$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3130312e3234322e36342e302f31382d3234203d3e203137343239.roa File: 3130312e3234322e36342e302f31382d3234203d3e203137343239.roa (raw, json) Hash identifier: Oj93kf27QpOVWS5l0zSUAPynQofuIT6eYAGIJuSAw0c= Subject key identifier: EA:74:D4:C6:79:AC:8F:37:3A:C0:7A:F5:41:38:6C:6E:5F:42:0B:B1 Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 5FC482D1889ED0EB26B552DD91D9E6666D3BBF5D Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3130312e3234322e36342e302f31382d3234203d3e203137343239.roa Signing time: Mon 13 Apr 2026 03:30:08 +0000 ROA not before: Mon 13 Apr 2026 03:25:08 +0000 ROA not after: Mon 12 Apr 2027 03:30:08 +0000 asID: 17429 IP address blocks: 101.242.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:c4:82:d1:88:9e:d0:eb:26:b5:52:dd:91:d9:e6:66:6d:3b:bf:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Apr 13 03:25:08 2026 GMT Not After : Apr 12 03:30:08 2027 GMT Subject: CN=EA74D4C679AC8F373AC07AF541386C6E5F420BB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e1:87:42:ed:b7:fa:f5:fa:94:0b:95:67:ac: a2:32:de:f5:9d:f9:a3:9e:25:b8:e9:fd:31:ce:31: fa:e7:90:6f:d1:ed:9b:58:35:1e:57:fa:59:c0:1a: 9f:5c:70:c0:39:f6:89:6a:dd:96:a1:fa:c3:59:50: 3d:24:b1:59:60:02:e6:79:2c:ae:4a:c5:3e:f9:df: e3:18:f3:52:6f:69:2f:ae:57:67:fc:7b:0a:23:ec: 94:22:0b:b2:46:bd:0a:e1:b7:61:15:40:bd:2f:8f: b4:f0:0f:c4:f0:34:76:0e:7b:78:a6:a9:1d:90:72: 2a:7a:e3:6e:13:01:c4:83:45:93:04:9d:5c:2e:6f: 8c:fc:cc:40:b0:37:64:48:fb:7a:4f:c3:b1:cc:cd: 19:b5:e9:ee:19:76:ae:50:dc:65:d2:16:20:ae:22: f3:b5:61:91:d4:32:a8:ea:8d:64:71:2c:4c:48:de: 96:bb:87:8b:77:2c:bc:29:06:71:61:c6:26:f6:d5: a7:50:ba:8a:5a:9b:10:cb:be:df:33:44:d1:ce:b9: e4:12:58:ae:9f:27:bb:33:3d:69:6e:fe:42:86:a1: 82:b3:e2:03:bf:b7:08:c9:40:8f:64:05:3e:46:c8: fb:cd:50:42:8b:22:b4:fa:ef:05:81:f9:a2:de:81: 5d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:74:D4:C6:79:AC:8F:37:3A:C0:7A:F5:41:38:6C:6E:5F:42:0B:B1 X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3130312e3234322e36342e302f31382d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.242.64.0/18 Signature Algorithm: sha256WithRSAEncryption 8e:d4:83:b3:62:12:b1:26:cb:97:73:ac:ab:cd:fc:b6:33:50: 16:99:15:38:33:cb:95:05:0a:a3:10:6c:96:2f:f0:c1:56:54: 51:1c:ab:9b:81:35:54:53:46:d9:93:03:a3:dc:3b:b6:bc:39: 60:30:0e:63:4e:df:9d:16:9e:9c:b9:f7:1c:8f:0b:0d:e3:5c: 8b:c7:10:f3:3b:37:74:46:7d:bf:7e:67:0b:3e:0b:4f:ea:f5: 2a:6f:08:87:45:65:5b:05:a3:60:95:cf:aa:e3:3b:93:d3:26: 64:bd:9d:5d:ab:9b:f1:9c:a2:7e:9a:2c:e0:86:5f:53:38:3c: 94:d1:e8:7c:c4:e3:0d:93:18:52:2a:f0:26:7f:56:53:77:72: 56:24:1b:17:86:fb:84:29:05:9e:97:68:67:86:e3:cb:4a:ee: b0:95:da:da:39:20:b4:65:85:69:37:81:82:ad:55:74:5c:27: a8:84:8e:ea:55:d3:16:0a:b0:f3:43:6f:14:95:de:b5:49:da: 30:ce:91:b0:f9:47:ad:b4:ee:0a:28:be:61:bd:f2:0b:8a:f5: e0:cf:3f:3f:71:56:9e:88:36:42:57:e8:58:2d:c6:26:fc:8e: f1:ac:91:f6:b3:fd:ea:86:e2:b8:fc:5f:dc:6e:34:07:e5:08: 02:ce:b0:02 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUX8SC0Yie0OsmtVLdkdnmZm07v10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA0MTMwMzI1MDhaFw0yNzA0MTIwMzMwMDhaMDMxMTAvBgNV BAMTKEVBNzRENEM2NzlBQzhGMzczQUMwN0FGNTQxMzg2QzZFNUY0MjBCQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN4YdC7bf69fqUC5VnrKIy3vWd +aOeJbjp/THOMfrnkG/R7ZtYNR5X+lnAGp9ccMA59olq3Zah+sNZUD0ksVlgAuZ5 LK5KxT753+MY81JvaS+uV2f8ewoj7JQiC7JGvQrht2EVQL0vj7TwD8TwNHYOe3im qR2Qcip6424TAcSDRZMEnVwub4z8zECwN2RI+3pPw7HMzRm16e4Zdq5Q3GXSFiCu IvO1YZHUMqjqjWRxLExI3pa7h4t3LLwpBnFhxib21adQuopamxDLvt8zRNHOueQS WK6fJ7szPWlu/kKGoYKz4gO/twjJQI9kBT5GyPvNUEKLIrT67wWB+aLegV11AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU6nTUxnmsjzc6wHr1QThsbl9CC7EwHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjg1MjA5Ny8wLzMxMzAzMTJlMzIz NDMyMmUzNjM0MmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzEzNzM0MzIzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBmXyQDANBgkqhkiG9w0BAQsFAAOCAQEAjtSDs2ISsSbLl3Osq838tjNQ FpkVODPLlQUKoxBsli/wwVZUURyrm4E1VFNG2ZMDo9w7trw5YDAOY07fnRaenLn3 HI8LDeNci8cQ8zs3dEZ9v35nCz4LT+r1Km8Ih0VlWwWjYJXPquM7k9MmZL2dXaub 8Zyifpos4IZfUzg8lNHofMTjDZMYUirwJn9WU3dyViQbF4b7hCkFnpdoZ4bjy0ru sJXa2jkgtGWFaTeBgq1VdFwnqISO6lXTFgqw80NvFJXetUnaMM6RsPlHrbTuCii+ Yb3yC4r14M8/P3FWnog2QlfoWC3GJvyO8ayR9rP96obiuPxf3G40B+UIAs6wAg== -----END CERTIFICATE-----Generated at Mon Apr 13 15:20:54 2026 by rpki-client