$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3130312e3234312e3132382e302f31382d3234203d3e203137343239.roa File: 3130312e3234312e3132382e302f31382d3234203d3e203137343239.roa (raw, json) Hash identifier: R9mvmRYsuwUBy52ESKNxpCoXk60G0howsgtYWuU7IF8= Subject key identifier: 4C:BC:AB:D4:BE:9E:1B:2C:74:A8:25:B4:6C:C3:73:3D:0D:B8:C2:C5 Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 105F8DCE5871163C177F996BF1417FE76EAFAA85 Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3130312e3234312e3132382e302f31382d3234203d3e203137343239.roa Signing time: Mon 13 Apr 2026 03:30:08 +0000 ROA not before: Mon 13 Apr 2026 03:25:08 +0000 ROA not after: Mon 12 Apr 2027 03:30:08 +0000 asID: 17429 IP address blocks: 101.241.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:5f:8d:ce:58:71:16:3c:17:7f:99:6b:f1:41:7f:e7:6e:af:aa:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Apr 13 03:25:08 2026 GMT Not After : Apr 12 03:30:08 2027 GMT Subject: CN=4CBCABD4BE9E1B2C74A825B46CC3733D0DB8C2C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:09:26:d9:0a:b9:f1:0c:07:95:cc:a2:c8:4a: aa:1d:00:7b:1d:47:4c:e4:bf:1b:fa:ba:9f:08:f5: 0f:ca:ca:46:81:09:9a:30:6a:5c:a6:69:e4:98:bc: 42:55:91:92:37:4a:aa:41:5b:85:94:32:a4:c4:24: dc:8d:7c:aa:40:68:cf:05:cf:26:1a:12:cb:53:7f: 69:5e:ee:43:33:74:b0:4a:b0:1c:95:e9:e8:f9:f2: 32:60:1d:ab:ce:76:71:7e:21:ab:fb:e9:79:e2:91: 09:94:a7:fe:36:26:5c:4a:fd:72:cc:de:28:5c:27: af:82:e6:66:d5:a4:f4:56:a8:a1:12:e5:75:7b:13: 64:11:f3:b2:eb:a6:f4:54:f8:93:5d:ea:a8:37:19: 17:0c:ca:13:f8:24:dc:7b:68:e8:94:96:94:da:a7: 03:03:43:a0:e9:87:55:33:11:6e:10:7f:fa:cd:99: d9:0b:68:dd:1b:fb:2a:73:49:4b:62:1b:3b:1b:eb: b0:11:c0:16:94:b2:56:7e:16:b2:b7:00:76:8a:db: 02:ce:ac:8f:2b:32:df:d4:c5:34:70:96:f8:b4:ca: 27:a3:ae:f9:cf:ad:2f:bb:fa:2e:50:68:58:22:86: 0f:65:4f:52:63:54:15:94:67:ca:e0:f4:74:f6:26: f5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:BC:AB:D4:BE:9E:1B:2C:74:A8:25:B4:6C:C3:73:3D:0D:B8:C2:C5 X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3130312e3234312e3132382e302f31382d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.241.128.0/18 Signature Algorithm: sha256WithRSAEncryption 6e:6a:a8:14:98:cd:57:d2:f1:e9:fd:2d:ea:03:1d:ee:69:82: 8e:43:fc:1f:f8:c8:04:da:4b:03:68:55:9d:58:84:d4:4c:e3: 9d:11:ed:7c:37:46:d5:62:44:0c:d6:d6:25:12:80:ae:82:10: fd:f5:bb:14:aa:6f:cf:e6:7a:90:11:47:95:13:3e:c9:79:49: 11:61:25:9e:79:91:c6:39:74:a7:e6:0f:02:51:c7:1f:82:d2: 0b:da:a7:8c:fa:22:af:aa:66:fc:4b:39:3d:0c:09:30:df:25: 39:7f:6c:73:9c:e3:82:73:0d:79:6d:19:06:40:c3:ea:d5:ab: d1:30:2b:70:50:ca:5c:1e:36:af:0c:d2:8b:57:0d:9f:e8:87: d5:0f:d4:88:3f:2a:fb:40:cf:d4:5f:9d:ef:fa:8b:35:a1:c8: 27:71:dc:96:9d:10:dd:18:43:8f:64:69:5a:27:a3:d3:d9:4e: 11:f3:5a:94:c6:74:b9:f6:68:d0:94:23:30:c5:18:14:82:60: a9:f3:b4:dd:bc:dc:d3:53:4a:ae:f0:b2:b1:84:0f:6e:52:41: 5e:86:cb:b3:61:fe:56:a5:d0:fe:48:95:d5:44:f6:10:d9:30: b2:97:ff:0a:56:73:98:20:7b:59:1f:bf:ba:7a:2d:78:ce:58: 5d:e7:ec:87 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUEF+NzlhxFjwXf5lr8UF/526vqoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA0MTMwMzI1MDhaFw0yNzA0MTIwMzMwMDhaMDMxMTAvBgNV BAMTKDRDQkNBQkQ0QkU5RTFCMkM3NEE4MjVCNDZDQzM3MzNEMERCOEMyQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3CSbZCrnxDAeVzKLISqodAHsd R0zkvxv6up8I9Q/KykaBCZowalymaeSYvEJVkZI3SqpBW4WUMqTEJNyNfKpAaM8F zyYaEstTf2le7kMzdLBKsByV6ej58jJgHavOdnF+Iav76XnikQmUp/42JlxK/XLM 3ihcJ6+C5mbVpPRWqKES5XV7E2QR87LrpvRU+JNd6qg3GRcMyhP4JNx7aOiUlpTa pwMDQ6Dph1UzEW4Qf/rNmdkLaN0b+ypzSUtiGzsb67ARwBaUslZ+FrK3AHaK2wLO rI8rMt/UxTRwlvi0yiejrvnPrS+7+i5QaFgihg9lT1JjVBWUZ8rg9HT2JvXrAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUTLyr1L6eGyx0qCW0bMNzPQ24wsUwHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI4NTIwOTcvMC8zMTMwMzEyZTMy MzQzMTJlMzEzMjM4MmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzEzNzM0MzIzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBmXxgDANBgkqhkiG9w0BAQsFAAOCAQEAbmqoFJjNV9Lx6f0t6gMd 7mmCjkP8H/jIBNpLA2hVnViE1EzjnRHtfDdG1WJEDNbWJRKAroIQ/fW7FKpvz+Z6 kBFHlRM+yXlJEWElnnmRxjl0p+YPAlHHH4LSC9qnjPoir6pm/Es5PQwJMN8lOX9s c5zjgnMNeW0ZBkDD6tWr0TArcFDKXB42rwzSi1cNn+iH1Q/UiD8q+0DP1F+d7/qL NaHIJ3Hclp0Q3RhDj2RpWiej09lOEfNalMZ0ufZo0JQjMMUYFIJgqfO03bzc01NK rvCysYQPblJBXobLs2H+VqXQ/kiV1UT2ENkwspf/ClZzmCB7WR+/unoteM5YXefs hw== -----END CERTIFICATE-----Generated at Mon Apr 13 13:54:26 2026 by rpki-client