$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3130312e3234302e3139322e302f31382d3234203d3e203137343239.roa File: 3130312e3234302e3139322e302f31382d3234203d3e203137343239.roa (raw, json) Hash identifier: ReaRU33/8CcQSV2wcANx0yRX4cKyh2QV5NSIE0TlN+E= Subject key identifier: EA:63:78:F2:FC:4D:B6:D9:2E:A3:19:ED:92:6F:2A:7D:96:B2:D8:BF Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 70C2822FACE6E30D9F599C261E3C6F0BC2D339B2 Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3130312e3234302e3139322e302f31382d3234203d3e203137343239.roa Signing time: Mon 13 Apr 2026 03:30:08 +0000 ROA not before: Mon 13 Apr 2026 03:25:08 +0000 ROA not after: Mon 12 Apr 2027 03:30:08 +0000 asID: 17429 IP address blocks: 101.240.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:c2:82:2f:ac:e6:e3:0d:9f:59:9c:26:1e:3c:6f:0b:c2:d3:39:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Apr 13 03:25:08 2026 GMT Not After : Apr 12 03:30:08 2027 GMT Subject: CN=EA6378F2FC4DB6D92EA319ED926F2A7D96B2D8BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b8:aa:65:a0:e0:e9:e0:f7:4c:23:18:c3:d8: bc:8a:5e:c7:33:7d:a8:3f:41:98:2f:9d:7c:01:57: aa:4e:45:2e:04:8f:f3:7c:0b:1e:c6:1d:4e:46:00: 52:fe:c4:02:c4:0c:65:53:d5:0f:cd:cc:b7:a7:15: 0e:3a:20:47:85:5f:39:28:49:68:3e:19:d2:fd:55: 00:22:51:6e:dd:83:59:a4:42:6e:62:ea:e5:51:d7: 2d:31:39:5c:97:e1:f1:70:c6:e5:a0:14:9d:54:e1: ad:8a:eb:4e:c3:e7:f8:1e:d3:8a:9b:04:6a:99:2c: 98:56:0f:85:c5:96:8a:23:dc:3c:78:ca:4f:ab:22: 48:79:3a:27:72:be:2a:4f:8d:0b:16:87:4e:16:70: b5:16:ed:eb:05:03:04:ca:1b:6b:f6:9e:a2:28:0f: ea:c8:bc:62:b9:4b:9c:de:8a:02:01:4b:93:28:4b: 6e:96:c6:95:1e:63:60:26:80:ca:d3:87:55:c0:01: 56:a8:1a:4a:e5:64:b9:aa:eb:a3:b6:5d:30:3a:a9: c7:20:e3:4b:18:b7:28:a7:b8:ae:9b:7f:6e:25:c4: 0b:79:1d:74:c8:eb:61:ac:af:17:f6:08:a6:4e:64: 4e:84:a6:85:ac:61:93:bd:dc:ef:98:01:3d:37:3c: fb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:63:78:F2:FC:4D:B6:D9:2E:A3:19:ED:92:6F:2A:7D:96:B2:D8:BF X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3130312e3234302e3139322e302f31382d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.240.192.0/18 Signature Algorithm: sha256WithRSAEncryption 93:39:2c:61:50:ba:26:d3:da:91:be:36:4e:e4:be:df:5f:59: a7:88:a6:ab:26:6b:18:03:b7:6b:d6:ea:c0:60:87:e3:8a:03: 79:cd:dd:18:61:6a:b1:46:f5:22:40:42:ea:0d:45:e8:3e:95: b5:1b:ef:6a:d6:ca:04:d2:a3:10:f6:84:be:a8:e5:58:5c:5f: 94:d4:d4:8c:c6:7f:5a:ed:5e:31:86:bc:06:9b:38:e0:ad:2e: a2:63:b4:8d:f3:40:94:d7:73:7f:04:ee:43:f9:23:9a:c6:8f: e4:6a:c4:45:05:b6:8e:c4:65:a3:9b:31:3f:3b:36:45:9c:02: 12:ff:d2:82:26:9e:85:5f:be:1a:2a:2e:35:66:67:62:29:43: 1a:af:b3:06:e4:d1:5e:47:5c:71:37:73:90:4e:25:1e:81:88: 99:7c:0f:d8:b2:db:32:de:4a:54:f7:23:f7:f7:19:e3:b0:54: 58:2a:d9:c3:92:17:75:1c:ce:62:fe:7e:92:87:9f:92:ec:35: 9f:40:8d:8a:df:07:c8:73:26:f2:0c:9b:58:db:bf:07:7e:67: ec:76:4c:3c:9e:38:6e:a0:ad:28:c7:09:60:23:86:0a:ce:3d: 89:54:79:6f:06:9c:be:06:80:ed:ed:6b:f4:c6:0b:e0:42:61: 50:f5:b6:06 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUcMKCL6zm4w2fWZwmHjxvC8LTObIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA0MTMwMzI1MDhaFw0yNzA0MTIwMzMwMDhaMDMxMTAvBgNV BAMTKEVBNjM3OEYyRkM0REI2RDkyRUEzMTlFRDkyNkYyQTdEOTZCMkQ4QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChuKploODp4PdMIxjD2LyKXscz fag/QZgvnXwBV6pORS4Ej/N8Cx7GHU5GAFL+xALEDGVT1Q/NzLenFQ46IEeFXzko SWg+GdL9VQAiUW7dg1mkQm5i6uVR1y0xOVyX4fFwxuWgFJ1U4a2K607D5/ge04qb BGqZLJhWD4XFlooj3Dx4yk+rIkh5OidyvipPjQsWh04WcLUW7esFAwTKG2v2nqIo D+rIvGK5S5zeigIBS5MoS26WxpUeY2AmgMrTh1XAAVaoGkrlZLmq66O2XTA6qccg 40sYtyinuK6bf24lxAt5HXTI62Gsrxf2CKZOZE6EpoWsYZO93O+YAT03PPujAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU6mN48vxNttkuoxntkm8qfZay2L8wHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI4NTIwOTcvMC8zMTMwMzEyZTMy MzQzMDJlMzEzOTMyMmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzEzNzM0MzIzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBmXwwDANBgkqhkiG9w0BAQsFAAOCAQEAkzksYVC6JtPakb42TuS+ 319Zp4imqyZrGAO3a9bqwGCH44oDec3dGGFqsUb1IkBC6g1F6D6VtRvvatbKBNKj EPaEvqjlWFxflNTUjMZ/Wu1eMYa8Bps44K0uomO0jfNAlNdzfwTuQ/kjmsaP5GrE RQW2jsRlo5sxPzs2RZwCEv/SgiaehV++GiouNWZnYilDGq+zBuTRXkdccTdzkE4l HoGImXwP2LLbMt5KVPcj9/cZ47BUWCrZw5IXdRzOYv5+koefkuw1n0CNit8HyHMm 8gybWNu/B35n7HZMPJ44bqCtKMcJYCOGCs49iVR5bwacvgaA7e1r9MYL4EJhUPW2 Bg== -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:30 2026 by rpki-client