$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3131352e302f32342d3234203d3e203538383534.roa File: 3231312e3135352e3131352e302f32342d3234203d3e203538383534.roa (raw, json) Hash identifier: TReC9XrrN7Nwf1erqtsk0E8oVQofSFHJgWXfzrRUE/I= Subject key identifier: 84:3F:85:D8:E7:83:DF:A0:8F:1D:D9:2F:88:50:C4:0D:AB:E4:6C:5C Certificate issuer: /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Certificate serial: 060CC4751DEBB77596C28485BF59DB8E7641619A Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3131352e302f32342d3234203d3e203538383534.roa Signing time: Tue 12 May 2026 08:28:28 +0000 ROA not before: Tue 12 May 2026 08:23:28 +0000 ROA not after: Tue 11 May 2027 08:28:28 +0000 asID: 58854 IP address blocks: 211.155.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:0c:c4:75:1d:eb:b7:75:96:c2:84:85:bf:59:db:8e:76:41:61:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Validity Not Before: May 12 08:23:28 2026 GMT Not After : May 11 08:28:28 2027 GMT Subject: CN=843F85D8E783DFA08F1DD92F8850C40DABE46C5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b5:b2:6e:4b:28:16:51:57:6e:60:9e:57:90: 16:39:17:4d:a5:ba:04:da:39:52:ae:e4:2c:9b:d2: 11:39:90:4c:f9:c9:26:81:dc:b6:2f:62:a1:f8:4a: e3:6f:7b:93:75:3e:3a:f3:a2:12:de:7e:1c:e3:ad: 0d:c4:1c:90:df:6e:d5:48:5e:f4:c1:45:44:ca:d6: ea:6d:50:a7:f1:ee:83:61:2e:f2:f0:fb:4e:67:b6: c1:ad:aa:b9:1a:1d:5f:86:2a:82:33:ba:e6:84:cb: c4:17:94:61:7e:53:05:43:cb:d4:06:92:10:9e:63: ff:02:fa:59:8a:e4:46:8a:43:be:4e:89:e2:6c:f4: af:a0:a5:09:9e:41:a2:5a:b8:9d:e8:de:06:e0:e2: 94:ac:7f:a5:58:6d:ae:18:09:a9:10:80:1b:66:ec: 94:e1:5d:fc:ae:50:55:85:cd:09:f4:5a:3a:b0:67: 1b:e0:33:77:2f:f5:7d:3e:2d:ff:76:f5:d0:de:98: f5:a3:ea:97:ca:65:79:94:21:d8:f0:9b:c9:76:55: 8a:ad:9f:2b:37:59:cb:aa:72:d8:6a:c2:19:d2:1a: ee:6b:de:c7:a5:cd:95:67:c4:79:aa:c2:15:2a:2c: 33:10:38:8f:2c:b1:cb:c3:b9:4d:0d:0d:b0:38:40: df:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:3F:85:D8:E7:83:DF:A0:8F:1D:D9:2F:88:50:C4:0D:AB:E4:6C:5C X509v3 Authority Key Identifier: keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3131352e302f32342d3234203d3e203538383534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.155.115.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:25:6c:54:3c:97:dd:88:8c:71:6c:fb:0c:ec:01:03:dc:4c: 76:14:ee:02:58:11:cd:0c:07:85:80:a6:5f:5f:a2:8f:58:c3: 1c:b3:c5:eb:66:5c:6c:a8:fc:50:12:7d:35:67:5a:ea:1d:a2: 2d:20:ee:5d:36:b8:76:b1:08:d3:83:a5:08:a9:68:bb:5c:b9: 5f:b1:70:a1:de:af:b6:d3:64:02:cb:ea:ca:84:e5:9a:ae:ea: 5b:35:41:d2:52:0a:af:b1:3c:1d:fa:15:2c:81:fa:dc:82:2a: 41:86:59:c0:13:84:30:58:78:42:f8:84:e5:67:fd:f2:f5:bf: 1c:28:6a:76:e7:96:2e:2b:0e:cc:08:1e:20:35:f2:9b:ce:9c: f3:b7:0d:bd:05:60:70:d1:1e:7a:0b:b6:d5:06:3a:2d:59:71: 2f:ae:87:98:3b:58:33:a4:a9:e5:ed:eb:be:30:a0:85:e3:26: 07:c8:d7:f3:5b:04:74:d2:46:ab:ec:0e:e4:09:99:a8:5d:ba: 3a:04:44:db:3b:9c:c8:f6:55:6c:f4:60:52:e7:34:13:df:5a: ec:c8:a5:17:a0:9c:33:88:be:a1:f2:16:23:bb:8b:b6:bf:12: 6f:c3:61:ea:c5:b7:3d:65:4c:e5:8c:d8:54:4f:63:d5:d2:15: 64:99:2f:d8 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUBgzEdR3rt3WWwoSFv1nbjnZBYZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlE NzgxMDFENDAeFw0yNjA1MTIwODIzMjhaFw0yNzA1MTEwODI4MjhaMDMxMTAvBgNV BAMTKDg0M0Y4NUQ4RTc4M0RGQTA4RjFERDkyRjg4NTBDNDBEQUJFNDZDNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHtbJuSygWUVduYJ5XkBY5F02l ugTaOVKu5Cyb0hE5kEz5ySaB3LYvYqH4SuNve5N1PjrzohLefhzjrQ3EHJDfbtVI XvTBRUTK1uptUKfx7oNhLvLw+05ntsGtqrkaHV+GKoIzuuaEy8QXlGF+UwVDy9QG khCeY/8C+lmK5EaKQ75OieJs9K+gpQmeQaJauJ3o3gbg4pSsf6VYba4YCakQgBtm 7JThXfyuUFWFzQn0WjqwZxvgM3cv9X0+Lf929dDemPWj6pfKZXmUIdjwm8l2VYqt nys3WcuqcthqwhnSGu5r3selzZVnxHmqwhUqLDMQOI8sscvDuU0NDbA4QN8RAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUhD+F2OeD36CPHdkviFDEDavkbFwwHwYDVR0j BBgwFoAU7J4chAyHBedUwuP/MqRPudeBAdQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDQ4NzgwOS8wL0VDOUUxQzg0MEM4NzA1RTc1NEMyRTNGRjMyQTQ0 RkI5RDc4MTAxRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlENzgxMDFENC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ0ODc4MDkvMC8zMjMxMzEyZTMx MzUzNTJlMzEzMTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzODM4MzUzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEANObczANBgkqhkiG9w0BAQsFAAOCAQEAHSVsVDyX3YiMcWz7DOwB A9xMdhTuAlgRzQwHhYCmX1+ij1jDHLPF62ZcbKj8UBJ9NWda6h2iLSDuXTa4drEI 04OlCKlou1y5X7Fwod6vttNkAsvqyoTlmq7qWzVB0lIKr7E8HfoVLIH63IIqQYZZ wBOEMFh4QviE5Wf98vW/HChqdueWLisOzAgeIDXym86c87cNvQVgcNEeegu21QY6 LVlxL66HmDtYM6Sp5e3rvjCgheMmB8jX81sEdNJGq+wO5AmZqF26OgRE2zucyPZV bPRgUuc0E99a7MilF6CcM4i+ofIWI7uLtr8Sb8Nh6sW3PWVM5YzYVE9j1dIVZJkv 2A== -----END CERTIFICATE-----Generated at Wed May 13 20:17:12 2026 by rpki-client