$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097031725546012673/0/3231312e3135382e32352e302f32342d3234203d3e203233383531.roa File: 3231312e3135382e32352e302f32342d3234203d3e203233383531.roa (raw, json) Hash identifier: lgcHC+1PIJ23YX/sNOoex75tU2ptb0Da5GWkVFKpu/Y= Subject key identifier: DF:7F:D8:F4:AD:CE:91:9F:E2:72:A2:6B:9B:F0:37:18:E6:B0:42:4C Certificate issuer: /CN=E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0 Certificate serial: 682E993FD18ADB73E6371484CD8426D4AD295AD4 Authority key identifier: E9:A7:D9:B6:8F:F0:40:B5:CE:E2:C4:F6:56:99:74:2E:4B:D0:ED:E0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/3231312e3135382e32352e302f32342d3234203d3e203233383531.roa Signing time: Wed 06 May 2026 08:48:02 +0000 ROA not before: Wed 06 May 2026 08:43:02 +0000 ROA not after: Wed 05 May 2027 08:48:02 +0000 asID: 23851 IP address blocks: 211.158.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.crl rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:2e:99:3f:d1:8a:db:73:e6:37:14:84:cd:84:26:d4:ad:29:5a:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0 Validity Not Before: May 6 08:43:02 2026 GMT Not After : May 5 08:48:02 2027 GMT Subject: CN=DF7FD8F4ADCE919FE272A26B9BF03718E6B0424C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:12:36:d8:2e:28:0b:29:5c:3b:4c:17:90:ce: 8a:1b:2b:77:38:75:f3:3c:9f:3a:ec:4e:79:f3:38: ab:f0:d4:f6:c5:4b:34:ed:6f:b5:05:aa:c0:c3:cc: 63:db:4c:a5:85:15:5a:1a:10:e5:8e:e5:76:f9:1f: 87:79:83:63:3e:ba:ff:f4:3a:5a:9e:24:8c:c5:36: 54:87:f3:38:cb:16:40:6f:cb:bd:a1:4d:2d:89:a1: 12:a7:5a:28:2c:d3:2f:73:3a:0f:7f:65:6c:e9:47: 9b:28:3f:14:10:3b:41:0b:b8:cb:6a:89:9b:30:a2: 6d:d6:5c:be:3d:48:c0:04:a7:f8:57:7e:43:3a:0c: f5:38:95:45:63:f7:b5:b5:15:80:7c:1c:aa:d9:3a: 9f:c9:0f:e4:d3:c4:fd:cf:7b:1a:0c:f7:de:8d:af: 5f:b6:d8:53:d6:fc:f8:c5:9e:91:0e:b2:1c:e7:45: a6:e7:d4:37:1d:8e:a5:00:23:44:96:9f:9c:e8:13: 2e:15:37:2a:12:d5:ad:0a:a5:ff:5e:90:64:7c:1d: 35:ab:9a:b8:e7:09:4c:ee:57:46:fe:03:fc:04:1b: ba:f1:0d:db:ba:df:f1:87:59:a2:64:d9:ce:8d:c0: bf:09:ce:04:1d:9d:73:1d:cb:57:9b:91:82:aa:dc: a2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:7F:D8:F4:AD:CE:91:9F:E2:72:A2:6B:9B:F0:37:18:E6:B0:42:4C X509v3 Authority Key Identifier: keyid:E9:A7:D9:B6:8F:F0:40:B5:CE:E2:C4:F6:56:99:74:2E:4B:D0:ED:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/3231312e3135382e32352e302f32342d3234203d3e203233383531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.158.25.