$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3131342e3131322e302e302f32342d3234203d3e20313334373030.roa File: 3131342e3131322e302e302f32342d3234203d3e20313334373030.roa (raw, json) Hash identifier: tjD/TrqFoZzLIuXKc0gCp7+vVTuql9sVd0NTSQ+0eac= Subject key identifier: 22:55:AD:94:F2:57:A2:78:71:5D:F0:98:B8:7A:76:0F:78:F2:54:14 Certificate issuer: /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Certificate serial: 6C7366ACD5E8BBE5995CE890DC2D157AD3D77741 Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3131342e3131322e302e302f32342d3234203d3e20313334373030.roa Signing time: Mon 27 Apr 2026 10:24:24 +0000 ROA not before: Mon 27 Apr 2026 10:19:24 +0000 ROA not after: Mon 26 Apr 2027 10:24:24 +0000 asID: 134700 IP address blocks: 114.112.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:73:66:ac:d5:e8:bb:e5:99:5c:e8:90:dc:2d:15:7a:d3:d7:77:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Validity Not Before: Apr 27 10:19:24 2026 GMT Not After : Apr 26 10:24:24 2027 GMT Subject: CN=2255AD94F257A278715DF098B87A760F78F25414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:60:58:ac:a1:c8:27:f9:67:5c:bd:39:ab:cf: 32:78:2a:88:a3:0b:fa:0e:38:d0:0f:b2:46:ce:3f: 46:5e:f5:22:ad:8a:e8:48:01:e1:c4:56:33:63:32: e1:6b:44:88:af:50:12:8a:b4:a3:d3:ed:b6:2c:19: c5:9f:e7:a1:80:d0:28:ae:b5:e2:80:fe:1b:e1:ca: 8c:f9:0a:d2:03:9f:8c:58:c5:3b:03:ae:78:39:8d: 1e:16:e9:78:af:01:ea:e1:e2:43:12:7e:80:18:58: 63:ae:45:9c:1a:a1:bf:57:39:a8:a7:f8:fd:0e:b7: 64:43:6e:ba:b8:52:69:3d:d4:02:e2:96:4b:e7:1a: 66:a5:a8:79:53:60:bc:a1:7f:11:8a:cd:20:d0:19: 38:7a:d8:ee:36:d3:4a:73:b3:0d:3b:5d:ba:e1:78: 18:d5:0b:1f:60:c2:7b:e0:af:5d:2a:6e:cd:db:4b: 80:5e:7e:24:97:2d:38:6e:50:ba:ce:a0:f5:a3:ef: 5b:67:55:a9:b7:60:2d:69:12:52:6b:81:b9:42:14: 77:3e:0f:8d:ce:a5:de:42:4b:3f:99:02:c0:f5:54: 23:78:78:82:09:bc:6d:c9:4d:26:5e:11:2a:d0:85: a4:a1:ad:5d:5b:26:ef:bf:67:84:5c:23:f7:cc:e8: 12:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:55:AD:94:F2:57:A2:78:71:5D:F0:98:B8:7A:76:0F:78:F2:54:14 X509v3 Authority Key Identifier: keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3131342e3131322e302e302f32342d3234203d3e20313334373030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.112.0.0/24 Signature Algorithm: sha256WithRSAEncryption a3:53:f1:2c:ee:dd:b7:f8:d3:29:fb:0d:50:85:fe:36:7c:32: 70:aa:dd:44:c3:dd:39:c2:99:44:22:77:15:a2:49:32:61:33: a1:31:92:23:49:05:ef:b3:a6:19:3f:85:19:14:49:1b:2e:3b: ea:46:29:5f:37:72:17:0e:7e:79:d7:6a:59:51:e7:e7:e9:1f: 28:6a:0a:f9:57:ec:56:5d:16:65:bb:e4:b3:c3:31:ce:54:bd: af:38:32:92:93:b4:e3:45:50:bf:be:55:88:7d:3b:71:ab:cc: 7b:58:a0:72:a6:31:b9:e2:e4:e2:1d:c1:37:8b:6f:58:02:2d: ba:5b:d1:29:c3:dc:c5:ac:d3:00:b2:b9:ad:9b:2c:79:58:54: 43:57:0f:2e:1e:89:10:fb:6c:ad:5a:8b:87:7d:70:33:b4:87: ca:db:6c:18:50:31:07:e4:43:33:d7:2c:59:bf:33:77:2b:f2: b0:c8:c3:62:2f:60:0e:85:26:c3:62:33:cd:95:32:4b:ea:28: d9:53:23:a8:c2:e9:23:f1:67:3b:b0:b7:48:45:23:e2:0c:21: c8:b2:6c:3f:0f:16:e4:35:96:45:88:62:e2:e2:4b:5b:6f:cc: 41:20:9e:1d:89:a0:f9:19:e5:b7:45:6b:37:2a:37:7f:61:4d: ad:ec:00:0e -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUbHNmrNXou+WZXOiQ3C0VetPXd0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1 M0Y5MzdFMTAeFw0yNjA0MjcxMDE5MjRaFw0yNzA0MjYxMDI0MjRaMDMxMTAvBgNV BAMTKDIyNTVBRDk0RjI1N0EyNzg3MTVERjA5OEI4N0E3NjBGNzhGMjU0MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3YFisocgn+WdcvTmrzzJ4Koij C/oOONAPskbOP0Ze9SKtiuhIAeHEVjNjMuFrRIivUBKKtKPT7bYsGcWf56GA0Ciu teKA/hvhyoz5CtIDn4xYxTsDrng5jR4W6XivAerh4kMSfoAYWGOuRZwaob9XOain +P0Ot2RDbrq4Umk91ALilkvnGmalqHlTYLyhfxGKzSDQGTh62O4200pzsw07Xbrh eBjVCx9gwnvgr10qbs3bS4BefiSXLThuULrOoPWj71tnVam3YC1pElJrgblCFHc+ D43Opd5CSz+ZAsD1VCN4eIIJvG3JTSZeESrQhaShrV1bJu+/Z4RcI/fM6BIFAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUIlWtlPJXonhxXfCYuHp2D3jyVBQwHwYDVR0j BBgwFoAU/05o7RCqsH2PTuwF/QNFeVP5N+EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTU5MDc4Ny8wL0ZGNEU2OEVEMTBBQUIwN0Q4RjRFRUMwNUZEMDM0 NTc5NTNGOTM3RTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1M0Y5MzdFMS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4ODU1MzEyOTU5MDc4Ny8wLzMxMzEzNDJlMzEz MTMyMmUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzAzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHJwADANBgkqhkiG9w0BAQsFAAOCAQEAo1PxLO7dt/jTKfsNUIX+Nnwy cKrdRMPdOcKZRCJ3FaJJMmEzoTGSI0kF77OmGT+FGRRJGy476kYpXzdyFw5+eddq WVHn5+kfKGoK+VfsVl0WZbvks8MxzlS9rzgykpO040VQv75ViH07cavMe1igcqYx ueLk4h3BN4tvWAItulvRKcPcxazTALK5rZsseVhUQ1cPLh6JEPtsrVqLh31wM7SH yttsGFAxB+RDM9csWb8zdyvysMjDYi9gDoUmw2IzzZUyS+oo2VMjqMLpI/FnO7C3 SEUj4gwhyLJsPw8W5DWWRYhi4uJLW2/MQSCeHYmg+Rnlt0VrNyo3f2FNrewADg== -----END CERTIFICATE-----Generated at Wed May 13 16:15:05 2026 by rpki-client