$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e36342e302f32302d3230203d3e203536303438.roa File: 3231312e3136372e36342e302f32302d3230203d3e203536303438.roa (raw, json) Hash identifier: AnHl353Jkgb+zEG1yr6+BX/YEq2tV69+DgPnpw6IjKQ= Subject key identifier: 71:46:13:6E:D9:12:DF:50:51:10:C5:E9:7D:FA:0A:19:51:03:C2:92 Certificate issuer: /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8 Certificate serial: 3E296A8864E71F9E209F18D4A3B7462CEC5CD671 Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e36342e302f32302d3230203d3e203536303438.roa Signing time: Fri 18 Sep 2026 02:40:10 +0000 ROA not before: Fri 18 Sep 2026 02:35:10 +0000 ROA not after: Fri 17 Sep 2027 02:40:10 +0000 asID: 56048 IP address blocks: 211.167.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:29:6a:88:64:e7:1f:9e:20:9f:18:d4:a3:b7:46:2c:ec:5c:d6:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8 Validity Not Before: Sep 18 02:35:10 2026 GMT Not After : Sep 17 02:40:10 2027 GMT Subject: CN=7146136ED912DF505110C5E97DFA0A195103C292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5d:25:79:ef:52:29:2a:c5:cd:d0:d6:0e:ef: be:5f:4c:25:fe:3c:40:29:17:0c:8a:6c:1d:62:d6: 13:67:55:c5:ad:48:64:df:48:ba:94:9c:ad:46:97: b8:74:b8:95:bf:7d:79:69:51:d1:85:af:45:bb:2c: 22:98:32:05:d6:cb:aa:05:bd:53:13:93:9d:ab:5f: 04:94:07:c6:fb:11:ca:c1:fe:84:1b:50:3d:9d:82: 24:c9:5e:ff:ea:43:a4:69:75:4f:ef:77:f0:dd:6f: 28:61:bc:a2:eb:fa:ee:c6:4c:57:23:4a:7e:17:a7: 7d:20:ac:bd:d8:54:a0:26:4e:89:43:0a:83:70:fe: 9d:41:1b:32:86:e5:8f:9c:1c:6b:d8:8f:67:b7:f8: 84:53:ac:61:3d:8f:2e:7c:65:73:44:c7:e9:35:be: f1:3d:51:6d:49:2c:fd:c4:8a:7f:72:5a:29:6b:ac: b1:a6:92:7d:86:e4:75:7b:d0:7d:76:b7:88:07:5f: 92:a0:19:be:f2:1a:bb:21:16:43:c0:45:67:76:f0: 43:bb:ad:ce:c5:96:e1:ef:b4:0d:88:06:93:40:24: 7d:69:4c:1a:3b:3c:56:e1:d1:53:2e:c0:18:e9:36: 95:8e:1d:8d:fa:51:9e:59:14:6c:a3:13:e5:ae:77: 6b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:46:13:6E:D9:12:DF:50:51:10:C5:E9:7D:FA:0A:19:51:03:C2:92 X509v3 Authority Key Identifier: keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e36342e302f32302d3230203d3e203536303438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.167.64.0/20 Signature Algorithm: sha256WithRSAEncryption 35:e0:b4:30:f7:9d:23:d4:70:43:42:76:a9:7e:7d:96:5c:50: 15:4c:82:d3:31:fc:d9:1b:2b:4f:1b:56:24:aa:62:7f:77:ab: 6f:82:12:15:51:82:f0:35:1a:b5:8f:ca:ee:e7:c7:fe:56:4a: a8:68:84:88:ea:7a:3b:89:b8:00:1f:c2:94:78:40:98:ad:a8: 7f:ca:cc:c6:e7:75:56:f0:0e:9b:f3:4b:b2:f8:de:a6:64:83: 73:fe:c0:23:79:09:cb:13:a6:90:10:85:f2:18:a3:69:7a:9c: 1e:b2:0e:cb:67:47:2b:be:d7:63:62:30:d7:f8:4b:b8:8e:5c: d0:39:7a:09:94:7b:f1:57:c1:52:18:22:28:da:4f:2c:7f:db: 5b:08:24:1e:f7:26:4c:af:e5:b8:81:06:54:05:c5:1f:0a:dc: 93:23:d5:b9:37:72:88:d7:d0:58:cf:2d:d1:0f:71:8a:53:43: 0c:41:25:cf:1c:69:28:d3:04:6a:c9:bc:8c:4b:50:1a:66:48: a4:96:21:6b:4e:4f:1d:e3:72:e9:f4:0c:4b:74:a7:9a:fd:1a: 78:10:37:e8:18:a3:af:e1:b2:e3:f7:50:a2:1e:e9:97:cc:10: 2f:01:a1:d0:7f:d3:2b:24:58:f8:ef:62:ed:d4:ee:5e:8a:3d: a0:14:84:2c -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUPilqiGTnH54gnxjUo7dGLOxc1nEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhEQ0MxMEE3RTkyNDQ0RTgwNjU1OTk5RTdDMzNDODc2 Q0YxQzVBODAeFw0yNjA5MTgwMjM1MTBaFw0yNzA5MTcwMjQwMTBaMDMxMTAvBgNV BAMTKDcxNDYxMzZFRDkxMkRGNTA1MTEwQzVFOTdERkEwQTE5NTEwM0MyOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkXSV571IpKsXN0NYO775fTCX+ PEApFwyKbB1i1hNnVcWtSGTfSLqUnK1Gl7h0uJW/fXlpUdGFr0W7LCKYMgXWy6oF vVMTk52rXwSUB8b7EcrB/oQbUD2dgiTJXv/qQ6RpdU/vd/DdbyhhvKLr+u7GTFcj Sn4Xp30grL3YVKAmTolDCoNw/p1BGzKG5Y+cHGvYj2e3+IRTrGE9jy58ZXNEx+k1 vvE9UW1JLP3Ein9yWilrrLGmkn2G5HV70H12t4gHX5KgGb7yGrshFkPARWd28EO7 rc7FluHvtA2IBpNAJH1pTBo7PFbh0VMuwBjpNpWOHY36UZ5ZFGyjE+Wud2spAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUcUYTbtkS31BREMXpffoKGVEDwpIwHwYDVR0j BBgwFoAUSNzBCn6SRE6AZVmZ58M8h2zxxagwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjY2OTkwNDI4NjI1MzA3NS8wLzQ4RENDMTBBN0U5MjQ0NEU4MDY1NTk5OUU3QzMz Qzg3NkNGMUM1QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDhEQ0MxMEE3RTkyNDQ0RTgwNjU1OTk5RTdDMzNDODc2Q0YxQzVBOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTExMjY2OTkwNDI4NjI1MzA3NS8wLzMyMzEzMTJlMzEz NjM3MmUzNjM0MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzUzNjMwMzQzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBNOnQDANBgkqhkiG9w0BAQsFAAOCAQEANeC0MPedI9RwQ0J2qX59llxQ FUyC0zH82RsrTxtWJKpif3erb4ISFVGC8DUatY/K7ufH/lZKqGiEiOp6O4m4AB/C lHhAmK2of8rMxud1VvAOm/NLsvjepmSDc/7AI3kJyxOmkBCF8hijaXqcHrIOy2dH K77XY2Iw1/hLuI5c0Dl6CZR78VfBUhgiKNpPLH/bWwgkHvcmTK/luIEGVAXFHwrc kyPVuTdyiNfQWM8t0Q9xilNDDEElzxxpKNMEasm8jEtQGmZIpJYha05PHeNy6fQM S3Snmv0aeBA36Bijr+Gy4/dQoh7pl8wQLwGh0H/TKyRY+O9i7dTuXoo9oBSELA== -----END CERTIFICATE-----Generated at Mon Sep 28 23:28:59 2026 by rpki-client