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:32:ba:ba:c6:62:56:cc:41:cc:db:8b:df:61:7f:cf:d8:f1: 8d:78:c7:7d:9f:fa:eb:67:76:76:b0:b2:51:5f:6f:ab:1e:fc: d1:0d:a4:e8:1d:16:d9:d6:6f:63:cf:f0:75:64:69:19:6a:a8: 41:a3:7d:88:18:fa:ae:d9:fb:75:53:36:9a:85:ca:a7:c7:23: 0f:17:7e:22:e0:ce:16:a8:9c:26:8e:89:77:2b:cb:1b:d0:39: 0e:09:0e:14:fb:c7:0b:64:4f:24:4b:db:50:69:0d:ed:bd:8e: 1b:ce:78:b2:c2:b6:51:1b:bb:4b:e4:5b:a4:42:3d:2e:11:42: 39:9e:35:75:61:34:b2:f0:de:27:ac:ae:c6:3c:6a:84:f9:01: fc:aa:c6:55:38:2e:7c:f2:a2:6b:a9:4b:3b:8f:73:12:d5:ab: 96:5b:b9:e6:79:8d:38:4d:d7:7d:ce:28:61:ae:1c:a8:a7:a7: b8:cd:30:7a:07:53:d4:44:aa:23:aa:0b:8a:7a:6c:7b:bb:63: dd:cb:fd:c2:d7:e0:d4:5f:79:05:ed:02:4a:71:e6:71:5d:b0: 94:a1:e2:ed:59:6f:2a:25:e4:e3:5f:49:29:41:12:5d:eb:c5: 00:95:a3:e8:53:c2:30:ce:52:f3:7f:c9:15:7a:c4:6e:b7:4e: cd:f6:2b:8d -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUaC6ZP9GK23PmNxSEzYQm1K0pWtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlBN0Q5QjY4RkYwNDBCNUNFRTJDNEY2NTY5OTc0MkU0 QkQwRURFMDAeFw0yNjA1MDYwODQzMDJaFw0yNzA1MDUwODQ4MDJaMDMxMTAvBgNV BAMTKERGN0ZEOEY0QURDRTkxOUZFMjcyQTI2QjlCRjAzNzE4RTZCMDQyNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUEjbYLigLKVw7TBeQzoobK3c4 dfM8nzrsTnnzOKvw1PbFSzTtb7UFqsDDzGPbTKWFFVoaEOWO5Xb5H4d5g2M+uv/0 OlqeJIzFNlSH8zjLFkBvy72hTS2JoRKnWigs0y9zOg9/ZWzpR5soPxQQO0ELuMtq iZswom3WXL49SMAEp/hXfkM6DPU4lUVj97W1FYB8HKrZOp/JD+TTxP3PexoM996N r1+22FPW/PjFnpEOshznRabn1DcdjqUAI0SWn5zoEy4VNyoS1a0Kpf9ekGR8HTWr mrjnCUzuV0b+A/wEG7rxDdu63/GHWaJk2c6NwL8JzgQdnXMdy1ebkYKq3KK/AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU33/Y9K3OkZ/icqJrm/A3GOawQkwwHwYDVR0j BBgwFoAU6afZto/wQLXO4sT2Vpl0LkvQ7eAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzMTcyNTU0NjAxMjY3My8wL0U5QTdEOUI2OEZGMDQwQjVDRUUyQzRGNjU2OTk3 NDJFNEJEMEVERTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTlBN0Q5QjY4RkYwNDBCNUNFRTJDNEY2NTY5OTc0MkU0QkQwRURFMC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NzAzMTcyNTU0NjAxMjY3My8wLzMyMzEzMTJlMzEz NTM4MmUzMjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM4MzUzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEANOeGTANBgkqhkiG9w0BAQsFAAOCAQEAfzK6usZiVsxBzNuL32F/z9jx jXjHfZ/662d2drCyUV9vqx780Q2k6B0W2dZvY8/wdWRpGWqoQaN9iBj6rtn7dVM2 moXKp8cjDxd+IuDOFqicJo6JdyvLG9A5DgkOFPvHC2RPJEvbUGkN7b2OG854ssK2 URu7S+RbpEI9LhFCOZ41dWE0svDeJ6yuxjxqhPkB/KrGVTgufPKia6lLO49zEtWr llu55nmNOE3Xfc4oYa4cqKenuM0wegdT1ESqI6oLinpse7tj3cv9wtfg1F95Be0C SnHmcV2wlKHi7VlvKiXk419JKUESXevFAJWj6FPCMM5S83/JFXrEbrdOzfYrjQ== -----END CERTIFICATE-----Generated at Wed May 13 15:36:02 2026 by rpki-client