$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3231312e3136312e3131302e302f32342d3234203d3e20313436373732.roa File: 3231312e3136312e3131302e302f32342d3234203d3e20313436373732.roa (raw, json) Hash identifier: iVAXKRVA2OAi2gvS05dFXtSfuZgHOruHMQhgHWIEYzE= Subject key identifier: 68:01:49:6F:31:B3:51:EA:34:A8:09:F0:B0:00:7E:69:58:34:85:34 Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Certificate serial: 45F89E460B2EFD6084FE89D9B9D4F20B84BDAC26 Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3231312e3136312e3131302e302f32342d3234203d3e20313436373732.roa Signing time: Thu 16 Apr 2026 04:06:43 +0000 ROA not before: Thu 16 Apr 2026 04:01:43 +0000 ROA not after: Thu 15 Apr 2027 04:06:43 +0000 asID: 146772 IP address blocks: 211.161.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:f8:9e:46:0b:2e:fd:60:84:fe:89:d9:b9:d4:f2:0b:84:bd:ac:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Validity Not Before: Apr 16 04:01:43 2026 GMT Not After : Apr 15 04:06:43 2027 GMT Subject: CN=6801496F31B351EA34A809F0B0007E6958348534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d7:8a:8c:f2:d8:bd:40:7d:5a:d7:53:27:32: b3:84:28:f1:25:65:81:c0:ea:aa:8b:16:d6:97:1d: 48:3f:58:5e:d9:4a:c1:0a:62:9b:07:ba:7b:e4:27: ce:0d:69:bd:19:59:a5:70:a3:de:f5:b3:13:ba:16: 7f:a9:aa:28:29:9c:10:44:35:10:d9:9e:69:c1:2f: 62:9c:3a:7a:1b:a2:53:0a:6a:88:9b:e2:6d:2e:c9: af:b5:22:d2:dc:6e:69:6a:60:e8:b7:14:36:94:bb: d6:bf:07:d3:73:71:f0:12:51:e0:88:a9:bf:85:2d: 3d:b7:76:f5:21:7a:ad:17:f0:fb:2e:cf:f4:bb:fe: d9:74:2a:f5:a7:d7:bc:78:ed:53:02:45:59:b9:32: b0:1f:42:37:88:17:38:ea:b2:60:e4:72:16:f2:e9: fe:d5:57:4c:03:b1:35:95:a4:ee:a4:d5:18:0c:9d: 3d:e8:56:3c:a8:dd:eb:06:42:55:72:d5:4a:a8:8d: 89:b6:5f:8b:6e:4f:47:6b:a6:bc:84:e6:4c:06:96: f3:69:bd:04:1c:63:4d:e9:73:5c:82:3a:2a:48:50: f7:6e:45:9a:1c:b4:25:15:64:e7:d0:90:ff:58:c5: 56:60:12:05:a4:8a:45:e9:fa:3a:c5:18:ea:02:87: 0c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:01:49:6F:31:B3:51:EA:34:A8:09:F0:B0:00:7E:69:58:34:85:34 X509v3 Authority Key Identifier: keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3231312e3136312e3131302e302f32342d3234203d3e20313436373732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.161.110.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:b3:50:f2:17:50:51:19:89:5e:b9:8f:63:67:b0:5b:62:55: 76:bb:ec:31:fb:e6:86:ea:79:0a:5a:8c:44:9b:3e:cd:f0:d8: af:06:92:66:fa:ea:06:d2:00:57:9a:c3:1b:26:31:d0:4b:8f: 8c:00:e8:bc:64:49:f3:03:ee:93:db:20:43:8f:45:1c:bc:a6: e3:15:f6:b4:75:f1:34:86:a4:c7:e5:93:ea:5a:e1:44:c0:24: bd:5f:13:fe:b1:0b:cc:ed:33:0e:86:db:82:66:d7:e5:fb:d4: 69:0d:16:62:45:47:b6:5d:7c:4a:b0:5e:4a:23:16:14:9a:3e: 20:55:82:3d:51:d4:03:89:01:a4:9a:5f:bd:c1:56:1b:4a:39: 2d:eb:2c:c6:e7:75:da:89:5b:59:3f:e5:6d:7c:0b:b1:a2:f9: ed:bf:50:a1:cc:96:19:22:93:4f:3f:b1:83:19:45:df:52:ac: 8e:a9:92:87:b8:82:61:49:36:1a:30:c2:1c:c4:b8:84:bd:ac: 69:e6:89:7b:51:2e:55:04:19:d8:1b:e9:a2:6e:de:27:4f:c0: b1:ce:4f:3d:66:63:d2:ef:72:bc:35:fe:dc:53:cc:ad:e0:96: 7f:dc:99:14:e0:32:62:af:4b:b7:f2:0d:91:3e:da:2a:5e:d9: e1:2b:d7:b9 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIURfieRgsu/WCE/onZudTyC4S9rCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0Qzcy RjFBMTJCODAeFw0yNjA0MTYwNDAxNDNaFw0yNzA0MTUwNDA2NDNaMDMxMTAvBgNV BAMTKDY4MDE0OTZGMzFCMzUxRUEzNEE4MDlGMEIwMDA3RTY5NTgzNDg1MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG14qM8ti9QH1a11MnMrOEKPEl ZYHA6qqLFtaXHUg/WF7ZSsEKYpsHunvkJ84Nab0ZWaVwo971sxO6Fn+pqigpnBBE NRDZnmnBL2KcOnobolMKaoib4m0uya+1ItLcbmlqYOi3FDaUu9a/B9NzcfASUeCI qb+FLT23dvUheq0X8Psuz/S7/tl0KvWn17x47VMCRVm5MrAfQjeIFzjqsmDkchby 6f7VV0wDsTWVpO6k1RgMnT3oVjyo3esGQlVy1UqojYm2X4tuT0drpryE5kwGlvNp vQQcY03pc1yCOipIUPduRZoctCUVZOfQkP9YxVZgEgWkikXp+jrFGOoChwwjAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUaAFJbzGzUeo0qAnwsAB+aVg0hTQwHwYDVR0j BBgwFoAUPQHNaSjd6NJqyWJl8fkExy8aErgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQyMDI4OS8wLzNEMDFDRDY5MjhEREU4RDI2QUM5NjI2NUYxRjkw NEM3MkYxQTEyQjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0QzcyRjFBMTJCOC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1NDIwMjg5LzAvMzIzMTMxMmUz MTM2MzEyZTMxMzEzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM3Mzcz Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEANOhbjANBgkqhkiG9w0BAQsFAAOCAQEAX7NQ8hdQURmJXrmP Y2ewW2JVdrvsMfvmhup5ClqMRJs+zfDYrwaSZvrqBtIAV5rDGyYx0EuPjADovGRJ 8wPuk9sgQ49FHLym4xX2tHXxNIakx+WT6lrhRMAkvV8T/rELzO0zDobbgmbX5fvU aQ0WYkVHtl18SrBeSiMWFJo+IFWCPVHUA4kBpJpfvcFWG0o5Lessxud12olbWT/l bXwLsaL57b9QocyWGSKTTz+xgxlF31KsjqmSh7iCYUk2GjDCHMS4hL2saeaJe1Eu VQQZ2Bvpom7eJ0/Asc5PPWZj0u9yvDX+3FPMreCWf9yZFOAyYq9Lt/INkT7aKl7Z 4SvXuQ== -----END CERTIFICATE-----Generated at Sat Apr 18 01:20:56 2026 by rpki-client