$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345757186/0/3131312e3232332e382e302f32322d3332203d3e20313039.roa File: 3131312e3232332e382e302f32322d3332203d3e20313039.roa (raw, json) Hash identifier: zQZ+GZ/PmnZiTYYUgL8WbnnthSRy3dbcLyqydGTq64o= Subject key identifier: E3:B4:E9:4F:9C:62:60:B4:95:65:F9:C3:75:E1:DF:F7:B1:6A:22:60 Certificate issuer: /CN=848188DBA8D369CB93B918182269D397DE354F44 Certificate serial: 70C1660767C9571416B303393C62F8023FD4FB29 Authority key identifier: 84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/3131312e3232332e382e302f32322d3332203d3e20313039.roa Signing time: Wed 15 Apr 2026 08:00:49 +0000 ROA not before: Wed 15 Apr 2026 07:55:49 +0000 ROA not after: Wed 14 Apr 2027 08:00:49 +0000 asID: 109 IP address blocks: 111.223.8.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 12:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:c1:66:07:67:c9:57:14:16:b3:03:39:3c:62:f8:02:3f:d4:fb:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848188DBA8D369CB93B918182269D397DE354F44 Validity Not Before: Apr 15 07:55:49 2026 GMT Not After : Apr 14 08:00:49 2027 GMT Subject: CN=E3B4E94F9C6260B49565F9C375E1DFF7B16A2260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d8:fd:01:0f:7b:8a:11:4f:8a:14:09:18:b5: b5:b3:c8:6b:3a:38:91:54:d4:47:3e:61:c4:cf:5b: 49:3b:85:1f:6f:ae:fd:32:57:e2:50:2d:42:81:2b: 39:8b:a1:6a:02:67:65:35:54:70:8c:85:48:e5:8b: 6e:ee:81:00:5a:24:3d:8d:3e:db:4d:ca:95:dd:8e: 58:b0:1b:a1:84:79:51:28:23:a4:db:ca:d3:f3:f3: dd:e5:ec:0e:42:b4:d9:18:b6:ad:a9:4b:44:09:87: ae:6a:12:b4:3f:ff:a8:6d:40:4b:7e:a9:b5:f8:86: b3:b2:b6:bb:06:b7:35:d7:c2:6c:b4:01:b8:28:7a: 15:3e:b9:be:7a:cc:b9:be:ac:16:5e:ab:24:9e:e7: af:d6:27:ed:81:89:5a:43:6b:be:4c:9f:f2:bf:17: 36:46:50:2a:7f:76:1f:0f:ec:ea:3d:20:c3:ff:17: c9:46:8e:99:35:27:e2:52:d4:85:21:f6:e8:8f:98: d6:65:86:67:5d:d9:87:28:cc:57:81:27:af:2f:0f: 75:8b:37:82:7e:9c:46:82:4c:7f:ce:26:58:4c:ec: ec:c0:af:aa:0e:03:c0:e7:db:2f:f2:35:ce:00:c2: 97:3a:b2:4f:86:f0:aa:b8:eb:2d:c4:4b:d0:c2:6f: e9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B4:E9:4F:9C:62:60:B4:95:65:F9:C3:75:E1:DF:F7:B1:6A:22:60 X509v3 Authority Key Identifier: keyid:84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/3131312e3232332e382e302f32322d3332203d3e20313039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 111.223.8.