$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e203233363530.roa File: 3131312e3232332e31322e302f32322d3232203d3e203233363530.roa (raw, json) Hash identifier: EEOty/YJerd5KqvrqlwKV/fNlqQvpxz9boaCtI7bZ98= Subject key identifier: C3:01:AC:D4:0B:06:0A:35:C1:F2:F4:1B:FF:C1:CB:BC:96:1A:91:59 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 7D5708057CD93E12EC22AAA576D14BB38272AF5B Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e203233363530.roa Signing time: Tue 14 Apr 2026 07:27:54 +0000 ROA not before: Tue 14 Apr 2026 07:22:54 +0000 ROA not after: Tue 13 Apr 2027 07:27:54 +0000 asID: 23650 IP address blocks: 111.223.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 02:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:57:08:05:7c:d9:3e:12:ec:22:aa:a5:76:d1:4b:b3:82:72:af:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Apr 14 07:22:54 2026 GMT Not After : Apr 13 07:27:54 2027 GMT Subject: CN=C301ACD40B060A35C1F2F41BFFC1CBBC961A9159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:96:fd:39:54:7b:e0:09:40:72:16:2f:e9:12: cb:0e:0f:aa:f2:c4:f8:1e:8e:7a:9a:7c:f9:9c:7a: ea:be:72:36:ea:49:1e:28:9f:b7:85:df:13:05:bc: 99:8c:ba:b7:6a:93:fc:dc:1d:3b:39:16:49:68:b5: 4c:4c:9b:78:5f:38:1b:5f:50:68:d0:cd:bb:12:84: 5c:4f:6b:ca:fb:1f:ff:b3:c8:da:29:78:bf:9e:30: 7b:f1:9c:aa:d6:c0:fb:a0:ce:71:ad:0e:86:39:3e: 04:e6:9c:4d:06:41:37:6b:70:fe:b9:1f:9f:70:de: cf:a3:92:2e:f7:0e:ef:16:47:6f:d0:2a:aa:ed:36: 6d:f0:0f:a1:5f:0e:bd:59:37:d5:ce:3a:d1:fd:2c: 1a:04:77:cf:37:1b:c5:65:b7:6d:fb:ce:0f:4d:3d: 51:94:cb:23:77:f1:2d:6a:83:79:4e:30:1b:8d:83: 72:d0:bc:9d:20:f1:a8:e1:53:02:38:1d:91:51:89: dc:2d:7a:7d:79:1d:cb:fc:f9:44:ee:57:d3:d9:df: 06:92:43:86:77:3a:99:34:38:6d:aa:c3:0d:bb:bd: 34:82:d9:b5:20:4e:16:ef:fc:ed:0d:4c:37:0c:36: 4d:7e:3f:5a:c6:83:3e:61:d6:f7:c8:79:77:84:d2: 59:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:01:AC:D4:0B:06:0A:35:C1:F2:F4:1B:FF:C1:CB:BC:96:1A:91:59 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e203233363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 111.223.12.0/22 Signature Algorithm: sha256WithRSAEncryption 38:69:5a:44:c4:39:77:e3:56:06:78:ae:0c:20:7b:47:67:6f: 21:db:49:28:38:ee:9b:53:35:51:71:70:d2:cf:e1:22:e0:fc: d8:24:6a:01:dd:58:14:08:bf:3a:3d:54:80:2f:9f:f4:a0:a5: d1:8f:03:72:30:23:5e:a2:8a:a1:5c:1e:1b:91:ed:9f:eb:f3: fb:e1:75:b8:75:45:ab:a4:6f:0d:d8:32:1a:9e:25:ef:69:3e: e5:11:98:6b:68:3b:4c:0b:80:52:b1:31:1a:59:02:7c:f0:6f: c0:81:39:93:99:90:d1:84:bb:62:67:23:cc:78:ae:bb:fa:63: f1:f2:ce:6a:91:cb:14:79:fc:e0:70:cc:9d:db:ca:3d:68:27: 2f:8d:4a:db:00:16:40:80:53:18:e5:b9:a1:e9:dc:32:db:9c: a6:57:d2:83:8a:bf:66:0e:97:97:0f:d5:4a:4b:9b:ae:5b:6a: 1d:f0:ab:cc:c4:d2:01:ed:72:72:0e:02:27:b6:c2:3f:df:f1: 75:18:f8:dd:82:2c:f9:c9:14:1f:e7:ac:17:f3:60:2e:f6:41: c9:33:c3:1d:85:1b:fc:a7:3c:41:ea:37:15:91:ca:2d:50:28: 96:f6:70:c0:74:00:0d:17:6f:b4:90:3a:78:6b:65:2a:10:eb: ea:d2:7d:4c -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUfVcIBXzZPhLsIqqldtFLs4Jyr1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA0MTQwNzIyNTRaFw0yNzA0MTMwNzI3NTRaMDMxMTAvBgNV BAMTKEMzMDFBQ0Q0MEIwNjBBMzVDMUYyRjQxQkZGQzFDQkJDOTYxQTkxNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZlv05VHvgCUByFi/pEssOD6ry xPgejnqafPmceuq+cjbqSR4on7eF3xMFvJmMurdqk/zcHTs5FklotUxMm3hfOBtf UGjQzbsShFxPa8r7H/+zyNopeL+eMHvxnKrWwPugznGtDoY5PgTmnE0GQTdrcP65 H59w3s+jki73Du8WR2/QKqrtNm3wD6FfDr1ZN9XOOtH9LBoEd883G8Vlt237zg9N PVGUyyN38S1qg3lOMBuNg3LQvJ0g8ajhUwI4HZFRidwten15Hcv8+UTuV9PZ3waS Q4Z3Opk0OG2qww27vTSC2bUgThbv/O0NTDcMNk1+P1rGgz5h1vfIeXeE0lkfAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUwwGs1AsGCjXB8vQb/8HLvJYakVkwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDc4NTc5NS8wLzMxMzEzMTJlMzIz MjMzMmUzMTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzMzM2MzUzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAm/fDDANBgkqhkiG9w0BAQsFAAOCAQEAOGlaRMQ5d+NWBniuDCB7R2dv IdtJKDjum1M1UXFw0s/hIuD82CRqAd1YFAi/Oj1UgC+f9KCl0Y8DcjAjXqKKoVwe G5Htn+vz++F1uHVFq6RvDdgyGp4l72k+5RGYa2g7TAuAUrExGlkCfPBvwIE5k5mQ 0YS7YmcjzHiuu/pj8fLOapHLFHn84HDMndvKPWgnL41K2wAWQIBTGOW5oencMtuc plfSg4q/Zg6Xlw/VSkubrltqHfCrzMTSAe1ycg4CJ7bCP9/xdRj43YIs+ckUH+es F/NgLvZByTPDHYUb/Kc8Qeo3FZHKLVAolvZwwHQADRdvtJA6eGtlKhDr6tJ9TA== -----END CERTIFICATE-----Generated at Fri Apr 17 19:41:28 2026 by rpki-client