$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e3134362e302e302f31362d3234203d3e2037363431.roa File: 3231312e3134362e302e302f31362d3234203d3e2037363431.roa (raw, json) Hash identifier: a9YJawFzGsNPInAcvbUraL+Yc+AFBvnMaV1kr1yTpmk= Subject key identifier: BF:C3:75:08:76:FC:58:E4:F0:57:CA:4E:7A:A9:DD:1C:7F:4F:4C:5D Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 39DFF1E6DCA3846DDFB20F8492C7F6E94B7117C1 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e3134362e302e302f31362d3234203d3e2037363431.roa Signing time: Wed 27 May 2026 07:34:53 +0000 ROA not before: Wed 27 May 2026 07:29:53 +0000 ROA not after: Wed 26 May 2027 07:34:53 +0000 asID: 7641 IP address blocks: 211.146.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:df:f1:e6:dc:a3:84:6d:df:b2:0f:84:92:c7:f6:e9:4b:71:17:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:53 2026 GMT Not After : May 26 07:34:53 2027 GMT Subject: CN=BFC3750876FC58E4F057CA4E7AA9DD1C7F4F4C5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1b:02:6f:7a:f7:d1:f5:70:bd:4e:cb:9b:98: 91:19:91:6d:21:2d:5c:a7:24:6e:70:36:81:60:d1: 1b:70:4b:73:3b:81:9f:61:5b:6e:50:af:b6:a3:df: 18:0c:48:ab:2c:54:a4:0b:cb:d7:4d:33:d5:73:d9: 8d:68:31:19:4e:f5:84:20:3e:74:ae:b0:8c:6c:6b: 85:99:10:71:5f:5c:e1:64:05:61:4a:98:de:f9:e5: e2:df:78:d2:76:f6:ed:da:c0:1e:72:aa:67:b8:ff: 58:74:9e:a7:d7:57:aa:0d:0a:81:43:e7:3c:f0:a4: cb:ac:7a:f1:dd:dc:12:ee:11:4a:1f:fb:20:eb:24: 08:00:63:f4:2f:37:f1:bc:f3:48:25:79:ef:ad:c1: 6d:47:81:da:c0:b7:88:7c:77:22:34:de:5f:08:4f: 17:08:0e:93:db:f3:5c:29:20:4d:a5:ad:0e:39:57: c8:c7:73:64:17:0c:a7:f1:66:60:47:a5:b6:39:07: eb:08:79:a3:63:1f:70:e8:23:c4:1b:cd:6f:d4:65: 32:5d:53:38:64:01:4d:04:f7:05:78:9b:c1:29:8e: f6:93:ed:af:cb:7a:2a:92:d5:d6:4e:9c:75:23:5d: fa:fd:60:d0:c1:cd:b8:c3:98:81:79:e0:5a:8e:37: a8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C3:75:08:76:FC:58:E4:F0:57:CA:4E:7A:A9:DD:1C:7F:4F:4C:5D X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e3134362e302e302f31362d3234203d3e2037363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.146.0.0/16 Signature Algorithm: sha256WithRSAEncryption 30:85:e6:d2:e2:1d:e0:ae:4b:41:b4:26:ad:17:e3:07:ba:13: fa:61:0d:8e:94:de:e7:72:10:e4:68:3d:37:04:1d:fa:1f:8a: 88:8f:f8:e1:e8:16:cb:6e:d8:f6:04:06:0f:3b:aa:2b:44:2a: b4:ba:79:79:b3:f5:e1:a5:ae:95:81:39:55:08:fd:e1:41:b5: eb:8d:35:62:e5:54:be:5a:9f:25:ed:4b:22:c4:86:5d:26:6c: 76:d4:a0:a4:a3:c7:e6:33:97:de:a7:1f:1b:f9:dc:71:97:9c: 78:d8:d6:65:b3:db:8a:c1:73:f6:e3:21:5a:42:fe:a3:78:a5: 2b:a1:ee:7b:4b:e7:c6:b5:6b:7a:26:7c:da:01:b6:f8:41:22: 5d:1e:21:26:30:57:02:fc:68:57:65:9c:95:0e:22:50:fe:08: 6b:2b:d9:7f:27:d3:6d:61:e9:08:8a:ee:f7:e4:fc:65:43:e3: 48:fe:80:b0:92:61:35:af:19:5c:1f:bc:47:3b:f2:d2:ae:d0: 0b:c3:ed:32:ab:08:39:f4:3e:a6:55:8e:c5:06:53:c7:96:8c: 97:20:cd:00:3a:0e:0f:91:53:3a:72:10:8a:af:1e:09:a0:c4: 5e:a8:b6:14:40:eb:dc:ec:72:a4:3a:46:1e:93:b2:d4:cc:52: 09:ae:e0:12 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUOd/x5tyjhG3fsg+Eksf26UtxF8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTNaFw0yNzA1MjYwNzM0NTNaMDMxMTAvBgNV BAMTKEJGQzM3NTA4NzZGQzU4RTRGMDU3Q0E0RTdBQTlERDFDN0Y0RjRDNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9GwJvevfR9XC9TsubmJEZkW0h LVynJG5wNoFg0RtwS3M7gZ9hW25Qr7aj3xgMSKssVKQLy9dNM9Vz2Y1oMRlO9YQg PnSusIxsa4WZEHFfXOFkBWFKmN755eLfeNJ29u3awB5yqme4/1h0nqfXV6oNCoFD 5zzwpMusevHd3BLuEUof+yDrJAgAY/QvN/G880glee+twW1HgdrAt4h8dyI03l8I TxcIDpPb81wpIE2lrQ45V8jHc2QXDKfxZmBHpbY5B+sIeaNjH3DoI8QbzW/UZTJd UzhkAU0E9wV4m8EpjvaT7a/LeiqS1dZOnHUjXfr9YNDBzbjDmIF54FqON6jDAgMB AAGjggIOMIICCjAdBgNVHQ4EFgQUv8N1CHb8WOTwV8pOeqndHH9PTF0wHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyNzg2NTYxLzAvMzIzMTMxMmUzMTM0 MzYyZTMwMmUzMDJmMzEzNjJkMzIzNDIwM2QzZTIwMzczNjM0MzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwDTkjANBgkqhkiG9w0BAQsFAAOCAQEAMIXm0uId4K5LQbQmrRfjB7oT+mENjpTe 53IQ5Gg9NwQd+h+KiI/44egWy27Y9gQGDzuqK0QqtLp5ebP14aWulYE5VQj94UG1 6401YuVUvlqfJe1LIsSGXSZsdtSgpKPH5jOX3qcfG/nccZeceNjWZbPbisFz9uMh WkL+o3ilK6Hue0vnxrVreiZ82gG2+EEiXR4hJjBXAvxoV2WclQ4iUP4IayvZfyfT bWHpCIru9+T8ZUPjSP6AsJJhNa8ZXB+8Rzvy0q7QC8PtMqsIOfQ+plWOxQZTx5aM lyDNADoOD5FTOnIQiq8eCaDEXqi2FEDr3OxypDpGHpOy1MxSCa7gEg== -----END CERTIFICATE-----Generated at Fri May 29 22:56:26 2026 by rpki-client