$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/312e39302e36342e302f31382d3234203d3e203137343239.roa File: 312e39302e36342e302f31382d3234203d3e203137343239.roa (raw, json) Hash identifier: 447+m1RJZa7fK1v9iahhHQzaFDTTuaRYg7Il5P7Zzb0= Subject key identifier: 70:2C:3B:67:A1:C4:8F:83:10:FD:DD:53:F5:77:FA:5E:49:E9:B8:A0 Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 35EB24AFCA931C56A3E1B5FF4FBE4973B80F7011 Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/312e39302e36342e302f31382d3234203d3e203137343239.roa Signing time: Mon 13 Apr 2026 03:25:15 +0000 ROA not before: Mon 13 Apr 2026 03:20:15 +0000 ROA not after: Mon 12 Apr 2027 03:25:15 +0000 asID: 17429 IP address blocks: 1.90.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:eb:24:af:ca:93:1c:56:a3:e1:b5:ff:4f:be:49:73:b8:0f:70:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Apr 13 03:20:15 2026 GMT Not After : Apr 12 03:25:15 2027 GMT Subject: CN=702C3B67A1C48F8310FDDD53F577FA5E49E9B8A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ac:60:fa:f9:54:8d:19:0b:07:43:d5:c9:d6: 53:89:ea:b7:ae:2d:83:af:44:73:7d:31:4b:63:b7: 69:0b:78:a1:0c:c1:d9:be:db:a4:55:06:b8:e4:cc: 89:5a:34:2a:f8:57:4a:72:db:64:74:b7:17:5c:03: f3:b9:d7:fc:1d:d9:d0:b0:ca:b2:13:3a:c8:7b:34: b6:17:7c:8c:96:45:fe:8c:89:84:eb:1c:ef:c3:98: 24:8b:b4:fa:94:cc:05:88:fe:86:4b:9f:1f:1b:34: 75:f2:cc:06:59:05:06:19:bf:36:89:a0:31:f0:b1: 4e:a5:39:ce:92:62:d6:2b:0d:66:7c:28:e1:5b:2e: c4:8e:be:fa:d0:12:14:46:ca:c5:b9:e7:0e:41:fa: 80:af:24:9b:04:bf:90:8b:bf:56:37:d0:a4:44:a2: 1e:ca:c1:88:f5:ac:e5:71:8d:dc:97:b4:6a:60:07: 64:f8:b5:3a:5e:58:ae:b5:1f:08:be:02:04:e4:5b: f1:46:b6:59:8b:60:06:8f:5d:24:cc:98:26:d1:87: a1:c3:44:59:62:5e:26:b9:e5:ee:b7:e8:74:d3:84: 03:24:f2:74:db:82:45:f3:bc:e8:f4:b9:63:b3:22: 25:6a:60:9b:cc:3b:70:7f:a7:3c:24:3f:00:bb:5f: c5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2C:3B:67:A1:C4:8F:83:10:FD:DD:53:F5:77:FA:5E:49:E9:B8:A0 X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/312e39302e36342e302f31382d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.90.64.0/18 Signature Algorithm: sha256WithRSAEncryption 07:05:1e:91:0b:e0:c2:77:81:54:94:b9:9d:d1:e4:39:ef:19: 25:56:e5:27:08:af:8b:05:ae:9c:d4:0a:62:58:f1:c8:40:30: 42:29:f0:63:f7:dd:05:7f:cc:6a:27:5d:25:c8:2c:7f:ca:9e: 07:d7:5e:c8:1f:4b:8c:6c:c1:da:be:8e:57:29:34:56:33:51: 9e:3d:ee:b7:14:00:3e:25:c1:fe:bf:3c:06:5e:cf:c8:38:8a: bb:43:d4:eb:cd:07:0c:63:43:68:1d:d3:ea:e3:5f:2a:75:b2: 5b:a6:55:0d:bf:f8:e3:61:cc:92:9d:68:1a:de:10:e1:22:22: 3b:b9:55:67:a7:a7:07:86:70:63:4a:33:25:b4:61:39:23:52: 08:2d:26:8d:08:2a:6d:c4:e4:c3:0b:98:b9:23:59:f6:28:5b: 20:37:71:c4:31:b8:49:5b:20:f5:b3:41:57:c2:6d:10:3c:94: 86:75:bd:c6:ac:c5:e5:67:68:2b:26:7a:b7:49:dd:8d:c6:e9: 0a:ab:13:8b:ff:46:50:72:3c:9c:61:78:c2:57:6a:4c:65:7c: 57:f5:0a:67:cd:9b:28:89:db:86:e1:3c:91:6a:c1:f6:6a:59: b2:65:4c:70:26:60:c9:75:2e:4d:3a:d0:51:75:a7:b8:ca:f7: fe:aa:c1:68 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUNeskr8qTHFaj4bX/T75Jc7gPcBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA0MTMwMzIwMTVaFw0yNzA0MTIwMzI1MTVaMDMxMTAvBgNV BAMTKDcwMkMzQjY3QTFDNDhGODMxMEZEREQ1M0Y1NzdGQTVFNDlFOUI4QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvrGD6+VSNGQsHQ9XJ1lOJ6reu LYOvRHN9MUtjt2kLeKEMwdm+26RVBrjkzIlaNCr4V0py22R0txdcA/O51/wd2dCw yrITOsh7NLYXfIyWRf6MiYTrHO/DmCSLtPqUzAWI/oZLnx8bNHXyzAZZBQYZvzaJ oDHwsU6lOc6SYtYrDWZ8KOFbLsSOvvrQEhRGysW55w5B+oCvJJsEv5CLv1Y30KRE oh7KwYj1rOVxjdyXtGpgB2T4tTpeWK61Hwi+AgTkW/FGtlmLYAaPXSTMmCbRh6HD RFliXia55e636HTThAMk8nTbgkXzvOj0uWOzIiVqYJvMO3B/pzwkPwC7X8UfAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUcCw7Z6HEj4MQ/d1T9Xf6XknpuKAwHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyODUyMDk3LzAvMzEyZTM5MzAyZTM2 MzQyZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzMTM3MzQzMjM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG AVpAMA0GCSqGSIb3DQEBCwUAA4IBAQAHBR6RC+DCd4FUlLmd0eQ57xklVuUnCK+L Ba6c1ApiWPHIQDBCKfBj990Ff8xqJ10lyCx/yp4H117IH0uMbMHavo5XKTRWM1Ge Pe63FAA+JcH+vzwGXs/IOIq7Q9TrzQcMY0NoHdPq418qdbJbplUNv/jjYcySnWga 3hDhIiI7uVVnp6cHhnBjSjMltGE5I1IILSaNCCptxOTDC5i5I1n2KFsgN3HEMbhJ WyD1s0FXwm0QPJSGdb3GrMXlZ2grJnq3Sd2NxukKqxOL/0ZQcjycYXjCV2pMZXxX 9QpnzZsoiduG4TyRasH2almyZUxwJmDJdS5NOtBRdae4yvf+qsFo -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:25 2026 by rpki-client