$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e3134362e31362e302f32342d3234203d3e2034383437.roa File: 3231312e3134362e31362e302f32342d3234203d3e2034383437.roa (raw, json) Hash identifier: JEvKGf1XO1XgzmMtgCrGsW79VBAPcvIiF6ABKNblyAE= Subject key identifier: EB:1A:AD:84:F1:0A:22:DC:AD:D3:0A:B9:2C:B9:84:6B:B6:D0:67:45 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 51191AF171B169B94196F72EC6E7B8AC32B1F5A2 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e3134362e31362e302f32342d3234203d3e2034383437.roa Signing time: Thu 16 Apr 2026 00:27:31 +0000 ROA not before: Thu 16 Apr 2026 00:22:31 +0000 ROA not after: Thu 15 Apr 2027 00:27:31 +0000 asID: 4847 IP address blocks: 211.146.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:19:1a:f1:71:b1:69:b9:41:96:f7:2e:c6:e7:b8:ac:32:b1:f5:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: Apr 16 00:22:31 2026 GMT Not After : Apr 15 00:27:31 2027 GMT Subject: CN=EB1AAD84F10A22DCADD30AB92CB9846BB6D06745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b8:9a:41:7e:a9:ba:d4:0c:fb:92:71:cf:5b: a6:f5:83:5a:8d:a7:10:32:47:31:58:d1:ac:9d:81: 8b:0d:ca:a9:6d:83:99:90:90:30:24:c0:33:5b:8f: d7:a3:6b:28:73:99:ec:bf:ec:16:46:5b:e3:df:b8: f4:3b:4c:45:09:9b:21:9f:93:16:81:f1:af:f2:b2: 7e:98:c4:a0:aa:fd:3b:a8:43:99:ea:b3:23:81:f6: 42:1b:c7:35:86:3b:6d:7e:93:44:ce:cc:aa:6b:86: 2c:c7:ee:21:85:88:30:a1:be:3c:db:b1:2c:8d:8b: 20:09:a4:4b:b5:15:e7:48:63:e8:e1:04:72:24:5e: 9b:ac:61:6f:e3:62:03:ed:28:ce:c9:5f:a3:95:b2: 40:4e:f5:be:f8:23:46:2d:bd:be:b9:36:8f:eb:89: fb:d9:4e:c9:de:bf:e6:02:d5:95:a7:8a:f5:08:29: 8f:ae:71:4c:6d:b8:90:61:f9:6c:34:72:28:dc:b6: af:f4:6c:47:9a:5b:e5:0e:16:97:d4:c4:ca:93:11: c4:76:fa:38:36:c5:fb:b9:9b:a9:cb:f9:d0:1e:28: 6a:53:13:d8:c0:fa:e5:0c:d0:cc:de:63:77:06:ac: fe:28:23:fa:fc:76:f3:37:da:8c:85:93:f8:24:20: 34:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1A:AD:84:F1:0A:22:DC:AD:D3:0A:B9:2C:B9:84:6B:B6:D0:67:45 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e3134362e31362e302f32342d3234203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.146.16.0/24 Signature Algorithm: sha256WithRSAEncryption a6:15:d6:82:60:ff:99:db:6c:f4:a9:b5:2b:82:77:98:4b:29: 13:f8:7d:9a:00:ea:b1:4e:e3:15:3b:f1:9a:d2:3f:be:43:a7: 1a:d0:70:49:07:1d:47:12:31:bb:65:5a:a8:bb:cb:6d:2f:1f: d9:f7:c0:79:01:1d:f3:66:12:bf:0f:af:5e:fd:37:1e:0c:4d: 12:74:57:76:82:cd:87:cf:c4:ef:04:65:bc:c6:1e:12:bb:9c: 8a:bc:a0:22:fc:65:cc:06:5b:ed:0a:28:04:76:2a:d5:68:d4: a9:b9:8a:0f:cc:5a:17:9b:1c:9d:9c:a6:cf:4f:83:20:2c:a1: 8e:35:29:1d:dd:f5:45:3f:b0:e3:6f:53:9e:11:6e:6b:c9:5c: f7:89:6a:52:3f:d9:cf:6c:2f:ee:48:91:77:01:d6:f6:17:6c: a3:d8:98:08:48:ff:34:89:05:f4:36:24:2d:f2:43:37:b2:14: 42:f7:3f:92:81:98:37:7c:c4:0d:df:c7:8c:c7:a7:0d:0c:cf: 25:a7:d1:7f:16:6f:20:f0:50:78:95:8c:69:b9:45:61:52:26: 4e:a3:f0:89:b5:de:7f:d7:c1:57:a5:52:5f:c7:1c:ef:8c:77: 47:a5:be:65:6e:ac:ef:ee:b8:49:df:02:9f:2d:07:92:cb:d4: e3:10:94:0d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUURka8XGxablBlvcuxue4rDKx9aIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA0MTYwMDIyMzFaFw0yNzA0MTUwMDI3MzFaMDMxMTAvBgNV BAMTKEVCMUFBRDg0RjEwQTIyRENBREQzMEFCOTJDQjk4NDZCQjZEMDY3NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7uJpBfqm61Az7knHPW6b1g1qN pxAyRzFY0aydgYsNyqltg5mQkDAkwDNbj9ejayhzmey/7BZGW+PfuPQ7TEUJmyGf kxaB8a/ysn6YxKCq/TuoQ5nqsyOB9kIbxzWGO21+k0TOzKprhizH7iGFiDChvjzb sSyNiyAJpEu1FedIY+jhBHIkXpusYW/jYgPtKM7JX6OVskBO9b74I0Ytvb65No/r ifvZTsnev+YC1ZWnivUIKY+ucUxtuJBh+Ww0cijctq/0bEeaW+UOFpfUxMqTEcR2 +jg2xfu5m6nL+dAeKGpTE9jA+uUM0MzeY3cGrP4oI/r8dvM32oyFk/gkIDQnAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU6xqthPEKItyt0wq5LLmEa7bQZ0UwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyNzg2NTYxLzAvMzIzMTMxMmUzMTM0 MzYyZTMxMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANOSEDANBgkqhkiG9w0BAQsFAAOCAQEAphXWgmD/mdts9Km1K4J3mEspE/h9 mgDqsU7jFTvxmtI/vkOnGtBwSQcdRxIxu2VaqLvLbS8f2ffAeQEd82YSvw+vXv03 HgxNEnRXdoLNh8/E7wRlvMYeErucirygIvxlzAZb7QooBHYq1WjUqbmKD8xaF5sc nZymz0+DICyhjjUpHd31RT+w429TnhFua8lc94lqUj/Zz2wv7kiRdwHW9hdso9iY CEj/NIkF9DYkLfJDN7IUQvc/koGYN3zEDd/HjMenDQzPJafRfxZvIPBQeJWMablF YVImTqPwibXef9fBV6VSX8cc74x3R6W+ZW6s7+64Sd8Cny0HksvU4xCUDQ== -----END CERTIFICATE-----Generated at Fri Apr 17 21:21:07 2026 by rpki-client