$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106035279619293197/0/3231392e3233352e3136302e302f32302d3230203d3e2030.roa File: 3231392e3233352e3136302e302f32302d3230203d3e2030.roa (raw, json) Hash identifier: 1nPeGfLABslTZ2oPU8PRot9eHASMEKk+JuqWJ0C/upY= Subject key identifier: 84:33:73:28:BC:87:DB:6B:C3:E9:CE:52:61:9C:97:2B:DB:67:5A:65 Certificate issuer: /CN=90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415 Certificate serial: 6FF707EDB8EB5239FF56665511B5CC8203E4CB92 Authority key identifier: 90:B9:0B:70:03:C4:49:7A:0D:82:CB:81:A2:BD:4D:A4:EE:9A:B4:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/3231392e3233352e3136302e302f32302d3230203d3e2030.roa Signing time: Wed 13 May 2026 09:11:29 +0000 ROA not before: Wed 13 May 2026 09:06:29 +0000 ROA not after: Wed 12 May 2027 09:11:29 +0000 asID: 0 IP address blocks: 219.235.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:f7:07:ed:b8:eb:52:39:ff:56:66:55:11:b5:cc:82:03:e4:cb:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415 Validity Not Before: May 13 09:06:29 2026 GMT Not After : May 12 09:11:29 2027 GMT Subject: CN=84337328BC87DB6BC3E9CE52619C972BDB675A65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3b:0c:cd:27:5b:23:3e:9b:09:f7:5c:7b:8f: 5b:4a:37:88:55:c0:e0:07:69:3d:db:a7:00:c9:0c: f2:71:c3:6f:f9:54:cc:e0:a6:34:e7:e9:6e:e8:f2: fe:30:67:34:7a:9a:a2:f5:92:3d:f0:ac:47:b3:97: b7:25:0d:4d:1e:05:12:c9:a3:01:14:00:f9:d3:13: 3f:98:88:3e:c1:5b:25:c4:5e:97:41:d2:40:5f:d1: 4f:b0:15:e1:a8:8c:22:a5:75:29:49:e0:b2:ac:78: 17:9e:16:ff:6c:a3:ab:7c:2d:ed:9d:a2:6b:c2:25: 2c:9a:7f:6f:b5:b9:51:c9:2e:f9:e2:0d:a0:e5:02: 89:21:54:00:22:88:d0:82:f5:4d:37:d9:ba:03:58: 0b:3c:26:f3:76:19:48:c8:c2:fe:e0:31:2e:d0:b5: fa:0c:3b:24:3a:4c:2f:b2:ba:f5:fa:23:80:5f:7c: 22:8d:5c:f1:d9:47:01:2a:3f:26:60:aa:cc:fe:f9: 98:8b:67:b4:99:9c:5a:47:0a:cd:0e:8e:b1:e4:5f: cf:ce:d6:0a:b9:23:d2:e1:7b:b3:a6:de:49:19:2b: b6:0e:a3:bc:17:39:c6:4d:ee:92:07:8b:f4:df:83: d2:61:ee:a1:98:e4:ed:22:37:a0:3c:de:93:ac:1e: 58:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:33:73:28:BC:87:DB:6B:C3:E9:CE:52:61:9C:97:2B:DB:67:5A:65 X509v3 Authority Key Identifier: keyid:90:B9:0B:70:03:C4:49:7A:0D:82:CB:81:A2:BD:4D:A4:EE:9A:B4:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/3231392e3233352e3136302e302f32302d3230203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.235.160.0/20 Signature Algorithm: sha256WithRSAEncryption 