$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/0/3231312e3136312e3232372e302f32342d3234203d3e20323035353438.roa File: 3231312e3136312e3232372e302f32342d3234203d3e20323035353438.roa (raw, json) Hash identifier: Ln2h1DObADPae64oImYFdKQ5uHj+DhkSUyON4jZ4kMU= Subject key identifier: C5:8E:BB:4F:1F:6C:85:EE:E1:38:B1:5E:37:61:C7:6B:D5:73:66:F2 Certificate issuer: /CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Certificate serial: 3579020DCA9EEE3921B4F1608591F9971B64EAA2 Authority key identifier: 95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/3231312e3136312e3232372e302f32342d3234203d3e20323035353438.roa Signing time: Thu 23 Jul 2026 08:12:07 +0000 ROA not before: Thu 23 Jul 2026 08:07:07 +0000 ROA not after: Thu 22 Jul 2027 08:12:07 +0000 asID: 205548 IP address blocks: 211.161.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:79:02:0d:ca:9e:ee:39:21:b4:f1:60:85:91:f9:97:1b:64:ea:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Validity Not Before: Jul 23 08:07:07 2026 GMT Not After : Jul 22 08:12:07 2027 GMT Subject: CN=C58EBB4F1F6C85EEE138B15E3761C76BD57366F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2b:1e:ab:9f:04:3e:49:e5:32:0d:e4:56:0c: b4:69:2c:c8:58:9d:b5:78:02:d8:60:08:00:ad:17: 2e:ad:40:29:80:98:10:68:0a:3d:b5:fc:e7:82:27: cb:7b:c3:27:cd:8b:22:13:f4:68:41:08:90:55:48: 83:28:88:de:4c:49:83:ac:c8:f4:e4:65:90:11:44: 4b:b7:23:62:4e:4e:66:ec:42:69:b3:66:cc:2d:20: 2a:f8:9a:0d:bb:93:fa:f0:dc:91:8c:53:a9:a2:28: b7:70:ad:62:2a:fb:e2:b0:2f:68:b2:6b:95:12:5f: c5:e1:de:22:66:e4:0f:1c:06:81:70:6d:f7:85:31: 3c:a5:c2:d1:13:d7:7f:a6:46:fe:81:2c:71:ea:57: c8:fa:19:0f:09:17:0f:c0:60:61:6a:e9:60:96:73: fb:3b:23:65:e6:76:f7:c1:cf:74:ba:b6:4d:cf:9a: 4e:b3:45:9a:af:3e:1d:f6:00:81:06:bb:b7:48:9a: 92:86:10:21:cb:fa:3a:ed:27:34:d3:d6:4a:27:37: f3:f2:bb:98:53:65:09:8a:f1:a6:e6:a6:8c:65:80: a7:2a:73:ee:f0:1c:33:c3:ce:eb:99:87:b8:4d:8f: 3b:cd:41:72:cc:f5:71:44:32:cc:a7:9c:53:da:ae: 0f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8E:BB:4F:1F:6C:85:EE:E1:38:B1:5E:37:61:C7:6B:D5:73:66:F2 X509v3 Authority Key Identifier: keyid:95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/3231312e3136312e3232372e302f32342d3234203d3e20323035353438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.161.227.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:19:df:88:b5:0d:62:8d:62:26:ab:fa:dc:cb:58:d4:a1:4e: ad:7f:ec:f2:9a:c8:28:fc:64:64:84:82:04:3b:e4:40:43:63: a5:f0:64:1a:53:aa:4b:5c:ff:03:c5:ff:b0:e7:c4:38:48:61: f4:56:48:d0:5d:09:d1:dd:23:12:e2:7c:96:f6:19:8d:78:9c: 80:76:4f:6e:18:ae:50:de:72:79:14:b7:cb:f3:71:ad:72:48: a9:96:de:21:9d:32:cc:64:88:84:d0:ef:da:2b:01:27:de:8b: c0:03:ec:2c:b9:b3:ca:1d:b7:eb:7b:be:e1:0f:c9:34:a7:c9: 43:c7:51:ad:6f:aa:c3:18:81:19:62:c7:23:e8:82:be:62:34: 54:7f:60:e4:69:95:f8:b3:ad:ad:9a:bd:e5:57:24:23:8d:71: 3c:e3:12:66:6c:85:fa:1e:f1:ce:9c:c8:ea:7e:62:9e:46:a7: e5:94:cd:87:03:7b:44:e1:6d:1c:7e:75:8c:81:ae:09:7c:6c: 12:ab:fa:27:b9:e0:b0:3c:1c:47:97:32:54:f4:72:78:5a:d4: e1:85:ac:f7:c6:d2:5c:99:42:68:8b:c9:9f:ea:d8:86:08:a6: 8e:0c:75:07:05:6c:b0:e3:6d:c9:6d:19:26:4f:31:38:a8:5e: 70:d8:6f:be -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUNXkCDcqe7jkhtPFghZH5lxtk6qIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1 NTlENTMzNzAeFw0yNjA3MjMwODA3MDdaFw0yNzA3MjIwODEyMDdaMDMxMTAvBgNV BAMTKEM1OEVCQjRGMUY2Qzg1RUVFMTM4QjE1RTM3NjFDNzZCRDU3MzY2RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvKx6rnwQ+SeUyDeRWDLRpLMhY nbV4AthgCACtFy6tQCmAmBBoCj21/OeCJ8t7wyfNiyIT9GhBCJBVSIMoiN5MSYOs yPTkZZARREu3I2JOTmbsQmmzZswtICr4mg27k/rw3JGMU6miKLdwrWIq++KwL2iy a5USX8Xh3iJm5A8cBoFwbfeFMTylwtET13+mRv6BLHHqV8j6GQ8JFw/AYGFq6WCW c/s7I2XmdvfBz3S6tk3Pmk6zRZqvPh32AIEGu7dImpKGECHL+jrtJzTT1konN/Py u5hTZQmK8abmpoxlgKcqc+7wHDPDzuuZh7hNjzvNQXLM9XFEMsynnFParg99AgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUxY67Tx9she7hOLFeN2HHa9VzZvIwHwYDVR0j BBgwFoAUla+0UV1iihGG0ghpz+r0fVWdUzcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzUyMDY0My8wLzk1QUZCNDUxNUQ2MjhBMTE4NkQyMDg2OUNGRUFG NDdENTU5RDUzMzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1NTlENTMzNy5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NTIwNjQzLzAvMzIzMTMxMmUz MTM2MzEyZTMyMzIzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNTM1MzQz OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEANOh4zANBgkqhkiG9w0BAQsFAAOCAQEAaxnfiLUNYo1iJqv6 3MtY1KFOrX/s8prIKPxkZISCBDvkQENjpfBkGlOqS1z/A8X/sOfEOEhh9FZI0F0J 0d0jEuJ8lvYZjXicgHZPbhiuUN5yeRS3y/NxrXJIqZbeIZ0yzGSIhNDv2isBJ96L wAPsLLmzyh2363u+4Q/JNKfJQ8dRrW+qwxiBGWLHI+iCvmI0VH9g5GmV+LOtrZq9 5VckI41xPOMSZmyF+h7xzpzI6n5inkan5ZTNhwN7ROFtHH51jIGuCXxsEqv6J7ng sDwcR5cyVPRyeFrU4YWs98bSXJlCaIvJn+rYhgimjgx1BwVssONtyW0ZJk8xOKhe cNhvvg== -----END CERTIFICATE-----Generated at Fri Jul 24 00:49:17 2026 by rpki-client