$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/312e39312e3132382e302f31382d3234203d3e203137343239.roa File: 312e39312e3132382e302f31382d3234203d3e203137343239.roa (raw, json) Hash identifier: 8dDg5KbhVz7DqRZ3W22RJQqJg5Tc0X9pm3STSql/SAc= Subject key identifier: DD:67:F1:57:11:E3:EE:23:D8:B8:3B:AD:1C:C0:4C:86:BB:A1:3E:25 Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 4160A466BFAD5DB19864A689524340FB862F761D Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/312e39312e3132382e302f31382d3234203d3e203137343239.roa Signing time: Mon 13 Apr 2026 03:25:14 +0000 ROA not before: Mon 13 Apr 2026 03:20:14 +0000 ROA not after: Mon 12 Apr 2027 03:25:14 +0000 asID: 17429 IP address blocks: 1.91.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:60:a4:66:bf:ad:5d:b1:98:64:a6:89:52:43:40:fb:86:2f:76:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Apr 13 03:20:14 2026 GMT Not After : Apr 12 03:25:14 2027 GMT Subject: CN=DD67F15711E3EE23D8B83BAD1CC04C86BBA13E25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3c:90:4c:28:2d:d7:fc:21:23:d8:09:e7:87: 82:49:b3:ee:a3:88:b3:16:dc:d1:a5:9b:b2:74:8c: 9e:74:df:ec:40:cd:ce:b1:09:23:0f:cd:63:92:5b: 18:ea:35:33:14:9f:d2:63:9c:cd:01:77:de:aa:02: 33:5c:f6:1a:73:e2:34:2e:4b:97:06:fb:d2:e4:f7: 33:3b:3a:db:ec:3a:a6:36:6d:bd:67:c7:63:a4:99: c3:c3:f6:d2:19:18:df:d4:cc:43:a2:88:a7:3a:fa: 43:3c:44:94:1a:01:12:b3:3d:b2:5f:9e:79:20:fb: 65:35:96:d8:2f:c6:0f:77:6a:82:6d:f6:bc:43:e6: 2a:51:ba:d7:8b:6b:53:33:eb:38:32:99:e5:30:d4: 85:8a:61:3d:07:97:86:75:07:fe:64:40:e0:90:8c: fc:f2:00:3e:99:02:1e:6c:5f:5e:6f:3a:6b:1a:f9: ed:6a:71:07:9e:3b:6f:63:cc:a9:9b:e5:e2:48:65: 2a:85:c2:94:cd:d3:b2:1d:2a:5d:ca:da:af:e3:77: f0:ca:60:de:8e:a7:8f:b7:49:03:0a:9c:e4:b8:3f: 19:39:c0:30:e8:0d:1d:d7:30:9d:d2:9c:4d:e7:41: 6d:d3:61:58:12:5e:7f:08:dd:38:6a:d1:57:e6:e6: 51:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:67:F1:57:11:E3:EE:23:D8:B8:3B:AD:1C:C0:4C:86:BB:A1:3E:25 X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/312e39312e3132382e302f31382d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.91.128.0/18 Signature Algorithm: sha256WithRSAEncryption b0:8c:4f:73:ba:61:ff:98:88:23:ae:ed:07:a0:9f:2d:55:89: 07:ba:f0:55:0b:11:13:cd:5b:ef:91:d7:e2:9e:5c:22:3a:4f: 2a:d4:82:57:93:83:e5:8f:3f:ed:03:90:6b:86:6c:d3:21:59: 78:bd:50:23:f9:d6:83:ab:71:5e:53:2b:7f:19:06:a1:6a:09: f9:a7:cd:f3:27:94:82:92:d8:ac:ac:94:ab:6c:64:0f:43:fb: 75:66:02:c7:98:e4:f6:98:d4:ff:42:3e:28:10:cb:ff:ef:dc: 60:de:35:55:0d:d8:ed:14:2f:20:d2:c9:45:8f:26:71:e6:18: 31:ed:ac:64:1a:29:8d:40:3f:8c:f7:33:0a:b2:84:bf:26:1e: 14:ea:6e:85:7d:98:87:13:dd:c9:53:3d:d3:0b:88:13:21:28: 17:92:6b:a8:60:19:a1:a0:ad:35:7d:b4:b4:b2:37:bc:ba:51: 54:08:0d:ae:c1:51:85:7b:d6:7a:7a:9d:10:fb:50:1e:b3:c6: 8c:51:7f:2f:61:32:65:1c:8b:e1:9a:4c:08:b4:c6:ed:c4:cb: c2:30:4a:97:98:3e:dc:5f:f5:35:74:ed:70:9e:72:c9:f6:37: 6f:29:be:6f:04:fa:2b:a5:fb:ac:b9:47:40:f0:e4:7d:72:80: 04:68:5c:fe -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUQWCkZr+tXbGYZKaJUkNA+4Yvdh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA0MTMwMzIwMTRaFw0yNzA0MTIwMzI1MTRaMDMxMTAvBgNV BAMTKERENjdGMTU3MTFFM0VFMjNEOEI4M0JBRDFDQzA0Qzg2QkJBMTNFMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLPJBMKC3X/CEj2Annh4JJs+6j iLMW3NGlm7J0jJ503+xAzc6xCSMPzWOSWxjqNTMUn9JjnM0Bd96qAjNc9hpz4jQu S5cG+9Lk9zM7OtvsOqY2bb1nx2OkmcPD9tIZGN/UzEOiiKc6+kM8RJQaARKzPbJf nnkg+2U1ltgvxg93aoJt9rxD5ipRuteLa1Mz6zgymeUw1IWKYT0Hl4Z1B/5kQOCQ jPzyAD6ZAh5sX15vOmsa+e1qcQeeO29jzKmb5eJIZSqFwpTN07IdKl3K2q/jd/DK YN6Op4+3SQMKnOS4Pxk5wDDoDR3XMJ3SnE3nQW3TYVgSXn8I3Thq0Vfm5lFXAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQU3WfxVxHj7iPYuDutHMBMhruhPiUwHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyODUyMDk3LzAvMzEyZTM5MzEyZTMx MzIzODJlMzAyZjMxMzgyZDMyMzQyMDNkM2UyMDMxMzczNDMyMzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAYBW4AwDQYJKoZIhvcNAQELBQADggEBALCMT3O6Yf+YiCOu7Qegny1ViQe68FUL ERPNW++R1+KeXCI6TyrUgleTg+WPP+0DkGuGbNMhWXi9UCP51oOrcV5TK38ZBqFq CfmnzfMnlIKS2KyslKtsZA9D+3VmAseY5PaY1P9CPigQy//v3GDeNVUN2O0ULyDS yUWPJnHmGDHtrGQaKY1AP4z3MwqyhL8mHhTqboV9mIcT3clTPdMLiBMhKBeSa6hg GaGgrTV9tLSyN7y6UVQIDa7BUYV71np6nRD7UB6zxoxRfy9hMmUci+GaTAi0xu3E y8IwSpeYPtxf9TV07XCecsn2N28pvm8E+iul+6y5R0Dw5H1ygARoXP4= -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:15 2026 by rpki-client