$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e34302e302f32322d3234203d3e20323034373635.roa File: 3231312e3134392e34302e302f32322d3234203d3e20323034373635.roa (raw, json) Hash identifier: cTF/1P0hKocHB9czSD+ya7E09e6MNaALbBW1WrMk3qw= Subject key identifier: C7:3C:C6:92:BA:94:20:21:8B:B7:42:15:C7:EB:5A:59:9A:3A:6D:CB Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 159E76C61EAFE7DB79C46FEB21C1B4B735B5E44A Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e34302e302f32322d3234203d3e20323034373635.roa Signing time: Mon 13 Jul 2026 03:46:32 +0000 ROA not before: Mon 13 Jul 2026 03:41:32 +0000 ROA not after: Mon 12 Jul 2027 03:46:32 +0000 asID: 204765 IP address blocks: 211.149.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 03:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:9e:76:c6:1e:af:e7:db:79:c4:6f:eb:21:c1:b4:b7:35:b5:e4:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Jul 13 03:41:32 2026 GMT Not After : Jul 12 03:46:32 2027 GMT Subject: CN=C73CC692BA9420218BB74215C7EB5A599A3A6DCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:72:9c:a3:33:d6:db:37:c6:68:44:02:59:92: 96:8f:b9:01:04:56:fe:0b:36:30:07:f0:a8:47:5c: 81:7e:9b:49:01:27:6c:41:ce:2f:32:32:38:d7:59: 2f:0d:86:c6:22:fd:be:8c:cb:e3:89:1a:1c:4b:11: b2:5d:c4:a9:02:74:f1:50:aa:58:52:18:d5:4e:70: 40:68:19:34:5f:cc:c6:da:5d:93:e8:55:91:dc:8b: d0:7a:f2:d4:09:6e:c4:e1:eb:bb:27:b8:e2:33:7d: 21:a8:2b:ae:ba:3c:62:ae:47:98:2c:d1:70:8e:b8: 56:d0:47:11:bc:b2:b6:03:5b:bb:28:18:fd:f4:9a: 9b:2e:07:fc:27:01:c3:47:6e:b7:62:c4:e8:df:b5: 74:f9:0e:a3:fd:a0:12:7a:29:00:6a:59:f9:25:79: 54:0d:aa:c2:fc:50:aa:0a:24:b0:23:cc:16:1f:69: 05:44:2a:21:48:c9:b0:cb:23:53:1a:a0:86:36:f5: 36:25:d7:5d:c0:52:e7:b3:6f:4e:f6:eb:81:63:dc: e4:82:a0:02:8e:3c:ea:8b:57:11:a1:98:29:f8:b4: a2:dc:b1:a9:1f:71:13:fb:4b:0b:fd:db:a4:6a:c1: 6e:67:45:b9:5b:4d:c7:af:46:11:c6:77:14:c6:ab: b7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:3C:C6:92:BA:94:20:21:8B:B7:42:15:C7:EB:5A:59:9A:3A:6D:CB X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e34302e302f32322d3234203d3e20323034373635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.149.40.0/22 Signature Algorithm: sha256WithRSAEncryption a9:b3:47:04:7b:24:8b:2c:fc:4e:fc:98:80:fe:c3:02:d2:cb: 33:38:87:b2:cc:9b:64:57:a8:a2:b1:f2:62:fa:db:08:9c:10: 5a:08:1a:ed:d5:d8:5c:03:3f:ce:ba:a0:32:02:9f:d0:93:f8: 89:84:d7:73:bc:53:2b:cc:0f:01:55:0a:84:f2:98:44:c6:e8: 48:65:dc:12:7d:ac:51:57:1e:21:82:4a:05:2d:5b:0f:0f:3c: 25:93:d0:ac:e6:78:36:d7:00:fb:27:b1:79:f3:df:08:a5:19: 38:92:cd:90:67:7e:da:ec:0e:21:9e:c4:ca:96:f8:23:06:0b: 73:1e:14:e9:18:da:0b:6d:8e:1b:eb:cb:8a:18:b8:89:af:bb: ba:3c:23:25:c2:02:97:c1:a3:b7:72:57:90:33:cb:8c:97:fb: f3:9a:c0:ff:ab:51:66:11:a4:5f:50:40:93:ac:03:b3:ac:6b: 53:a3:16:07:76:5e:12:94:ab:81:68:23:4f:68:f7:23:9e:88: 65:84:2c:8e:c2:46:a6:70:35:d2:50:73:38:49:fa:5f:b9:29: f5:ab:ae:35:b7:da:25:b0:b6:49:75:51:60:56:bb:e8:5d:9f: cc:59:ae:6a:3e:fc:0c:05:58:23:85:78:fb:ca:10:9d:57:05: 51:6b:3d:b5 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUFZ52xh6v59t5xG/rIcG0tzW15EowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA3MTMwMzQxMzJaFw0yNzA3MTIwMzQ2MzJaMDMxMTAvBgNV BAMTKEM3M0NDNjkyQkE5NDIwMjE4QkI3NDIxNUM3RUI1QTU5OUEzQTZEQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9cpyjM9bbN8ZoRAJZkpaPuQEE Vv4LNjAH8KhHXIF+m0kBJ2xBzi8yMjjXWS8NhsYi/b6My+OJGhxLEbJdxKkCdPFQ qlhSGNVOcEBoGTRfzMbaXZPoVZHci9B68tQJbsTh67snuOIzfSGoK666PGKuR5gs 0XCOuFbQRxG8srYDW7soGP30mpsuB/wnAcNHbrdixOjftXT5DqP9oBJ6KQBqWfkl eVQNqsL8UKoKJLAjzBYfaQVEKiFIybDLI1MaoIY29TYl113AUuezb07264Fj3OSC oAKOPOqLVxGhmCn4tKLcsakfcRP7Swv926RqwW5nRblbTcevRhHGdxTGq7fRAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUxzzGkrqUICGLt0IVx+taWZo6bcswHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC8zMjMxMzEyZTMx MzQzOTJlMzQzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzYzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAtOVKDANBgkqhkiG9w0BAQsFAAOCAQEAqbNHBHskiyz8TvyYgP7D AtLLMziHssybZFeoorHyYvrbCJwQWgga7dXYXAM/zrqgMgKf0JP4iYTXc7xTK8wP AVUKhPKYRMboSGXcEn2sUVceIYJKBS1bDw88JZPQrOZ4NtcA+yexefPfCKUZOJLN kGd+2uwOIZ7Eypb4IwYLcx4U6RjaC22OG+vLihi4ia+7ujwjJcICl8Gjt3JXkDPL jJf785rA/6tRZhGkX1BAk6wDs6xrU6MWB3ZeEpSrgWgjT2j3I56IZYQsjsJGpnA1 0lBzOEn6X7kp9auuNbfaJbC2SXVRYFa76F2fzFmuaj78DAVYI4V4+8oQnVcFUWs9 tQ== -----END CERTIFICATE-----Generated at Tue Jul 21 12:34:28 2026 by rpki-client