$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3231312e3135352e31362e302f32312d3231203d3e20313334373733.roa File: 3231312e3135352e31362e302f32312d3231203d3e20313334373733.roa (raw, json) Hash identifier: IlJ5jjlG8pQCK+2NyDBIVdpXPWzwXfwj3zk/byC6TtM= Subject key identifier: 6F:1A:D8:99:1D:89:88:7F:D7:B2:C7:22:69:7B:EB:FF:36:46:85:91 Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 2032FADF67D89AC2EDDF1469DD4923094620AEA1 Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3231312e3135352e31362e302f32312d3231203d3e20313334373733.roa Signing time: Tue 14 Apr 2026 03:20:50 +0000 ROA not before: Tue 14 Apr 2026 03:15:50 +0000 ROA not after: Tue 13 Apr 2027 03:20:50 +0000 asID: 134773 IP address blocks: 211.155.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 08:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:32:fa:df:67:d8:9a:c2:ed:df:14:69:dd:49:23:09:46:20:ae:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Apr 14 03:15:50 2026 GMT Not After : Apr 13 03:20:50 2027 GMT Subject: CN=6F1AD8991D89887FD7B2C722697BEBFF36468591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b5:b2:53:18:80:38:c6:26:f3:ea:54:95:db: da:a4:8a:bc:7e:37:81:10:1e:58:e9:b3:3f:ce:95: 10:45:8b:2c:3a:e3:c0:26:ac:22:8d:3a:0d:ab:69: 4d:58:88:06:8b:c1:5c:5a:1a:85:87:47:9c:64:d3: 8a:a8:1c:ed:b3:0a:b2:94:b9:9b:e8:2e:e5:e1:2b: 69:72:a5:cb:9e:75:f2:7b:e8:e4:51:4c:14:f2:39: 78:ad:29:55:f5:59:36:67:76:e7:d9:82:09:13:05: e7:c8:f8:ce:8e:96:08:71:54:c5:f1:3b:02:32:cd: 86:59:ec:b8:ee:2f:ab:c0:0d:e8:19:9d:30:b9:1b: 94:81:5f:82:d6:de:b6:12:5c:8d:c1:1d:4f:d6:c0: 30:a7:0a:80:07:ec:fe:9a:13:17:c9:5b:33:31:58: d3:91:0c:73:03:46:2c:28:78:30:62:00:14:da:d9: 99:8a:ae:dc:18:e0:af:f5:4d:e8:ee:77:49:54:8b: 31:3c:3a:2b:14:63:1f:e7:34:09:63:5e:c9:a4:c0: eb:99:20:cd:c5:2e:e3:e7:7a:83:3e:1d:e5:5f:45: 94:39:48:e0:20:24:ad:a0:f6:5b:74:fb:eb:00:c4: 9e:ad:a6:38:19:e2:a0:93:fe:bf:27:8c:f4:a8:12: 6d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:1A:D8:99:1D:89:88:7F:D7:B2:C7:22:69:7B:EB:FF:36:46:85:91 X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3231312e3135352e31362e302f32312d3231203d3e20313334373733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.155.16.0/21 Signature Algorithm: sha256WithRSAEncryption 29:49:f0:2c:8d:03:85:95:bd:b6:2f:d9:58:33:fe:f1:98:b8: d7:ce:01:c8:b1:27:ff:e0:fb:5a:33:a7:96:b9:aa:7d:28:b3: 21:25:64:4a:a2:be:34:fe:6d:d0:eb:72:88:69:fe:d2:9a:3c: 30:1b:63:ce:a1:d7:16:0a:e7:4d:01:3f:e8:dc:b8:e8:78:87: 31:11:bf:c5:8a:af:74:21:18:4d:92:c2:f8:dc:eb:1d:25:06: e6:65:1f:9b:6d:48:ff:f4:f2:a4:39:9e:06:1c:d9:9e:9e:35: 53:43:92:24:9e:cc:7d:b2:ab:73:fb:80:ce:07:62:a2:43:d1: 93:8f:0c:5a:08:5f:bd:c6:e9:1f:c0:c7:e4:ed:d0:4c:fc:b7: b3:a4:dd:c0:0a:23:b4:5f:ce:4c:86:a9:55:3d:ff:7c:3a:e2: 8b:36:7d:e9:00:00:01:5b:a9:d9:d0:a5:f2:72:62:41:17:8d: 8e:2f:b8:23:b9:53:e9:d1:59:db:91:ce:96:80:82:72:e5:03: 1e:5e:d2:3a:0a:10:cc:a9:a2:f5:4f:bc:f8:a8:0b:eb:bb:49: 25:b8:a2:ff:06:85:d6:0a:d1:47:13:6c:dd:69:3a:6b:12:4a: 19:be:47:7a:4f:bb:8e:11:8f:43:7e:1c:4f:ea:24:9d:11:e0: e2:49:6d:e7 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUIDL632fYmsLt3xRp3UkjCUYgrqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA0MTQwMzE1NTBaFw0yNzA0MTMwMzIwNTBaMDMxMTAvBgNV BAMTKDZGMUFEODk5MUQ4OTg4N0ZEN0IyQzcyMjY5N0JFQkZGMzY0Njg1OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTtbJTGIA4xibz6lSV29qkirx+ N4EQHljpsz/OlRBFiyw648AmrCKNOg2raU1YiAaLwVxaGoWHR5xk04qoHO2zCrKU uZvoLuXhK2lypcuedfJ76ORRTBTyOXitKVX1WTZndufZggkTBefI+M6OlghxVMXx OwIyzYZZ7LjuL6vADegZnTC5G5SBX4LW3rYSXI3BHU/WwDCnCoAH7P6aExfJWzMx WNORDHMDRiwoeDBiABTa2ZmKrtwY4K/1Tejud0lUizE8OisUYx/nNAljXsmkwOuZ IM3FLuPneoM+HeVfRZQ5SOAgJK2g9lt0++sAxJ6tpjgZ4qCT/r8njPSoEm2nAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUbxrYmR2JiH/XssciaXvr/zZGhZEwHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc4MTI4NjcvMC8zMjMxMzEyZTMx MzUzNTJlMzEzNjJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMxMzMzNDM3MzczMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA9ObEDANBgkqhkiG9w0BAQsFAAOCAQEAKUnwLI0DhZW9ti/ZWDP+ 8Zi4184ByLEn/+D7WjOnlrmqfSizISVkSqK+NP5t0OtyiGn+0po8MBtjzqHXFgrn TQE/6Ny46HiHMRG/xYqvdCEYTZLC+NzrHSUG5mUfm21I//TypDmeBhzZnp41U0OS JJ7MfbKrc/uAzgdiokPRk48MWghfvcbpH8DH5O3QTPy3s6TdwAojtF/OTIapVT3/ fDriizZ96QAAAVup2dCl8nJiQReNji+4I7lT6dFZ25HOloCCcuUDHl7SOgoQzKmi 9U+8+KgL67tJJbii/waF1grRRxNs3Wk6axJKGb5Hek+7jhGPQ34cT+oknRHg4klt 5w== -----END CERTIFICATE-----Generated at Fri Apr 17 19:17:24 2026 by rpki-client