8d:62:ff:9e:3c:33:1a:f7:78:29:1b:c7:ac:8b:01:c6:28:c7: 71:9a:02:33:71:f6:00:c1:8f:3c:67:8f:e7:35:8d:27:10:d9: 7c:a8:16:ec:de:77:bf:7a:e5:81:12:f4:64:54:ed:42:be:92: 74:e6:1a:90:46:07:85:ee:09:3a:d5:d1:96:e2:2f:53:a7:69: 5f:d9:b7:af:7e:24:7d:f6:ba:5c:7f:db:8d:4e:6b:61:92:21: 38:5d:56:c5:d5:fa:24:97:12:36:0d:e8:36:2d:ce:1e:18:2c: 4c:95:87:f4:02:94:3a:c0:a6:1b:d6:21:3c:d8:53:7f:6c:cf: c0:81:b2:bc:36:48:0b:05:8f:d5:9d:68:54:4b:a0:ef:c3:53: 44:c2:ba:4d:6c:5c:e4:71:c4:e1:4d:ba:67:bf:c0:d8:23:b1: ab:ad:c9:71:77:6c:20:c9:d7:be:49:ec:38:e2:3e:89:17:4c: 18:f8:34:b7:b3:c2:50:20:74:36:02:44:07:4a:65:dd:da:c6: 8d:b2:4a:df:20:a1:71:41:ae:c9:51:cd:54:86:86:25:82:fa: e9:19:f5:b0:2b:2d:b3:9a:8d:9a:39:c6:ed:09:3b:b5:b9:b4: 5d:3e:58:87:d3:d6:bf:12:5e:b5:03:db:62:cb:30:f9:af:0a: 06:b4:af:99 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUb/cH7bjrUjn/VmZVEbXMggPky5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBCOTBCNzAwM0M0NDk3QTBEODJDQjgxQTJCRDREQTRF RTlBQjQxNTAeFw0yNjA1MTMwOTA2MjlaFw0yNzA1MTIwOTExMjlaMDMxMTAvBgNV BAMTKDg0MzM3MzI4QkM4N0RCNkJDM0U5Q0U1MjYxOUM5NzJCREI2NzVBNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvOwzNJ1sjPpsJ91x7j1tKN4hV wOAHaT3bpwDJDPJxw2/5VMzgpjTn6W7o8v4wZzR6mqL1kj3wrEezl7clDU0eBRLJ owEUAPnTEz+YiD7BWyXEXpdB0kBf0U+wFeGojCKldSlJ4LKseBeeFv9so6t8Le2d omvCJSyaf2+1uVHJLvniDaDlAokhVAAiiNCC9U032boDWAs8JvN2GUjIwv7gMS7Q tfoMOyQ6TC+yuvX6I4BffCKNXPHZRwEqPyZgqsz++ZiLZ7SZnFpHCs0OjrHkX8/O 1gq5I9Lhe7Om3kkZK7YOo7wXOcZN7pIHi/Tfg9Jh7qGY5O0iN6A83pOsHlg/AgMB AAGjggINMIICCTAdBgNVHQ4EFgQUhDNzKLyH22vD6c5SYZyXK9tnWmUwHwYDVR0j BBgwFoAUkLkLcAPESXoNgsuBor1NpO6atBUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjAzNTI3OTYxOTI5MzE5Ny8wLzkwQjkwQjcwMDNDNDQ5N0EwRDgyQ0I4MUEyQkQ0 REE0RUU5QUI0MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTBCOTBCNzAwM0M0NDk3QTBEODJDQjgxQTJCRDREQTRFRTlBQjQxNS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA2MDM1Mjc5NjE5MjkzMTk3LzAvMzIzMTM5MmUzMjMz MzUyZTMxMzYzMDJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE 2+ugMA0GCSqGSIb3DQEBCwUAA4IBAQCNYv+ePDMa93gpG8esiwHGKMdxmgIzcfYA wY88Z4/nNY0nENl8qBbs3ne/euWBEvRkVO1CvpJ05hqQRgeF7gk61dGW4i9Tp2lf 2bevfiR99rpcf9uNTmthkiE4XVbF1foklxI2Deg2Lc4eGCxMlYf0ApQ6wKYb1iE8 2FN/bM/AgbK8NkgLBY/VnWhUS6Dvw1NEwrpNbFzkccThTbpnv8DYI7Grrclxd2wg yde+Sew44j6JF0wY+DS3s8JQIHQ2AkQHSmXd2saNskrfIKFxQa7JUc1UhoYlgvrp GfWwKy2zmo2aOcbtCTu1ubRdPliH09a/El61A9tiyzD5rwoGtK+Z -----END CERTIFICATE-----Generated at Wed May 13 21:31:09 2026 by rpki-client