$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136362e342e302f32322d3232203d3e2039333839.roa File: 3231312e3136362e342e302f32322d3232203d3e2039333839.roa (raw, json) Hash identifier: zcoNrtAm3WZ8QoAewQC1TPQwmjumDLjj/5UVZf/bvHk= Subject key identifier: 28:49:6F:D7:4E:8E:81:0D:51:D4:54:B4:FC:A0:82:7E:18:D4:93:8E Certificate issuer: /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09 Certificate serial: 4472978ED3103F49B63A15B68AAE253203F64938 Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136362e342e302f32322d3232203d3e2039333839.roa Signing time: Thu 07 May 2026 02:11:36 +0000 ROA not before: Thu 07 May 2026 02:06:36 +0000 ROA not after: Thu 06 May 2027 02:11:36 +0000 asID: 9389 IP address blocks: 211.166.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 14:12:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:72:97:8e:d3:10:3f:49:b6:3a:15:b6:8a:ae:25:32:03:f6:49:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09 Validity Not Before: May 7 02:06:36 2026 GMT Not After : May 6 02:11:36 2027 GMT Subject: CN=28496FD74E8E810D51D454B4FCA0827E18D4938E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:62:6b:36:39:46:7f:71:4b:de:08:39:b9:69: 8b:12:ca:73:1f:86:c5:f0:52:b5:c4:67:b4:c6:ac: 26:14:3a:4f:ee:cd:7f:37:8a:8f:c0:12:83:2d:4c: bb:77:e5:48:bb:40:f3:42:98:e1:48:d3:4b:3a:34: a9:20:d1:c3:fc:5f:ab:7b:dd:5f:2d:2f:92:34:65: 28:69:ed:0e:4b:8b:2f:d5:50:17:8c:9a:11:40:6b: 18:19:a9:6a:61:79:f5:60:b1:9b:6d:a8:c0:10:0c: 3a:fa:56:10:8e:fa:36:b0:3b:bb:08:ff:8a:ba:37: ea:ea:68:5e:87:f2:de:97:e9:6b:6a:ce:4f:4d:db: 36:85:8a:a8:13:bb:50:10:31:26:67:52:92:cf:30: 1d:8a:0f:38:c5:a1:7d:89:04:a0:4b:34:ad:ac:37: ac:fd:80:4f:f6:92:43:96:7d:20:ae:b1:1a:4a:7b: de:25:e7:a3:e4:f8:ce:ff:fc:a0:ab:21:49:82:4d: 13:a5:f2:78:bb:7a:bd:19:15:c4:92:0c:14:88:05: a8:c9:ed:70:fc:47:98:fc:3b:45:a8:b8:d8:1d:dc: f2:7d:85:b9:98:dd:6f:df:49:8e:f6:0b:70:70:26: 8f:ce:0b:31:06:7a:73:cd:2d:d4:4d:3a:a3:46:21: 50:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:49:6F:D7:4E:8E:81:0D:51:D4:54:B4:FC:A0:82:7E:18:D4:93:8E X509v3 Authority Key Identifier: keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136362e342e302f32322d3232203d3e2039333839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.166.4.0/22 Signature Algorithm: sha256WithRSAEncryption 78:86:08:e8:a8:5a:5a:c9:56:29:e1:53:ec:cf:ea:32:91:e7: 3e:c2:ea:d8:bb:38:23:03:3e:fe:ae:9a:39:89:95:00:b6:e1: