$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136342e302e302f31362d3136203d3e2030.roa File: 3231312e3136342e302e302f31362d3136203d3e2030.roa (raw, json) Hash identifier: 154g2tXyRSsSTombg+OLwa95YCmLkYqHdp1owdCp8dY= Subject key identifier: 3B:B3:AF:32:AE:6E:CC:1B:57:92:DD:5E:52:66:8C:61:35:00:CF:D7 Certificate issuer: /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09 Certificate serial: 1E15B49C6EB61E08F23E19517DB6A4D2F45D1240 Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136342e302e302f31362d3136203d3e2030.roa Signing time: Thu 07 May 2026 02:21:20 +0000 ROA not before: Thu 07 May 2026 02:16:20 +0000 ROA not after: Thu 06 May 2027 02:21:20 +0000 asID: 0 IP address blocks: 211.164.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 13:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:15:b4:9c:6e:b6:1e:08:f2:3e:19:51:7d:b6:a4:d2:f4:5d:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09 Validity Not Before: May 7 02:16:20 2026 GMT Not After : May 6 02:21:20 2027 GMT Subject: CN=3BB3AF32AE6ECC1B5792DD5E52668C613500CFD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:07:d3:35:07:7f:fd:b9:16:42:57:03:22:ff: 74:ce:f2:c9:6c:9b:33:7a:60:e0:98:99:25:fa:7b: fd:74:fd:0a:cd:03:20:13:da:1d:81:36:da:a6:32: 81:23:cb:c2:2e:f6:eb:52:c8:fa:fe:c4:ec:39:01: 4b:55:43:df:cb:4e:52:64:33:79:2e:7a:d3:1b:93: 5c:ad:85:e8:21:d9:47:a7:5d:43:fb:38:fb:9a:34: 03:75:2d:86:92:bd:53:e4:fa:87:09:19:d8:dc:7b: 40:43:3b:4f:f2:ec:66:e2:d1:34:20:0f:cd:98:15: 0c:a7:16:90:36:a3:20:05:fb:e7:12:fe:79:db:62: dc:54:29:35:80:60:19:89:fa:96:40:84:65:79:2c: 64:72:04:ef:8f:59:5a:3e:fe:ee:e5:3d:70:cc:96: 7d:4e:55:b8:8a:b3:80:9e:8d:21:96:34:f1:ec:a2: 34:0e:c7:f6:dc:7c:17:76:f4:26:76:36:dd:37:30: 61:2b:7e:e1:3f:58:84:ff:3a:86:ad:15:02:2c:df: 2d:9b:79:a0:4a:c2:f2:e3:78:b0:bc:c4:44:37:02: 88:10:61:51:a0:95:34:f4:7f:5a:8c:3b:4a:cf:af: bb:8c:a6:56:1d:f8:87:ea:94:33:6c:51:89:40:57: 21:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B3:AF:32:AE:6E:CC:1B:57:92:DD:5E:52:66:8C:61:35:00:CF:D7 X509v3 Authority Key Identifier: keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136342e302e302f31362d3136203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.164.0.0/16 Signature Algorithm: sha256WithRSAEncryption 34:9c:c2:43:e1:9a:ad:6d:f6:c9:6e:2e:45:f8:7a:fd:f5:dc: ec:ad:1a:68:a9:94:1c:56:ca:c6:9f:bc:c7:1f:79:0c:0e:e0: 