$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3231312e3136312e3130392e302f32342d3234203d3e20313436373732.roa File: 3231312e3136312e3130392e302f32342d3234203d3e20313436373732.roa (raw, json) Hash identifier: RaWNNSXVR8tps2og/Ak+iaDGQJ/KY1pty8OUWmINtkg= Subject key identifier: 56:DB:1A:6D:F8:E3:42:3B:F0:48:B9:68:95:53:09:B9:F2:42:44:75 Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Certificate serial: 352BDFE24E07C091D1A694F0A266FB6119122EB8 Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3231312e3136312e3130392e302f32342d3234203d3e20313436373732.roa Signing time: Thu 16 Apr 2026 04:06:43 +0000 ROA not before: Thu 16 Apr 2026 04:01:43 +0000 ROA not after: Thu 15 Apr 2027 04:06:43 +0000 asID: 146772 IP address blocks: 211.161.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:2b:df:e2:4e:07:c0:91:d1:a6:94:f0:a2:66:fb:61:19:12:2e:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Validity Not Before: Apr 16 04:01:43 2026 GMT Not After : Apr 15 04:06:43 2027 GMT Subject: CN=56DB1A6DF8E3423BF048B968955309B9F2424475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:62:bf:e5:90:66:cb:5a:de:76:f3:19:1e:c2: 67:9a:00:a2:57:ba:92:3b:93:c5:13:8a:02:83:32: f9:55:b4:50:ca:cd:51:07:ab:4d:d3:2d:33:f6:34: a7:06:0d:c8:56:9e:9d:99:23:de:d1:b0:91:fa:60: f3:42:ed:66:79:7b:3e:25:1d:d3:56:e6:65:16:89: 01:61:d3:e6:7a:1e:93:cc:53:9e:71:c8:16:dd:0c: 6a:d8:96:81:37:1a:7a:f8:33:de:77:28:dc:0b:b3: da:c1:64:61:24:76:01:a0:bf:b2:7a:96:b6:de:16: b1:af:9f:e4:f0:84:ae:43:3c:75:f2:cd:2e:59:21: 75:b6:e6:d3:b2:7c:49:10:28:69:e6:ae:c9:99:a0: 7d:78:56:e5:3e:98:55:03:fa:77:e6:e2:f5:b2:2e: 70:8f:9c:19:e2:8a:37:de:fa:71:e1:f7:75:00:e5: 6c:dc:78:77:57:3a:28:b6:55:2f:66:b4:cf:3d:6a: 72:46:0b:63:30:fe:2d:c9:87:0c:d8:b9:89:6c:b6: af:82:fb:fb:61:f9:d6:5d:a2:16:2a:95:9b:3e:7a: e5:75:90:b2:c6:20:b4:77:ac:c5:a9:9b:e1:bc:6d: 66:42:87:cc:b6:27:2f:80:04:ad:3c:f7:dd:5c:53: d2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:DB:1A:6D:F8:E3:42:3B:F0:48:B9:68:95:53:09:B9:F2:42:44:75 X509v3 Authority Key Identifier: keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3231312e3136312e3130392e302f32342d3234203d3e20313436373732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.161.109.0/24 Signature Algorithm: sha256WithRSAEncryption 37:4a:5a:25:94:1a:32:c8:d3:b6:92:26:61:b0:99:20:31:a9: 47:5c:e6:6d:e4:e9:27:cd:bc:82:81:25:91:c4:25:3b:23:96: ee:6c:74:c0:53:14:4c:cf:db:23:4a:81:b4:4c:c5:27:94:a6: 00:d9:2b:55:66:04:15:db:be:fd:7b:6a:15:24:1d:6c:f5:89: 64:47:09:6f:f4:67:3c:ac:47:12:9a:f5:ac:d1:b9:11:97:be: ff:6b:60:cf:10:cb:8e:54:80:46:f4:8c:ac:60:ee:99:40:6e: 87:52:c0:34:2d:a6:51:96:7c:22:07:86:dd:2c:fc:76:e3:12: 4e:9f:bb:42:86:4e:7e:9d:5d:69:a1:ce:4c:71:61:16:c1:f8: 66:e9:09:af:8a:34:f6:fa:7d:41:8f:3c:02:b6:e7:d2:03:03: 2b:fe:70:db:b0:f4:21:ef:7b:99:df:d9:9e:2c:ee:b2:32:9f: 8f:27:bf:5a:80:8e:a2:64:e8:81:b0:f2:b4:f3:e7:02:16:67: 55:fe:9e:f9:64:b6:ae:a3:c8:d9:e3:9f:fb:79:f0:06:c9:81: 04:df:a1:27:63:10:3a:cf:5d:15:f1:80:11:ab:bc:bd:de:ea: 4e:54:01:0f:73:03:b2:0a:ad:44:57:9a:cc:b0:84:0c:9f:43: 93:35:b5:70 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUNSvf4k4HwJHRppTwomb7YRkSLrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0Qzcy RjFBMTJCODAeFw0yNjA0MTYwNDAxNDNaFw0yNzA0MTUwNDA2NDNaMDMxMTAvBgNV BAMTKDU2REIxQTZERjhFMzQyM0JGMDQ4Qjk2ODk1NTMwOUI5RjI0MjQ0NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiYr/lkGbLWt528xkewmeaAKJX upI7k8UTigKDMvlVtFDKzVEHq03TLTP2NKcGDchWnp2ZI97RsJH6YPNC7WZ5ez4l HdNW5mUWiQFh0+Z6HpPMU55xyBbdDGrYloE3Gnr4M953KNwLs9rBZGEkdgGgv7J6 lrbeFrGvn+TwhK5DPHXyzS5ZIXW25tOyfEkQKGnmrsmZoH14VuU+mFUD+nfm4vWy LnCPnBniijfe+nHh93UA5WzceHdXOii2VS9mtM89anJGC2Mw/i3JhwzYuYlstq+C +/th+dZdohYqlZs+euV1kLLGILR3rMWpm+G8bWZCh8y2Jy+ABK08991cU9LvAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUVtsabfjjQjvwSLlolVMJufJCRHUwHwYDVR0j BBgwFoAUPQHNaSjd6NJqyWJl8fkExy8aErgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQyMDI4OS8wLzNEMDFDRDY5MjhEREU4RDI2QUM5NjI2NUYxRjkw NEM3MkYxQTEyQjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0QzcyRjFBMTJCOC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1NDIwMjg5LzAvMzIzMTMxMmUz MTM2MzEyZTMxMzAzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM3Mzcz Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEANOhbTANBgkqhkiG9w0BAQsFAAOCAQEAN0paJZQaMsjTtpIm YbCZIDGpR1zmbeTpJ828goElkcQlOyOW7mx0wFMUTM/bI0qBtEzFJ5SmANkrVWYE Fdu+/XtqFSQdbPWJZEcJb/RnPKxHEpr1rNG5EZe+/2tgzxDLjlSARvSMrGDumUBu h1LANC2mUZZ8IgeG3Sz8duMSTp+7QoZOfp1daaHOTHFhFsH4ZukJr4o09vp9QY88 Arbn0gMDK/5w27D0Ie97md/ZnizusjKfjye/WoCOomTogbDytPPnAhZnVf6e+WS2 rqPI2eOf+3nwBsmBBN+hJ2MQOs9dFfGAEau8vd7qTlQBD3MDsgqtRFeazLCEDJ9D kzW1cA== -----END CERTIFICATE-----Generated at Sat Apr 18 02:43:16 2026 by rpki-client