$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/0/3231312e3136312e3232342e302f32302d3234203d3e2034383136.roa File: 3231312e3136312e3232342e302f32302d3234203d3e2034383136.roa (raw, json) Hash identifier: 7ESkoMdtrmm8SQWjAiVoIXlCHKhBj+bnSHyVsBLhiTg= Subject key identifier: 8B:E6:D4:E3:4F:DE:80:CF:0A:32:4C:FE:0D:CE:DA:09:5F:59:21:EC Certificate issuer: /CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Certificate serial: 48BD478ED7E955DE420AEF38CB6E4192C97289BE Authority key identifier: 95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/3231312e3136312e3232342e302f32302d3234203d3e2034383136.roa Signing time: Wed 15 Apr 2026 13:19:52 +0000 ROA not before: Wed 15 Apr 2026 13:14:52 +0000 ROA not after: Wed 14 Apr 2027 13:19:52 +0000 asID: 4816 IP address blocks: 211.161.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 05:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:bd:47:8e:d7:e9:55:de:42:0a:ef:38:cb:6e:41:92:c9:72:89:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Validity Not Before: Apr 15 13:14:52 2026 GMT Not After : Apr 14 13:19:52 2027 GMT Subject: CN=8BE6D4E34FDE80CF0A324CFE0DCEDA095F5921EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fc:32:02:d2:10:81:ad:0e:3c:5a:29:fd:c7: 1c:34:2c:a7:bc:b4:cd:66:ed:c6:8d:ee:72:8c:da: d3:b1:88:36:0f:e2:73:f2:4a:52:42:c5:48:dd:c0: 61:3f:db:a2:29:40:80:b3:6c:d6:23:9b:7f:fb:52: 23:9e:e3:58:12:ff:34:41:38:8e:8a:29:81:58:8c: 8f:56:45:48:bf:d3:e8:0c:4d:51:ab:22:5b:52:31: 2b:cd:4e:85:08:39:d5:83:4d:73:e6:b2:0b:f4:d1: 2d:8a:4d:bd:19:7c:fe:ac:f6:32:82:a7:93:0d:78: ec:cd:7d:71:cb:fd:5a:57:33:e3:91:0f:0a:d8:73: 44:df:b8:ba:37:36:3c:42:87:69:d6:9d:21:55:09: e9:70:74:5c:03:51:f9:45:8a:a9:40:25:ce:26:21: a4:3f:30:a0:32:95:55:7e:f8:96:92:13:cf:5a:b0: 1a:94:58:12:96:e4:37:36:22:0d:d5:03:de:d5:1b: d1:39:39:fc:10:8d:77:0b:90:ad:73:25:89:11:7e: 42:c2:d7:b5:b3:af:98:99:4d:b0:94:a6:25:f3:9c: 3b:60:0a:a8:88:52:2d:97:84:da:84:5c:0f:b5:f3: 96:72:ca:c7:a8:18:a5:1b:06:4f:63:0b:c2:15:bf: 46:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E6:D4:E3:4F:DE:80:CF:0A:32:4C:FE:0D:CE:DA:09:5F:59:21:EC X509v3 Authority Key Identifier: keyid:95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/3231312e3136312e3232342e302f32302d3234203d3e2034383136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.161.224.0/20 Signature Algorithm: sha256WithRSAEncryption 15:09:5d:b6:cd:92:19:ca:31:96:7b:e8:69:26:80:af:31:cc: 87:b4:fc:89:10:97:2e:8d:14:2c:7d:c8:fb:f4:bd:c6:4c:d7: 00:3c:72:71:ba:21:fa:49:db:81:17:a5:9a:a7:c1:96:c6:f1: 16:6f:4c:dd:58:b8:c8:76:b4:3e:0c:b4:e2:cf:ab:f6:93:4a: 6f:d1:4d:fb:44:dc:b0:10:ef:80:cf:30:5c:ae:97:d7:96:82: ee:3f:bd:3f:01:47:3b:4b:50:e8:36:28:d8:11:a2:83:21:51: fc:50:09:e8:44:aa:0a:08:fe:1a:ce:87:48:e7:50:66:ed:8f: 85:1f:45:6c:9c:07:dc:b2:0e:a9:10:fd:38:82:b6:69:79:a1: 9f:49:79:83:a2:e1:dd:e5:78:ef:12:53:50:db:0b:0e:dd:f9: ad:2f:1f:cc:d6:fa:aa:f6:40:e7:01:65:fc:76:25:aa:62:0e: 54:df:37:47:c6:cd:3e:86:54:e1:35:02:14:84:73:47:47:98: e7:49:d4:bd:b3:3b:42:67:1b:f4:69:e6:82:df:d2:a2:b1:12: fb:ff:97:b2:47:b4:18:10:d6:3f:4c:76:d7:32:54:47:49:52: 7f:0c:6e:d9:c3:e6:67:f3:69:fd:99:40:4d:1b:d2:8f:e0:56: 82:1a:96:97 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUSL1HjtfpVd5CCu84y25Bkslyib4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1 NTlENTMzNzAeFw0yNjA0MTUxMzE0NTJaFw0yNzA0MTQxMzE5NTJaMDMxMTAvBgNV BAMTKDhCRTZENEUzNEZERTgwQ0YwQTMyNENGRTBEQ0VEQTA5NUY1OTIxRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc/DIC0hCBrQ48Win9xxw0LKe8 tM1m7caN7nKM2tOxiDYP4nPySlJCxUjdwGE/26IpQICzbNYjm3/7UiOe41gS/zRB OI6KKYFYjI9WRUi/0+gMTVGrIltSMSvNToUIOdWDTXPmsgv00S2KTb0ZfP6s9jKC p5MNeOzNfXHL/VpXM+ORDwrYc0TfuLo3NjxCh2nWnSFVCelwdFwDUflFiqlAJc4m IaQ/MKAylVV++JaSE89asBqUWBKW5Dc2Ig3VA97VG9E5OfwQjXcLkK1zJYkRfkLC 17Wzr5iZTbCUpiXznDtgCqiIUi2XhNqEXA+185ZyyseoGKUbBk9jC8IVv0bdAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUi+bU40/egM8KMkz+Dc7aCV9ZIewwHwYDVR0j BBgwFoAUla+0UV1iihGG0ghpz+r0fVWdUzcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzUyMDY0My8wLzk1QUZCNDUxNUQ2MjhBMTE4NkQyMDg2OUNGRUFG NDdENTU5RDUzMzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1NTlENTMzNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTkxMTIxNzUyMDY0My8wLzMyMzEzMTJlMzEz NjMxMmUzMjMyMzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNDM4MzEzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBNOh4DANBgkqhkiG9w0BAQsFAAOCAQEAFQldts2SGcoxlnvoaSaArzHM h7T8iRCXLo0ULH3I+/S9xkzXADxycboh+knbgRelmqfBlsbxFm9M3Vi4yHa0Pgy0 4s+r9pNKb9FN+0TcsBDvgM8wXK6X15aC7j+9PwFHO0tQ6DYo2BGigyFR/FAJ6ESq Cgj+Gs6HSOdQZu2PhR9FbJwH3LIOqRD9OIK2aXmhn0l5g6Lh3eV47xJTUNsLDt35 rS8fzNb6qvZA5wFl/HYlqmIOVN83R8bNPoZU4TUCFIRzR0eY50nUvbM7Qmcb9Gnm gt/SorES+/+Xske0GBDWP0x21zJUR0lSfwxu2cPmZ/Np/ZlATRvSj+BWghqWlw== -----END CERTIFICATE-----Generated at Fri Apr 17 10:18:13 2026 by rpki-client