$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3130312e3234332e3139322e302f31382d3234203d3e203137343239.roa File: 3130312e3234332e3139322e302f31382d3234203d3e203137343239.roa (raw, json) Hash identifier: MWgic/vVjjZOjnYxSmUMlo7toOeLYm+scOFOllbGxWA= Subject key identifier: 07:10:A9:BC:BF:D8:29:A2:98:4B:37:64:05:54:EB:AB:97:06:35:8F Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 0AC2465E1075B0D570F390CE1ECBC127D44D1E07 Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3130312e3234332e3139322e302f31382d3234203d3e203137343239.roa Signing time: Mon 13 Apr 2026 03:30:08 +0000 ROA not before: Mon 13 Apr 2026 03:25:08 +0000 ROA not after: Mon 12 Apr 2027 03:30:08 +0000 asID: 17429 IP address blocks: 101.243.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c2:46:5e:10:75:b0:d5:70:f3:90:ce:1e:cb:c1:27:d4:4d:1e:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Apr 13 03:25:08 2026 GMT Not After : Apr 12 03:30:08 2027 GMT Subject: CN=0710A9BCBFD829A2984B37640554EBAB9706358F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e8:17:a8:9e:56:a5:00:e7:af:bf:43:6b:d5: 4c:03:d3:91:df:69:d7:a1:be:0f:ed:ce:0f:70:be: d4:2d:99:3f:3b:aa:8d:53:7a:5b:a8:7d:bc:47:19: f8:c1:28:da:c4:bb:98:1a:dd:a6:4e:ce:08:fe:89: 96:e5:63:b1:3b:d9:97:62:3b:a8:e1:57:ab:ee:a8: f0:2d:fd:9a:14:93:51:75:85:fa:fb:4e:56:26:7e: 29:97:68:40:ed:3e:c3:2a:8b:d8:cb:4d:80:ec:df: fd:d2:81:a8:a4:7d:b0:e0:d6:67:30:6a:45:ca:b5: 5f:06:6f:bc:f1:2a:27:c8:ae:09:f8:63:32:8a:66: 81:c0:bd:28:36:80:77:fb:91:7a:d6:c4:f2:22:25: 0b:2f:d2:a7:b1:9e:f0:29:00:99:9c:4e:27:51:06: 08:f1:86:fb:04:24:99:aa:a8:17:37:9e:eb:53:d5: af:f9:10:c7:d8:b1:ba:f7:94:d7:eb:f8:17:96:04: 6f:98:37:27:2b:37:7c:92:e4:3c:f2:d7:20:88:03: 6e:4f:3d:bf:08:01:23:7a:5f:ff:ff:90:bf:b8:6a: 77:a6:37:79:ea:20:d0:a4:87:4e:16:64:84:a7:96: 45:33:a3:9e:e3:18:43:45:dc:49:de:ef:f7:0b:a2: 46:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:10:A9:BC:BF:D8:29:A2:98:4B:37:64:05:54:EB:AB:97:06:35:8F X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3130312e3234332e3139322e302f31382d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.243.192.0/18 Signature Algorithm: sha256WithRSAEncryption 69:68:cf:bf:23:0e:a2:1c:2e:37:e8:69:a1:13:3f:b5:f4:3e: 68:7a:94:95:92:54:02:f9:2b:00:11:6e:09:98:ee:1a:93:6b: 88:2d:f3:ec:4d:31:cd:92:c1:98:85:b9:d6:be:28:30:24:dd: c9:3b:17:48:ad:72:c8:4e:04:63:1e:ed:a1:c6:44:36:dc:5c: 60:8b:a9:da:d8:5c:08:d4:72:32:cc:85:5d:5a:44:45:a3:50: 94:cc:e8:0b:31:e4:ca:59:a3:bf:7a:98:6f:a1:95:24:aa:92: 98:4a:c8:10:eb:35:72:db:e5:18:07:07:f8:c1:c7:07:58:ba: 72:0c:17:e3:67:e5:90:a1:56:7f:a8:f1:5c:50:31:bb:d8:5a: 4e:cd:f5:57:80:98:2a:23:cc:67:1d:8f:e9:a8:09:64:2d:d1: dd:bf:d9:d2:e4:44:ae:f8:ff:73:5d:e2:dd:be:5b:6c:87:b9: e6:18:22:5e:2c:e5:bc:f3:f1:f3:3a:59:6b:3f:94:c4:36:ed: 99:6c:52:d7:67:91:c7:fe:b0:80:a4:6f:90:cf:38:72:d7:e2: 56:ad:8f:c8:92:fc:1e:37:44:89:65:32:f5:03:98:3c:14:77: 52:62:64:5a:b1:34:a1:4e:08:53:90:07:62:aa:28:0f:d4:0e: 5f:fa:1d:5d -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUCsJGXhB1sNVw85DOHsvBJ9RNHgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA0MTMwMzI1MDhaFw0yNzA0MTIwMzMwMDhaMDMxMTAvBgNV BAMTKDA3MTBBOUJDQkZEODI5QTI5ODRCMzc2NDA1NTRFQkFCOTcwNjM1OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+6BeonlalAOevv0Nr1UwD05Hf adehvg/tzg9wvtQtmT87qo1TeluofbxHGfjBKNrEu5ga3aZOzgj+iZblY7E72Zdi O6jhV6vuqPAt/ZoUk1F1hfr7TlYmfimXaEDtPsMqi9jLTYDs3/3SgaikfbDg1mcw akXKtV8Gb7zxKifIrgn4YzKKZoHAvSg2gHf7kXrWxPIiJQsv0qexnvApAJmcTidR BgjxhvsEJJmqqBc3nutT1a/5EMfYsbr3lNfr+BeWBG+YNycrN3yS5Dzy1yCIA25P Pb8IASN6X///kL+4anemN3nqINCkh04WZISnlkUzo57jGENF3Ene7/cLoka7AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUBxCpvL/YKaKYSzdkBVTrq5cGNY8wHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI4NTIwOTcvMC8zMTMwMzEyZTMy MzQzMzJlMzEzOTMyMmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzEzNzM0MzIzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBmXzwDANBgkqhkiG9w0BAQsFAAOCAQEAaWjPvyMOohwuN+hpoRM/ tfQ+aHqUlZJUAvkrABFuCZjuGpNriC3z7E0xzZLBmIW51r4oMCTdyTsXSK1yyE4E Yx7tocZENtxcYIup2thcCNRyMsyFXVpERaNQlMzoCzHkylmjv3qYb6GVJKqSmErI EOs1ctvlGAcH+MHHB1i6cgwX42flkKFWf6jxXFAxu9haTs31V4CYKiPMZx2P6agJ ZC3R3b/Z0uRErvj/c13i3b5bbIe55hgiXizlvPPx8zpZaz+UxDbtmWxS12eRx/6w gKRvkM84ctfiVq2PyJL8HjdEiWUy9QOYPBR3UmJkWrE0oU4IU5AHYqooD9QOX/od XQ== -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:32 2026 by rpki-client