$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e33322e302f32322d3234203d3e20323133373035.roa File: 3231312e3134392e33322e302f32322d3234203d3e20323133373035.roa (raw, json) Hash identifier: rQL1U/iYtRR0jUuvibdCcjhCtcFRu9RCmLi04/zoxkI= Subject key identifier: 4C:89:7D:2F:EE:24:A8:33:2F:EE:7A:58:90:93:67:A0:6D:B4:86:A5 Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 4B5049CFA6079686087FE11EAD811C5C58214B3C Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e33322e302f32322d3234203d3e20323133373035.roa Signing time: Thu 02 Apr 2026 08:58:08 +0000 ROA not before: Thu 02 Apr 2026 08:53:08 +0000 ROA not after: Thu 01 Apr 2027 08:58:08 +0000 asID: 213705 IP address blocks: 211.149.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:50:49:cf:a6:07:96:86:08:7f:e1:1e:ad:81:1c:5c:58:21:4b:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Apr 2 08:53:08 2026 GMT Not After : Apr 1 08:58:08 2027 GMT Subject: CN=4C897D2FEE24A8332FEE7A58909367A06DB486A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:29:fb:84:28:30:67:1f:b0:e7:d4:e2:ff:f1: c5:10:8a:51:b9:2c:61:d3:fe:8f:4d:06:e3:27:f4: 30:e4:77:3b:0c:b6:0c:47:73:e0:33:af:68:eb:c8: ef:8a:c2:1b:90:a7:4a:c7:0d:6e:ee:07:05:99:e1: 5d:87:3a:d0:e9:cc:6e:d9:55:56:1d:11:08:57:be: c5:70:72:aa:e5:21:16:a0:05:be:b6:1a:da:60:ce: a8:36:e7:3c:ff:20:18:be:ac:57:25:53:6c:a2:43: f9:a3:40:ab:a7:b9:44:25:66:a9:22:1b:c9:b8:0b: de:8a:3c:be:ec:dd:63:fe:a3:21:a6:0e:a1:00:94: 24:c2:88:57:46:1d:a8:02:fc:0b:15:ea:85:8f:02: f0:63:8c:ec:32:35:2d:0f:2c:44:a6:e4:23:90:8c: 90:c1:bf:95:33:1a:ac:a9:7c:27:52:09:32:3b:ab: 97:1b:aa:a2:a7:7c:4b:ba:46:a3:32:b8:8b:24:59: 88:c7:59:45:2c:4d:33:96:e3:70:77:35:75:26:c1: a5:54:d4:40:50:ce:1b:41:58:7e:3f:78:fb:4b:48: 6e:a1:bb:7f:fb:a3:ed:5a:38:b4:2e:ad:20:a6:64: 20:b7:ca:9b:ef:94:11:7f:ac:a1:c7:c9:27:1f:cf: 6b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:89:7D:2F:EE:24:A8:33:2F:EE:7A:58:90:93:67:A0:6D:B4:86:A5 X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e33322e302f32322d3234203d3e20323133373035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.149.32.0/22 Signature Algorithm: sha256WithRSAEncryption 16:fe:26:be:8f:72:b7:a4:78:86:2d:07:0c:3a:b5:62:ad:c2: 67:a7:44:2d:6f:c6:03:e7:94:8c:64:a1:c7:9c:b0:ff:80:b1: a9:fc:a0:13:79:d2:ba:9d:d2:fb:92:f9:3b:8c:49:65:5c:66: 0b:14:4c:c1:60:a4:7b:0d:8f:85:ae:17:e1:43:88:9c:dd:fa: 54:12:2e:a5:45:dd:00:04:7f:84:58:bb:2a:42:fd:62:9b:c1: 38:36:d6:20:5a:5c:ba:6a:a3:3e:94:0f:01:22:a3:40:a6:3e: 5a:ac:fc:c1:f4:59:d6:8d:39:cf:64:da:33:05:43:9a:19:00: 20:56:e8:55:57:a3:3f:0b:32:f0:11:e2:50:c5:87:2b:cc:5c: 15:ca:17:6f:d2:51:9b:42:4a:59:d7:64:42:3a:5c:40:fe:77: af:fe:e7:97:20:ba:1a:1b:ba:31:78:74:24:93:3a:e8:0f:9f: 0c:cf:47:14:fd:b7:a0:35:51:e7:17:ff:7f:ff:e4:b6:0d:e8: 5f:d0:7d:43:a3:0d:ba:d7:af:08:de:2b:3c:dd:cf:04:f1:1d: 19:5e:ec:cd:07:64:32:95:27:79:e6:77:04:ae:57:b4:43:92: 0d:31:7d:f1:35:6f:c8:e7:ec:c0:ba:19:2a:12:06:c1:43:f6: 2a:10:1c:5b -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUS1BJz6YHloYIf+EerYEcXFghSzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA0MDIwODUzMDhaFw0yNzA0MDEwODU4MDhaMDMxMTAvBgNV BAMTKDRDODk3RDJGRUUyNEE4MzMyRkVFN0E1ODkwOTM2N0EwNkRCNDg2QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXKfuEKDBnH7Dn1OL/8cUQilG5 LGHT/o9NBuMn9DDkdzsMtgxHc+Azr2jryO+KwhuQp0rHDW7uBwWZ4V2HOtDpzG7Z VVYdEQhXvsVwcqrlIRagBb62Gtpgzqg25zz/IBi+rFclU2yiQ/mjQKunuUQlZqki G8m4C96KPL7s3WP+oyGmDqEAlCTCiFdGHagC/AsV6oWPAvBjjOwyNS0PLESm5COQ jJDBv5UzGqypfCdSCTI7q5cbqqKnfEu6RqMyuIskWYjHWUUsTTOW43B3NXUmwaVU 1EBQzhtBWH4/ePtLSG6hu3/7o+1aOLQurSCmZCC3ypvvlBF/rKHHyScfz2udAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUTIl9L+4kqDMv7npYkJNnoG20hqUwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC8zMjMxMzEyZTMx MzQzOTJlMzMzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzEzMzM3MzAzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAtOVIDANBgkqhkiG9w0BAQsFAAOCAQEAFv4mvo9yt6R4hi0HDDq1 Yq3CZ6dELW/GA+eUjGShx5yw/4CxqfygE3nSup3S+5L5O4xJZVxmCxRMwWCkew2P ha4X4UOInN36VBIupUXdAAR/hFi7KkL9YpvBODbWIFpcumqjPpQPASKjQKY+Wqz8 wfRZ1o05z2TaMwVDmhkAIFboVVejPwsy8BHiUMWHK8xcFcoXb9JRm0JKWddkQjpc QP53r/7nlyC6Ghu6MXh0JJM66A+fDM9HFP23oDVR5xf/f//ktg3oX9B9Q6MNutev CN4rPN3PBPEdGV7szQdkMpUneeZ3BK5XtEOSDTF98TVvyOfswLoZKhIGwUP2KhAc Ww== -----END CERTIFICATE-----Generated at Fri Apr 17 22:46:03 2026 by rpki-client