$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e38392e302e302f31362d3234203d3e2037363431.roa File: 3231312e38392e302e302f31362d3234203d3e2037363431.roa (raw, json) Hash identifier: 11gS5aSWpJsTOviL3bSClEdsG84+WJMyoCKqlfunawE= Subject key identifier: C4:4B:46:EE:3C:91:0D:9E:A0:98:C4:08:41:54:E3:BE:56:04:24:9C Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 6BECDBE2560B58381BE9334AAB1581F8B6276539 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e38392e302e302f31362d3234203d3e2037363431.roa Signing time: Wed 27 May 2026 07:34:55 +0000 ROA not before: Wed 27 May 2026 07:29:55 +0000 ROA not after: Wed 26 May 2027 07:34:55 +0000 asID: 7641 IP address blocks: 211.89.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:ec:db:e2:56:0b:58:38:1b:e9:33:4a:ab:15:81:f8:b6:27:65:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:55 2026 GMT Not After : May 26 07:34:55 2027 GMT Subject: CN=C44B46EE3C910D9EA098C4084154E3BE5604249C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1c:66:1e:96:2c:5f:6e:1f:39:9b:be:9c:2e: 60:1f:16:b0:36:1d:0b:a1:7e:cb:c3:df:96:4a:0f: 31:63:e1:65:2e:a9:b7:81:b0:b8:c5:d8:92:ce:47: 69:21:f1:a3:cc:36:fd:c0:d1:f1:48:e0:ed:17:e7: a3:fa:c2:97:b2:39:e7:0d:a4:39:78:d1:cf:cd:0f: d6:5e:41:1c:ed:35:be:0f:4f:6e:bb:dc:22:ae:4f: ff:a8:d3:b0:88:6f:3f:58:e3:9c:dd:19:ad:7c:6c: a0:f9:ed:23:12:80:55:c5:14:1b:43:ee:f8:02:6c: 3e:0a:95:84:42:8e:49:f4:9f:09:55:66:80:47:af: cd:33:aa:21:d3:64:2c:24:de:f0:be:96:9c:ea:6d: d1:24:b6:df:31:02:d7:31:d2:84:42:1a:7a:98:e5: 18:ef:0f:6f:17:13:25:7a:ac:12:e5:6f:f3:ca:b9: a9:6f:68:b2:dd:88:ec:23:a9:1b:e5:a8:5a:37:20: 8d:ac:24:c7:b1:d0:6c:19:98:19:e8:ce:b3:5c:0a: 2c:3f:c1:9b:53:a2:58:a4:90:b1:46:bd:e1:49:55: 99:fb:e8:b1:ef:ef:0f:99:4a:c4:62:74:74:74:7e: 69:e6:86:e5:09:6d:7b:e7:7b:fe:04:6e:5a:d5:3b: 49:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4B:46:EE:3C:91:0D:9E:A0:98:C4:08:41:54:E3:BE:56:04:24:9C X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e38392e302e302f31362d3234203d3e2037363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.89.0.0/16 Signature Algorithm: sha256WithRSAEncryption 29:1f:a7:a2:0d:51:59:6f:85:13:a2:8f:00:30:89:fb:bd:90: cf:62:61:dc:54:9a:50:d0:c0:38:6c:ec:04:7e:20:f4:92:6b: 05:6f:10:7d:10:ad:bd:f9:be:63:f4:0b:b9:69:c0:5c:48:f8: 94:c4:25:c6:ae:d3:67:de:6a:09:6d:77:df:b7:2b:ed:f3:d2: b9:44:3f:10:4a:a7:3b:b0:85:b2:20:96:f5:4b:37:ff:27:7d: 16:ed:c3:16:dc:55:8d:c7:17:a4:b6:67:3b:10:e6:bc:ea:66: 3f:37:e3:fb:2b:bd:5e:f7:f3:4a:d5:22:31:f0:93:bf:5a:1a: 5f:62:ff:a7:64:44:d5:54:18:12:1f:d1:f7:dc:49:9c:fa:58: 65:62:fe:e4:71:17:cc:d8:ec:31:30:c7:32:be:95:9e:b1:85: 01:46:fd:a2:0b:6a:da:66:8b:3e:70:ec:b8:ca:cc:fc:06:fc: 4b:15:eb:5e:22:df:95:09:9d:1a:bb:89:32:0b:eb:63:6a:bc: 18:08:f3:f4:84:fe:d1:d0:b9:84:1c:0c:ad:0a:72:d1:84:ce: dc:61:7e:ba:58:06:15:4e:68:06:08:6b:85:4d:00:41:5c:1c: a9:37:1e:cf:65:d0:3c:ae:60:bd:59:a5:b4:5f:94:ea:54:3f: 66:6a:dc:aa -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUa+zb4lYLWDgb6TNKqxWB+LYnZTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTVaFw0yNzA1MjYwNzM0NTVaMDMxMTAvBgNV BAMTKEM0NEI0NkVFM0M5MTBEOUVBMDk4QzQwODQxNTRFM0JFNTYwNDI0OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiHGYelixfbh85m76cLmAfFrA2 HQuhfsvD35ZKDzFj4WUuqbeBsLjF2JLOR2kh8aPMNv3A0fFI4O0X56P6wpeyOecN pDl40c/ND9ZeQRztNb4PT2673CKuT/+o07CIbz9Y45zdGa18bKD57SMSgFXFFBtD 7vgCbD4KlYRCjkn0nwlVZoBHr80zqiHTZCwk3vC+lpzqbdEktt8xAtcx0oRCGnqY 5RjvD28XEyV6rBLlb/PKualvaLLdiOwjqRvlqFo3II2sJMex0GwZmBnozrNcCiw/ wZtTolikkLFGveFJVZn76LHv7w+ZSsRidHR0fmnmhuUJbXvne/4EblrVO0kFAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQUxEtG7jyRDZ6gmMQIQVTjvlYEJJwwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyNzg2NTYxLzAvMzIzMTMxMmUzODM5 MmUzMDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDM3MzYzNDMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA 01kwDQYJKoZIhvcNAQELBQADggEBACkfp6INUVlvhROijwAwifu9kM9iYdxUmlDQ wDhs7AR+IPSSawVvEH0Qrb35vmP0C7lpwFxI+JTEJcau02feagltd9+3K+3z0rlE PxBKpzuwhbIglvVLN/8nfRbtwxbcVY3HF6S2ZzsQ5rzqZj834/srvV7380rVIjHw k79aGl9i/6dkRNVUGBIf0ffcSZz6WGVi/uRxF8zY7DEwxzK+lZ6xhQFG/aILatpm iz5w7LjKzPwG/EsV614i35UJnRq7iTIL62NqvBgI8/SE/tHQuYQcDK0KctGEztxh frpYBhVOaAYIa4VNAEFcHKk3Hs9l0DyuYL1ZpbRflOpUP2Zq3Ko= -----END CERTIFICATE-----Generated at Sat May 30 00:53:10 2026 by rpki-client