5e:06:4e:b9:cb:19:02:6f:b9:85:cb:7e:57:11:6a:e4:dc:ae: 4d:b1:7f:43:b5:36:f7:70:7c:4b:ed:ce:fe:54:68:1f:26:98: 7e:99:60:bd:f7:72:e5:df:5a:24:51:09:a8:9a:11:c8:9e:83: e4:6a:3b:42:66:09:00:fa:49:e2:4c:05:1d:06:35:47:52:4d: 39:de:10:b7:54:ea:7f:e2:61:6a:fe:03:62:0a:c2:51:3f:5d: 6c:3d:92:d2:c7:e4:8b:29:ac:da:ed:72:e6:fb:7d:6a:05:a6: 4d:e3:e3:bb:10:30:ed:bb:47:f7:14:44:f7:f1:ce:9b:e4:fa: c8:2b:c2:04:9e:c9:3d:6d:fc:c0:68:61:a5:cc:28:bc:4d:68: 7c:b5:69:42:94:1d:2d:60:68:ae:5a:37:24:7b:1c:61:f0:94: 5f:53:65:cd:43:ab:66:66:b3:4f:82:b0:92:91:c7:a0:a7:d0: 82:e1:90:67:d2:27:e4:c3:12:26:57:cf:d1:dc:12:ff:e7:6f: c8:96:c6:84:fd:87:ca:2a:90:8e:2a:8a:bd:cb:ad:c0:85:96: 16:1a:5d:c7 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUHhW0nG62HgjyPhlRfbak0vRdEkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhFNDI3OTc3NDg0RjM2RjNGMEE0NTI4OEQ2REY2NEYz QTdGQ0IwOTAeFw0yNjA1MDcwMjE2MjBaFw0yNzA1MDYwMjIxMjBaMDMxMTAvBgNV BAMTKDNCQjNBRjMyQUU2RUNDMUI1NzkyREQ1RTUyNjY4QzYxMzUwMENGRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeB9M1B3/9uRZCVwMi/3TO8sls mzN6YOCYmSX6e/10/QrNAyAT2h2BNtqmMoEjy8Iu9utSyPr+xOw5AUtVQ9/LTlJk M3kuetMbk1ythegh2UenXUP7OPuaNAN1LYaSvVPk+ocJGdjce0BDO0/y7Gbi0TQg D82YFQynFpA2oyAF++cS/nnbYtxUKTWAYBmJ+pZAhGV5LGRyBO+PWVo+/u7lPXDM ln1OVbiKs4CejSGWNPHsojQOx/bcfBd29CZ2Nt03MGErfuE/WIT/OoatFQIs3y2b eaBKwvLjeLC8xEQ3AogQYVGglTT0f1qMO0rPr7uMplYd+IfqlDNsUYlAVyHvAgMB AAGjggIIMIICBDAdBgNVHQ4EFgQUO7OvMq5uzBtXkt1eUmaMYTUAz9cwHwYDVR0j BBgwFoAUOOQnl3SE828/CkUojW32Tzp/ywkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDU4NjM1ODA5NTA4NTU3Ny8wLzM4RTQyNzk3NzQ4NEYzNkYzRjBBNDUyODhENkRG NjRGM0E3RkNCMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzhFNDI3OTc3NDg0RjM2RjNGMEE0NTI4OEQ2REY2NEYzQTdGQ0IwOS5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA0NTg2MzU4MDk1MDg1NTc3LzAvMzIzMTMxMmUzMTM2 MzQyZTMwMmUzMDJmMzEzNjJkMzEzNjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDTpDAN BgkqhkiG9w0BAQsFAAOCAQEANJzCQ+GarW32yW4uRfh6/fXc7K0aaKmUHFbKxp+8 xx95DA7gXgZOucsZAm+5hct+VxFq5NyuTbF/Q7U293B8S+3O/lRoHyaYfplgvfdy 5d9aJFEJqJoRyJ6D5Go7QmYJAPpJ4kwFHQY1R1JNOd4Qt1Tqf+Jhav4DYgrCUT9d bD2S0sfkiyms2u1y5vt9agWmTePjuxAw7btH9xRE9/HOm+T6yCvCBJ7JPW38wGhh pcwovE1ofLVpQpQdLWBorlo3JHscYfCUX1NlzUOrZmazT4KwkpHHoKfQguGQZ9In 5MMSJlfP0dwS/+dvyJbGhP2HyiqQjiqKvcutwIWWFhpdxw== -----END CERTIFICATE-----Generated at Tue May 12 21:38:25 2026 by rpki-client