$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3231312e3134372e3233382e302f32342d3234203d3e203233383532.roa File: 3231312e3134372e3233382e302f32342d3234203d3e203233383532.roa (raw, json) Hash identifier: i9X6dpCkIrsHIsTBa+TRKbt6suZuaOt+DpPtZuRKNhA= Subject key identifier: E9:8A:1F:85:C2:EE:70:30:07:98:01:06:2C:95:1C:20:71:4B:1A:32 Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 4BD6C05B328A5B4E4730818A6255ABC982A353B7 Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3231312e3134372e3233382e302f32342d3234203d3e203233383532.roa Signing time: Tue 14 Apr 2026 03:22:09 +0000 ROA not before: Tue 14 Apr 2026 03:17:09 +0000 ROA not after: Tue 13 Apr 2027 03:22:09 +0000 asID: 23852 IP address blocks: 211.147.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 08:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d6:c0:5b:32:8a:5b:4e:47:30:81:8a:62:55:ab:c9:82:a3:53:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Apr 14 03:17:09 2026 GMT Not After : Apr 13 03:22:09 2027 GMT Subject: CN=E98A1F85C2EE7030079801062C951C20714B1A32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b4:c2:19:0c:32:a1:38:9d:94:c1:bb:fe:f9: 1d:7c:21:a5:03:8c:07:67:22:90:a6:ad:51:51:4b: 32:72:3a:95:cf:5b:e1:60:22:95:3d:69:e3:46:51: d4:38:0c:ab:2d:7a:f8:8d:b5:57:4d:a8:97:93:54: b2:8c:c2:3f:cf:cd:c3:3e:93:55:65:53:aa:9e:e9: e4:d9:b9:4c:60:28:62:22:f2:60:48:d5:f1:d8:2d: 1b:3e:af:2c:26:6c:8a:45:b4:81:d6:a7:7f:9e:db: 84:29:a5:c6:e1:2b:e3:66:8a:41:86:12:7c:e6:5d: 70:bb:ff:e4:0f:22:d7:e7:ab:dc:d6:b8:69:60:a6: 30:3c:37:55:b9:c4:8f:65:5d:b4:70:3a:24:86:c0: 32:bc:9c:33:81:4f:bf:29:fe:4a:ae:64:c3:f0:b7: ef:35:50:65:59:89:d9:1f:5a:37:00:23:7d:6b:3a: a5:a8:8f:6c:60:f0:2b:58:d6:6d:68:00:7c:af:d2: d7:24:fb:b1:ae:1a:70:52:42:bb:ec:dc:0c:90:bd: 32:71:f9:0c:9c:45:49:ca:cd:1d:6f:5e:19:dc:3e: 7d:00:cf:7d:90:43:09:9f:51:86:b9:d3:07:91:15: e7:35:93:1c:2d:f7:44:9d:1b:ae:d0:02:ac:c5:fa: 6c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:8A:1F:85:C2:EE:70:30:07:98:01:06:2C:95:1C:20:71:4B:1A:32 X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3231312e3134372e3233382e302f32342d3234203d3e203233383532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.147.238.0/24 Signature Algorithm: sha256WithRSAEncryption c2:68:a7:e5:be:87:ed:47:ea:82:85:6d:16:03:a8:64:6e:c8: b2:ca:9b:14:7e:5c:a4:74:b4:9d:fc:e8:dc:01:68:85:fb:02: 23:bd:aa:fe:ff:47:76:dd:52:44:81:f6:8e:6a:12:f7:8b:30: fd:25:7d:2e:2c:b8:e1:76:d6:9c:9e:b2:17:f5:ca:fc:72:d1: 75:48:d1:f7:7e:59:bf:7c:b1:bd:e6:79:e3:2b:4f:14:dd:8f: f7:f6:f8:df:53:b0:8b:3c:7b:c7:9f:74:b6:41:fd:09:7e:01: 63:24:9b:d5:ef:9b:aa:69:e5:f9:ea:e7:85:ae:9f:af:e5:3c: 2c:0b:f9:b5:f3:78:ce:70:7f:e9:a7:21:fe:03:b6:c9:4e:17: e7:9a:1b:b0:c5:e5:0f:5e:05:5a:f4:75:7a:27:27:63:dc:51: 31:97:32:9f:45:c6:51:bd:cb:f1:a1:4b:af:75:7c:c9:36:62: 32:72:b8:f6:38:ba:a6:a6:47:94:ea:7d:6e:bf:da:15:44:fe: 3b:48:4d:41:af:60:ca:bc:78:e4:28:b7:5a:8b:1d:b9:4c:33: 82:df:dc:5e:de:55:63:30:9f:ca:3d:01:79:1d:c6:b5:c9:0e: e1:fc:c6:3e:33:71:a1:73:16:3f:c0:0f:4b:97:b1:d0:ae:98: b2:9e:11:ac -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUS9bAWzKKW05HMIGKYlWryYKjU7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA0MTQwMzE3MDlaFw0yNzA0MTMwMzIyMDlaMDMxMTAvBgNV BAMTKEU5OEExRjg1QzJFRTcwMzAwNzk4MDEwNjJDOTUxQzIwNzE0QjFBMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7tMIZDDKhOJ2Uwbv++R18IaUD jAdnIpCmrVFRSzJyOpXPW+FgIpU9aeNGUdQ4DKsteviNtVdNqJeTVLKMwj/PzcM+ k1VlU6qe6eTZuUxgKGIi8mBI1fHYLRs+rywmbIpFtIHWp3+e24QppcbhK+NmikGG EnzmXXC7/+QPItfnq9zWuGlgpjA8N1W5xI9lXbRwOiSGwDK8nDOBT78p/kquZMPw t+81UGVZidkfWjcAI31rOqWoj2xg8CtY1m1oAHyv0tck+7GuGnBSQrvs3AyQvTJx +QycRUnKzR1vXhncPn0Az32QQwmfUYa50weRFec1kxwt90SdG67QAqzF+my/AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU6YofhcLucDAHmAEGLJUcIHFLGjIwHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc4MTI4NjcvMC8zMjMxMzEyZTMx MzQzNzJlMzIzMzM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM4MzUzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEANOT7jANBgkqhkiG9w0BAQsFAAOCAQEAwmin5b6H7UfqgoVtFgOo ZG7IssqbFH5cpHS0nfzo3AFohfsCI72q/v9Hdt1SRIH2jmoS94sw/SV9Liy44XbW nJ6yF/XK/HLRdUjR935Zv3yxveZ54ytPFN2P9/b431Owizx7x590tkH9CX4BYySb 1e+bqmnl+ernha6fr+U8LAv5tfN4znB/6ach/gO2yU4X55obsMXlD14FWvR1eicn Y9xRMZcyn0XGUb3L8aFLr3V8yTZiMnK49ji6pqZHlOp9br/aFUT+O0hNQa9gyrx4 5Ci3WosduUwzgt/cXt5VYzCfyj0BeR3GtckO4fzGPjNxoXMWP8APS5ex0K6Ysp4R rA== -----END CERTIFICATE-----Generated at Fri Apr 17 19:26:31 2026 by rpki-client