eb:5f:48:fc:a9:93:c2:cc:9e:a7:14:47:a0:cc:69:4a:97:2e: 8a:f9:93:ca:3c:ae:f7:c9:e9:ab:b8:8c:20:c1:22:cc:e3:b4: ae:00:e5:bb:8f:f2:8f:13:bd:f6:a0:1b:27:71:6d:a4:c3:27: 8a:96:50:32:a2:56:9e:b3:bf:ca:50:6e:7d:a5:35:4d:2f:58: 3c:96:78:43:9f:50:84:4d:66:bd:10:8e:f8:ad:8a:af:80:38: 59:8c:a7:09:9c:16:1a:65:01:a7:7d:d4:fb:c9:80:96:49:ee: f6:58:bd:cb:37:26:f0:06:24:4a:ef:78:4f:8c:4a:fa:a8:91: 1c:01:a6:cc:ad:08:b1:3a:53:9e:69:6c:3f:bd:3c:11:70:87: b9:7b:4a:cc:95:17:5f:cf:30:96:e8:1f:52:fb:76:b8:ce:e7: bc:b8:26:bc:61:d4:39:9a:6a:b5:a3:fa:ae:43:98:63:8b:16: f7:1f:0d:6d:10:a4:69:0e:e3:bd:dc:b4:61:48:66:b6:43:e0: 7e:aa:00:fc:17:ca:13:e5:d2:16:33:17:dd:b3:84:d4:0b:35: 12:4a:6b:76 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIURHKXjtMQP0m2OhW2iq4lMgP2STgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhFNDI3OTc3NDg0RjM2RjNGMEE0NTI4OEQ2REY2NEYz QTdGQ0IwOTAeFw0yNjA1MDcwMjA2MzZaFw0yNzA1MDYwMjExMzZaMDMxMTAvBgNV BAMTKDI4NDk2RkQ3NEU4RTgxMEQ1MUQ0NTRCNEZDQTA4MjdFMThENDkzOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLYms2OUZ/cUveCDm5aYsSynMf hsXwUrXEZ7TGrCYUOk/uzX83io/AEoMtTLt35Ui7QPNCmOFI00s6NKkg0cP8X6t7 3V8tL5I0ZShp7Q5Liy/VUBeMmhFAaxgZqWphefVgsZttqMAQDDr6VhCO+jawO7sI /4q6N+rqaF6H8t6X6Wtqzk9N2zaFiqgTu1AQMSZnUpLPMB2KDzjFoX2JBKBLNK2s N6z9gE/2kkOWfSCusRpKe94l56Pk+M7//KCrIUmCTROl8ni7er0ZFcSSDBSIBajJ 7XD8R5j8O0WouNgd3PJ9hbmY3W/fSY72C3BwJo/OCzEGenPNLdRNOqNGIVBPAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUKElv106OgQ1R1FS0/KCCfhjUk44wHwYDVR0j BBgwFoAUOOQnl3SE828/CkUojW32Tzp/ywkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDU4NjM1ODA5NTA4NTU3Ny8wLzM4RTQyNzk3NzQ4NEYzNkYzRjBBNDUyODhENkRG NjRGM0E3RkNCMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzhFNDI3OTc3NDg0RjM2RjNGMEE0NTI4OEQ2REY2NEYzQTdGQ0IwOS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA0NTg2MzU4MDk1MDg1NTc3LzAvMzIzMTMxMmUzMTM2 MzYyZTM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzkzMzM4Mzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BALTpgQwDQYJKoZIhvcNAQELBQADggEBAHiGCOioWlrJVinhU+zP6jKR5z7C6ti7 OCMDPv6umjmJlQC24etfSPypk8LMnqcUR6DMaUqXLor5k8o8rvfJ6au4jCDBIszj tK4A5buP8o8TvfagGydxbaTDJ4qWUDKiVp6zv8pQbn2lNU0vWDyWeEOfUIRNZr0Q jvitiq+AOFmMpwmcFhplAad91PvJgJZJ7vZYvcs3JvAGJErveE+MSvqokRwBpsyt CLE6U55pbD+9PBFwh7l7SsyVF1/PMJboH1L7drjO57y4Jrxh1DmaarWj+q5DmGOL FvcfDW0QpGkO473ctGFIZrZD4H6qAPwXyhPl0hYzF92zhNQLNRJKa3Y= -----END CERTIFICATE-----Generated at Wed May 13 08:39:10 2026 by rpki-client