322d3232203d3e20313333373734.roa (raw, json) Hash identifier: DdMXKf2YuUywOCcCTI+DqM/FwcP9SDtTMYZyLt6wl/w= Subject key identifier: 56:AC:B3:7B:2B:76:42:A7:68:01:2E:62:71:64:58:9D:68:87:C3:D3 Certificate issuer: /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Certificate serial: 0DDB02EB29309922F194FF383DA623B66A3E8A95 Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3131322e302f32322d3232203d3e20313333373734.roa Signing time: Mon 11 May 2026 02:49:04 +0000 ROA not before: Mon 11 May 2026 02:44:04 +0000 ROA not after: Mon 10 May 2027 02:49:04 +0000 asID: 133774 IP address blocks: 211.155.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:db:02:eb:29:30:99:22:f1:94:ff:38:3d:a6:23:b6:6a:3e:8a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Validity Not Before: May 11 02:44:04 2026 GMT Not After : May 10 02:49:04 2027 GMT Subject: CN=56ACB37B2B7642A768012E627164589D6887C3D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9f:9f:1e:ca:04:db:68:92:f1:70:4e:d4:4d: f3:0d:8c:9a:27:3e:2d:63:f9:1e:c9:45:33:0a:67: be:df:9a:ba:10:ec:94:d0:5e:86:3f:c2:3c:6a:c1: 3b:fa:53:e2:a8:b8:43:6a:21:03:4d:59:46:98:d8: 81:b0:b8:3b:c5:f6:10:6e:19:2c:48:af:0e:89:2d: 04:5d:4c:9d:e1:62:58:c2:e9:36:2d:85:cc:d0:4b: 65:42:30:3b:f2:50:37:e8:30:50:3f:3c:cc:22:0a: d8:35:00:33:d8:cf:3f:ed:fb:8d:42:4c:2b:bd:16: 7c:4f:06:55:37:0c:77:83:48:7c:b8:9a:e1:70:28: 6c:96:0d:81:1c:fb:b8:a2:94:9c:d8:60:9e:93:5c: 82:50:7e:59:ee:bd:83:a9:1d:07:08:a2:8e:0a:f1: 6f:c0:03:7b:41:f3:aa:7f:23:26:d3:4f:ef:2f:52: db:91:4d:25:2b:c2:f7:b5:c7:36:c4:b4:78:6f:2a: b0:10:9a:71:a7:cd:ac:07:11:e4:1e:c9:82:7e:ba: b5:65:ed:51:29:c4:53:cc:a7:89:ca:34:b7:50:76: 9b:d6:8c:f3:c4:2c:c7:54:42:9f:71:0e:de:dd:ea: 65:fb:95:66:82:43:47:8f:e1:27:a3:ac:b1:53:10: 59:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:AC:B3:7B:2B:76:42:A7:68:01:2E:62:71:64:58:9D:68:87:C3:D3 X509v3 Authority Key Identifier: keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3131322e302f32322d3232203d3e20313333373734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.155.112.0/22 Signature Algorithm: sha256WithRSAEncryption 04:03:32:11:4b:91:68:0b:fe:f5:49:96:1e:5d:33:ba:2d:56: 90:ef:e9:d4:0b:db:d0:a0:21:01:bd:9d:43:a0:f4:df:7e:f0: a8:f4:7b:b2:1f:6c:2f:c7:e8:21:20:7e:e0:72:7e:10:32:f5: e8:bb:1c:58:1e:86:fe:73:11:c0:52:cc:4b:2b:e1:0d:33:67: 8f:fe:b8:6d:4a:30:e4:7e:7f:29:34:28:b2:1a:90:2d:dd:8b: 09:aa:61:da:26:1d:3b:b1:8a:69:62:7c:f1:94:da:4f:21:37: af:c0:c5:ba:30:9f:ba:9a:be:71:9b:a8:9b:c5:3a:e9:bd:12: 15:aa:b1:45:41:0a:f3:f7:36:ae:cf:8b:d6:0a:c7:ab:91:00: 69:4e:29:19:c6:9f:5b:26:e6:3a:b6:63:3f:02:9f:66:b9:3c: 32:ed:a0:cc:a6:3d:77:d4:f6:63:1b:a2:85:85:9a:04:54:4a: 3d:87:6d:49:3b:16:8c:5d:e9:07:3f:22:9e:90:b9:bb:af:13: 00:70:c6:26:ad:3c:7b:bf:70:af:94:cd:4a:b9:00:e4:c6:d9: 05:f9:7f:b6:78:56:89:8b:7b:1c:6f:07:4a:34:5d:7a:26:b8: 2c:88:ff:71:e4:90:8c:07:1a:8b:35:41:a7:f5:7c:dc:26:3a: d3:f5:1c:eb -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUDdsC6ykwmSLxlP84PaYjtmo+ipUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlE NzgxMDFENDAeFw0yNjA1MTEwMjQ0MDRaFw0yNzA1MTAwMjQ5MDRaMDMxMTAvBgNV BAMTKDU2QUNCMzdCMkI3NjQyQTc2ODAxMkU2MjcxNjQ1ODlENjg4N0MzRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsn58eygTbaJLxcE7UTfMNjJon Pi1j+R7JRTMKZ77fmroQ7JTQXoY/wjxqwTv6U+KouENqIQNNWUaY2IGwuDvF9hBu GSxIrw6JLQRdTJ3hYljC6TYthczQS2VCMDvyUDfoMFA/PMwiCtg1ADPYzz/t+41C TCu9FnxPBlU3DHeDSHy4muFwKGyWDYEc+7iilJzYYJ6TXIJQflnuvYOpHQcIoo4K 8W/AA3tB86p/IybTT+8vUtuRTSUrwve1xzbEtHhvKrAQmnGnzawHEeQeyYJ+urVl 7VEpxFPMp4nKNLdQdpvWjPPELMdUQp9xDt7d6mX7lWaCQ0eP4SejrLFTEFnPAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUVqyzeyt2QqdoAS5icWRYnWiHw9MwHwYDVR0j BBgwFoAU7J4chAyHBedUwuP/MqRPudeBAdQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDQ4NzgwOS8wL0VDOUUxQzg0MEM4NzA1RTc1NEMyRTNGRjMyQTQ0 RkI5RDc4MTAxRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlENzgxMDFENC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0NDg3ODA5LzAvMzIzMTMxMmUz MTM1MzUyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzMzM3Mzcz NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAtObcDANBgkqhkiG9w0BAQsFAAOCAQEABAMyEUuRaAv+9UmW Hl0zui1WkO/p1Avb0KAhAb2dQ6D0337wqPR7sh9sL8foISB+4HJ+EDL16LscWB6G /nMRwFLMSyvhDTNnj/64bUow5H5/KTQoshqQLd2LCaph2iYdO7GKaWJ88ZTaTyE3 r8DFujCfupq+cZuom8U66b0SFaqxRUEK8/c2rs+L1grHq5EAaU4pGcafWybmOrZj PwKfZrk8Mu2gzKY9d9T2YxuihYWaBFRKPYdtSTsWjF3pBz8inpC5u68TAHDGJq08 e79wr5TNSrkA5MbZBfl/tnhWiYt7HG8HSjRdeia4LIj/ceSQjAcaizVBp/V83CY6 0/Uc6w== -----END CERTIFICATE-----Generated at Wed May 13 15:24:55 2026 by rpki-client