$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3130312e3234312e36342e302f31382d3234203d3e203137343239.roa File: 3130312e3234312e36342e302f31382d3234203d3e203137343239.roa (raw, json) Hash identifier: hCWLfzy7zPpd39jbaymMc1H913kHY70nf0+ovphhf0w= Subject key identifier: 59:64:9A:C1:71:41:11:A2:66:F7:1D:16:9A:9F:98:B3:C8:EA:98:AF Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 0B19F459BFC7060B2A96F4104DB1FEF80AFB676C Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3130312e3234312e36342e302f31382d3234203d3e203137343239.roa Signing time: Mon 13 Apr 2026 03:30:08 +0000 ROA not before: Mon 13 Apr 2026 03:25:08 +0000 ROA not after: Mon 12 Apr 2027 03:30:08 +0000 asID: 17429 IP address blocks: 101.241.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:19:f4:59:bf:c7:06:0b:2a:96:f4:10:4d:b1:fe:f8:0a:fb:67:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Apr 13 03:25:08 2026 GMT Not After : Apr 12 03:30:08 2027 GMT Subject: CN=59649AC1714111A266F71D169A9F98B3C8EA98AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:15:21:55:de:67:20:88:c3:50:14:b8:dd:d4: 72:9b:e0:5d:5f:3e:35:11:f8:bf:f7:62:a4:6c:fa: 2e:ac:47:bb:55:37:64:d6:a1:bb:ae:42:70:1b:25: d6:a3:0a:a1:50:2d:95:c2:f4:5c:f7:ba:f5:33:8b: 7e:6d:b0:26:9b:95:92:f0:19:ef:70:20:8d:1c:f5: a1:28:bd:e4:31:6e:de:e8:3e:6d:53:8c:09:ad:b7: 4f:a1:bd:9b:c2:01:08:d4:79:48:ba:20:b3:70:79: 28:1a:9b:1c:93:68:df:fe:cb:87:ce:c9:e1:6f:01: 1f:9d:d5:01:f0:fd:04:3c:38:3b:da:70:e0:27:f8: b2:a6:49:7f:4f:48:dd:63:93:46:06:1c:c1:ac:d4: 0c:d8:2e:5c:f5:1c:44:98:89:67:33:ce:d2:54:e9: 08:c3:40:40:c2:4a:b3:57:98:dc:ca:91:1d:66:34: 02:6b:7c:6b:45:40:4d:0f:e9:45:52:18:a6:70:e4: 6a:5f:37:4f:b0:f5:bb:5d:14:6a:95:5f:bf:e1:4d: 8b:86:0f:2b:15:a0:84:00:28:2b:2a:fb:b5:fd:1f: 81:a1:b9:ad:f2:ce:ee:e1:bd:7f:71:bf:02:17:bc: 84:4b:a1:73:1b:a2:e1:c6:50:af:18:f7:4c:81:45: 16:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:64:9A:C1:71:41:11:A2:66:F7:1D:16:9A:9F:98:B3:C8:EA:98:AF X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3130312e3234312e36342e302f31382d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.241.64.0/18 Signature Algorithm: sha256WithRSAEncryption 79:f4:ed:95:7c:92:a6:f8:d1:9e:95:be:22:e7:d7:bc:a5:0e: 14:f0:f3:5c:61:d6:84:30:5d:b4:0e:dd:2a:e3:dd:dd:eb:b0: d2:be:ce:52:65:da:de:12:a8:71:be:78:c3:83:e6:36:28:58: a1:61:fa:f4:fb:f2:89:43:20:64:76:f9:65:ce:1d:61:57:96: 3f:7b:70:6e:14:01:ca:d0:1b:70:16:d4:36:3e:66:12:54:25: 74:12:4e:e6:77:e9:bc:ea:35:35:17:81:bf:62:4c:5e:85:e5: da:56:17:7a:86:9c:36:ee:0f:7b:87:f4:ff:ba:b8:62:ea:7f: 67:71:c8:7f:e0:6e:8e:77:d5:37:af:b3:2f:36:fd:9b:e3:d2: 6a:c5:f1:bc:bf:bf:04:b8:56:5d:85:c4:db:24:f4:3c:ab:cf: b3:c2:46:28:28:c0:7d:42:5e:a5:b5:ab:f0:1e:bd:a3:61:13: fa:1e:f2:82:d0:85:21:28:e9:18:db:98:50:78:d0:bc:ea:6e: 94:cd:cb:ef:e1:ed:9c:9e:7c:46:3d:56:34:6c:83:a4:b8:46: 90:30:c0:6e:8f:17:db:f4:72:17:4a:56:49:9a:40:3f:d0:b8: dd:dc:84:7a:8c:eb:17:9c:7a:d5:01:28:a0:d7:37:2a:55:82: 5e:59:f5:c6 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUCxn0Wb/HBgsqlvQQTbH++Ar7Z2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA0MTMwMzI1MDhaFw0yNzA0MTIwMzMwMDhaMDMxMTAvBgNV BAMTKDU5NjQ5QUMxNzE0MTExQTI2NkY3MUQxNjlBOUY5OEIzQzhFQTk4QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZFSFV3mcgiMNQFLjd1HKb4F1f PjUR+L/3YqRs+i6sR7tVN2TWobuuQnAbJdajCqFQLZXC9Fz3uvUzi35tsCablZLw Ge9wII0c9aEoveQxbt7oPm1TjAmtt0+hvZvCAQjUeUi6ILNweSgamxyTaN/+y4fO yeFvAR+d1QHw/QQ8ODvacOAn+LKmSX9PSN1jk0YGHMGs1AzYLlz1HESYiWczztJU 6QjDQEDCSrNXmNzKkR1mNAJrfGtFQE0P6UVSGKZw5GpfN0+w9btdFGqVX7/hTYuG DysVoIQAKCsq+7X9H4Ghua3yzu7hvX9xvwIXvIRLoXMbouHGUK8Y90yBRRZDAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUWWSawXFBEaJm9x0Wmp+Ys8jqmK8wHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjg1MjA5Ny8wLzMxMzAzMTJlMzIz NDMxMmUzNjM0MmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzEzNzM0MzIzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBmXxQDANBgkqhkiG9w0BAQsFAAOCAQEAefTtlXySpvjRnpW+IufXvKUO FPDzXGHWhDBdtA7dKuPd3euw0r7OUmXa3hKocb54w4PmNihYoWH69PvyiUMgZHb5 Zc4dYVeWP3twbhQBytAbcBbUNj5mElQldBJO5nfpvOo1NReBv2JMXoXl2lYXeoac Nu4Pe4f0/7q4Yup/Z3HIf+BujnfVN6+zLzb9m+PSasXxvL+/BLhWXYXE2yT0PKvP s8JGKCjAfUJepbWr8B69o2ET+h7ygtCFISjpGNuYUHjQvOpulM3L7+HtnJ58Rj1W NGyDpLhGkDDAbo8X2/RyF0pWSZpAP9C43dyEeozrF5x61QEooNc3KlWCXln1xg== -----END CERTIFICATE-----Generated at Mon Apr 13 13:53:26 2026 by rpki-client