$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3231312e3135342e3136302e302f32302d3230203d3e2034383437.roa File: 3231312e3135342e3136302e302f32302d3230203d3e2034383437.roa (raw, json) Hash identifier: Wb2GDlr1HH87/AOD/z1KXXXUqxfexsYS2+TNpaBNo4s= Subject key identifier: 44:3D:28:38:89:6B:08:56:7D:19:2E:8D:C2:C0:AD:EB:8F:78:2B:BC Certificate issuer: /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F Certificate serial: 265F2E6A16502F6CFBE9EC7B04A7F3B288079CDB Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3231312e3135342e3136302e302f32302d3230203d3e2034383437.roa Signing time: Wed 15 Apr 2026 04:05:03 +0000 ROA not before: Wed 15 Apr 2026 04:00:03 +0000 ROA not after: Wed 14 Apr 2027 04:05:03 +0000 asID: 4847 IP address blocks: 211.154.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 12:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:5f:2e:6a:16:50:2f:6c:fb:e9:ec:7b:04:a7:f3:b2:88:07:9c:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F Validity Not Before: Apr 15 04:00:03 2026 GMT Not After : Apr 14 04:05:03 2027 GMT Subject: CN=443D2838896B08567D192E8DC2C0ADEB8F782BBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a7:a7:be:a1:cc:39:82:c1:3e:d0:8e:37:b1: 98:45:9b:a8:9d:6f:3c:55:1a:8b:9b:01:a3:8d:76: 58:16:d4:b7:10:12:05:72:03:97:ec:2b:eb:a3:d2: 74:4f:a9:8c:9c:61:7f:18:8f:9e:20:3e:35:20:35: c1:ec:19:17:21:0e:3b:ee:0a:15:39:bc:a7:20:08: 5f:7d:1d:04:5c:c8:7f:39:a9:c7:a8:84:cc:f5:6d: 91:60:c2:c3:9e:d9:09:22:9b:b2:b0:a7:e5:aa:60: b2:b0:d3:75:ac:02:e3:90:e8:1d:43:91:fa:fe:c3: 6b:0f:d5:9a:6e:90:b2:4c:a7:a1:0b:b1:e6:91:4c: 55:e7:d6:ca:bc:61:57:c5:a8:8a:c8:0c:ec:d9:f9: cb:58:74:38:5c:7f:60:b3:65:3d:3c:e3:2e:d6:fd: 3a:ca:3b:50:ef:97:1b:5e:d0:dd:73:0f:10:ed:01: b2:d9:59:37:45:4f:f9:91:2c:71:2f:a0:59:6c:a8: 09:61:c4:93:71:e1:2a:86:72:e1:a6:82:7d:a3:5d: 67:45:a7:99:24:e1:34:63:b3:07:69:82:b1:44:79: e5:6b:1b:f4:83:ab:9b:c6:b4:cd:3b:cc:2e:39:e1: 0f:66:53:9f:24:1a:3f:5c:2d:9e:7b:6f:8c:58:f8: 7b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3D:28:38:89:6B:08:56:7D:19:2E:8D:C2:C0:AD:EB:8F:78:2B:BC X509v3 Authority Key Identifier: keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3231312e3135342e3136302e302f32302d3230203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.154.160.0/20 Signature Algorithm: sha256WithRSAEncryption 6a:20:bd:47:1e:5a:bb:7f:b5:f2:c1:ef:d8:79:af:89:f4:5e: 