$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3132302e302f32322d3232203d3e203538353431.roa File: 3231312e3135352e3132302e302f32322d3232203d3e203538353431.roa (raw, json) Hash identifier: XqKnIABB835jNYZmEZ3t9axw68PnzIQthEAUJrJc+yI= Subject key identifier: C8:73:C5:04:E3:36:91:01:CF:D2:EB:3F:13:F9:9F:2C:6B:AC:5E:8E Certificate issuer: /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Certificate serial: 7E5D0CBBEC647BD4462D9A9C64714C16B9950687 Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3132302e302f32322d3232203d3e203538353431.roa Signing time: Mon 11 May 2026 02:50:14 +0000 ROA not before: Mon 11 May 2026 02:45:14 +0000 ROA not after: Mon 10 May 2027 02:50:14 +0000 asID: 58541 IP address blocks: 211.155.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:5d:0c:bb:ec:64:7b:d4:46:2d:9a:9c:64:71:4c:16:b9:95:06:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Validity Not Before: May 11 02:45:14 2026 GMT Not After : May 10 02:50:14 2027 GMT Subject: CN=C873C504E3369101CFD2EB3F13F99F2C6BAC5E8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:88:7b:b7:aa:86:52:32:0d:02:eb:b0:5f:78: ac:c0:5d:2d:ef:67:8f:3f:a9:b6:fe:4c:0a:c1:c3: 6d:87:20:73:a1:6f:c1:1c:a8:8b:7e:83:ff:71:56: 4a:5b:f5:2f:ae:df:ee:10:60:c5:84:b0:9f:03:c7: b0:72:e1:69:31:12:2c:1a:65:89:aa:7b:36:49:17: 18:b0:de:73:dd:ed:5d:dc:54:24:f7:54:6b:e5:8a: 06:bd:40:07:4a:89:52:a9:3f:36:10:fc:d0:7a:41: 40:64:13:2e:cf:89:99:69:db:41:c3:24:de:f6:c0: ad:81:b6:6a:63:76:4c:94:43:3d:3e:5b:f9:c6:5e: 5c:f7:6e:73:36:84:77:58:4e:90:5d:c9:d5:b9:ae: cd:3c:f8:57:12:cb:bd:e7:4d:ac:c2:6d:27:1e:37: 88:2e:61:43:10:79:2f:14:2e:b5:33:3a:6e:24:16: b5:87:77:20:be:16:70:63:17:90:81:cc:cd:8d:a3: b3:2e:d6:bf:a6:04:3b:c2:01:56:06:3a:6f:87:3f: 0d:77:c9:0f:d2:7f:73:0d:59:b6:09:ea:30:98:60: a9:20:09:11:a1:b7:8d:83:e4:4b:79:7d:92:4e:25: d6:a8:e8:62:c1:93:e1:64:88:59:5c:4d:0d:c9:23: 06:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:73:C5:04:E3:36:91:01:CF:D2:EB:3F:13:F9:9F:2C:6B:AC:5E:8E X509v3 Authority Key Identifier: keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3132302e302f32322d3232203d3e203538353431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.155.120.0/22 Signature Algorithm: sha256WithRSAEncryption 45:e4:f7:99:6e:53:07:e7:3c:68:de:b2:75:26:60:02:a3:c0: 02:48:72:c2:16:8f:fb:a3:d3:57:5a:01:9d:df:6d:9f:b0:d4: 02:1c:08:98:98:45:c6:0b:39:0d:0f:2c:f1:88:00:1e:10:ff: cf:2b:07:6c:48:52:70:93:fb:ec:87:5f:f2:81:ca:85:5b:da: 77:3e:d7:cd:b0:6b:7e:4c:65:07:37:3e:8e:de:98:df:74:69: 1e:b7:05:fe:20:81:ef:79:b3:fe:5c:88:6c:6d:0a:05:e3:c6: 09:68:5b:fd:17:05:cd:89:e9:de:7a:a3:91:8a:7d:82:97:b8: 7f:ab:c2:b9:04:7f:24:fa:57:60:cc:20:25:f2:df:48:8f:2a: 42:3e:3c:c9:9b:ec:8c:36:90:4c:6b:5c:e0:c2:38:36:fb:6a: 3a:b8:66:3e:19:f9:fc:52:4f:3c:5c:4a:f9:26:07:2b:7b:7b: 63:3c:23:c4:c8:5d:c7:06:cc:af:88:5d:34:40:80:f5:fe:c6: 59:f7:9b:e9:ca:fb:2c:e4:4e:a1:ca:72:94:7f:17:2c:c7:b7: b9:27:6a:e3:e2:5c:69:4e:1b:52:8e:24:69:02:8f:7b:0a:ff: 92:e5:08:87:37:2b:af:e5:cc:3f:de:30:8e:d2:bf:92:4a:1b: 29:a5:cd:4a -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUfl0Mu+xke9RGLZqcZHFMFrmVBocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlE NzgxMDFENDAeFw0yNjA1MTEwMjQ1MTRaFw0yNzA1MTAwMjUwMTRaMDMxMTAvBgNV BAMTKEM4NzNDNTA0RTMzNjkxMDFDRkQyRUIzRjEzRjk5RjJDNkJBQzVFOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtiHu3qoZSMg0C67BfeKzAXS3v Z48/qbb+TArBw22HIHOhb8EcqIt+g/9xVkpb9S+u3+4QYMWEsJ8Dx7By4WkxEiwa ZYmqezZJFxiw3nPd7V3cVCT3VGvliga9QAdKiVKpPzYQ/NB6QUBkEy7PiZlp20HD JN72wK2BtmpjdkyUQz0+W/nGXlz3bnM2hHdYTpBdydW5rs08+FcSy73nTazCbSce N4guYUMQeS8ULrUzOm4kFrWHdyC+FnBjF5CBzM2No7Mu1r+mBDvCAVYGOm+HPw13 yQ/Sf3MNWbYJ6jCYYKkgCRGht42D5Et5fZJOJdao6GLBk+FkiFlcTQ3JIwYlAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUyHPFBOM2kQHP0us/E/mfLGusXo4wHwYDVR0j BBgwFoAU7J4chAyHBedUwuP/MqRPudeBAdQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDQ4NzgwOS8wL0VDOUUxQzg0MEM4NzA1RTc1NEMyRTNGRjMyQTQ0 RkI5RDc4MTAxRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlENzgxMDFENC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ0ODc4MDkvMC8zMjMxMzEyZTMx MzUzNTJlMzEzMjMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzODM1MzQzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAtObeDANBgkqhkiG9w0BAQsFAAOCAQEAReT3mW5TB+c8aN6ydSZg AqPAAkhywhaP+6PTV1oBnd9tn7DUAhwImJhFxgs5DQ8s8YgAHhD/zysHbEhScJP7 7Idf8oHKhVvadz7XzbBrfkxlBzc+jt6Y33RpHrcF/iCB73mz/lyIbG0KBePGCWhb /RcFzYnp3nqjkYp9gpe4f6vCuQR/JPpXYMwgJfLfSI8qQj48yZvsjDaQTGtc4MI4 NvtqOrhmPhn5/FJPPFxK+SYHK3t7YzwjxMhdxwbMr4hdNECA9f7GWfeb6cr7LORO ocpylH8XLMe3uSdq4+JcaU4bUo4kaQKPewr/kuUIhzcrr+XMP94wjtK/kkobKaXN Sg== -----END CERTIFICATE-----Generated at Wed May 13 14:17:03 2026 by rpki-client