$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/32372e302e3133322e302f32322d3232203d3e203538383534.roa File: 32372e302e3133322e302f32322d3232203d3e203538383534.roa (raw, json) Hash identifier: j1leNzG71vinHeU48HQ2pH/5kmDNO6G4B6bCEWPWmMc= Subject key identifier: 57:E6:B7:25:0F:00:CE:FA:67:08:E0:D3:BD:B5:F7:96:4C:E9:D6:B6 Certificate issuer: /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Certificate serial: 3F760C3FE2AE976B5F3F1F3E1EA750216AB6E512 Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/32372e302e3133322e302f32322d3232203d3e203538383534.roa Signing time: Mon 11 May 2026 02:50:14 +0000 ROA not before: Mon 11 May 2026 02:45:14 +0000 ROA not after: Mon 10 May 2027 02:50:14 +0000 asID: 58854 IP address blocks: 27.0.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:76:0c:3f:e2:ae:97:6b:5f:3f:1f:3e:1e:a7:50:21:6a:b6:e5:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Validity Not Before: May 11 02:45:14 2026 GMT Not After : May 10 02:50:14 2027 GMT Subject: CN=57E6B7250F00CEFA6708E0D3BDB5F7964CE9D6B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:86:bf:86:39:ce:03:88:1a:69:96:76:7b:df: 49:f2:0c:ba:c4:46:81:cc:82:0a:cf:30:11:5d:dc: 5a:20:e2:c4:1b:5c:e6:1c:92:fb:92:b0:05:a2:98: 32:27:67:b6:e9:c5:a8:9b:39:d6:86:b9:5c:66:64: e8:75:0c:b1:0f:03:f2:e0:4a:03:74:07:32:84:e7: 4f:df:ed:ef:83:6a:e5:12:da:cc:f8:1a:f7:35:4b: c9:6b:f3:c4:73:a0:cb:e8:13:46:ff:92:26:af:36: 66:df:59:56:e3:54:a4:d9:c8:a9:ca:bb:6f:5e:9f: 30:6d:ce:06:a5:0e:f8:e9:9f:79:f7:58:79:dc:7c: 57:27:73:bc:c0:0d:3f:28:1a:fc:7f:02:d3:e8:f5: 3a:3e:91:29:f1:2c:01:fe:dc:d5:9b:b8:a0:0e:e2: 93:c8:ac:53:98:1b:81:f9:43:05:60:9a:9f:66:bb: 46:15:f7:06:00:96:af:5e:11:c7:a9:00:1c:3b:65: b4:d7:f9:7f:28:2c:ac:65:27:85:b9:80:98:f8:8d: 9d:17:d0:43:f1:0d:0b:4e:c9:2c:0c:76:ca:4d:ed: b7:80:cc:26:75:3c:ce:16:ab:cf:a4:a3:d0:09:3d: 65:b4:ad:14:dd:4f:94:4c:75:a6:17:b7:df:7f:3e: 3f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E6:B7:25:0F:00:CE:FA:67:08:E0:D3:BD:B5:F7:96:4C:E9:D6:B6 X509v3 Authority Key Identifier: keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/32372e302e3133322e302f32322d3232203d3e203538383534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.0.132.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:f1:26:b8:a5:57:db:4a:17:b4:ba:06:b6:3b:ad:0c:ec:68: 71:0a:a0:df:4e:6b:e8:8f:ec:d5:e7:36:15:2e:15:40:2d:19: e9:ed:0d:e8:e3:c8:d5:a7:ee:b8:27:af:3b:02:14:f0:c1:cc: 07:1a:cb:10:c9:20:28:d1:af:dc:5f:fa:c2:96:00:fa:9a:f9: d9:04:e9:6a:09:1c:fc:b2:c9:f9:46:2c:37:95:05:42:f5:65: 41:53:85:b8:f3:3d:df:ba:d7:8d:59:2e:ff:c4:45:24:29:f4: 68:38:4e:a3:b3:6e:da:59:0b:45:f2:1d:cc:39:44:ce:16:e9: b5:70:ec:20:dd:9c:2a:ba:33:00:a6:04:09:2f:4e:fc:fa:88: a1:fc:a7:75:87:27:94:a6:a0:01:68:4e:42:fb:08:27:b0:23: 9c:88:6b:86:60:78:04:00:bb:a6:ad:e3:64:de:1f:46:17:b8: 14:df:d9:4c:98:3f:cd:ea:78:6c:62:51:98:4a:66:4b:e2:5c: 09:e3:42:55:3e:9e:84:b3:00:8f:2b:13:58:22:c6:83:0b:21: 3a:5a:c1:6d:60:64:d1:e9:eb:d4:b8:83:9f:d6:e2:3b:b8:77: 36:4e:c2:a5:45:17:6f:7a:b1:3e:c2:0b:d0:e9:4e:cf:41:1f: e8:b9:38:db -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUP3YMP+Kul2tfPx8+HqdQIWq25RIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlE NzgxMDFENDAeFw0yNjA1MTEwMjQ1MTRaFw0yNzA1MTAwMjUwMTRaMDMxMTAvBgNV BAMTKDU3RTZCNzI1MEYwMENFRkE2NzA4RTBEM0JEQjVGNzk2NENFOUQ2QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRhr+GOc4DiBpplnZ730nyDLrE RoHMggrPMBFd3Fog4sQbXOYckvuSsAWimDInZ7bpxaibOdaGuVxmZOh1DLEPA/Lg SgN0BzKE50/f7e+DauUS2sz4Gvc1S8lr88RzoMvoE0b/kiavNmbfWVbjVKTZyKnK u29enzBtzgalDvjpn3n3WHncfFcnc7zADT8oGvx/AtPo9To+kSnxLAH+3NWbuKAO 4pPIrFOYG4H5QwVgmp9mu0YV9wYAlq9eEcepABw7ZbTX+X8oLKxlJ4W5gJj4jZ0X 0EPxDQtOySwMdspN7beAzCZ1PM4Wq8+ko9AJPWW0rRTdT5RMdaYXt99/Pj+FAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUV+a3JQ8AzvpnCODTvbX3lkzp1rYwHwYDVR0j BBgwFoAU7J4chAyHBedUwuP/MqRPudeBAdQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDQ4NzgwOS8wL0VDOUUxQzg0MEM4NzA1RTc1NEMyRTNGRjMyQTQ0 RkI5RDc4MTAxRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlENzgxMDFENC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0NDg3ODA5LzAvMzIzNzJlMzAyZTMx MzMzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1MzgzODM1MzQucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIbAIQwDQYJKoZIhvcNAQELBQADggEBAC3xJrilV9tKF7S6BrY7rQzsaHEKoN9O a+iP7NXnNhUuFUAtGentDejjyNWn7rgnrzsCFPDBzAcayxDJICjRr9xf+sKWAPqa +dkE6WoJHPyyyflGLDeVBUL1ZUFThbjzPd+6141ZLv/ERSQp9Gg4TqOzbtpZC0Xy Hcw5RM4W6bVw7CDdnCq6MwCmBAkvTvz6iKH8p3WHJ5SmoAFoTkL7CCewI5yIa4Zg eAQAu6at42TeH0YXuBTf2UyYP83qeGxiUZhKZkviXAnjQlU+noSzAI8rE1gixoML ITpawW1gZNHp69S4g5/W4ju4dzZOwqVFF296sT7CC9DpTs9BH+i5ONs= -----END CERTIFICATE-----Generated at Wed May 13 20:17:17 2026 by rpki-client