$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e36302e302f32322d3234203d3e20323034373635.roa File: 3231312e3134392e36302e302f32322d3234203d3e20323034373635.roa (raw, json) Hash identifier: 7V36+GTIj9SXQJg7tLFnRoq+tkYB8vWy1KKimX7T6e4= Subject key identifier: 40:6A:F8:44:F3:4D:93:6D:80:8E:55:DF:0B:F1:E0:30:2C:72:F3:85 Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 4533ED8E463B7E5BFC7CB6B932D192A420744C80 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e36302e302f32322d3234203d3e20323034373635.roa Signing time: Mon 13 Jul 2026 03:46:37 +0000 ROA not before: Mon 13 Jul 2026 03:41:37 +0000 ROA not after: Mon 12 Jul 2027 03:46:37 +0000 asID: 204765 IP address blocks: 211.149.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 03:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:33:ed:8e:46:3b:7e:5b:fc:7c:b6:b9:32:d1:92:a4:20:74:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Jul 13 03:41:37 2026 GMT Not After : Jul 12 03:46:37 2027 GMT Subject: CN=406AF844F34D936D808E55DF0BF1E0302C72F385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f6:9b:12:22:9a:9e:1a:79:84:a5:5e:9f:ef: 97:41:4b:25:7d:86:ef:2b:33:d3:26:cb:19:fa:07: 5c:72:e9:c2:b3:c2:90:3c:4b:5a:33:00:12:a7:43: 2f:5d:0e:52:58:eb:cb:c4:cc:33:41:d6:64:0a:e1: bf:0f:a5:5a:db:f8:3b:c2:29:2a:36:cb:9b:93:13: 75:0a:e2:73:9c:7c:74:54:d1:34:06:68:52:48:62: 96:34:a4:58:6f:f9:ac:96:85:4c:cf:c3:62:78:d1: d2:7c:e4:05:bf:30:c9:aa:68:33:bb:a6:e8:7d:ce: e7:76:51:24:10:af:61:ef:c8:f2:0d:bd:e4:e9:f2: c2:13:23:18:25:18:03:03:58:bf:e7:7b:c9:f8:a2: fc:f0:71:97:41:4e:11:13:85:9a:5d:14:62:76:e3: 07:4b:b1:44:9f:46:8e:0a:79:33:7b:b0:40:c9:29: 90:ba:5e:db:a5:47:ac:6c:33:aa:f1:5c:4c:df:6d: 95:c1:b5:ad:55:81:1a:36:61:1c:21:ee:2c:ce:18: 39:8d:c4:90:a6:32:3a:5a:5f:42:cc:a6:9c:cd:f9: d4:df:35:b4:b4:d5:61:c9:df:9a:0b:e7:71:08:7c: a8:1f:d6:06:39:19:66:69:c2:77:01:63:69:92:00: a8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6A:F8:44:F3:4D:93:6D:80:8E:55:DF:0B:F1:E0:30:2C:72:F3:85 X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e36302e302f32322d3234203d3e20323034373635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.149.60.0/22 Signature Algorithm: sha256WithRSAEncryption 29:c9:7e:c3:82:98:3e:4a:f0:62:39:df:21:55:a8:02:31:d4: 1a:c3:d0:60:52:e0:11:2b:4a:a4:97:5f:11:a1:1b:6d:ae:60: bc:f2:5b:cc:8d:15:ef:d4:ba:3e:43:87:d9:bd:62:5b:62:36: ae:3d:a9:00:51:fe:85:2f:5c:b0:36:c2:63:7e:8f:03:b0:e6: 6f:f8:01:1c:43:05:8f:3f:a7:6b:29:01:cf:84:fa:9b:1e:87: 97:7f:42:04:c0:c4:77:81:4c:8c:2e:e7:56:9e:ad:a7:f6:94: 08:bd:53:5a:d1:0f:89:d7:5c:0b:ef:77:b1:01:af:7e:af:4c: 0a:8d:a4:e8:ab:1d:63:ca:7e:01:4e:52:5d:74:43:a8:14:98: bb:d2:a5:a9:53:45:8c:2d:05:d1:f7:c0:54:05:c1:78:40:35: c6:a9:c6:77:ba:92:1b:61:86:2b:82:3e:a6:03:60:55:30:48: e9:98:f2:75:ba:a3:3d:ee:83:d3:2a:74:e8:42:3b:d9:ce:5f: 6c:4e:b2:fa:c9:17:c5:c4:e4:17:b4:f5:2d:bc:1c:ce:f2:4d: 75:e4:1f:9b:7e:a1:51:98:ef:d5:36:01:f1:8e:31:41:64:89: da:99:f7:9b:1b:d0:e3:9a:bf:9c:c8:af:34:2e:b7:87:97:67: f7:ca:6f:80 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIURTPtjkY7flv8fLa5MtGSpCB0TIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA3MTMwMzQxMzdaFw0yNzA3MTIwMzQ2MzdaMDMxMTAvBgNV BAMTKDQwNkFGODQ0RjM0RDkzNkQ4MDhFNTVERjBCRjFFMDMwMkM3MkYzODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv9psSIpqeGnmEpV6f75dBSyV9 hu8rM9Mmyxn6B1xy6cKzwpA8S1ozABKnQy9dDlJY68vEzDNB1mQK4b8PpVrb+DvC KSo2y5uTE3UK4nOcfHRU0TQGaFJIYpY0pFhv+ayWhUzPw2J40dJ85AW/MMmqaDO7 puh9zud2USQQr2HvyPINveTp8sITIxglGAMDWL/ne8n4ovzwcZdBThEThZpdFGJ2 4wdLsUSfRo4KeTN7sEDJKZC6XtulR6xsM6rxXEzfbZXBta1VgRo2YRwh7izOGDmN xJCmMjpaX0LMppzN+dTfNbS01WHJ35oL53EIfKgf1gY5GWZpwncBY2mSAKgzAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUQGr4RPNNk22AjlXfC/HgMCxy84UwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC8zMjMxMzEyZTMx MzQzOTJlMzYzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzYzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAtOVPDANBgkqhkiG9w0BAQsFAAOCAQEAKcl+w4KYPkrwYjnfIVWo AjHUGsPQYFLgEStKpJdfEaEbba5gvPJbzI0V79S6PkOH2b1iW2I2rj2pAFH+hS9c sDbCY36PA7Dmb/gBHEMFjz+naykBz4T6mx6Hl39CBMDEd4FMjC7nVp6tp/aUCL1T WtEPiddcC+93sQGvfq9MCo2k6KsdY8p+AU5SXXRDqBSYu9KlqVNFjC0F0ffAVAXB eEA1xqnGd7qSG2GGK4I+pgNgVTBI6ZjydbqjPe6D0yp06EI72c5fbE6y+skXxcTk F7T1LbwczvJNdeQfm36hUZjv1TYB8Y4xQWSJ2pn3mxvQ45q/nMivNC63h5dn98pv gA== -----END CERTIFICATE-----Generated at Tue Jul 21 12:34:27 2026 by rpki-client