$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/312e38382e3132382e302f31382d3234203d3e203137343239.roa File: 312e38382e3132382e302f31382d3234203d3e203137343239.roa (raw, json) Hash identifier: 0w2uzsVERmaA9+phfrPNkztCv14hA7t0Uov29CTXABo= Subject key identifier: 56:2A:3E:D7:A4:33:99:FD:0B:1B:FA:53:FE:36:1F:A4:5D:2D:E9:5E Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 2B19D3CCBC36D52A819DB81B2568F1E644BBBF9A Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/312e38382e3132382e302f31382d3234203d3e203137343239.roa Signing time: Mon 13 Apr 2026 03:25:14 +0000 ROA not before: Mon 13 Apr 2026 03:20:14 +0000 ROA not after: Mon 12 Apr 2027 03:25:14 +0000 asID: 17429 IP address blocks: 1.88.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:19:d3:cc:bc:36:d5:2a:81:9d:b8:1b:25:68:f1:e6:44:bb:bf:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Apr 13 03:20:14 2026 GMT Not After : Apr 12 03:25:14 2027 GMT Subject: CN=562A3ED7A43399FD0B1BFA53FE361FA45D2DE95E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:93:50:1b:0b:4c:ab:7e:48:dc:29:b3:d5:eb: 5d:91:d8:d5:80:5e:a2:4a:70:8a:3a:b2:1a:70:c0: ca:2e:2c:e2:22:e8:d1:bf:2c:12:81:a2:1e:1c:85: c4:fe:b1:7b:5d:60:1c:c7:52:68:86:27:26:d0:c1: 20:99:e3:5b:39:24:0b:94:a0:9c:fb:b4:b2:af:e0: 96:37:86:5e:df:9b:57:6b:cf:5f:f9:f3:f9:e0:69: d0:69:60:7c:69:c4:22:d7:d1:79:05:bf:bc:2f:fd: 37:88:17:de:1a:b7:90:c0:92:1b:c2:cd:97:f9:69: ff:77:3c:bc:07:6f:a4:6a:05:d9:eb:64:21:71:5d: 8b:3c:2b:9d:23:38:32:ea:72:0b:6f:bd:92:2c:f7: df:e3:ce:7c:4f:d6:4e:c4:bd:11:00:9f:54:ef:61: c9:5b:3e:61:4d:f7:c5:9c:7a:f6:9f:ff:2c:0a:5c: 9b:33:86:3a:5a:73:ca:9e:1c:2d:1e:f5:80:d8:6f: a5:d2:b3:d5:18:42:b1:7c:cd:47:ad:39:35:df:84: 1f:19:f9:a4:75:1e:2b:15:b7:b9:1f:58:b4:19:c7: bd:7d:73:c0:8c:73:78:13:35:30:05:2b:fb:66:fa: b0:61:7c:bc:36:54:a4:9a:21:37:4f:74:a3:af:8c: 7f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2A:3E:D7:A4:33:99:FD:0B:1B:FA:53:FE:36:1F:A4:5D:2D:E9:5E X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/312e38382e3132382e302f31382d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.88.128.0/18 Signature Algorithm: sha256WithRSAEncryption b7:e0:4a:8e:ee:d9:62:f0:d6:f2:96:cd:b7:79:96:b8:85:38: fc:b0:46:28:5b:75:b1:c3:c9:ac:b8:b8:0a:db:23:27:98:c1: 43:ec:fd:78:f1:15:3a:d6:49:64:cc:a2:ab:d4:ba:bc:3c:30: d1:20:e8:2d:8c:9c:b1:42:e5:49:e1:49:c3:c6:be:7b:ec:b4: 40:65:17:25:96:04:c3:ef:ff:ed:89:93:f6:ea:b6:92:eb:84: 59:02:96:e5:b2:e9:c3:c7:42:24:3e:67:5c:f8:4e:83:e6:99: bc:d2:8c:e7:63:fd:0d:0d:37:47:a1:38:23:76:f4:ce:18:3f: fd:5f:90:4f:2c:33:bb:7b:6e:fb:28:e0:6a:78:d8:16:fd:e2: e8:bd:fc:6e:5e:2e:c6:19:b5:76:a3:11:d2:8a:61:c6:b0:6a: 07:88:e4:3f:d7:36:c6:1a:d0:0e:a2:91:8f:8f:30:d1:65:72: 1a:7b:5b:6e:ed:21:5a:fa:72:69:c7:25:c3:fb:6e:be:ce:39: 98:fb:6e:0c:13:4d:a0:4a:0b:eb:4b:4c:0b:20:17:4e:cc:ff: 77:dc:ce:ba:9c:bc:37:c3:db:17:ca:93:33:a2:51:2c:57:17: e5:8d:90:f7:dc:c6:a8:24:10:46:6c:9a:08:ae:5e:c1:73:05: fe:62:21:ae -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUKxnTzLw21SqBnbgbJWjx5kS7v5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA0MTMwMzIwMTRaFw0yNzA0MTIwMzI1MTRaMDMxMTAvBgNV BAMTKDU2MkEzRUQ3QTQzMzk5RkQwQjFCRkE1M0ZFMzYxRkE0NUQyREU5NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDek1AbC0yrfkjcKbPV612R2NWA XqJKcIo6shpwwMouLOIi6NG/LBKBoh4chcT+sXtdYBzHUmiGJybQwSCZ41s5JAuU oJz7tLKv4JY3hl7fm1drz1/58/ngadBpYHxpxCLX0XkFv7wv/TeIF94at5DAkhvC zZf5af93PLwHb6RqBdnrZCFxXYs8K50jODLqcgtvvZIs99/jznxP1k7EvREAn1Tv YclbPmFN98Wcevaf/ywKXJszhjpac8qeHC0e9YDYb6XSs9UYQrF8zUetOTXfhB8Z +aR1HisVt7kfWLQZx719c8CMc3gTNTAFK/tm+rBhfLw2VKSaITdPdKOvjH/HAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUVio+16Qzmf0LG/pT/jYfpF0t6V4wHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyODUyMDk3LzAvMzEyZTM4MzgyZTMx MzIzODJlMzAyZjMxMzgyZDMyMzQyMDNkM2UyMDMxMzczNDMyMzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAYBWIAwDQYJKoZIhvcNAQELBQADggEBALfgSo7u2WLw1vKWzbd5lriFOPywRihb dbHDyay4uArbIyeYwUPs/XjxFTrWSWTMoqvUurw8MNEg6C2MnLFC5UnhScPGvnvs tEBlFyWWBMPv/+2Jk/bqtpLrhFkCluWy6cPHQiQ+Z1z4ToPmmbzSjOdj/Q0NN0eh OCN29M4YP/1fkE8sM7t7bvso4Gp42Bb94ui9/G5eLsYZtXajEdKKYcawageI5D/X NsYa0A6ikY+PMNFlchp7W27tIVr6cmnHJcP7br7OOZj7bgwTTaBKC+tLTAsgF07M /3fczrqcvDfD2xfKkzOiUSxXF+WNkPfcxqgkEEZsmgiuXsFzBf5iIa4= -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:11 2026 by rpki-client