$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3130312e3234332e36342e302f31382d3234203d3e203137343239.roa File: 3130312e3234332e36342e302f31382d3234203d3e203137343239.roa (raw, json) Hash identifier: Pr8xuebQzGhq6MHsKloPtIGLAJffo37JAdVii6vSTnM= Subject key identifier: 51:02:C9:B8:23:90:CC:D5:74:73:F5:C5:FD:D9:D3:32:B4:46:85:49 Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 28046569E8203FF932785D85AA99AFC6D41C0B3F Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3130312e3234332e36342e302f31382d3234203d3e203137343239.roa Signing time: Mon 13 Apr 2026 03:30:08 +0000 ROA not before: Mon 13 Apr 2026 03:25:08 +0000 ROA not after: Mon 12 Apr 2027 03:30:08 +0000 asID: 17429 IP address blocks: 101.243.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:04:65:69:e8:20:3f:f9:32:78:5d:85:aa:99:af:c6:d4:1c:0b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Apr 13 03:25:08 2026 GMT Not After : Apr 12 03:30:08 2027 GMT Subject: CN=5102C9B82390CCD57473F5C5FDD9D332B4468549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0a:b3:06:44:a3:80:e7:54:43:33:94:c7:ce: 00:a9:5f:6f:b7:1e:c2:a8:7d:a6:03:12:f1:a9:30: ba:f6:be:10:a3:4c:2e:26:a1:28:30:0f:4c:11:44: a5:fb:c2:c1:5a:4c:3f:47:73:6a:bc:80:aa:eb:5a: ba:36:c3:00:70:82:9c:ad:62:50:c0:ce:eb:8b:54: ab:9c:2e:42:43:fc:89:68:f5:19:8f:e4:bb:26:04: 81:af:27:6d:7f:57:7c:26:48:4b:b3:50:9d:54:7f: 1e:0a:68:df:49:a9:3c:f1:b5:e0:95:f2:ea:41:90: cd:fa:08:e7:06:a6:3a:04:20:31:fe:0f:de:d9:b9: 6a:b7:0d:b9:0c:0a:2e:af:95:0d:48:2e:fa:cf:c6: cf:01:74:ea:33:d9:7d:39:3a:01:f2:32:f2:da:2f: f1:46:bf:fd:04:a0:70:30:13:0d:20:bf:eb:4e:27: 87:3a:ae:da:63:8f:a0:df:1a:77:81:7e:0a:57:85: 78:e1:34:46:00:09:17:8c:98:ad:35:5a:6a:f6:5a: b9:51:57:01:50:a1:c8:64:f1:56:f4:7e:c5:55:31: 49:86:95:af:93:be:c7:3d:e6:c2:61:9f:a9:af:dd: c1:9e:cc:ad:0b:75:5b:e4:30:8a:c3:17:53:60:97: f9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:02:C9:B8:23:90:CC:D5:74:73:F5:C5:FD:D9:D3:32:B4:46:85:49 X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3130312e3234332e36342e302f31382d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.243.64.0/18 Signature Algorithm: sha256WithRSAEncryption 00:d8:69:19:e7:1d:5d:11:35:19:77:0a:ef:4e:93:3f:11:ed: e5:51:3c:72:d6:4f:28:48:6c:d6:f1:98:b7:8f:96:0e:0b:bf: 3b:48:a8:68:a2:11:8a:e3:91:08:34:da:a5:a9:6c:08:68:17: 34:73:01:30:4e:8a:9b:7c:f4:2b:f1:65:f4:de:d0:e1:e4:00: e8:f6:3e:fd:12:82:25:db:aa:1c:b6:d8:c9:7a:c8:86:94:04: 44:c2:a0:50:a6:81:91:95:91:e1:86:ad:90:07:b5:71:7d:08: 0d:2a:59:b6:20:8f:32:8f:63:7d:f5:cc:af:bf:21:4a:70:64: 3e:59:18:37:8b:29:5f:80:72:41:9b:80:fd:c7:e9:7c:4d:9f: 1f:59:73:4c:fc:d5:0e:a5:16:d3:87:ba:bc:11:18:19:7c:ab: 07:be:16:78:f9:4c:fd:06:90:45:e3:f4:5d:ff:fe:17:3b:ff: 1e:a0:7f:dd:2e:ea:c7:8b:43:a2:fc:d5:0e:13:aa:f8:80:8b: bf:e0:cf:5a:10:e4:f0:fc:fe:74:df:3e:65:2e:7b:71:81:3f: ae:e1:9d:95:fa:d7:44:4c:e5:6e:d3:00:c1:73:a9:87:7d:ca: 11:e7:f0:ff:08:69:a2:f9:1d:e3:41:79:a3:0f:1c:33:6a:27: 48:c7:41:f1 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUKARlaeggP/kyeF2FqpmvxtQcCz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA0MTMwMzI1MDhaFw0yNzA0MTIwMzMwMDhaMDMxMTAvBgNV BAMTKDUxMDJDOUI4MjM5MENDRDU3NDczRjVDNUZERDlEMzMyQjQ0Njg1NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYCrMGRKOA51RDM5THzgCpX2+3 HsKofaYDEvGpMLr2vhCjTC4moSgwD0wRRKX7wsFaTD9Hc2q8gKrrWro2wwBwgpyt YlDAzuuLVKucLkJD/Ilo9RmP5LsmBIGvJ21/V3wmSEuzUJ1Ufx4KaN9JqTzxteCV 8upBkM36COcGpjoEIDH+D97ZuWq3DbkMCi6vlQ1ILvrPxs8BdOoz2X05OgHyMvLa L/FGv/0EoHAwEw0gv+tOJ4c6rtpjj6DfGneBfgpXhXjhNEYACReMmK01Wmr2WrlR VwFQochk8Vb0fsVVMUmGla+Tvsc95sJhn6mv3cGezK0LdVvkMIrDF1Ngl/nVAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUUQLJuCOQzNV0c/XF/dnTMrRGhUkwHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjg1MjA5Ny8wLzMxMzAzMTJlMzIz NDMzMmUzNjM0MmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzEzNzM0MzIzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBmXzQDANBgkqhkiG9w0BAQsFAAOCAQEAANhpGecdXRE1GXcK706TPxHt 5VE8ctZPKEhs1vGYt4+WDgu/O0ioaKIRiuORCDTapalsCGgXNHMBME6Km3z0K/Fl 9N7Q4eQA6PY+/RKCJduqHLbYyXrIhpQERMKgUKaBkZWR4YatkAe1cX0IDSpZtiCP Mo9jffXMr78hSnBkPlkYN4spX4ByQZuA/cfpfE2fH1lzTPzVDqUW04e6vBEYGXyr B74WePlM/QaQReP0Xf/+Fzv/HqB/3S7qx4tDovzVDhOq+ICLv+DPWhDk8Pz+dN8+ ZS57cYE/ruGdlfrXREzlbtMAwXOph33KEefw/whpovkd40F5ow8cM2onSMdB8Q== -----END CERTIFICATE-----Generated at Mon Apr 13 15:21:51 2026 by rpki-client