$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135372e3134322e302f32332d3234203d3e203233373234.roa File: 3231312e3135372e3134322e302f32332d3234203d3e203233373234.roa (raw, json) Hash identifier: WST2czKsVB/ewvcOeWL+JdFdYr1zVF2oFq9fGdTDQ8s= Subject key identifier: D2:3F:DE:A6:1E:F8:F1:8D:62:03:15:9E:C2:41:CA:E3:19:09:F8:0A Certificate issuer: /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC Certificate serial: 5B2EC10FFB40ACEC3B1430704CA53E884083A648 Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135372e3134322e302f32332d3234203d3e203233373234.roa Signing time: Sat 09 May 2026 01:19:16 +0000 ROA not before: Sat 09 May 2026 01:14:16 +0000 ROA not after: Sat 08 May 2027 01:19:16 +0000 asID: 23724 IP address blocks: 211.157.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:2e:c1:0f:fb:40:ac:ec:3b:14:30:70:4c:a5:3e:88:40:83:a6:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC Validity Not Before: May 9 01:14:16 2026 GMT Not After : May 8 01:19:16 2027 GMT Subject: CN=D23FDEA61EF8F18D6203159EC241CAE31909F80A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b4:9b:c4:0e:b2:40:01:ee:d3:0c:b0:cf:ef: b1:5e:f4:5c:e7:53:84:5c:88:5b:9c:ff:49:5d:9e: 32:57:f3:cc:c1:70:2d:5e:39:6b:0a:69:d8:04:61: 37:c0:4c:c2:58:a2:bd:0b:c0:76:4b:d4:b6:66:35: bf:41:0a:81:f0:cf:36:12:03:ca:58:fe:1c:5f:15: 90:c6:20:da:25:7b:3a:b4:d7:ca:f2:72:8f:20:61: 37:e3:db:65:b0:62:03:68:a3:85:f2:7a:eb:01:2a: 21:4d:97:db:dd:3d:df:9c:40:a4:30:d5:a3:0f:f5: 88:6f:b0:98:00:37:9f:5a:7b:53:40:fb:c3:86:78: 6d:02:02:b4:c0:b6:54:af:9f:8f:19:7e:f8:4c:6a: a1:f5:f9:e8:e5:39:b1:d0:47:93:e0:a1:fc:ee:0f: 2a:df:5b:74:33:eb:30:af:07:a3:e7:3f:81:bb:78: 7d:b5:38:f3:ad:70:95:19:02:b7:fb:0c:5a:49:6a: c0:3d:07:a3:66:d1:f0:1e:a8:dd:38:2b:35:fd:23: 5a:a7:11:bd:89:5a:f4:df:2a:89:8a:de:1b:fd:eb: cf:7a:cd:4c:39:e3:ea:b4:21:c6:3f:9d:56:73:c8: f2:d5:4b:11:34:b4:a4:9e:a5:9d:42:66:4d:df:86: ff:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3F:DE:A6:1E:F8:F1:8D:62:03:15:9E:C2:41:CA:E3:19:09:F8:0A X509v3 Authority Key Identifier: keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135372e3134322e302f32332d3234203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.157.142.0/23 Signature Algorithm: sha256WithRSAEncryption 81:4a:67:ee:f2:e2:ba:ee:c6:88:db:02:3a:d8:ab:05:9a:f7: 5a:ee:fb:a2:21:f0:23:e2:59:91:78:77:a4:76:94:bc:96:1a: e5:6e:4c:05:2d:04:90:3d:ae:ea:ed:8c:e4:bb:b8:25:2c:c9: e8:b6:1d:e3:dd:a8:ae:5c:a9:dc:ec:12:dd:f2:d5:b3:f5:76: c2:6f:9e:b4:77:7b:90:2a:55:20:06:27:8b:6f:a0:06:9c:b5: d2:85:c3:7a:3f:29:bb:e3:c6:2b:74:47:99:62:75:85:86:c5: 12:e0:e6:6a:a5:91:09:f2:ec:1f:f6:22:91:d1:75:9e:2a:44: 4c:bc:f5:45:a1:fd:71:c7:78:e0:56:de:c3:13:8e:b7:83:ac: bd:0e:d6:e9:93:f5:44:45:ce:df:2e:63:e9:97:3b:6c:ee:19: e1:8e:1b:e8:d0:e9:c1:78:b9:68:ea:41:42:29:ae:9c:fa:87: 48:f0:08:cd:75:91:1b:f7:70:0e:a4:86:74:78:9c:27:c9:56: 44:ab:02:df:c5:61:43:62:df:2b:35:9a:67:55:96:a5:a0:e4: d8:4f:1d:7f:01:0d:a1:45:a5:9d:67:7d:47:12:20:78:df:bd: ce:ca:aa:00:93:44:6c:a1:fd:de:35:a5:e2:52:51:5c:43:f2: 93:90:71:ce -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUWy7BD/tArOw7FDBwTKU+iECDpkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYy NDM1NTNDQzAeFw0yNjA1MDkwMTE0MTZaFw0yNzA1MDgwMTE5MTZaMDMxMTAvBgNV BAMTKEQyM0ZERUE2MUVGOEYxOEQ2MjAzMTU5RUMyNDFDQUUzMTkwOUY4MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCztJvEDrJAAe7TDLDP77Fe9Fzn U4RciFuc/0ldnjJX88zBcC1eOWsKadgEYTfATMJYor0LwHZL1LZmNb9BCoHwzzYS A8pY/hxfFZDGINolezq018ryco8gYTfj22WwYgNoo4XyeusBKiFNl9vdPd+cQKQw 1aMP9YhvsJgAN59ae1NA+8OGeG0CArTAtlSvn48ZfvhMaqH1+ejlObHQR5Pgofzu DyrfW3Qz6zCvB6PnP4G7eH21OPOtcJUZArf7DFpJasA9B6Nm0fAeqN04KzX9I1qn Eb2JWvTfKomK3hv96896zUw54+q0IcY/nVZzyPLVSxE0tKSepZ1CZk3fhv/BAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU0j/eph748Y1iAxWewkHK4xkJ+AowHwYDVR0j BBgwFoAUIhAvfqs3yB6Hu16yFWC/piQ1U8wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkyMDAwNjk1NDIyMTU2OS8xLzIyMTAyRjdFQUIzN0M4MUU4N0JCNUVCMjE1NjBC RkE2MjQzNTUzQ0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYyNDM1NTNDQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTU5MjAwMDY5NTQyMjE1NjkvMS8zMjMxMzEyZTMx MzUzNzJlMzEzNDMyMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzMzM3MzIzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAdOdjjANBgkqhkiG9w0BAQsFAAOCAQEAgUpn7vLiuu7GiNsCOtir BZr3Wu77oiHwI+JZkXh3pHaUvJYa5W5MBS0EkD2u6u2M5Lu4JSzJ6LYd492orlyp 3OwS3fLVs/V2wm+etHd7kCpVIAYni2+gBpy10oXDej8pu+PGK3RHmWJ1hYbFEuDm aqWRCfLsH/YikdF1nipETLz1RaH9ccd44FbewxOOt4OsvQ7W6ZP1REXO3y5j6Zc7 bO4Z4Y4b6NDpwXi5aOpBQimunPqHSPAIzXWRG/dwDqSGdHicJ8lWRKsC38VhQ2Lf KzWaZ1WWpaDk2E8dfwENoUWlnWd9RxIgeN+9zsqqAJNEbKH93jWl4lJRXEPyk5Bx zg== -----END CERTIFICATE-----Generated at Wed May 13 13:48:22 2026 by rpki-client