$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/312e39312e302e302f31382d3234203d3e203137343239.roa File: 312e39312e302e302f31382d3234203d3e203137343239.roa (raw, json) Hash identifier: HqGc7gPy+zm1+jVBe59MPwPktrd+lI5ocXCROvWgByQ= Subject key identifier: 7A:92:AF:67:A0:EE:9D:AA:A3:59:DB:41:30:5D:67:C1:C0:C0:3B:FB Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 5EDF83A89C458056F69451B9E1E979D729416EDE Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/312e39312e302e302f31382d3234203d3e203137343239.roa Signing time: Mon 13 Apr 2026 03:25:14 +0000 ROA not before: Mon 13 Apr 2026 03:20:14 +0000 ROA not after: Mon 12 Apr 2027 03:25:14 +0000 asID: 17429 IP address blocks: 1.91.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:df:83:a8:9c:45:80:56:f6:94:51:b9:e1:e9:79:d7:29:41:6e:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Apr 13 03:20:14 2026 GMT Not After : Apr 12 03:25:14 2027 GMT Subject: CN=7A92AF67A0EE9DAAA359DB41305D67C1C0C03BFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4f:35:80:18:76:c0:55:32:ed:92:b0:5b:37: 0e:c9:02:01:70:59:83:87:9d:53:9b:ed:2c:d9:f5: 11:89:15:eb:32:36:bb:ae:75:8d:d5:50:24:d7:e6: 60:bd:cb:9f:f5:1c:bf:81:d7:59:e2:86:24:cc:f0: bf:3b:56:9e:f0:16:18:4c:1d:6a:c4:f3:4d:a0:18: e5:e4:c2:49:2a:6a:fd:69:2d:19:d6:6c:4c:cd:55: 60:e3:ad:2e:6e:3a:9e:40:09:85:2a:2a:7e:1c:5e: 83:e5:f6:b0:7e:75:8e:e2:1b:6a:1d:90:31:54:8d: f2:d9:a8:53:9e:9f:d1:b6:24:09:c8:d8:ef:1c:41: c3:5e:56:24:92:73:af:37:d3:da:47:19:5c:39:83: 94:78:71:1d:a2:80:3b:a2:20:dc:78:f6:55:87:b1: 2a:d0:6d:f9:b8:fd:92:07:3f:78:d7:08:55:fa:16: 47:7e:16:a2:3c:28:86:6a:4b:4f:07:87:92:cc:84: 77:d2:5e:2d:a7:e3:c5:ac:12:0a:cf:ee:1e:93:d2: 8c:48:91:36:ce:29:03:42:05:a7:19:da:26:03:5f: a1:59:f9:21:86:4b:98:02:0b:a5:80:81:10:6a:31: 10:fc:cd:8c:c6:d4:16:74:83:c7:68:db:92:5a:fc: e5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:92:AF:67:A0:EE:9D:AA:A3:59:DB:41:30:5D:67:C1:C0:C0:3B:FB X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/312e39312e302e302f31382d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.91.0.0/18 Signature Algorithm: sha256WithRSAEncryption 54:c8:9f:e5:e4:39:6b:d7:e1:97:b7:3c:91:f7:b3:b9:0c:4b: 67:73:b2:90:e4:93:12:25:a1:6d:e9:c8:35:70:b6:3d:f2:7e: 25:7d:de:1a:ff:e5:8f:75:b6:09:61:d3:4a:c3:a6:70:07:9c: db:ff:04:3c:23:f8:11:fe:ec:fd:49:0a:c6:ae:62:1b:8e:06: 09:42:aa:d7:3a:57:22:6f:81:55:a5:16:2a:24:ce:69:67:a8: 98:61:3e:cc:ac:c9:19:91:51:15:03:6f:8d:6d:42:7b:42:00: 10:ed:1b:84:7a:b5:4f:b0:b5:ff:db:25:54:50:78:fd:5a:ec: 99:80:a6:db:fe:48:de:52:04:32:41:af:de:25:ba:b6:6f:f7: 60:a6:6f:53:7b:60:06:14:08:c9:e5:81:3c:b4:2d:ae:43:8e: f1:9a:b3:4a:8b:3d:76:52:90:d4:d1:05:66:3a:bf:a9:16:f2: a1:56:17:cc:a9:33:a8:c2:3b:b0:fd:8c:50:9f:0b:22:2a:a7: 5e:5f:39:5e:05:96:69:ec:93:bf:87:6a:f9:16:10:98:76:3f: 95:4c:4f:03:9d:dc:3f:0e:91:2d:2b:ce:fc:28:6e:e4:23:75: f3:d8:6a:c0:fa:e8:c8:c1:05:ae:5d:ad:cf:bf:4d:42:92:48: 91:b7:a0:fa -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUXt+DqJxFgFb2lFG54el51ylBbt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA0MTMwMzIwMTRaFw0yNzA0MTIwMzI1MTRaMDMxMTAvBgNV BAMTKDdBOTJBRjY3QTBFRTlEQUFBMzU5REI0MTMwNUQ2N0MxQzBDMDNCRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmTzWAGHbAVTLtkrBbNw7JAgFw WYOHnVOb7SzZ9RGJFesyNruudY3VUCTX5mC9y5/1HL+B11nihiTM8L87Vp7wFhhM HWrE802gGOXkwkkqav1pLRnWbEzNVWDjrS5uOp5ACYUqKn4cXoPl9rB+dY7iG2od kDFUjfLZqFOen9G2JAnI2O8cQcNeViSSc68309pHGVw5g5R4cR2igDuiINx49lWH sSrQbfm4/ZIHP3jXCFX6Fkd+FqI8KIZqS08Hh5LMhHfSXi2n48WsEgrP7h6T0oxI kTbOKQNCBacZ2iYDX6FZ+SGGS5gCC6WAgRBqMRD8zYzG1BZ0g8do25Ja/OUBAgMB AAGjggILMIICBzAdBgNVHQ4EFgQUepKvZ6DunaqjWdtBMF1nwcDAO/swHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyODUyMDk3LzAvMzEyZTM5MzEyZTMw MmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzEzNzM0MzIzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBgFb ADANBgkqhkiG9w0BAQsFAAOCAQEAVMif5eQ5a9fhl7c8kfezuQxLZ3OykOSTEiWh benINXC2PfJ+JX3eGv/lj3W2CWHTSsOmcAec2/8EPCP4Ef7s/UkKxq5iG44GCUKq 1zpXIm+BVaUWKiTOaWeomGE+zKzJGZFRFQNvjW1Ce0IAEO0bhHq1T7C1/9slVFB4 /VrsmYCm2/5I3lIEMkGv3iW6tm/3YKZvU3tgBhQIyeWBPLQtrkOO8ZqzSos9dlKQ 1NEFZjq/qRbyoVYXzKkzqMI7sP2MUJ8LIiqnXl85XgWWaeyTv4dq+RYQmHY/lUxP A53cPw6RLSvO/Chu5CN189hqwProyMEFrl2tz79NQpJIkbeg+g== -----END CERTIFICATE-----Generated at Mon Apr 13 12:23:26 2026 by rpki-client