$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/312e38382e36342e302f31382d3234203d3e203137343239.roa File: 312e38382e36342e302f31382d3234203d3e203137343239.roa (raw, json) Hash identifier: ODf7duck2gJIRa5YkzgFUNuEaWBE388BpYr4Pu48BhQ= Subject key identifier: 0F:2A:9E:E2:7F:A0:3A:E3:69:67:64:64:AA:4D:8D:BA:7E:0B:D5:C8 Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 0AA4E75EE53A51D58CBF68856E6E9E8EAEB9827A Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/312e38382e36342e302f31382d3234203d3e203137343239.roa Signing time: Mon 13 Apr 2026 03:25:14 +0000 ROA not before: Mon 13 Apr 2026 03:20:14 +0000 ROA not after: Mon 12 Apr 2027 03:25:14 +0000 asID: 17429 IP address blocks: 1.88.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a4:e7:5e:e5:3a:51:d5:8c:bf:68:85:6e:6e:9e:8e:ae:b9:82:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Apr 13 03:20:14 2026 GMT Not After : Apr 12 03:25:14 2027 GMT Subject: CN=0F2A9EE27FA03AE369676464AA4D8DBA7E0BD5C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:75:37:f0:f1:36:f8:d7:a7:c7:74:59:a4:cb: e6:6c:78:ca:d3:7b:59:2f:ec:ac:8b:17:20:3f:6b: 93:89:80:ac:60:dc:f8:3b:1c:83:3d:be:8f:57:41: 44:29:5d:ab:3f:58:b1:21:c6:da:a3:34:76:dc:eb: ff:f5:70:59:c6:11:48:5d:6d:bd:8a:88:80:1e:95: 73:f5:98:d1:e9:91:8a:69:c6:66:9c:35:2a:0f:0a: e1:bd:32:70:b2:cb:b1:fd:68:25:cb:1c:59:c0:65: 34:b1:cd:a7:95:88:f9:a5:9d:a6:af:4f:04:cc:28: 9a:80:cc:05:20:f8:9e:a6:58:c7:5e:fc:f1:c4:2d: 07:73:1e:5d:b7:d8:f9:02:3d:b3:a0:9e:30:1c:dc: c7:fc:f6:5e:18:7b:6e:58:5d:8e:9d:53:6b:47:5f: 27:92:e7:da:1b:34:dc:65:dc:c9:63:93:88:b7:c9: 9d:4e:48:fd:ef:17:c8:c5:7d:2c:d5:a5:5c:5e:68: 65:d4:37:ec:f9:67:4a:c5:07:ad:cc:21:c8:39:80: 23:cf:4f:53:c8:6f:85:ff:57:8a:a1:0f:6c:df:67: a7:b4:61:0a:54:30:b9:88:14:cb:0e:21:e8:74:59: 6c:be:18:42:af:8b:3f:36:32:44:eb:4e:5e:86:94: 68:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2A:9E:E2:7F:A0:3A:E3:69:67:64:64:AA:4D:8D:BA:7E:0B:D5:C8 X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/312e38382e36342e302f31382d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.88.64.0/18 Signature Algorithm: sha256WithRSAEncryption 7b:18:a4:e6:fa:90:21:a9:00:48:7a:f8:14:c7:46:e9:21:04: f7:71:27:c6:9d:c7:88:05:0a:93:ff:e0:15:07:51:31:92:89: ed:51:dd:75:e8:f4:5f:f9:81:d9:76:4c:c3:6b:52:b9:6b:61: f0:72:24:bf:c3:a7:ac:45:fa:fb:53:a5:b3:2a:68:1b:f8:d6: 80:12:fa:5e:c7:6c:bd:5f:23:13:f7:6b:4b:24:1b:89:46:67: 64:eb:61:ee:51:21:dc:1d:4a:5e:08:f2:e3:64:7f:cd:b8:3a: d2:3a:53:bd:7f:22:67:44:96:03:36:7e:ff:4a:32:b3:77:78: cb:91:de:91:3b:92:c0:05:64:3e:79:8a:f7:66:6b:f6:ff:ac: 84:40:54:7f:21:9e:82:c4:b5:01:50:5c:8d:4c:2e:24:81:9a: 00:ac:09:52:6b:d9:4c:09:f0:bb:f6:1f:72:d2:38:96:d2:a1: 94:53:13:5f:2c:97:01:f7:b2:01:ed:eb:1a:17:fd:4d:16:dc: 55:2d:33:ee:0b:08:bb:f9:3f:19:bc:c3:8a:74:ed:16:40:61: 94:75:32:18:8a:ce:ce:f6:d6:57:e6:49:93:8a:26:2a:fc:69: 34:90:d8:4b:1f:ba:e5:e5:4e:b3:d1:58:0e:83:f8:97:28:62: a0:64:ef:66 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUCqTnXuU6UdWMv2iFbm6ejq65gnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA0MTMwMzIwMTRaFw0yNzA0MTIwMzI1MTRaMDMxMTAvBgNV BAMTKDBGMkE5RUUyN0ZBMDNBRTM2OTY3NjQ2NEFBNEQ4REJBN0UwQkQ1QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCidTfw8Tb416fHdFmky+ZseMrT e1kv7KyLFyA/a5OJgKxg3Pg7HIM9vo9XQUQpXas/WLEhxtqjNHbc6//1cFnGEUhd bb2KiIAelXP1mNHpkYppxmacNSoPCuG9MnCyy7H9aCXLHFnAZTSxzaeViPmlnaav TwTMKJqAzAUg+J6mWMde/PHELQdzHl232PkCPbOgnjAc3Mf89l4Ye25YXY6dU2tH XyeS59obNNxl3Mljk4i3yZ1OSP3vF8jFfSzVpVxeaGXUN+z5Z0rFB63MIcg5gCPP T1PIb4X/V4qhD2zfZ6e0YQpUMLmIFMsOIeh0WWy+GEKviz82MkTrTl6GlGhbAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUDyqe4n+gOuNpZ2Rkqk2Nun4L1cgwHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyODUyMDk3LzAvMzEyZTM4MzgyZTM2 MzQyZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzMTM3MzQzMjM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG AVhAMA0GCSqGSIb3DQEBCwUAA4IBAQB7GKTm+pAhqQBIevgUx0bpIQT3cSfGnceI BQqT/+AVB1ExkontUd116PRf+YHZdkzDa1K5a2HwciS/w6esRfr7U6WzKmgb+NaA Evpex2y9XyMT92tLJBuJRmdk62HuUSHcHUpeCPLjZH/NuDrSOlO9fyJnRJYDNn7/ SjKzd3jLkd6RO5LABWQ+eYr3Zmv2/6yEQFR/IZ6CxLUBUFyNTC4kgZoArAlSa9lM CfC79h9y0jiW0qGUUxNfLJcB97IB7esaF/1NFtxVLTPuCwi7+T8ZvMOKdO0WQGGU dTIYis7O9tZX5kmTiiYq/Gk0kNhLH7rl5U6z0VgOg/iXKGKgZO9m -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:22 2026 by rpki-client