$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136362e382e302f32312d3231203d3e2039333839.roa File: 3231312e3136362e382e302f32312d3231203d3e2039333839.roa (raw, json) Hash identifier: vl4juZNW2Hmjmdual9iG/jAjNWYKLLu4a+AE7yrUKP4= Subject key identifier: 92:BC:71:FA:81:91:CF:96:23:FB:C9:87:4A:E0:C8:75:F5:CC:A5:74 Certificate issuer: /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09 Certificate serial: 5FFB8DF854570FC00BEE94D6BE67B9E18828472D Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136362e382e302f32312d3231203d3e2039333839.roa Signing time: Thu 07 May 2026 02:11:37 +0000 ROA not before: Thu 07 May 2026 02:06:37 +0000 ROA not after: Thu 06 May 2027 02:11:37 +0000 asID: 9389 IP address blocks: 211.166.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:fb:8d:f8:54:57:0f:c0:0b:ee:94:d6:be:67:b9:e1:88:28:47:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09 Validity Not Before: May 7 02:06:37 2026 GMT Not After : May 6 02:11:37 2027 GMT Subject: CN=92BC71FA8191CF9623FBC9874AE0C875F5CCA574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ba:0d:c1:2d:bc:d6:b2:ce:93:88:39:bf:e7: 50:1d:bb:76:ca:2d:7d:8d:a5:c7:57:24:9f:c4:e5: 33:51:5e:1a:e0:f8:82:a7:95:5a:9d:fb:ba:6d:c9: ab:af:f1:f6:c1:b8:9c:b4:ed:13:30:ee:fa:98:99: a9:38:57:e4:25:e8:a9:44:f4:43:c5:ce:e5:b1:22: 1c:08:fd:11:a0:7f:28:e8:a7:7d:ea:42:56:15:b4: f2:0a:f9:4d:a9:6e:fa:62:cb:66:0d:7f:29:b0:d4: 4e:37:26:40:a0:67:0b:0d:eb:e1:b7:34:a4:4d:6b: f4:5e:18:66:ef:1d:b1:c7:5f:53:ae:b6:b2:2e:3f: 8e:87:2f:65:0d:d9:4e:81:28:12:01:e2:b5:65:78: 7f:d9:a9:2a:70:ec:e6:c5:f2:bf:0b:cf:70:39:03: fa:03:a4:67:a8:af:ff:6a:d7:97:af:4a:b0:57:1c: ec:d7:7f:b7:a6:d8:56:a4:4f:1b:15:62:51:ab:d2: ca:3f:6f:97:2e:9f:ba:ac:01:53:83:e7:47:17:0a: 64:17:2a:f5:4b:7a:06:3f:7f:45:8d:19:0d:17:ab: 1e:7a:b8:db:52:d9:9f:f7:b3:96:44:ec:ca:05:93: 87:d7:41:73:48:73:41:53:a2:cb:94:e7:5e:48:ff: 0f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:BC:71:FA:81:91:CF:96:23:FB:C9:87:4A:E0:C8:75:F5:CC:A5:74 X509v3 Authority Key Identifier: keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136362e382e302f32312d3231203d3e2039333839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.166.8.0/21 Signature Algorithm: sha256WithRSAEncryption 8c:3e:0d:c5:7f:a1:d8:5d:60:e9:9b:53:18:86:a5:f7:8e:39: 77:16:20:76:46:f7:97:e1:b5:70:5d:4c:77:e2:42:33:11:77: 1c:d4:7b:5c:15:8b:41:6a:22:60:b3:b8:b7:be:66:76:3a:78: