$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/312e38392e3139322e302f31382d3234203d3e203137343239.roa File: 312e38392e3139322e302f31382d3234203d3e203137343239.roa (raw, json) Hash identifier: g1sjk0Fo++uBV9A5zwAMnh34h7KWmLKdqic561vIlag= Subject key identifier: D7:9F:6B:93:0C:5B:04:07:70:3A:83:5A:9E:93:9F:D2:25:D6:7C:5D Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 15B4B54B8DDB1996B54AED6341A5C5C0A420A106 Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/312e38392e3139322e302f31382d3234203d3e203137343239.roa Signing time: Mon 13 Apr 2026 03:25:14 +0000 ROA not before: Mon 13 Apr 2026 03:20:14 +0000 ROA not after: Mon 12 Apr 2027 03:25:14 +0000 asID: 17429 IP address blocks: 1.89.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:b4:b5:4b:8d:db:19:96:b5:4a:ed:63:41:a5:c5:c0:a4:20:a1:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Apr 13 03:20:14 2026 GMT Not After : Apr 12 03:25:14 2027 GMT Subject: CN=D79F6B930C5B0407703A835A9E939FD225D67C5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ba:cb:6b:49:9c:76:97:e2:8d:57:ce:49:c8: c9:dd:e1:c6:96:19:61:29:e6:ef:1a:49:de:b7:8d: d4:0d:c4:a8:04:c6:38:c7:59:f0:21:8f:a6:cc:8d: 72:05:1d:20:2d:2c:7b:d4:1e:1b:53:26:75:01:be: 88:2d:48:42:0a:1f:c9:69:b7:fb:c6:cd:ad:7f:44: 8f:32:c8:b0:55:c8:f2:d7:bb:91:8d:5c:e8:5d:ba: ec:45:ae:61:9b:fc:db:9d:d7:bb:12:e7:22:de:9d: 10:b9:02:f5:1c:56:21:01:2a:b8:f4:23:83:b1:ac: b5:3d:8c:8c:96:4f:97:95:44:45:f6:61:85:7c:0f: 82:f8:b0:33:71:dd:9e:5b:ac:48:a0:47:ea:af:4f: 5f:17:3c:a0:1c:d6:4c:c4:8f:e6:7f:e7:af:21:a8: 04:ec:6c:9f:5e:3d:b4:99:92:4d:cf:47:bc:3f:01: e3:b3:d5:bf:7b:79:ba:60:45:84:f4:80:d5:67:d6: a0:be:18:48:20:b4:ac:d1:f5:1a:d4:fd:8d:ba:be: c0:af:5c:0d:4f:39:9b:bb:0a:95:53:c3:ef:f0:27: 9c:3c:af:46:74:7d:4e:be:21:95:c3:73:6f:69:2b: a5:79:4e:52:32:27:92:64:27:19:93:80:09:9b:d3: a7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9F:6B:93:0C:5B:04:07:70:3A:83:5A:9E:93:9F:D2:25:D6:7C:5D X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/312e38392e3139322e302f31382d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.89.192.0/18 Signature Algorithm: sha256WithRSAEncryption 8a:12:8e:25:37:c0:08:e0:e5:92:0f:42:f9:c9:22:04:d2:08: 3c:7f:e2:e6:4f:43:44:75:75:cc:88:76:bd:72:f6:07:b1:f5: 66:d8:9b:e6:88:0d:e0:6e:d3:29:33:81:fa:c5:64:da:48:af: 1c:35:14:9e:d6:e1:2b:9e:9f:d8:e3:40:89:f2:04:20:d8:e8: 72:78:69:86:fd:9c:bc:d5:c9:a8:27:23:92:4c:30:34:4a:33: d4:68:15:c1:ba:71:77:74:4c:2c:cb:48:a9:e8:8a:48:42:65: 4d:0d:74:02:6e:ad:81:b4:8f:6e:50:79:ee:9b:7a:a4:be:72: 02:2f:39:8f:04:f7:30:10:f2:86:6a:04:49:63:7e:26:ff:2d: e8:1b:60:19:68:40:ff:f1:62:68:52:11:73:e4:53:5e:53:f8: ab:ac:c8:c9:6e:62:99:8f:47:f2:55:ff:7f:cf:f9:03:97:d6: 06:4f:5b:a1:a8:87:82:3c:fb:e3:59:a5:96:97:be:36:6a:d1: 09:53:e5:9c:93:3f:f9:61:4b:76:c8:d1:d6:5b:cb:0e:6b:e6: 6b:53:a1:24:51:f0:cf:02:61:e0:10:a3:ce:9e:e7:69:94:3f: 88:a5:17:2e:8f:7d:ac:1b:81:93:89:96:94:c4:34:c5:cf:4f: 3e:e6:ba:db -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUFbS1S43bGZa1Su1jQaXFwKQgoQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA0MTMwMzIwMTRaFw0yNzA0MTIwMzI1MTRaMDMxMTAvBgNV BAMTKEQ3OUY2QjkzMEM1QjA0MDc3MDNBODM1QTlFOTM5RkQyMjVENjdDNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCBustrSZx2l+KNV85JyMnd4caW GWEp5u8aSd63jdQNxKgExjjHWfAhj6bMjXIFHSAtLHvUHhtTJnUBvogtSEIKH8lp t/vGza1/RI8yyLBVyPLXu5GNXOhduuxFrmGb/Nud17sS5yLenRC5AvUcViEBKrj0 I4OxrLU9jIyWT5eVREX2YYV8D4L4sDNx3Z5brEigR+qvT18XPKAc1kzEj+Z/568h qATsbJ9ePbSZkk3PR7w/AeOz1b97ebpgRYT0gNVn1qC+GEggtKzR9RrU/Y26vsCv XA1POZu7CpVTw+/wJ5w8r0Z0fU6+IZXDc29pK6V5TlIyJ5JkJxmTgAmb06dBAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQU159rkwxbBAdwOoNanpOf0iXWfF0wHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyODUyMDk3LzAvMzEyZTM4MzkyZTMx MzkzMjJlMzAyZjMxMzgyZDMyMzQyMDNkM2UyMDMxMzczNDMyMzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAYBWcAwDQYJKoZIhvcNAQELBQADggEBAIoSjiU3wAjg5ZIPQvnJIgTSCDx/4uZP Q0R1dcyIdr1y9gex9WbYm+aIDeBu0ykzgfrFZNpIrxw1FJ7W4Suen9jjQInyBCDY 6HJ4aYb9nLzVyagnI5JMMDRKM9RoFcG6cXd0TCzLSKnoikhCZU0NdAJurYG0j25Q ee6beqS+cgIvOY8E9zAQ8oZqBEljfib/LegbYBloQP/xYmhSEXPkU15T+KusyMlu YpmPR/JV/3/P+QOX1gZPW6Goh4I8++NZpZaXvjZq0QlT5ZyTP/lhS3bI0dZbyw5r 5mtToSRR8M8CYeAQo86e52mUP4ilFy6PfawbgZOJlpTENMXPTz7muts= -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:09 2026 by rpki-client