$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e34342e302f32322d3234203d3e20323034373635.roa File: 3231312e3134392e34342e302f32322d3234203d3e20323034373635.roa (raw, json) Hash identifier: JOuDarRFxX6hedZ9d+aM+Mp8ReI4i452AlyZanVV94A= Subject key identifier: 5B:47:65:C4:42:21:6E:D8:ED:2E:43:0F:3B:80:DA:4E:67:23:84:2E Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 1D52DCCF984AEB7C4B26540F48DD525578F6D594 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e34342e302f32322d3234203d3e20323034373635.roa Signing time: Mon 13 Jul 2026 03:46:32 +0000 ROA not before: Mon 13 Jul 2026 03:41:32 +0000 ROA not after: Mon 12 Jul 2027 03:46:32 +0000 asID: 204765 IP address blocks: 211.149.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 03:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:52:dc:cf:98:4a:eb:7c:4b:26:54:0f:48:dd:52:55:78:f6:d5:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Jul 13 03:41:32 2026 GMT Not After : Jul 12 03:46:32 2027 GMT Subject: CN=5B4765C442216ED8ED2E430F3B80DA4E6723842E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3c:d9:7f:26:f2:cb:a3:38:e7:34:53:f6:1f: 13:db:08:88:4f:06:64:50:16:36:62:4c:4c:ad:3d: 45:d4:3a:9c:82:65:dc:a2:60:8e:e1:02:6c:da:53: a0:63:41:46:fd:73:76:e1:25:c7:a5:1c:b4:5e:82: ed:97:2b:29:07:76:90:71:8c:bd:f0:76:aa:9b:59: 05:1e:2a:49:9d:c9:d1:81:de:dd:6b:bc:f2:43:f3: 2c:d5:bb:4a:db:ef:42:56:8a:59:f7:df:39:da:e7: 76:0c:6b:fb:ac:69:b4:12:3c:da:6b:7c:f1:64:ea: 94:81:cf:e8:ac:bf:ed:ea:2a:d2:65:fc:83:43:66: 54:b3:26:fd:29:fe:3a:46:00:ce:77:75:d2:05:ee: ac:a3:7b:40:22:13:5e:97:14:9f:d8:d5:83:04:27: 41:9e:25:ed:fb:60:83:06:9b:d3:c0:e1:30:22:4f: 0c:45:75:21:e5:3f:3f:9d:fc:a8:1d:54:9d:35:1f: a2:40:de:59:41:7c:b4:5f:92:88:2d:32:41:36:1f: ac:dd:88:68:18:7f:bc:4a:4f:a9:e0:33:4a:02:83: 2a:37:59:b4:71:3c:1d:2c:0e:48:cd:7e:95:c1:31: be:ba:e9:d0:48:22:5f:09:fc:80:56:0f:b4:95:1d: 88:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:47:65:C4:42:21:6E:D8:ED:2E:43:0F:3B:80:DA:4E:67:23:84:2E X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e34342e302f32322d3234203d3e20323034373635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.149.44.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:ef:2c:f7:f9:d0:57:77:21:31:86:d1:70:c3:24:2d:1a:42: c1:a1:ba:05:e2:ce:15:31:67:7c:c9:95:14:c7:cd:76:4e:3c: 85:37:0d:4c:c5:fb:42:d1:cd:48:d3:cb:0e:40:12:31:d4:13: 96:ed:45:3d:57:b4:40:9e:4c:cb:08:92:7e:26:8a:c8:ab:5f: ba:53:4d:b7:b4:a6:0e:3b:4f:46:68:c7:2e:67:1d:2d:f8:63: ba:49:03:01:51:d6:41:53:14:86:f7:65:7a:a2:65:25:e4:63: d5:65:a7:29:d1:50:99:60:48:65:4c:d1:09:50:e2:dc:76:0a: 33:c5:e0:cb:c4:10:37:ed:e9:c9:f9:c4:ff:36:70:fb:f4:62: c9:00:4d:ba:dc:b4:2b:ad:fe:d2:be:76:64:05:59:5b:12:4e: f0:54:cc:31:c8:fb:bd:e1:52:0f:54:e1:81:30:f1:8b:d3:85: dc:34:32:92:39:55:d2:ac:31:b7:1d:a8:4a:22:b9:01:fd:e9: 25:02:85:95:01:c8:81:e4:76:9f:9a:6c:d5:b8:53:68:03:6f: b8:a7:f5:81:95:b2:aa:64:88:ab:1f:35:3f:45:7e:9e:5b:0a: bc:9c:6c:c0:d0:13:eb:4e:1c:b8:df:3b:40:1a:a6:78:6a:f2: 9f:79:bc:6f -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUHVLcz5hK63xLJlQPSN1SVXj21ZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA3MTMwMzQxMzJaFw0yNzA3MTIwMzQ2MzJaMDMxMTAvBgNV BAMTKDVCNDc2NUM0NDIyMTZFRDhFRDJFNDMwRjNCODBEQTRFNjcyMzg0MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSPNl/JvLLozjnNFP2HxPbCIhP BmRQFjZiTEytPUXUOpyCZdyiYI7hAmzaU6BjQUb9c3bhJcelHLRegu2XKykHdpBx jL3wdqqbWQUeKkmdydGB3t1rvPJD8yzVu0rb70JWiln33zna53YMa/usabQSPNpr fPFk6pSBz+isv+3qKtJl/INDZlSzJv0p/jpGAM53ddIF7qyje0AiE16XFJ/Y1YME J0GeJe37YIMGm9PA4TAiTwxFdSHlPz+d/KgdVJ01H6JA3llBfLRfkogtMkE2H6zd iGgYf7xKT6ngM0oCgyo3WbRxPB0sDkjNfpXBMb666dBIIl8J/IBWD7SVHYjXAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUW0dlxEIhbtjtLkMPO4DaTmcjhC4wHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC8zMjMxMzEyZTMx MzQzOTJlMzQzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzYzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAtOVLDANBgkqhkiG9w0BAQsFAAOCAQEAb+8s9/nQV3chMYbRcMMk LRpCwaG6BeLOFTFnfMmVFMfNdk48hTcNTMX7QtHNSNPLDkASMdQTlu1FPVe0QJ5M ywiSfiaKyKtfulNNt7SmDjtPRmjHLmcdLfhjukkDAVHWQVMUhvdleqJlJeRj1WWn KdFQmWBIZUzRCVDi3HYKM8Xgy8QQN+3pyfnE/zZw+/RiyQBNuty0K63+0r52ZAVZ WxJO8FTMMcj7veFSD1ThgTDxi9OF3DQykjlV0qwxtx2oSiK5Af3pJQKFlQHIgeR2 n5ps1bhTaANvuKf1gZWyqmSIqx81P0V+nlsKvJxswNAT604cuN87QBqmeGryn3m8 bw== -----END CERTIFICATE-----Generated at Tue Jul 21 12:34:31 2026 by rpki-client