d4:7b:84:51:21:4e:19:86:74:af:bb:d2:28:a2:9b:b8:58:d3: d5:bc:7a:6d:8f:2c:e5:77:73:84:fb:ad:4b:b4:73:a3:29:06: 50:e0:72:dc:15:08:8f:e7:1b:e3:b5:0e:da:5c:4c:24:fa:36: 44:b8:5d:e0:e3:cd:7a:73:9a:2b:51:9c:0f:56:15:33:61:18: c6:86:92:01:8a:85:ad:b9:7c:a7:d2:eb:1a:fd:64:03:cc:2d: 06:9b:17:10:0d:76:06:0d:eb:7b:96:88:5c:c8:ac:30:ef:4d: 0e:08:e9:34:e3:b9:aa:7d:d8:73:c2:3e:7f:30:be:18:48:63: f4:74:02:cc:a6:21:86:00:f5:fc:dd:bc:1a:0f:df:3c:96:da: 39:97:6c:e5:9a:4f:0f:38:d2:1c:af:d0:47:b9:ac:07:71:d0: 09:ec:7f:a1:99:91:6a:7a:fb:12:f2:72:72:4a:af:99:94:65: f9:79:94:4e:ef:5d:6a:24:69:c1:43:7c:ad:39:09:55:7e:f6: db:22:a8:bb -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUX/uN+FRXD8AL7pTWvme54YgoRy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhFNDI3OTc3NDg0RjM2RjNGMEE0NTI4OEQ2REY2NEYz QTdGQ0IwOTAeFw0yNjA1MDcwMjA2MzdaFw0yNzA1MDYwMjExMzdaMDMxMTAvBgNV BAMTKDkyQkM3MUZBODE5MUNGOTYyM0ZCQzk4NzRBRTBDODc1RjVDQ0E1NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ug3BLbzWss6TiDm/51Adu3bK LX2NpcdXJJ/E5TNRXhrg+IKnlVqd+7ptyauv8fbBuJy07RMw7vqYmak4V+Ql6KlE 9EPFzuWxIhwI/RGgfyjop33qQlYVtPIK+U2pbvpiy2YNfymw1E43JkCgZwsN6+G3 NKRNa/ReGGbvHbHHX1OutrIuP46HL2UN2U6BKBIB4rVleH/ZqSpw7ObF8r8Lz3A5 A/oDpGeor/9q15evSrBXHOzXf7em2FakTxsVYlGr0so/b5cun7qsAVOD50cXCmQX KvVLegY/f0WNGQ0Xqx56uNtS2Z/3s5ZE7MoFk4fXQXNIc0FTosuU515I/w/fAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUkrxx+oGRz5Yj+8mHSuDIdfXMpXQwHwYDVR0j BBgwFoAUOOQnl3SE828/CkUojW32Tzp/ywkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDU4NjM1ODA5NTA4NTU3Ny8wLzM4RTQyNzk3NzQ4NEYzNkYzRjBBNDUyODhENkRG NjRGM0E3RkNCMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzhFNDI3OTc3NDg0RjM2RjNGMEE0NTI4OEQ2REY2NEYzQTdGQ0IwOS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA0NTg2MzU4MDk1MDg1NTc3LzAvMzIzMTMxMmUzMTM2 MzYyZTM4MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzkzMzM4Mzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAPTpggwDQYJKoZIhvcNAQELBQADggEBAIw+DcV/odhdYOmbUxiGpfeOOXcWIHZG 95fhtXBdTHfiQjMRdxzUe1wVi0FqImCzuLe+ZnY6eNR7hFEhThmGdK+70iiim7hY 09W8em2PLOV3c4T7rUu0c6MpBlDgctwVCI/nG+O1DtpcTCT6NkS4XeDjzXpzmitR nA9WFTNhGMaGkgGKha25fKfS6xr9ZAPMLQabFxANdgYN63uWiFzIrDDvTQ4I6TTj uap92HPCPn8wvhhIY/R0AsymIYYA9fzdvBoP3zyW2jmXbOWaTw840hyv0Ee5rAdx 0Ansf6GZkWp6+xLycnJKr5mUZfl5lE7vXWokacFDfK05CVV+9tsiqLs= -----END CERTIFICATE-----Generated at Wed May 13 10:20:49 2026 by rpki-client