$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e31372e302f32342d3234203d3e203536303436.roa File: 3134302e3231302e31372e302f32342d3234203d3e203536303436.roa (raw, json) Hash identifier: iA6xW2mo9UOww43TiFwUvVclWeN47TBsNl4uB8qad2M= Subject key identifier: 4E:85:D6:B7:35:42:23:23:F5:06:F8:61:F0:96:3B:4C:0E:26:08:44 Certificate issuer: /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077 Certificate serial: 21DD3021B83E3AC51C04FB7DD39B8FCBBE7478E4 Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e31372e302f32342d3234203d3e203536303436.roa Signing time: Fri 08 May 2026 01:31:07 +0000 ROA not before: Fri 08 May 2026 01:26:07 +0000 ROA not after: Fri 07 May 2027 01:31:07 +0000 asID: 56046 IP address blocks: 140.210.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:dd:30:21:b8:3e:3a:c5:1c:04:fb:7d:d3:9b:8f:cb:be:74:78:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077 Validity Not Before: May 8 01:26:07 2026 GMT Not After : May 7 01:31:07 2027 GMT Subject: CN=4E85D6B735422323F506F861F0963B4C0E260844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:96:ca:c0:2a:89:1f:9c:d2:7b:ad:03:15:c1: bf:df:45:cb:a2:af:98:f0:06:ae:32:c8:0b:15:41: 8e:6a:6c:de:f4:af:48:4e:4e:0f:b3:27:e8:e9:61: bb:95:b0:6c:9a:c6:49:e1:24:c0:16:a6:20:09:0b: c6:72:17:4a:24:a9:f1:84:8c:f2:b4:dc:cf:0b:4a: 9a:1b:98:e1:e9:aa:64:0e:01:97:45:7b:70:b2:ed: 51:76:a4:46:b4:c1:7b:16:6f:b3:e1:0c:a6:21:77: 69:7d:50:23:b8:52:5b:7c:9c:c1:2f:6c:96:ba:21: ff:59:27:b7:fa:aa:37:65:19:62:05:14:29:ed:d9: 6f:5f:3f:f8:a7:2e:43:73:ba:6e:1d:60:52:17:ed: b2:df:de:7b:49:17:11:ff:a7:b0:af:f0:f7:a0:e0: 50:8a:a6:c7:00:93:20:46:d3:d2:14:2c:46:05:88: f6:b1:66:a3:b1:54:b2:ef:51:a5:a4:b6:62:2c:bf: 9b:a4:12:24:47:32:ea:84:cc:a1:93:20:62:25:47: 4c:f9:b2:39:01:57:47:7f:22:27:d8:4b:6b:9c:9e: b0:87:d1:b8:75:8f:d3:b4:98:a7:73:1e:7c:4d:67: 8f:30:87:38:3a:ac:cc:a1:8e:16:5e:2e:37:42:c2: eb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:85:D6:B7:35:42:23:23:F5:06:F8:61:F0:96:3B:4C:0E:26:08:44 X509v3 Authority Key Identifier: keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/3134302e3231302e31372e302f32342d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.210.17.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:80:f2:e2:c5:13:88:5c:b3:02:78:0f:a8:3d:95:0e:2d:cc: af:17:cd:85:3d:ef:4d:56:37:ad:64:1b:68:a7:3b:55:20:0e: 3e:3b:a6:35:d3:c5:b2:9d:05:52:24:20:10:7a:06:dd:0f:c4: cc:bc:d1:fd:3f:96:5c:51:da:8a:a7:24:69:b9:80:ee:30:78: 3c:ce:3c:2a:0a:bb:a0:ef:ba:a3:5a:57:8c:49:e7:ad:eb:ba: 18:16:96:bc:62:d4:14:92:9f:f9:40:5b:51:4a:97:a3:f4:c1: 26:ad:64:0b:0b:6b:ab:48:1e:b3:1b:03:7a:b3:67:d2:73:5c: b5:bd:c8:d5:ee:b8:62:81:f2:1b:5f:6d:b2:ea:dc:8f:00:b5: 1e:c2:78:d4:b0:a7:e8:29:f5:de:89:ba:76:13:b2:34:aa:b4: 02:a5:af:44:c3:71:c2:ad:a7:27:66:ca:17:98:5a:a6:4d:da: ba:92:d8:2e:15:63:0c:80:df:ac:aa:b3:35:a9:95:8b:56:c2: 05:a1:06:2c:56:49:de:56:16:3f:88:07:c2:c6:b9:db:1c:6a: b8:ea:aa:de:b1:20:f9:71:e5:d2:dc:b0:85:11:e6:f1:72:f7: 10:52:8e:cd:2d:ed:11:7f:3c:60:1c:11:20:0f:f3:fe:5c:d3: 9e:59:76:5d -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUId0wIbg+OsUcBPt905uPy750eOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUwQzZENDBCODZCMkNDNURFRkVERjhFNDJGNkJBODQ1 MUM2RjA3NzAeFw0yNjA1MDgwMTI2MDdaFw0yNzA1MDcwMTMxMDdaMDMxMTAvBgNV BAMTKDRFODVENkI3MzU0MjIzMjNGNTA2Rjg2MUYwOTYzQjRDMEUyNjA4NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCclsrAKokfnNJ7rQMVwb/fRcui r5jwBq4yyAsVQY5qbN70r0hOTg+zJ+jpYbuVsGyaxknhJMAWpiAJC8ZyF0okqfGE jPK03M8LSpobmOHpqmQOAZdFe3Cy7VF2pEa0wXsWb7PhDKYhd2l9UCO4Ult8nMEv bJa6If9ZJ7f6qjdlGWIFFCnt2W9fP/inLkNzum4dYFIX7bLf3ntJFxH/p7Cv8Peg 4FCKpscAkyBG09IULEYFiPaxZqOxVLLvUaWktmIsv5ukEiRHMuqEzKGTIGIlR0z5 sjkBV0d/IifYS2ucnrCH0bh1j9O0mKdzHnxNZ48whzg6rMyhjhZeLjdCwuubAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUToXWtzVCIyP1Bvhh8JY7TA4mCEQwHwYDVR0j BBgwFoAUHgxtQLhrLMXe/t+OQva6hFHG8HcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDgxNTQ4OS8xLzFFMEM2RDQwQjg2QjJDQzVERUZFREY4RTQyRjZC QTg0NTFDNkYwNzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMUUwQzZENDBCODZCMkNDNURFRkVERjhFNDJGNkJBODQ1MUM2RjA3Ny5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTc5NjcxNDgxNTQ4OS8xLzMxMzQzMDJlMzIz MTMwMmUzMTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAIzSETANBgkqhkiG9w0BAQsFAAOCAQEAS4Dy4sUTiFyzAngPqD2VDi3M rxfNhT3vTVY3rWQbaKc7VSAOPjumNdPFsp0FUiQgEHoG3Q/EzLzR/T+WXFHaiqck abmA7jB4PM48Kgq7oO+6o1pXjEnnreu6GBaWvGLUFJKf+UBbUUqXo/TBJq1kCwtr q0gesxsDerNn0nNctb3I1e64YoHyG19tsurcjwC1HsJ41LCn6Cn13om6dhOyNKq0 AqWvRMNxwq2nJ2bKF5hapk3aupLYLhVjDIDfrKqzNamVi1bCBaEGLFZJ3lYWP4gH wsa52xxquOqq3rEg+XHl0tywhRHm8XL3EFKOzS3tEX88YBwRIA/z/lzTnll2XQ== -----END CERTIFICATE-----Generated at Wed May 13 14:17:49 2026 by rpki-client