$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3231302e31362e3137362e302f32322d3232203d3e20313436383137.roa File: 3231302e31362e3137362e302f32322d3232203d3e20313436383137.roa (raw, json) Hash identifier: kYZlgxJQSGg4diXgyK+/bXJDEFaUk4K3zifgddS/J08= Subject key identifier: 20:B6:03:AE:59:8B:5D:9A:96:52:43:38:C2:2E:12:D8:6F:BE:46:41 Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362 Certificate serial: 0AB0E2754CBA8D003D3D4B4719E01C89EFF74594 Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3231302e31362e3137362e302f32322d3232203d3e20313436383137.roa Signing time: Fri 08 May 2026 09:47:17 +0000 ROA not before: Fri 08 May 2026 09:42:17 +0000 ROA not after: Fri 07 May 2027 09:47:17 +0000 asID: 146817 IP address blocks: 210.16.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b0:e2:75:4c:ba:8d:00:3d:3d:4b:47:19:e0:1c:89:ef:f7:45:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362 Validity Not Before: May 8 09:42:17 2026 GMT Not After : May 7 09:47:17 2027 GMT Subject: CN=20B603AE598B5D9A96524338C22E12D86FBE4641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b9:f8:3c:ee:72:35:fe:6b:93:ed:d7:33:25: 25:d1:48:22:f8:b9:3b:a8:8f:c2:c3:98:34:f7:1a: d4:43:83:a5:05:c8:88:6d:96:14:b3:06:87:0d:22: be:28:1d:38:2f:0d:8d:e2:74:a3:ab:74:4d:bb:e5: b4:51:f0:4d:57:aa:da:f1:a7:00:59:24:29:4d:96: 9b:7a:56:ec:82:67:e9:ff:55:8b:4f:c7:59:42:cc: 91:9a:d1:21:d7:69:eb:ff:51:a4:c7:69:57:fc:9a: e1:0d:31:dd:10:01:fc:67:7a:97:70:8c:83:71:c7: f3:c5:86:79:b7:11:6a:3b:69:42:11:55:10:0f:ce: 8f:68:73:22:9a:4a:d0:ac:80:16:a6:b2:bd:b5:0d: 7c:f3:89:44:91:53:50:7b:a7:bc:3d:45:21:45:f5: 1d:38:fd:cc:d1:0d:71:e5:25:30:ab:fb:35:4f:e3: 52:fc:ee:aa:50:e0:cd:ed:e4:d6:61:21:95:07:21: 8c:1d:6c:fb:71:ac:81:7b:69:8f:50:cf:c7:18:75: 49:1b:ab:d1:7c:5c:20:c4:92:7e:f2:8e:04:63:fa: 95:31:c6:a4:85:d0:a8:60:53:14:54:ae:0c:56:af: 42:c5:0a:83:b0:28:fb:01:cd:55:5c:d5:9b:78:bd: 95:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B6:03:AE:59:8B:5D:9A:96:52:43:38:C2:2E:12:D8:6F:BE:46:41 X509v3 Authority Key Identifier: keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3231302e31362e3137362e302f32322d3232203d3e20313436383137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.16.176.0/22 Signature Algorithm: sha256WithRSAEncryption c1:02:78:b7:fb:6f:d3:ae:5a:b2:72:46:e3:ef:24:25:30:26: b2:c6:91:46:61:72:e5:32:34:88:8c:17:68:ff:1d:87:87:9c: b1:f6:38:ab:11:67:e3:2a:5c:55:7c:1f:02:b6:0e:d0:b4:6e: 8d:2d:4c:21:e0:1e:59:0e:b1:d1:4e:73:1d:21:7c:05:24:75: 0d:89:0a:9d:fd:8e:85:00:3a:0a:b6:fe:73:90:a1:bb:25:b7: e1:e9:93:13:0f:05:3e:df:12:f1:c8:96:e3:97:05:04:eb:10: 19:19:cf:66:d1:62:87:fa:2b:18:5d:0a:05:40:4e:29:00:a3: 24:1e:b6:e1:56:a5:11:01:1c:28:73:ac:59:2a:99:e2:3c:3c: 75:49:85:b8:23:e6:59:a9:74:88:99:12:e2:2d:c7:0d:b7:dc: c0:9e:5c:a6:e3:2b:82:b1:23:35:d6:00:a8:53:0c:84:b5:57: e5:b8:f7:27:cc:3f:57:cd:c1:ae:bb:ca:57:c9:24:f3:ec:05: a6:fe:ac:7b:9a:35:03:9e:4b:cc:82:de:9a:30:17:24:ed:cb: cf:3f:26:43:49:65:fd:31:c7:de:37:61:dd:18:8c:07:6d:f1: a8:92:80:9c:0c:6a:8a:09:3d:75:2f:62:c5:ec:d2:0b:78:47: 3c:f2:d0:e7 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUCrDidUy6jQA9PUtHGeAcie/3RZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1 RUJFMDM2MjAeFw0yNjA1MDgwOTQyMTdaFw0yNzA1MDcwOTQ3MTdaMDMxMTAvBgNV BAMTKDIwQjYwM0FFNTk4QjVEOUE5NjUyNDMzOEMyMkUxMkQ4NkZCRTQ2NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqufg87nI1/muT7dczJSXRSCL4 uTuoj8LDmDT3GtRDg6UFyIhtlhSzBocNIr4oHTgvDY3idKOrdE275bRR8E1Xqtrx pwBZJClNlpt6VuyCZ+n/VYtPx1lCzJGa0SHXaev/UaTHaVf8muENMd0QAfxnepdw jINxx/PFhnm3EWo7aUIRVRAPzo9ocyKaStCsgBamsr21DXzziUSRU1B7p7w9RSFF 9R04/czRDXHlJTCr+zVP41L87qpQ4M3t5NZhIZUHIYwdbPtxrIF7aY9Qz8cYdUkb q9F8XCDEkn7yjgRj+pUxxqSF0KhgUxRUrgxWr0LFCoOwKPsBzVVc1Zt4vZXFAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUILYDrlmLXZqWUkM4wi4S2G++RkEwHwYDVR0j BBgwFoAUgl5cc7dVI2Pg+SJhrcY3WF6+A2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA1ODA3Mjk0MzkxOTExNy8wLzgyNUU1QzczQjc1NTIzNjNFMEY5MjI2MUFEQzYz NzU4NUVCRTAzNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1RUJFMDM2Mi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMDUwNTgwNzI5NDM5MTkxMTcvMC8zMjMxMzAyZTMx MzYyZTMxMzczNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzNjM4MzEzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAtIQsDANBgkqhkiG9w0BAQsFAAOCAQEAwQJ4t/tv065asnJG4+8k JTAmssaRRmFy5TI0iIwXaP8dh4ecsfY4qxFn4ypcVXwfArYO0LRujS1MIeAeWQ6x 0U5zHSF8BSR1DYkKnf2OhQA6Crb+c5ChuyW34emTEw8FPt8S8ciW45cFBOsQGRnP ZtFih/orGF0KBUBOKQCjJB624ValEQEcKHOsWSqZ4jw8dUmFuCPmWal0iJkS4i3H DbfcwJ5cpuMrgrEjNdYAqFMMhLVX5bj3J8w/V83BrrvKV8kk8+wFpv6se5o1A55L zILemjAXJO3Lzz8mQ0ll/THH3jdh3RiMB23xqJKAnAxqigk9dS9ixezSC3hHPPLQ 5w== -----END CERTIFICATE-----Generated at Wed May 13 20:55:17 2026 by rpki-client