0f:75:7e:9e:a6:c4:fc:fa:f3:a4:24:63:22:f7:bb:70:e6:e5: 94:b1:2f:07:67:6d:9b:43:e8:5b:7b:d2:59:7d:6e:87:e2:a7: 64:57:b5:12:b9:b9:d1:f6:50:79:c3:b3:f0:4b:db:83:2c:00: 5f:67:6b:4f:4d:6c:23:8e:0a:ed:3a:14:0d:41:c4:e9:4b:9e: f0:a3:e7:3b:b7:e2:1a:fe:38:c9:7f:1c:c8:ef:c7:a5:ff:3e: 06:4c:57:17:84:cf:5f:80:ba:61:88:13:31:49:3b:69:62:c3: 66:8b:08:43:8d:eb:54:3c:d2:16:0c:88:65:b6:4b:8e:9f:dc: b7:57:c4:31:e2:e6:fa:06:fa:ec:67:90:16:91:b1:8e:c9:03: 1a:7e:ab:97:57:ed:ed:fe:27:72:63:39:68:4d:9e:13:62:84: 7a:83:57:80:a5:1f:bc:57:e7:f4:6e:ca:a6:08:dd:39:5c:7a: 27:b5:52:cd:cb:38:e8:f2:e1:69:b9:be:0d:a2:37:2d:0a:0c: 4a:8e:5f:10:77:e6:f8:1b:3f:a3:dc:7f:66:79:37:f4:e6:2a: df:f9:25:e1:48:3b:87:28:03:d9:23:42:65:09:7c:f4:95:9e: 83:cc:5f:c3 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUJl8uahZQL2z76ex7BKfzsogHnNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDky MjJFOEY5RjAeFw0yNjA0MTUwNDAwMDNaFw0yNzA0MTQwNDA1MDNaMDMxMTAvBgNV BAMTKDQ0M0QyODM4ODk2QjA4NTY3RDE5MkU4REMyQzBBREVCOEY3ODJCQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCup6e+ocw5gsE+0I43sZhFm6id bzxVGoubAaONdlgW1LcQEgVyA5fsK+uj0nRPqYycYX8Yj54gPjUgNcHsGRchDjvu ChU5vKcgCF99HQRcyH85qceohMz1bZFgwsOe2Qkim7Kwp+WqYLKw03WsAuOQ6B1D kfr+w2sP1ZpukLJMp6ELseaRTFXn1sq8YVfFqIrIDOzZ+ctYdDhcf2CzZT084y7W /TrKO1Dvlxte0N1zDxDtAbLZWTdFT/mRLHEvoFlsqAlhxJNx4SqGcuGmgn2jXWdF p5kk4TRjswdpgrFEeeVrG/SDq5vGtM07zC454Q9mU58kGj9cLZ57b4xY+HshAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQURD0oOIlrCFZ9GS6NwsCt6494K7wwHwYDVR0j BBgwFoAUGyfCb49+zlOXLYCTP1A8CSIuj58wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 MDk1NTkyNDA3MzU0NTczMS8wLzFCMjdDMjZGOEY3RUNFNTM5NzJEODA5MzNGNTAz QzA5MjIyRThGOUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDkyMjJFOEY5Ri5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA3MDk1NTkyNDA3MzU0NTczMS8wLzMyMzEzMTJlMzEz NTM0MmUzMTM2MzAyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNDM4MzQzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBNOaoDANBgkqhkiG9w0BAQsFAAOCAQEAaiC9Rx5au3+18sHv2HmvifRe D3V+nqbE/PrzpCRjIve7cObllLEvB2dtm0PoW3vSWX1uh+KnZFe1Erm50fZQecOz 8EvbgywAX2drT01sI44K7ToUDUHE6Uue8KPnO7fiGv44yX8cyO/Hpf8+BkxXF4TP X4C6YYgTMUk7aWLDZosIQ43rVDzSFgyIZbZLjp/ct1fEMeLm+gb67GeQFpGxjskD Gn6rl1ft7f4ncmM5aE2eE2KEeoNXgKUfvFfn9G7KpgjdOVx6J7VSzcs46PLhabm+ DaI3LQoMSo5fEHfm+Bs/o9x/Znk39OYq3/kl4Ug7hygD2SNCZQl89JWeg8xfww== -----END CERTIFICATE-----Generated at Fri Apr 17 17:13:51 2026 by rpki-client