$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e37362e302f32322d3234203d3e20323034373635.roa File: 3231312e3134392e37362e302f32322d3234203d3e20323034373635.roa (raw, json) Hash identifier: Jh9N6MjH+92KExvSY1br25KQHKZt03whAcPmQQtTsZM= Subject key identifier: E0:79:B3:E9:61:9A:5D:23:0A:2A:FC:41:01:B1:50:E4:F7:23:B4:EC Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 1FC676EB9AEA5C0FF352BE00F50EA2A12BF5D919 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e37362e302f32322d3234203d3e20323034373635.roa Signing time: Mon 13 Jul 2026 03:46:33 +0000 ROA not before: Mon 13 Jul 2026 03:41:33 +0000 ROA not after: Mon 12 Jul 2027 03:46:33 +0000 asID: 204765 IP address blocks: 211.149.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 03:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:c6:76:eb:9a:ea:5c:0f:f3:52:be:00:f5:0e:a2:a1:2b:f5:d9:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Jul 13 03:41:33 2026 GMT Not After : Jul 12 03:46:33 2027 GMT Subject: CN=E079B3E9619A5D230A2AFC4101B150E4F723B4EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7a:0c:89:57:9e:f4:55:75:68:f8:23:78:66: 2b:46:82:1e:07:bb:52:a7:db:5e:d0:07:a3:4f:88: 1a:dc:d8:c2:37:0c:0a:5c:b2:23:66:0c:c4:1f:3c: 1b:78:00:a3:27:54:1a:af:c9:47:7e:de:88:4b:4b: 99:a8:ba:7f:a1:9a:97:c1:64:35:17:85:9b:07:12: df:d8:b1:9c:d2:d6:62:87:a8:53:28:6c:0e:e5:1b: b0:38:fe:3d:95:39:8c:03:3a:a4:18:b3:f8:60:fb: bf:f5:7f:8c:df:d9:e9:44:8a:46:fa:49:d5:41:6a: ec:36:e9:2a:4b:aa:57:92:99:55:9e:42:7a:d0:c7: 30:48:13:23:db:3b:35:cd:1d:12:7d:93:74:9d:4e: 63:66:dc:47:d7:b3:d2:2d:6d:b0:6a:60:2d:02:eb: 8b:bd:28:cb:7d:9d:23:3c:f2:26:c8:fc:7e:d2:9b: 8c:eb:79:01:a2:53:93:8a:d8:27:2f:1e:70:8b:5b: bd:c4:cb:9c:90:1c:3b:84:62:1a:3f:da:2d:6f:35: 8d:92:c7:03:8c:36:54:b8:24:77:f5:07:0d:cb:2e: c9:49:da:cc:b5:0c:6e:58:65:ff:23:ea:9b:3d:0a: de:1b:36:a6:4f:57:b6:2c:15:ac:71:6c:7a:73:17: d0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:79:B3:E9:61:9A:5D:23:0A:2A:FC:41:01:B1:50:E4:F7:23:B4:EC X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e37362e302f32322d3234203d3e20323034373635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.149.76.0/22 Signature Algorithm: sha256WithRSAEncryption b8:0a:68:ae:a3:a7:e8:e1:cf:72:83:1c:d8:28:82:51:7f:69: 3e:a5:59:5c:93:13:21:a0:3d:53:16:ab:61:ba:15:6b:d4:43: 38:ea:27:dc:8b:ce:34:5b:91:cc:89:55:1a:0f:ba:83:d1:e6: d2:e3:08:3c:25:48:87:e9:b0:ba:4c:88:4a:b5:57:06:88:1d: fd:f8:56:33:b1:76:36:83:d9:f8:2d:c3:9a:a5:7c:08:2d:23: b8:e8:8e:e4:1e:b2:82:42:de:71:66:a3:67:0d:72:86:45:12: c8:db:30:a1:a4:b5:8f:f6:1d:02:52:59:dc:af:7e:02:75:e4: 5b:b9:88:5d:19:97:86:7b:2c:12:7e:6f:2b:89:fd:31:f6:6c: 57:72:d6:cf:b9:a0:52:16:8e:27:3e:f1:b7:13:ef:e8:37:8f: 4a:45:db:5b:8c:8d:62:b4:47:cc:7f:d5:a8:e6:d7:99:85:06: ca:1d:6e:1b:c5:90:5d:30:ca:50:85:13:fe:ef:9c:50:f9:8c: 7b:34:6b:93:cc:ed:1e:9a:af:6b:6d:bb:81:27:05:2f:28:c6: ac:dd:b3:2c:51:a1:6a:8f:43:3c:3a:88:4e:2b:0a:e8:fb:84: f6:01:00:7b:ec:d6:c5:8b:de:ab:bb:a3:db:6b:19:7b:49:88: e9:64:d5:65 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUH8Z265rqXA/zUr4A9Q6ioSv12RkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA3MTMwMzQxMzNaFw0yNzA3MTIwMzQ2MzNaMDMxMTAvBgNV BAMTKEUwNzlCM0U5NjE5QTVEMjMwQTJBRkM0MTAxQjE1MEU0RjcyM0I0RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQegyJV570VXVo+CN4ZitGgh4H u1Kn217QB6NPiBrc2MI3DApcsiNmDMQfPBt4AKMnVBqvyUd+3ohLS5moun+hmpfB ZDUXhZsHEt/YsZzS1mKHqFMobA7lG7A4/j2VOYwDOqQYs/hg+7/1f4zf2elEikb6 SdVBauw26SpLqleSmVWeQnrQxzBIEyPbOzXNHRJ9k3SdTmNm3EfXs9ItbbBqYC0C 64u9KMt9nSM88ibI/H7Sm4zreQGiU5OK2CcvHnCLW73Ey5yQHDuEYho/2i1vNY2S xwOMNlS4JHf1Bw3LLslJ2sy1DG5YZf8j6ps9Ct4bNqZPV7YsFaxxbHpzF9BxAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU4Hmz6WGaXSMKKvxBAbFQ5PcjtOwwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC8zMjMxMzEyZTMx MzQzOTJlMzczNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzYzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAtOVTDANBgkqhkiG9w0BAQsFAAOCAQEAuAporqOn6OHPcoMc2CiC UX9pPqVZXJMTIaA9UxarYboVa9RDOOon3IvONFuRzIlVGg+6g9Hm0uMIPCVIh+mw ukyISrVXBogd/fhWM7F2NoPZ+C3DmqV8CC0juOiO5B6ygkLecWajZw1yhkUSyNsw oaS1j/YdAlJZ3K9+AnXkW7mIXRmXhnssEn5vK4n9MfZsV3LWz7mgUhaOJz7xtxPv 6DePSkXbW4yNYrRHzH/VqObXmYUGyh1uG8WQXTDKUIUT/u+cUPmMezRrk8ztHpqv a227gScFLyjGrN2zLFGhao9DPDqITisK6PuE9gEAe+zWxYveq7uj22sZe0mI6WTV ZQ== -----END CERTIFICATE-----Generated at Tue Jul 21 12:34:32 2026 by rpki-client