$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e3130342e302f32322d3332203d3e203233373234.roa File: 3131342e3131322e3130342e302f32322d3332203d3e203233373234.roa (raw, json) Hash identifier: NWeATnkkZmCgyVT4pIfVdOM8sNpxn2iS7ZrMyhL8i1o= Subject key identifier: 58:68:5E:8B:73:F2:01:5D:E3:E6:0C:71:3A:92:69:71:E6:A0:1E:E5 Certificate issuer: /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315 Certificate serial: 544D921248EAD7357B50E9D83C933CC6C5AE4000 Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e3130342e302f32322d3332203d3e203233373234.roa Signing time: Wed 15 Apr 2026 07:57:37 +0000 ROA not before: Wed 15 Apr 2026 07:52:37 +0000 ROA not after: Wed 14 Apr 2027 07:57:37 +0000 asID: 23724 IP address blocks: 114.112.104.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:4d:92:12:48:ea:d7:35:7b:50:e9:d8:3c:93:3c:c6:c5:ae:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315 Validity Not Before: Apr 15 07:52:37 2026 GMT Not After : Apr 14 07:57:37 2027 GMT Subject: CN=58685E8B73F2015DE3E60C713A926971E6A01EE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:65:b0:1a:a2:3f:67:0f:bf:00:71:0c:ed:e8: 14:93:8d:4c:5f:d4:3e:c5:2a:92:5e:ad:f1:ba:f0: bf:24:dd:e4:f0:c9:b2:ac:ed:12:10:af:ff:13:65: 48:64:80:33:1c:5f:ce:af:9a:59:70:9b:dc:bc:18: 9d:51:62:26:ad:56:66:5b:bd:2a:b2:a0:32:e1:31: 7b:95:44:c6:14:b4:d4:73:fb:60:a4:eb:82:b0:ee: 95:91:56:06:af:ad:34:07:36:09:22:7c:1c:f0:f0: 55:f3:9a:3a:43:36:15:d5:87:bf:b8:71:38:c2:4a: 57:b1:fc:c5:12:f4:14:97:6b:90:8c:77:05:29:8f: d9:75:47:e6:e0:bb:5b:83:d9:38:6c:a4:a8:e6:f9: 7f:49:00:72:72:b7:86:c4:29:5d:e3:ec:5e:11:bf: 23:9d:8d:c9:d3:4b:6b:f6:71:53:bf:6b:3c:96:11: 6e:e8:40:84:b7:b1:e1:e5:e0:9e:1b:b9:ce:f7:0c: 6a:f0:08:62:a0:32:be:69:f2:dc:28:15:7c:33:87: 66:cc:c3:b2:49:f6:81:d4:73:4b:a2:c6:19:5e:f1: f4:af:21:97:ed:5f:aa:27:68:d7:40:9c:43:6f:2e: c5:bb:ff:1d:b9:5f:3f:50:59:77:28:a5:dd:82:8e: 77:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:68:5E:8B:73:F2:01:5D:E3:E6:0C:71:3A:92:69:71:E6:A0:1E:E5 X509v3 Authority Key Identifier: keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e3130342e302f32322d3332203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.112.104.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:75:2e:65:45:4d:c7:53:07:66:4c:e2:48:6b:b8:8a:ea:d0: fa:d0:c2:9d:e1:a1:31:95:7a:21:cb:41:1c:6d:cb:0e:4c:1f: 00:10:a8:3c:73:45:d1:e6:89:ad:1c:73:66:7a:34:d5:3f:22: d5:86:86:31:87:50:83:bf:34:10:a4:d5:50:7f:ba:ca:24:26: 04:85:e2:a0:f0:cb:eb:67:51:75:e0:3e:77:38:95:76:d9:7f: 21:d9:5d:ef:22:4f:2d:29:18:17:bd:a7:3f:6c:c5:9e:b9:9a: f2:17:83:59:10:d4:73:b8:9f:fc:91:9b:7d:91:a7:74:06:93: 1e:5b:05:60:c3:95:21:18:bc:d5:a6:69:1e:6f:12:9f:81:60: 82:c6:0b:7f:d4:f5:96:85:ff:f4:91:3f:c7:39:3d:b8:d4:79: 54:22:9a:5b:72:c0:1a:cb:27:ff:6e:f5:b7:0f:e3:7a:7c:17: 61:ca:21:a3:d0:2c:54:52:70:38:fb:12:42:45:df:f5:3f:50: 7f:b3:44:91:da:66:3a:c1:48:ae:ac:04:eb:47:03:7a:c8:98: 86:1d:a4:77:68:62:84:0e:4c:dd:60:17:28:de:c0:67:fa:85: 67:76:bd:88:2a:11:8d:e0:92:58:d4:fc:1a:18:98:2e:1a:cc: e8:0d:02:e5 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUVE2SEkjq1zV7UOnYPJM8xsWuQAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3 OEMxRTMxNTAeFw0yNjA0MTUwNzUyMzdaFw0yNzA0MTQwNzU3MzdaMDMxMTAvBgNV BAMTKDU4Njg1RThCNzNGMjAxNURFM0U2MEM3MTNBOTI2OTcxRTZBMDFFRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfZbAaoj9nD78AcQzt6BSTjUxf 1D7FKpJerfG68L8k3eTwybKs7RIQr/8TZUhkgDMcX86vmllwm9y8GJ1RYiatVmZb vSqyoDLhMXuVRMYUtNRz+2Ck64Kw7pWRVgavrTQHNgkifBzw8FXzmjpDNhXVh7+4 cTjCSlex/MUS9BSXa5CMdwUpj9l1R+bgu1uD2ThspKjm+X9JAHJyt4bEKV3j7F4R vyOdjcnTS2v2cVO/azyWEW7oQIS3seHl4J4buc73DGrwCGKgMr5p8twoFXwzh2bM w7JJ9oHUc0uixhle8fSvIZftX6onaNdAnENvLsW7/x25Xz9QWXcopd2CjndBAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUWGhei3PyAV3j5gxxOpJpceagHuUwHwYDVR0j BBgwFoAUIMrI5wtcswlOR/8FFiOphXjB4xUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDI5NDc2NzA5OTkwNS8wLzIwQ0FDOEU3MEI1Q0IzMDk0RTQ3RkYwNTE2MjNB OTg1NzhDMUUzMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3OEMxRTMxNS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTU5ODQyOTQ3NjcwOTk5MDUvMC8zMTMxMzQyZTMx MzEzMjJlMzEzMDM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzMzM3MzIzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAnJwaDANBgkqhkiG9w0BAQsFAAOCAQEAPHUuZUVNx1MHZkziSGu4 iurQ+tDCneGhMZV6IctBHG3LDkwfABCoPHNF0eaJrRxzZno01T8i1YaGMYdQg780 EKTVUH+6yiQmBIXioPDL62dRdeA+dziVdtl/Idld7yJPLSkYF72nP2zFnrma8heD WRDUc7if/JGbfZGndAaTHlsFYMOVIRi81aZpHm8Sn4FggsYLf9T1loX/9JE/xzk9 uNR5VCKaW3LAGssn/271tw/jenwXYcoho9AsVFJwOPsSQkXf9T9Qf7NEkdpmOsFI rqwE60cDesiYhh2kd2hihA5M3WAXKN7AZ/qFZ3a9iCoRjeCSWNT8GhiYLhrM6A0C 5Q== -----END CERTIFICATE-----Generated at Fri Apr 17 22:26:27 2026 by rpki-client