$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e39322e302f32322d3234203d3e20323034373635.roa File: 3231312e3134392e39322e302f32322d3234203d3e20323034373635.roa (raw, json) Hash identifier: zu7A0YqOUsStSCL9XmMvV8JI6as35lqa/fkbIpxCsuU= Subject key identifier: 3D:C2:5B:9B:ED:0E:FE:4C:97:12:70:0B:F5:7E:F4:19:60:97:0D:6C Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 40FAC19729DA380D443B40C13A74CC61DE2E160B Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e39322e302f32322d3234203d3e20323034373635.roa Signing time: Mon 13 Jul 2026 03:46:34 +0000 ROA not before: Mon 13 Jul 2026 03:41:34 +0000 ROA not after: Mon 12 Jul 2027 03:46:34 +0000 asID: 204765 IP address blocks: 211.149.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 03:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:fa:c1:97:29:da:38:0d:44:3b:40:c1:3a:74:cc:61:de:2e:16:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Jul 13 03:41:34 2026 GMT Not After : Jul 12 03:46:34 2027 GMT Subject: CN=3DC25B9BED0EFE4C9712700BF57EF41960970D6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:af:d2:e0:65:f3:ee:6c:27:cb:44:50:44:68: 71:74:1d:99:21:83:f4:30:7f:c6:2d:1b:1a:ad:bb: df:1c:55:ed:2c:2d:88:09:bd:62:87:39:6b:9c:de: 8b:5c:c5:f4:3a:5d:48:f3:66:2e:d2:33:95:71:6a: d9:73:c9:a2:00:15:36:b0:28:8c:51:4d:67:70:7f: e1:8e:42:95:4e:85:56:3a:01:c0:92:4e:f7:c9:a2: d2:2b:5b:1f:a1:5f:74:6b:3e:82:5c:94:95:f9:97: c9:4e:bd:61:8b:b3:9a:88:07:27:c9:14:24:65:06: 58:07:b8:84:bd:7b:4b:77:51:9c:7b:d5:47:2d:a7: 14:2b:49:41:cf:46:27:91:e8:fe:2c:3d:bf:ba:a0: a1:cd:a1:71:9c:ea:08:cd:86:45:57:16:c5:95:b3: 0e:5d:77:eb:7d:1d:ea:cf:ca:3d:a1:64:50:65:b0: 06:be:91:38:75:6f:dd:7f:d6:ac:da:4f:35:ea:38: 67:6b:5a:3e:11:ab:b0:b1:54:71:42:1f:26:b4:d5: f4:08:be:5e:1f:cd:bf:6b:b7:1f:b1:f7:3b:f4:93: 6e:49:b7:8c:d8:08:98:7e:73:b6:55:22:45:95:11: 57:02:f6:e6:fd:56:30:b4:4f:8f:6b:7e:54:40:5a: d4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C2:5B:9B:ED:0E:FE:4C:97:12:70:0B:F5:7E:F4:19:60:97:0D:6C X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e39322e302f32322d3234203d3e20323034373635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.149.92.0/22 Signature Algorithm: sha256WithRSAEncryption a3:da:06:9f:23:11:a6:90:6d:c9:96:92:aa:c0:3b:0a:25:db: 89:59:11:7b:ab:2d:d3:eb:93:f8:72:4c:35:ec:f8:db:6f:18: db:86:c9:6e:f0:4f:50:ba:9a:37:80:b9:a1:68:63:d7:29:a6: 8b:37:ac:4e:8d:09:d3:fa:c2:46:aa:5a:20:f7:1a:21:f6:b8: b0:3d:56:3a:61:a3:c0:67:96:47:66:a5:52:e2:53:31:19:f1: 0f:de:b4:c9:9b:4c:e9:6a:7f:1c:05:80:b6:b2:da:a3:12:c5: b3:90:32:d8:e2:b7:1f:07:b1:36:72:5b:dc:f1:dd:9a:80:c9: 5e:d0:ed:67:c4:3f:d7:ce:01:4e:e9:28:b0:48:d0:66:ee:3b: 0d:e2:ef:35:5a:8b:5c:c8:09:fe:30:dd:4a:e0:b7:b5:e7:52: 36:a3:27:01:ba:dc:ef:06:58:7e:90:a9:53:36:cc:70:64:e1: 0f:54:f3:50:3f:85:2f:b1:b3:4b:9a:ed:d6:69:b8:ec:ea:68: 59:2d:a1:d9:f2:9f:e8:80:90:0f:22:6a:d8:82:5b:10:59:6a: 39:06:71:ba:ef:ec:e5:bb:d9:09:52:a6:a6:81:5c:f6:d1:97: 19:b3:84:a6:d6:9d:15:d2:1c:91:4c:46:79:23:14:e2:72:3e: ca:17:fa:7b -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUQPrBlynaOA1EO0DBOnTMYd4uFgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA3MTMwMzQxMzRaFw0yNzA3MTIwMzQ2MzRaMDMxMTAvBgNV BAMTKDNEQzI1QjlCRUQwRUZFNEM5NzEyNzAwQkY1N0VGNDE5NjA5NzBENkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5r9LgZfPubCfLRFBEaHF0HZkh g/Qwf8YtGxqtu98cVe0sLYgJvWKHOWuc3otcxfQ6XUjzZi7SM5VxatlzyaIAFTaw KIxRTWdwf+GOQpVOhVY6AcCSTvfJotIrWx+hX3RrPoJclJX5l8lOvWGLs5qIByfJ FCRlBlgHuIS9e0t3UZx71UctpxQrSUHPRieR6P4sPb+6oKHNoXGc6gjNhkVXFsWV sw5dd+t9HerPyj2hZFBlsAa+kTh1b91/1qzaTzXqOGdrWj4Rq7CxVHFCHya01fQI vl4fzb9rtx+x9zv0k25Jt4zYCJh+c7ZVIkWVEVcC9ub9VjC0T49rflRAWtQbAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUPcJbm+0O/kyXEnAL9X70GWCXDWwwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC8zMjMxMzEyZTMx MzQzOTJlMzkzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzYzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAtOVXDANBgkqhkiG9w0BAQsFAAOCAQEAo9oGnyMRppBtyZaSqsA7 CiXbiVkRe6st0+uT+HJMNez4228Y24bJbvBPULqaN4C5oWhj1ymmizesTo0J0/rC RqpaIPcaIfa4sD1WOmGjwGeWR2alUuJTMRnxD960yZtM6Wp/HAWAtrLaoxLFs5Ay 2OK3HwexNnJb3PHdmoDJXtDtZ8Q/184BTukosEjQZu47DeLvNVqLXMgJ/jDdSuC3 tedSNqMnAbrc7wZYfpCpUzbMcGThD1TzUD+FL7GzS5rt1mm47OpoWS2h2fKf6ICQ DyJq2IJbEFlqOQZxuu/s5bvZCVKmpoFc9tGXGbOEptadFdIckUxGeSMU4nI+yhf6 ew== -----END CERTIFICATE-----Generated at Tue Jul 21 12:34:48 2026 by rpki-client