$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e33362e302f32322d3234203d3e20323133373035.roa File: 3231312e3134392e33362e302f32322d3234203d3e20323133373035.roa (raw, json) Hash identifier: vHWiz6x+VBqj0f9UFCYPCsW1JK5bYID4vJQiFZNMWjU= Subject key identifier: 84:62:92:8F:EA:22:10:47:21:52:68:CB:55:EE:20:41:27:40:D2:43 Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 1300DAE38158DBD06C2757C3DC4963E48698E8C9 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e33362e302f32322d3234203d3e20323133373035.roa Signing time: Mon 13 Jul 2026 03:46:39 +0000 ROA not before: Mon 13 Jul 2026 03:41:39 +0000 ROA not after: Mon 12 Jul 2027 03:46:39 +0000 asID: 213705 IP address blocks: 211.149.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:00:da:e3:81:58:db:d0:6c:27:57:c3:dc:49:63:e4:86:98:e8:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Jul 13 03:41:39 2026 GMT Not After : Jul 12 03:46:39 2027 GMT Subject: CN=8462928FEA221047215268CB55EE20412740D243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9e:e8:e9:b6:49:61:f5:a1:75:ff:7b:23:1a: 0f:7c:0f:2b:55:4f:33:2c:54:e7:05:fa:f0:d8:7a: f5:b2:f4:77:5b:49:c7:0b:0c:5e:39:f2:ff:51:47: 86:93:fe:05:77:96:19:17:d4:5b:87:42:cf:1a:9c: 23:e5:f7:6d:55:19:23:e4:8f:0c:bb:71:33:0c:5c: 88:37:db:93:76:2e:e2:06:38:ab:a7:a2:61:c3:8e: c4:49:17:5c:28:ca:22:0a:df:9f:b3:57:93:86:c3: d7:bb:6b:83:9f:56:07:a9:b7:d7:96:c1:18:cd:b6: 9b:7a:6f:ba:6f:d6:34:fa:55:57:28:85:a4:8f:f3: 1b:fe:15:89:90:59:58:de:7f:9c:c4:56:86:28:78: a1:9d:7a:28:5b:d9:8b:2c:b8:90:69:25:75:26:44: ce:84:ea:95:44:f8:03:c4:40:5e:4f:89:90:2b:2a: 76:32:f0:5e:59:82:a7:ed:56:e5:45:3f:85:b8:c9: 85:b4:cc:3b:7e:ac:0e:20:8d:7f:bb:10:ba:83:a9: 2d:45:cc:51:7c:a5:92:bb:26:f7:b9:a4:36:cd:fb: 0b:d6:17:c4:83:54:a6:4b:8d:a2:b1:25:35:2f:de: b2:f4:e3:a4:49:5a:cd:32:25:49:38:8d:fb:1b:09: 0f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:62:92:8F:EA:22:10:47:21:52:68:CB:55:EE:20:41:27:40:D2:43 X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e33362e302f32322d3234203d3e20323133373035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.149.36.0/22 Signature Algorithm: sha256WithRSAEncryption 29:28:19:20:e5:20:90:2c:1e:86:63:b3:22:59:8b:55:08:07: a1:c0:fb:11:7e:17:a3:db:e8:c9:b4:70:1f:d3:e9:ac:ef:4a: f8:ad:92:ac:bb:83:4a:63:f1:c2:2d:2d:3b:7b:58:60:23:ac: a9:7b:9c:7e:82:6f:86:0c:9b:c5:f2:73:3a:70:d1:99:a7:85: 21:10:bc:37:d9:bd:bf:c4:e5:11:24:44:4c:3e:21:a9:8a:ed: b6:37:06:7a:a5:60:c2:67:af:34:10:33:f3:4b:5a:75:21:2c: a6:0d:c1:40:5d:dc:f6:0b:81:ef:6a:dc:7f:a5:4a:14:25:4d: 31:1a:48:2b:9f:ee:2e:03:40:ed:45:e2:96:df:df:e7:d5:88: 3f:cd:63:21:4e:b0:48:88:ff:0c:e8:4a:53:38:4a:65:e2:db: bd:81:bc:f0:d9:e2:a2:99:c2:31:3f:ac:46:07:38:bd:2a:53: 98:15:f5:b1:16:48:9d:0c:55:dd:a3:bc:ff:b4:54:97:08:d1: 93:30:f3:62:f3:2f:66:e7:89:38:93:e7:84:24:d4:1a:4c:30: 15:f5:df:48:de:6c:20:c6:be:b2:73:35:ff:08:28:00:31:d4: b6:95:83:3f:a0:c9:2b:ac:2f:fe:e1:e6:8f:0a:57:f9:aa:ad: dd:6b:0e:00 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUEwDa44FY29BsJ1fD3Elj5IaY6MkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA3MTMwMzQxMzlaFw0yNzA3MTIwMzQ2MzlaMDMxMTAvBgNV BAMTKDg0NjI5MjhGRUEyMjEwNDcyMTUyNjhDQjU1RUUyMDQxMjc0MEQyNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBnujptklh9aF1/3sjGg98DytV TzMsVOcF+vDYevWy9HdbSccLDF458v9RR4aT/gV3lhkX1FuHQs8anCPl921VGSPk jwy7cTMMXIg325N2LuIGOKunomHDjsRJF1woyiIK35+zV5OGw9e7a4OfVgept9eW wRjNtpt6b7pv1jT6VVcohaSP8xv+FYmQWVjef5zEVoYoeKGdeihb2YssuJBpJXUm RM6E6pVE+APEQF5PiZArKnYy8F5ZgqftVuVFP4W4yYW0zDt+rA4gjX+7ELqDqS1F zFF8pZK7Jve5pDbN+wvWF8SDVKZLjaKxJTUv3rL046RJWs0yJUk4jfsbCQ/7AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUhGKSj+oiEEchUmjLVe4gQSdA0kMwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC8zMjMxMzEyZTMx MzQzOTJlMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzEzMzM3MzAzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAtOVJDANBgkqhkiG9w0BAQsFAAOCAQEAKSgZIOUgkCwehmOzIlmL VQgHocD7EX4Xo9voybRwH9PprO9K+K2SrLuDSmPxwi0tO3tYYCOsqXucfoJvhgyb xfJzOnDRmaeFIRC8N9m9v8TlESRETD4hqYrttjcGeqVgwmevNBAz80tadSEspg3B QF3c9guB72rcf6VKFCVNMRpIK5/uLgNA7UXilt/f59WIP81jIU6wSIj/DOhKUzhK ZeLbvYG88NniopnCMT+sRgc4vSpTmBX1sRZInQxV3aO8/7RUlwjRkzDzYvMvZueJ OJPnhCTUGkwwFfXfSN5sIMa+snM1/wgoADHUtpWDP6DJK6wv/uHmjwpX+aqt3WsO AA== -----END CERTIFICATE-----Generated at Fri Jul 24 18:51:14 2026 by rpki-client