$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e34382e302f32322d3234203d3e20323034373635.roa File: 3231312e3134392e34382e302f32322d3234203d3e20323034373635.roa (raw, json) Hash identifier: qCNdK1l4ptrqjtdf9uUp8Yyhpo1pmESfXCndkCfyR3g= Subject key identifier: D2:F8:F8:FC:5F:A6:15:BA:7E:F7:B6:28:1B:54:A7:37:09:09:AD:F7 Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 6C63396FB12ED37F4034F2B5CF24BC83260582AF Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e34382e302f32322d3234203d3e20323034373635.roa Signing time: Wed 06 May 2026 06:41:02 +0000 ROA not before: Wed 06 May 2026 06:36:02 +0000 ROA not after: Wed 05 May 2027 06:41:02 +0000 asID: 204765 IP address blocks: 211.149.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:63:39:6f:b1:2e:d3:7f:40:34:f2:b5:cf:24:bc:83:26:05:82:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: May 6 06:36:02 2026 GMT Not After : May 5 06:41:02 2027 GMT Subject: CN=D2F8F8FC5FA615BA7EF7B6281B54A7370909ADF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c7:05:84:42:c6:2e:8a:cb:6c:71:aa:3c:39: 05:85:2f:b4:b7:b5:5a:66:63:04:ab:12:0f:72:0c: d0:b3:27:d6:2c:ba:e7:bf:ac:4e:d6:78:a8:55:4a: 2b:aa:40:ec:c0:06:61:93:c9:db:cb:ec:11:01:a9: 47:42:50:c0:50:dc:b1:36:91:1b:85:4b:27:8f:04: df:57:3a:9a:2e:f6:d0:b1:0d:7f:8b:82:28:92:66: 54:9f:b6:8c:a4:6f:b9:44:19:94:9e:f1:d8:64:56: 67:2f:9c:71:cc:20:7c:79:d3:69:25:6f:e9:2f:ab: b6:44:17:aa:54:20:9d:ca:28:2a:b2:51:8d:74:f7: 25:42:7a:60:02:1b:6b:aa:c1:97:b8:10:3d:a4:96: 9f:91:7a:fb:8d:2b:65:bf:b3:5b:c5:e3:93:80:54: 02:17:c9:a3:42:8b:57:1e:dd:97:97:0e:0c:bc:16: 82:f2:c9:18:ab:5c:ef:cf:ed:ed:4a:fb:23:54:2f: e3:56:c5:16:23:3d:b9:26:20:61:65:db:44:43:1a: e1:b1:86:9c:09:29:6f:07:81:7e:c0:a5:4b:f0:66: 3d:ed:88:17:33:6f:b3:f7:f8:90:9b:f4:50:68:f0: 93:27:7e:97:50:20:fb:c6:8d:13:cd:ae:e4:07:ed: f0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F8:F8:FC:5F:A6:15:BA:7E:F7:B6:28:1B:54:A7:37:09:09:AD:F7 X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e34382e302f32322d3234203d3e20323034373635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.149.48.0/22 Signature Algorithm: sha256WithRSAEncryption 32:32:a0:e5:05:6c:e5:4f:bf:3a:9e:b9:7e:cb:1b:07:43:61: f8:44:c2:69:9f:2c:2d:6b:28:a5:06:44:19:e4:60:66:32:56: 58:14:37:42:ec:1f:a8:ab:8e:39:c4:15:3f:d6:0a:e6:c6:60: e0:4e:02:44:49:38:9e:57:34:dc:22:ad:f5:d0:1b:e2:82:de: 2a:04:79:07:86:de:6b:28:77:13:07:18:01:6c:b2:98:76:db: e5:d6:de:28:25:02:3a:71:c0:32:77:5c:8d:84:50:22:65:0b: f5:bf:6e:a6:6b:00:94:54:08:c2:2b:d9:8f:d8:e3:e2:f1:4f: 16:57:83:e7:27:15:2e:a5:8b:4b:1a:4b:9e:3a:2f:4c:2c:5c: 36:ff:84:fe:4d:59:55:74:c3:9d:64:3d:5d:d5:1d:ab:d1:7a: 89:28:51:04:2e:b4:d9:ab:c0:9a:93:80:13:a6:35:85:6d:29: 9b:8f:3a:7d:f1:da:af:00:3e:2b:a0:51:26:c9:cd:2e:5f:74: 31:34:6a:2e:fe:7a:38:a0:2b:65:93:8a:08:cd:a4:cc:c8:a3: 00:8d:e2:7c:b3:fd:7e:a9:ff:58:f9:de:9f:fa:59:e1:ac:99: df:e1:2b:ab:62:ec:1c:d4:f9:43:a1:c3:35:8c:a9:f3:fc:6b: ca:ae:6e:d9 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUbGM5b7Eu039ANPK1zyS8gyYFgq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA1MDYwNjM2MDJaFw0yNzA1MDUwNjQxMDJaMDMxMTAvBgNV BAMTKEQyRjhGOEZDNUZBNjE1QkE3RUY3QjYyODFCNTRBNzM3MDkwOUFERjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXxwWEQsYuistscao8OQWFL7S3 tVpmYwSrEg9yDNCzJ9Ysuue/rE7WeKhVSiuqQOzABmGTydvL7BEBqUdCUMBQ3LE2 kRuFSyePBN9XOpou9tCxDX+LgiiSZlSftoykb7lEGZSe8dhkVmcvnHHMIHx502kl b+kvq7ZEF6pUIJ3KKCqyUY109yVCemACG2uqwZe4ED2klp+RevuNK2W/s1vF45OA VAIXyaNCi1ce3ZeXDgy8FoLyyRirXO/P7e1K+yNUL+NWxRYjPbkmIGFl20RDGuGx hpwJKW8HgX7ApUvwZj3tiBczb7P3+JCb9FBo8JMnfpdQIPvGjRPNruQH7fA3AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU0vj4/F+mFbp+97YoG1SnNwkJrfcwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC8zMjMxMzEyZTMx MzQzOTJlMzQzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzYzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAtOVMDANBgkqhkiG9w0BAQsFAAOCAQEAMjKg5QVs5U+/Op65fssb B0Nh+ETCaZ8sLWsopQZEGeRgZjJWWBQ3QuwfqKuOOcQVP9YK5sZg4E4CREk4nlc0 3CKt9dAb4oLeKgR5B4beayh3EwcYAWyymHbb5dbeKCUCOnHAMndcjYRQImUL9b9u pmsAlFQIwivZj9jj4vFPFleD5ycVLqWLSxpLnjovTCxcNv+E/k1ZVXTDnWQ9XdUd q9F6iShRBC602avAmpOAE6Y1hW0pm486ffHarwA+K6BRJsnNLl90MTRqLv56OKAr ZZOKCM2kzMijAI3ifLP9fqn/WPnen/pZ4ayZ3+Erq2LsHNT5Q6HDNYyp8/xryq5u 2Q== -----END CERTIFICATE-----Generated at Wed May 13 14:40:51 2026 by rpki-client