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:c0:75:27:b0:12:48:b7:d8:f7:c1:b6:98:b9:09:7c:6f:df: 11:dc:6e:f7:9c:c1:ee:44:c9:f6:6e:94:1e:5f:4a:a6:08:4c: 9e:ed:bc:94:6a:e9:a2:0b:e0:ad:ad:d3:d1:56:6f:e1:94:8e: b6:89:5d:58:9c:a0:f8:58:83:6d:86:0e:2f:7f:c2:78:e2:8e: f3:59:18:b1:b8:af:7a:36:e7:32:2f:59:c6:aa:02:8f:9e:ed: c5:75:ac:be:31:f6:53:67:79:a5:bf:76:71:42:07:cf:2f:7d: f9:b0:24:86:73:83:47:8b:d4:c0:c5:ac:d8:5f:ee:ff:e6:14: c7:cf:2e:c5:34:2c:7d:47:49:2d:77:c1:ed:67:5e:3c:e9:bc: 61:70:f9:c0:3f:db:50:d1:ad:92:bd:29:5c:e5:51:31:93:14: 22:c1:ba:bb:98:83:78:ed:05:70:45:ab:29:b6:5a:62:97:e3: 78:aa:73:be:52:58:b6:ab:a9:5d:aa:d3:72:e0:22:8a:1b:97: 07:40:96:66:d7:b5:6d:ad:6d:42:34:5a:f2:f8:61:6a:02:98: ce:fe:7f:35:f4:b4:31:34:9f:db:c1:de:a9:d8:4e:6f:68:69: 42:83:ca:df:a2:ce:a0:35:92:6c:b6:f3:01:30:70:0f:c3:7b: 1a:db:38:28 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUcMFmB2fJVxQWswM5PGL4Aj/U+ykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4MTg4REJBOEQzNjlDQjkzQjkxODE4MjI2OUQzOTdE RTM1NEY0NDAeFw0yNjA0MTUwNzU1NDlaFw0yNzA0MTQwODAwNDlaMDMxMTAvBgNV BAMTKEUzQjRFOTRGOUM2MjYwQjQ5NTY1RjlDMzc1RTFERkY3QjE2QTIyNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC72P0BD3uKEU+KFAkYtbWzyGs6 OJFU1Ec+YcTPW0k7hR9vrv0yV+JQLUKBKzmLoWoCZ2U1VHCMhUjli27ugQBaJD2N PttNypXdjliwG6GEeVEoI6TbytPz893l7A5CtNkYtq2pS0QJh65qErQ//6htQEt+ qbX4hrOytrsGtzXXwmy0AbgoehU+ub56zLm+rBZeqySe56/WJ+2BiVpDa75Mn/K/ FzZGUCp/dh8P7Oo9IMP/F8lGjpk1J+JS1IUh9uiPmNZlhmdd2YcozFeBJ68vD3WL N4J+nEaCTH/OJlhM7OzAr6oOA8Dn2y/yNc4Awpc6sk+G8Kq46y3ES9DCb+mJAgMB AAGjggINMIICCTAdBgNVHQ4EFgQU47TpT5xiYLSVZfnDdeHf97FqImAwHwYDVR0j BBgwFoAUhIGI26jTacuTuRgYImnTl941T0QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTc1NzE4Ni8wLzg0ODE4OERCQThEMzY5Q0I5M0I5MTgxODIyNjlE Mzk3REUzNTRGNDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ4MTg4REJBOEQzNjlDQjkzQjkxODE4MjI2OUQzOTdERTM1NEY0NC5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ1NzU3MTg2LzAvMzEzMTMxMmUzMjMy MzMyZTM4MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzEzMDM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC b98IMA0GCSqGSIb3DQEBCwUAA4IBAQB/wHUnsBJIt9j3wbaYuQl8b98R3G73nMHu RMn2bpQeX0qmCEye7byUaumiC+CtrdPRVm/hlI62iV1YnKD4WINthg4vf8J44o7z WRixuK96NucyL1nGqgKPnu3Fday+MfZTZ3mlv3ZxQgfPL335sCSGc4NHi9TAxazY X+7/5hTHzy7FNCx9R0ktd8HtZ1486bxhcPnAP9tQ0a2SvSlc5VExkxQiwbq7mIN4 7QVwRasptlpil+N4qnO+Uli2q6ldqtNy4CKKG5cHQJZm17VtrW1CNFry+GFqApjO /n819LQxNJ/bwd6p2E5vaGlCg8rfos6gNZJstvMBMHAPw3sa2zgo -----END CERTIFICATE-----Generated at Fri Apr 17 17:27:54 2026 by rpki-client