$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3131372e3132342e302e302f31362d3234203d3e20313436373838.roa File: 3131372e3132342e302e302f31362d3234203d3e20313436373838.roa (raw, json) Hash identifier: e3YEBMj2H4OqOqqWzVyMiy/3PhoeRarQVmYzbeZbUfY= Subject key identifier: 90:45:0C:83:C6:FE:07:B5:9E:C6:FF:82:64:22:9E:35:66:9D:D4:C6 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 0FD4D4B1B67441B3D85882B8D62414BD2E5A0387 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3131372e3132342e302e302f31362d3234203d3e20313436373838.roa Signing time: Wed 27 May 2026 07:34:55 +0000 ROA not before: Wed 27 May 2026 07:29:55 +0000 ROA not after: Wed 26 May 2027 07:34:55 +0000 asID: 146788 IP address blocks: 117.124.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d4:d4:b1:b6:74:41:b3:d8:58:82:b8:d6:24:14:bd:2e:5a:03:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:55 2026 GMT Not After : May 26 07:34:55 2027 GMT Subject: CN=90450C83C6FE07B59EC6FF8264229E35669DD4C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:63:b9:10:4e:77:c9:11:c1:f5:a2:70:78:ee: 84:45:dc:81:39:ce:cc:77:b5:56:db:94:9f:4a:77: 93:49:77:3b:5f:2f:e2:e8:c6:d5:d0:4a:aa:8a:50: 26:1b:b7:1d:ac:81:93:15:8f:1a:18:e3:21:e2:e6: 11:3c:4d:90:9f:f5:93:34:05:23:f5:e9:1b:61:45: 2f:55:10:70:40:1d:9b:bd:eb:d4:76:b5:9b:f4:e3: 83:c7:89:eb:46:b9:0e:85:d4:8c:74:68:ed:9f:5b: 35:7f:a0:6e:82:8e:89:9e:11:b4:6e:8a:ee:8c:79: 74:88:e0:fd:82:91:a8:36:96:39:85:63:3d:3d:4b: 20:33:7d:ea:21:83:fa:b3:53:c1:f3:3f:d1:97:f0: 6e:1e:7a:71:14:ec:82:ba:31:d2:ee:34:ec:ba:90: da:26:b1:25:00:50:cb:01:45:01:41:09:71:a8:bc: 01:05:ec:70:ff:d7:af:ce:9b:4e:78:b0:22:ce:f5: 20:dd:4f:87:01:58:e6:ff:dd:e4:3b:5a:e9:13:ca: a5:7c:a7:a0:2d:6e:1b:d4:7f:54:1f:b6:fc:cf:b2: c3:c2:99:84:d8:2d:22:ba:fd:6f:d1:bf:81:17:9c: 17:d3:8c:d6:2a:7e:88:4b:df:39:55:80:5a:a4:a7: 73:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:45:0C:83:C6:FE:07:B5:9E:C6:FF:82:64:22:9E:35:66:9D:D4:C6 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3131372e3132342e302e302f31362d3234203d3e20313436373838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.124.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9f:9f:31:65:ba:37:04:33:b3:f3:80:f6:f1:f3:c9:76:31:e1: 24:6a:38:bc:40:45:6b:b2:3e:e2:02:31:f2:95:9f:ef:c1:7c: 43:06:eb:8d:08:0a:63:88:6d:9b:29:c2:6a:c2:d4:55:fa:25: cd:ac:71:d8:ac:c3:4f:2b:2e:f2:fa:22:82:db:aa:09:52:74: 18:92:f1:2c:08:09:85:06:e4:00:55:f1:b5:bb:41:93:fd:f0: 97:a3:3a:36:50:7e:d4:42:46:28:7e:8f:bf:6c:7f:e5:e7:97: 76:2b:f9:7e:2a:cb:13:96:f0:34:f5:61:f0:4a:e5:ef:89:6c: d8:94:d7:e5:96:b5:a6:07:3f:2a:3c:49:06:8a:c1:a7:3e:7d: a4:af:0b:7a:d2:e8:8b:9e:e6:47:fa:70:04:0c:e2:d2:02:77: 47:86:f8:03:bf:1a:bf:94:70:cc:a3:5f:e0:6f:cd:b8:05:3e: 98:70:4d:10:cb:a9:68:61:53:c9:79:51:e4:ed:48:51:6f:b5: 3c:87:18:2e:8c:f6:98:1d:b8:2b:c4:1e:88:5c:a5:16:6b:8c: 98:ad:9e:ec:f4:f0:45:20:bb:69:46:cc:a1:ad:a6:9e:a6:10: 05:22:de:38:84:0a:37:c2:d3:68:11:50:43:56:de:6e:56:3b: e5:7f:c8:6f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIUD9TUsbZ0QbPYWIK41iQUvS5aA4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTVaFw0yNzA1MjYwNzM0NTVaMDMxMTAvBgNV BAMTKDkwNDUwQzgzQzZGRTA3QjU5RUM2RkY4MjY0MjI5RTM1NjY5REQ0QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmY7kQTnfJEcH1onB47oRF3IE5 zsx3tVbblJ9Kd5NJdztfL+LoxtXQSqqKUCYbtx2sgZMVjxoY4yHi5hE8TZCf9ZM0 BSP16RthRS9VEHBAHZu969R2tZv044PHietGuQ6F1Ix0aO2fWzV/oG6CjomeEbRu iu6MeXSI4P2Ckag2ljmFYz09SyAzfeohg/qzU8HzP9GX8G4eenEU7IK6MdLuNOy6 kNomsSUAUMsBRQFBCXGovAEF7HD/16/Om054sCLO9SDdT4cBWOb/3eQ7WukTyqV8 p6AtbhvUf1QftvzPssPCmYTYLSK6/W/Rv4EXnBfTjNYqfohL3zlVgFqkp3P3AgMB AAGjggITMIICDzAdBgNVHQ4EFgQUkEUMg8b+B7Wexv+CZCKeNWad1MYwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMxMzEzNzJlMzEz MjM0MmUzMDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMxMzQzNjM3MzgzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQC AAEwBQMDAHV8MA0GCSqGSIb3DQEBCwUAA4IBAQCfnzFlujcEM7PzgPbx88l2MeEk aji8QEVrsj7iAjHylZ/vwXxDBuuNCApjiG2bKcJqwtRV+iXNrHHYrMNPKy7y+iKC 26oJUnQYkvEsCAmFBuQAVfG1u0GT/fCXozo2UH7UQkYofo+/bH/l55d2K/l+KssT lvA09WHwSuXviWzYlNfllrWmBz8qPEkGisGnPn2krwt60uiLnuZH+nAEDOLSAndH hvgDvxq/lHDMo1/gb824BT6YcE0Qy6loYVPJeVHk7UhRb7U8hxgujPaYHbgrxB6I XKUWa4yYrZ7s9PBFILtpRsyhraaephAFIt44hAo3wtNoEVBDVt5uVjvlf8hv -----END CERTIFICATE-----Generated at Sat May 30 00:02:17 2026 by rpki-client