$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e37322e302f32322d3234203d3e20323034373635.roa File: 3231312e3134392e37322e302f32322d3234203d3e20323034373635.roa (raw, json) Hash identifier: zXlo1VA9iQTDPz3KGS73pe5bQ11qgiCZzBV45rhkKNM= Subject key identifier: 25:70:B2:A6:B0:BB:07:C5:D4:02:5C:5C:A0:45:CD:96:74:1D:A6:7C Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 0DAA33E9BADFAD0EAE26C1559DC26949CA4FC3E0 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e37322e302f32322d3234203d3e20323034373635.roa Signing time: Mon 13 Jul 2026 03:46:33 +0000 ROA not before: Mon 13 Jul 2026 03:41:33 +0000 ROA not after: Mon 12 Jul 2027 03:46:33 +0000 asID: 204765 IP address blocks: 211.149.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 03:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:aa:33:e9:ba:df:ad:0e:ae:26:c1:55:9d:c2:69:49:ca:4f:c3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Jul 13 03:41:33 2026 GMT Not After : Jul 12 03:46:33 2027 GMT Subject: CN=2570B2A6B0BB07C5D4025C5CA045CD96741DA67C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:87:64:2d:9f:67:aa:9c:31:13:c4:3a:94:8e: 26:3e:bd:86:5f:fc:56:eb:a1:a7:1c:11:49:1b:f8: 44:ab:6d:86:8e:cf:8d:a6:0b:f7:d1:e2:a2:d8:07: 8e:be:e5:a6:81:3d:28:58:fe:7c:f9:76:3d:5c:fa: 96:ba:c9:00:83:d5:60:c0:1b:4c:be:89:ad:43:d5: c5:2d:9a:ab:4d:4a:79:6a:7f:9a:93:f6:1e:c9:ce: 9e:2b:ec:f7:f5:61:ad:d8:43:82:1e:e6:00:fc:8e: 7d:b6:9b:e8:40:68:de:6a:51:5b:8c:3b:4d:86:62: 49:22:3b:3a:49:4f:ae:70:4e:9a:46:68:9c:ad:c0: 8e:2c:9b:5a:58:67:2c:62:7c:b5:da:e5:59:86:de: c6:6b:f4:0f:84:9b:8c:0b:cf:71:bb:da:9e:75:0d: 5b:cc:42:2c:0b:7c:38:f6:32:bb:ea:b3:91:b5:26: 7f:8e:8b:e9:d5:fd:b5:df:91:95:fc:1d:d5:d4:08: 5e:b9:2c:7f:b7:c1:7c:25:5f:14:b2:b6:b7:e0:4d: cf:29:3b:82:83:09:0f:e6:42:32:60:c8:93:11:6c: 2f:c4:cd:80:5a:42:3c:55:7b:7f:3e:9f:43:6e:68: 4a:99:77:32:04:c3:07:c8:a7:cd:ad:9d:7e:50:b2: 09:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:70:B2:A6:B0:BB:07:C5:D4:02:5C:5C:A0:45:CD:96:74:1D:A6:7C X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e37322e302f32322d3234203d3e20323034373635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.149.72.0/22 Signature Algorithm: sha256WithRSAEncryption 86:c7:01:1f:fd:c3:a6:21:74:38:5c:a8:28:36:15:d9:40:e3: 00:c0:a0:80:74:b0:30:9e:d1:af:52:a3:1d:0d:95:89:5b:7b: 01:4c:b5:b0:96:11:ee:7c:6c:03:70:07:88:84:55:c7:ec:61: b5:36:fa:5b:c0:86:98:2d:5d:7d:cd:bc:56:e2:46:17:c5:07: 0c:75:f0:96:96:16:f8:fb:5b:bd:e6:92:73:10:20:82:6e:95: 0d:e2:59:d6:39:c8:f8:d4:a3:ae:39:d8:99:80:e0:6e:ce:42: a5:e3:62:cc:3b:0d:a6:6d:99:e0:33:f6:23:33:29:5a:8b:d3: 3d:ca:57:1e:e9:e8:58:7f:04:2d:9a:35:74:b4:21:de:55:df: 3d:7c:3e:e2:c3:24:3e:be:16:53:04:b4:84:19:5d:45:82:36: 59:8f:8f:cb:f3:62:1d:44:4d:ef:1e:4f:cd:55:8a:10:94:36: a6:19:85:62:4c:81:c0:bf:21:19:b4:97:da:3d:2e:e1:f5:79: 6d:a6:45:00:1b:84:e3:5f:ef:99:25:01:a7:75:fa:af:a7:6b: 25:7a:ba:d6:21:e3:a9:80:14:0a:4c:d7:86:68:08:e4:9e:c9: 5b:17:42:71:76:f4:b2:53:29:e2:e3:3e:fd:21:18:8f:d2:a2: fb:78:66:04 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUDaoz6brfrQ6uJsFVncJpScpPw+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA3MTMwMzQxMzNaFw0yNzA3MTIwMzQ2MzNaMDMxMTAvBgNV BAMTKDI1NzBCMkE2QjBCQjA3QzVENDAyNUM1Q0EwNDVDRDk2NzQxREE2N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeh2Qtn2eqnDETxDqUjiY+vYZf /FbroaccEUkb+ESrbYaOz42mC/fR4qLYB46+5aaBPShY/nz5dj1c+pa6yQCD1WDA G0y+ia1D1cUtmqtNSnlqf5qT9h7Jzp4r7Pf1Ya3YQ4Ie5gD8jn22m+hAaN5qUVuM O02GYkkiOzpJT65wTppGaJytwI4sm1pYZyxifLXa5VmG3sZr9A+Em4wLz3G72p51 DVvMQiwLfDj2Mrvqs5G1Jn+Oi+nV/bXfkZX8HdXUCF65LH+3wXwlXxSytrfgTc8p O4KDCQ/mQjJgyJMRbC/EzYBaQjxVe38+n0NuaEqZdzIEwwfIp82tnX5QsgmZAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUJXCyprC7B8XUAlxcoEXNlnQdpnwwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC8zMjMxMzEyZTMx MzQzOTJlMzczMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzYzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAtOVSDANBgkqhkiG9w0BAQsFAAOCAQEAhscBH/3DpiF0OFyoKDYV 2UDjAMCggHSwMJ7Rr1KjHQ2ViVt7AUy1sJYR7nxsA3AHiIRVx+xhtTb6W8CGmC1d fc28VuJGF8UHDHXwlpYW+PtbveaScxAggm6VDeJZ1jnI+NSjrjnYmYDgbs5CpeNi zDsNpm2Z4DP2IzMpWovTPcpXHunoWH8ELZo1dLQh3lXfPXw+4sMkPr4WUwS0hBld RYI2WY+Py/NiHURN7x5PzVWKEJQ2phmFYkyBwL8hGbSX2j0u4fV5baZFABuE41/v mSUBp3X6r6drJXq61iHjqYAUCkzXhmgI5J7JWxdCcXb0slMp4uM+/SEYj9Ki+3hm BA== -----END CERTIFICATE-----Generated at Tue Jul 21 12:34:48 2026 by rpki-client