$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/312e39312e3139322e302f31382d3234203d3e203137343239.roa File: 312e39312e3139322e302f31382d3234203d3e203137343239.roa (raw, json) Hash identifier: zcoA0WBY+oyMiQ0wxZfCOzI/fM1OIsDO1zr2t31G/Rw= Subject key identifier: 48:0A:29:F4:69:8B:63:05:9C:35:58:67:44:35:BA:DC:14:78:57:89 Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 7508519D6750697EB0BA3CE8FF0FC32E2E705E14 Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/312e39312e3139322e302f31382d3234203d3e203137343239.roa Signing time: Mon 13 Apr 2026 03:25:14 +0000 ROA not before: Mon 13 Apr 2026 03:20:14 +0000 ROA not after: Mon 12 Apr 2027 03:25:14 +0000 asID: 17429 IP address blocks: 1.91.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:08:51:9d:67:50:69:7e:b0:ba:3c:e8:ff:0f:c3:2e:2e:70:5e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Apr 13 03:20:14 2026 GMT Not After : Apr 12 03:25:14 2027 GMT Subject: CN=480A29F4698B63059C3558674435BADC14785789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6e:4d:e8:a9:47:dd:f2:93:38:d4:a7:23:58: b0:a2:a7:d8:57:27:47:91:d4:80:52:7b:35:4b:b8: 7a:bc:36:4e:a2:c5:70:4f:7b:a2:4b:1a:04:a6:e2: e6:3d:8c:79:f7:64:6d:c5:00:5f:09:1f:9b:8b:eb: 47:f2:f1:9b:8b:d0:71:53:96:75:ee:28:e9:61:73: 87:1f:f7:bd:da:8e:52:63:03:ea:4e:c5:49:5c:6a: 42:fd:4b:ab:b2:72:98:77:42:33:e8:60:1e:ad:95: d2:79:72:30:fe:e7:33:a1:2a:8a:9b:85:ee:12:70: 90:7d:66:a6:f4:e2:17:7f:31:52:ac:81:02:7d:1e: 90:7d:82:e4:31:2d:d8:11:5b:d2:25:10:7d:81:9f: cb:ad:9d:da:10:f8:0f:13:ba:e9:72:f1:0b:4a:39: 32:b3:a0:4e:71:81:a3:8d:c8:b7:a1:b8:40:87:15: fd:94:81:87:49:2e:56:07:c2:01:06:bc:30:4d:e3: 0d:24:c1:d3:6a:b4:01:9f:33:ab:62:d2:27:60:a2: c3:cc:75:f4:6c:22:29:89:dc:90:27:c1:d5:d3:b2: 16:db:d3:83:e4:f8:2d:1c:69:fd:f5:12:52:f3:e5: 2e:f1:f0:5a:d8:c4:c1:c4:2c:89:1a:a9:4b:8a:00: 5d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0A:29:F4:69:8B:63:05:9C:35:58:67:44:35:BA:DC:14:78:57:89 X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/312e39312e3139322e302f31382d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.91.192.0/18 Signature Algorithm: sha256WithRSAEncryption 41:d3:16:73:b6:84:c2:70:aa:49:ff:c8:e1:b5:60:e6:6a:5a: 5e:b2:66:b8:61:15:9e:ed:5a:4f:8e:79:f0:18:68:0d:59:b9: e4:eb:04:c5:05:1b:23:94:16:dd:21:98:11:d2:d2:e0:64:49: ae:94:c1:0a:0d:16:2a:f0:db:6d:1d:ba:d9:06:d5:71:11:da: 71:33:68:1e:8b:78:b6:0f:54:57:a1:5c:0d:f9:a0:40:09:c6: d4:8f:6c:f5:ee:ba:cf:1a:32:71:ac:be:8c:f9:9d:1c:ef:e5: 31:b2:77:2c:44:3b:28:db:00:b7:b9:af:95:f7:d8:5c:82:57: 09:dd:83:62:c9:47:19:ef:52:99:c5:c5:61:83:d4:77:77:1e: 88:3b:71:ed:e0:85:f6:6d:ad:c8:99:c7:e4:a0:59:f2:4e:03: 36:f9:10:3b:00:c4:a4:85:ac:c2:88:58:08:af:97:b8:9b:36: 76:a3:76:60:d3:08:36:8a:38:1a:a3:93:57:e8:9d:3e:a5:f1: 1c:6e:52:82:e6:40:06:62:09:c1:fa:e3:99:3b:a0:33:58:92: 7e:cd:85:b7:6a:d4:3e:6c:94:47:65:c2:22:0f:dd:6a:bb:a8: 2a:7c:ea:8e:0f:2e:44:ba:b7:0a:6d:71:31:1c:98:47:34:cf: af:4c:57:c8 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUdQhRnWdQaX6wujzo/w/DLi5wXhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA0MTMwMzIwMTRaFw0yNzA0MTIwMzI1MTRaMDMxMTAvBgNV BAMTKDQ4MEEyOUY0Njk4QjYzMDU5QzM1NTg2NzQ0MzVCQURDMTQ3ODU3ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHbk3oqUfd8pM41KcjWLCip9hX J0eR1IBSezVLuHq8Nk6ixXBPe6JLGgSm4uY9jHn3ZG3FAF8JH5uL60fy8ZuL0HFT lnXuKOlhc4cf973ajlJjA+pOxUlcakL9S6uycph3QjPoYB6tldJ5cjD+5zOhKoqb he4ScJB9Zqb04hd/MVKsgQJ9HpB9guQxLdgRW9IlEH2Bn8utndoQ+A8Tuuly8QtK OTKzoE5xgaONyLehuECHFf2UgYdJLlYHwgEGvDBN4w0kwdNqtAGfM6ti0idgosPM dfRsIimJ3JAnwdXTshbb04Pk+C0caf31ElLz5S7x8FrYxMHELIkaqUuKAF2vAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUSAop9GmLYwWcNVhnRDW63BR4V4kwHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyODUyMDk3LzAvMzEyZTM5MzEyZTMx MzkzMjJlMzAyZjMxMzgyZDMyMzQyMDNkM2UyMDMxMzczNDMyMzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAYBW8AwDQYJKoZIhvcNAQELBQADggEBAEHTFnO2hMJwqkn/yOG1YOZqWl6yZrhh FZ7tWk+OefAYaA1ZueTrBMUFGyOUFt0hmBHS0uBkSa6UwQoNFirw220dutkG1XER 2nEzaB6LeLYPVFehXA35oEAJxtSPbPXuus8aMnGsvoz5nRzv5TGydyxEOyjbALe5 r5X32FyCVwndg2LJRxnvUpnFxWGD1Hd3Hog7ce3ghfZtrciZx+SgWfJOAzb5EDsA xKSFrMKIWAivl7ibNnajdmDTCDaKOBqjk1fonT6l8RxuUoLmQAZiCcH645k7oDNY kn7Nhbdq1D5slEdlwiIP3Wq7qCp86o4PLkS6twptcTEcmEc0z69MV8g= -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:14 2026 by rpki-client