$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/312e38382e302e302f31362d3234203d3e203137343239.roa File: 312e38382e302e302f31362d3234203d3e203137343239.roa (raw, json) Hash identifier: BM4MzjQyMcrwmvXDemTFNMoxTvLBflPkGbPwLq++ja8= Subject key identifier: 40:EF:A4:2C:41:9E:06:6A:89:EA:EA:34:76:92:35:0B:18:46:FA:61 Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 3CC88C9A38A62E886AE219C3815EAE64593DD506 Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/312e38382e302e302f31362d3234203d3e203137343239.roa Signing time: Mon 13 Apr 2026 03:25:15 +0000 ROA not before: Mon 13 Apr 2026 03:20:15 +0000 ROA not after: Mon 12 Apr 2027 03:25:15 +0000 asID: 17429 IP address blocks: 1.88.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:c8:8c:9a:38:a6:2e:88:6a:e2:19:c3:81:5e:ae:64:59:3d:d5:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Apr 13 03:20:15 2026 GMT Not After : Apr 12 03:25:15 2027 GMT Subject: CN=40EFA42C419E066A89EAEA347692350B1846FA61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e5:79:b8:77:e7:8d:3c:4d:fb:51:0c:76:39: d1:22:29:91:73:8f:93:69:d5:f0:36:17:25:78:81: 9a:35:8b:89:0f:1d:73:79:59:87:30:8e:9a:ba:9f: 46:82:24:d6:c9:cd:20:e1:ac:15:c9:d2:23:b4:b4: c3:86:7e:cd:49:b1:ca:66:66:ac:d8:85:68:fa:0f: 87:90:7e:15:a5:9f:6b:69:14:1d:9f:2b:05:86:5e: 49:3e:b5:4f:06:d9:97:99:3b:32:60:95:eb:3a:c6: f6:e7:5b:12:20:d0:da:14:0e:cd:40:6f:82:ef:5d: 88:30:d1:ca:8c:c7:ee:7b:8c:b7:8c:1a:fa:80:06: 82:57:e7:4f:1d:c0:42:79:ad:38:8f:4d:b6:42:9a: 9c:ce:ab:20:2c:23:ac:18:63:f3:62:bd:af:db:1d: 06:8c:96:77:12:d1:8b:f1:e9:cf:36:0e:0e:54:f3: 57:28:4b:88:7a:c7:2d:e5:13:43:0b:72:2f:16:cf: 7f:5d:91:e9:df:19:38:2e:38:7a:a5:f0:54:b1:e3: c5:b8:54:d5:8d:13:2e:54:15:47:dc:be:ac:72:e1: d5:bd:00:78:02:ab:c4:db:aa:fa:a9:da:da:56:ea: 32:5b:b1:3f:69:63:79:6b:03:f2:72:d5:81:ec:57: b5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EF:A4:2C:41:9E:06:6A:89:EA:EA:34:76:92:35:0B:18:46:FA:61 X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/312e38382e302e302f31362d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.88.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8d:74:e1:66:f0:4f:14:34:7e:60:a4:fd:c8:5c:8a:0a:40:6e: 36:35:e6:c2:5e:7d:2c:89:c9:79:5a:45:7c:52:a0:f6:8b:6b: 1d:c8:49:cb:c8:01:65:3c:f3:d7:7f:d9:85:6b:e0:76:ae:ec: 6e:3b:46:35:31:84:5f:cd:f4:95:ef:a4:1d:e8:2b:62:c0:87: 78:50:1d:fc:0a:9b:fb:17:71:bf:dd:b1:20:76:ab:0a:4b:2d: ee:2a:eb:5d:2a:2a:be:75:93:3b:8c:f6:30:67:d1:41:75:f6: 6a:3a:41:62:e3:60:d4:01:bb:01:dd:6f:ff:e5:bf:2a:d8:60: 2f:36:e6:98:a5:d6:05:bf:6a:08:a9:64:0c:91:87:e0:9f:9f: 94:c3:03:18:16:45:99:15:66:17:b2:0f:0e:19:ab:cc:f0:1b: a6:0b:c3:70:62:a9:26:c0:69:f7:41:53:e0:b3:d8:90:5d:ff: 1e:f1:65:95:ac:f8:ce:ec:bf:5c:7e:a5:cd:e9:f7:9e:3e:c0: 43:cf:f1:18:36:c4:71:bd:0c:e0:8e:b0:a2:ba:15:f3:44:2b: fb:c5:ab:f2:f0:5a:3d:1c:35:c3:07:cc:e4:7b:0b:c3:dd:bf: 3f:2f:17:c7:0c:6b:d8:80:3b:30:64:a3:14:17:59:7e:8b:8f: 2c:f7:ca:47 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUPMiMmjimLohq4hnDgV6uZFk91QYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA0MTMwMzIwMTVaFw0yNzA0MTIwMzI1MTVaMDMxMTAvBgNV BAMTKDQwRUZBNDJDNDE5RTA2NkE4OUVBRUEzNDc2OTIzNTBCMTg0NkZBNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp5Xm4d+eNPE37UQx2OdEiKZFz j5Np1fA2FyV4gZo1i4kPHXN5WYcwjpq6n0aCJNbJzSDhrBXJ0iO0tMOGfs1Jscpm ZqzYhWj6D4eQfhWln2tpFB2fKwWGXkk+tU8G2ZeZOzJgles6xvbnWxIg0NoUDs1A b4LvXYgw0cqMx+57jLeMGvqABoJX508dwEJ5rTiPTbZCmpzOqyAsI6wYY/Niva/b HQaMlncS0Yvx6c82Dg5U81coS4h6xy3lE0MLci8Wz39dkenfGTguOHql8FSx48W4 VNWNEy5UFUfcvqxy4dW9AHgCq8Tbqvqp2tpW6jJbsT9pY3lrA/Jy1YHsV7VJAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUQO+kLEGeBmqJ6uo0dpI1CxhG+mEwHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyODUyMDk3LzAvMzEyZTM4MzgyZTMw MmUzMDJmMzEzNjJkMzIzNDIwM2QzZTIwMzEzNzM0MzIzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAAFY MA0GCSqGSIb3DQEBCwUAA4IBAQCNdOFm8E8UNH5gpP3IXIoKQG42NebCXn0sicl5 WkV8UqD2i2sdyEnLyAFlPPPXf9mFa+B2ruxuO0Y1MYRfzfSV76Qd6CtiwId4UB38 Cpv7F3G/3bEgdqsKSy3uKutdKiq+dZM7jPYwZ9FBdfZqOkFi42DUAbsB3W//5b8q 2GAvNuaYpdYFv2oIqWQMkYfgn5+UwwMYFkWZFWYXsg8OGavM8BumC8NwYqkmwGn3 QVPgs9iQXf8e8WWVrPjO7L9cfqXN6feePsBDz/EYNsRxvQzgjrCiuhXzRCv7xavy 8Fo9HDXDB8zkewvD3b8/LxfHDGvYgDswZKMUF1l+i48s98pH -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:25 2026 by rpki-client