$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3131322e3132382e302e302f31342d3234203d3e2037363431.roa File: 3131322e3132382e302e302f31342d3234203d3e2037363431.roa (raw, json) Hash identifier: PYQY4TqdKu1MAN0j6Ov/35m9+s38BMVaJ+m74JIKY08= Subject key identifier: 39:0B:49:0E:68:E1:1C:9B:2A:64:92:AF:C1:F1:85:D5:C0:5C:0A:D4 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 78147D945C69D95FA1C3F548345155522948F83E Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3131322e3132382e302e302f31342d3234203d3e2037363431.roa Signing time: Wed 27 May 2026 07:34:52 +0000 ROA not before: Wed 27 May 2026 07:29:52 +0000 ROA not after: Wed 26 May 2027 07:34:52 +0000 asID: 7641 IP address blocks: 112.128.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:14:7d:94:5c:69:d9:5f:a1:c3:f5:48:34:51:55:52:29:48:f8:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:52 2026 GMT Not After : May 26 07:34:52 2027 GMT Subject: CN=390B490E68E11C9B2A6492AFC1F185D5C05C0AD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a4:6c:3c:f8:6c:6a:07:d3:69:d1:4e:f5:7d: da:88:f9:e5:4a:5d:dc:f3:c0:75:27:d1:bd:21:58: ad:6e:e7:d7:c1:62:3f:d4:7b:14:4d:1f:ec:5d:07: 82:09:e3:98:22:a3:91:a9:24:75:f2:af:85:fd:04: 6a:4e:98:25:26:cc:17:57:63:cd:49:08:33:3e:0a: be:a2:fe:b3:20:53:70:9a:ec:d8:c1:54:91:b7:71: 44:4a:cb:bf:74:f8:23:38:2a:a5:3e:70:a3:af:aa: a8:e8:3d:7f:22:a1:61:9e:92:c5:ca:83:df:28:a2: 5d:c1:7d:3e:56:60:80:c5:e8:2d:d9:f9:1c:f2:85: 51:e6:6f:a8:dd:8e:eb:ab:73:29:7f:92:37:a3:5c: 10:46:f3:a9:0e:80:9b:3e:52:03:7e:e5:b3:ad:ee: 66:00:52:29:a5:9e:dd:53:65:9f:c3:e4:91:9d:ab: ce:5c:10:80:13:7a:62:0b:ae:47:16:d1:1a:db:74: 84:69:db:59:a9:39:44:f1:a7:82:82:52:6e:ea:9e: cf:ab:77:ee:b7:23:25:a9:f8:4c:b2:30:b3:fd:22: c4:04:a0:3a:0a:e9:ce:7e:61:3c:f7:36:2d:9e:d2: 54:fb:fe:89:01:f7:fd:98:5b:65:ab:43:74:69:73: c0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:0B:49:0E:68:E1:1C:9B:2A:64:92:AF:C1:F1:85:D5:C0:5C:0A:D4 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3131322e3132382e302e302f31342d3234203d3e2037363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 112.128.0.0/14 Signature Algorithm: sha256WithRSAEncryption 56:68:05:d4:ff:0a:3e:5f:99:f3:39:01:c3:e0:da:47:25:03: 0c:94:23:a6:c4:81:be:71:94:44:c8:dd:55:f8:c3:e4:7d:72: f8:1f:25:2b:c5:f8:c1:c3:1d:2a:54:25:01:f7:76:75:10:a3: 01:16:f1:f8:41:df:4a:95:f8:36:7f:81:23:48:7d:ee:66:b4: a5:85:0b:52:6c:ae:63:eb:63:47:e6:68:e0:3b:05:a4:2c:dc: fd:02:55:fc:ec:07:c9:a5:67:98:79:24:62:92:d6:94:3e:ca: d9:55:71:c2:fc:ee:e1:b1:98:65:1e:9b:59:6c:93:73:45:23: d7:0e:73:8e:ee:0d:d5:97:f7:73:92:c1:0f:e8:db:d8:7b:fd: a3:b8:6a:ed:96:25:4e:39:5b:61:c6:4b:5a:83:91:cd:d8:7b: fd:94:1e:ca:95:6f:cb:19:8c:31:22:3c:20:fe:bb:09:99:77: 5b:94:dc:8a:05:f2:de:eb:34:b1:71:56:cc:a6:58:4f:db:dc: a1:86:f7:91:5e:d2:52:78:b9:f9:4f:02:42:89:cd:20:98:1c: 04:20:ce:2f:e7:5f:30:60:d6:0f:c5:67:83:dd:ec:1f:86:53: 41:29:0c:9f:10:57:2b:33:bb:55:62:69:80:05:1c:e4:ec:c6: ad:32:5e:2c -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUeBR9lFxp2V+hw/VINFFVUilI+D4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTJaFw0yNzA1MjYwNzM0NTJaMDMxMTAvBgNV BAMTKDM5MEI0OTBFNjhFMTFDOUIyQTY0OTJBRkMxRjE4NUQ1QzA1QzBBRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6pGw8+GxqB9Np0U71fdqI+eVK XdzzwHUn0b0hWK1u59fBYj/UexRNH+xdB4IJ45gio5GpJHXyr4X9BGpOmCUmzBdX Y81JCDM+Cr6i/rMgU3Ca7NjBVJG3cURKy790+CM4KqU+cKOvqqjoPX8ioWGeksXK g98ool3BfT5WYIDF6C3Z+RzyhVHmb6jdjuurcyl/kjejXBBG86kOgJs+UgN+5bOt 7mYAUimlnt1TZZ/D5JGdq85cEIATemILrkcW0RrbdIRp21mpOUTxp4KCUm7qns+r d+63IyWp+EyyMLP9IsQEoDoK6c5+YTz3Ni2e0lT7/okB9/2YW2WrQ3Rpc8AFAgMB AAGjggIOMIICCjAdBgNVHQ4EFgQUOQtJDmjhHJsqZJKvwfGF1cBcCtQwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyNzg2NTYxLzAvMzEzMTMyMmUzMTMy MzgyZTMwMmUzMDJmMzEzNDJkMzIzNDIwM2QzZTIwMzczNjM0MzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwJwgDANBgkqhkiG9w0BAQsFAAOCAQEAVmgF1P8KPl+Z8zkBw+DaRyUDDJQjpsSB vnGURMjdVfjD5H1y+B8lK8X4wcMdKlQlAfd2dRCjARbx+EHfSpX4Nn+BI0h97ma0 pYULUmyuY+tjR+Zo4DsFpCzc/QJV/OwHyaVnmHkkYpLWlD7K2VVxwvzu4bGYZR6b WWyTc0Uj1w5zju4N1Zf3c5LBD+jb2Hv9o7hq7ZYlTjlbYcZLWoORzdh7/ZQeypVv yxmMMSI8IP67CZl3W5TcigXy3us0sXFWzKZYT9vcoYb3kV7SUni5+U8CQonNIJgc BCDOL+dfMGDWD8Vng93sH4ZTQSkMnxBXKzO7VWJpgAUc5OzGrTJeLA== -----END CERTIFICATE-----Generated at Sat May 30 00:01:44 2026 by rpki-client