$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3231312e39392e3132382e302f32302d3234203d3e203137343239.roa File: 3231312e39392e3132382e302f32302d3234203d3e203137343239.roa (raw, json) Hash identifier: KkwpLtV3SOCb9k9xnYRssleMFR0jr8RvSoowD9Z6iJQ= Subject key identifier: 0D:08:C5:69:87:50:7F:D4:E8:F7:01:CF:44:27:51:63:F3:0E:52:A0 Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 50C6A652D5FFC9F95AC6AEB8C1875991D0B35F1D Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3231312e39392e3132382e302f32302d3234203d3e203137343239.roa Signing time: Mon 13 Apr 2026 03:36:02 +0000 ROA not before: Mon 13 Apr 2026 03:31:02 +0000 ROA not after: Mon 12 Apr 2027 03:36:02 +0000 asID: 17429 IP address blocks: 211.99.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:c6:a6:52:d5:ff:c9:f9:5a:c6:ae:b8:c1:87:59:91:d0:b3:5f:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Apr 13 03:31:02 2026 GMT Not After : Apr 12 03:36:02 2027 GMT Subject: CN=0D08C56987507FD4E8F701CF44275163F30E52A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:24:22:37:d7:46:04:38:8f:7d:5c:e7:c4:b7: f2:69:4a:db:56:fb:ed:36:37:69:61:fc:41:c9:fa: 25:4a:ed:03:cb:99:df:fb:65:fe:94:8c:23:06:f4: b9:70:69:11:4a:e1:71:0a:7d:0c:a3:29:f8:bd:f5: ac:9e:87:cb:98:18:23:36:b0:f5:75:4a:cc:18:8e: f1:0a:bc:e9:9b:10:d7:13:32:b3:4b:33:b0:76:8c: 9f:37:31:20:1e:59:13:cf:01:31:bc:6d:9e:cc:f1: 61:aa:0b:4a:9e:0e:06:82:20:79:a8:84:41:5b:6b: e3:2b:ee:3b:6c:3a:e9:33:1b:b2:bf:db:19:20:7d: c9:d6:b1:f4:94:34:56:56:75:19:2c:fc:ca:47:84: 20:c3:ac:19:a1:42:02:34:cf:98:f8:9d:d6:17:ec: e1:d9:18:e2:08:3f:29:1e:57:36:6e:71:6a:dd:5e: d5:a4:9d:08:f3:61:20:12:7b:3a:93:d9:f3:82:7f: 77:07:68:e6:98:59:45:d6:e8:2b:9f:73:81:0b:05: 16:22:f7:4b:57:a4:a4:f0:7e:da:c2:81:61:cd:f2: ad:67:86:f0:02:fe:06:70:9f:23:19:82:f8:37:3b: 4e:e7:a2:74:1c:b0:87:4b:8e:7a:fa:29:fb:48:6e: 6d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:08:C5:69:87:50:7F:D4:E8:F7:01:CF:44:27:51:63:F3:0E:52:A0 X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3231312e39392e3132382e302f32302d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.99.128.0/20 Signature Algorithm: sha256WithRSAEncryption 59:3a:25:30:89:b8:10:f5:9f:14:27:f7:c0:7b:1c:75:09:57: e6:ba:f4:e9:42:8c:34:67:da:85:3b:e5:a7:0a:63:c0:76:c3: f8:54:58:9e:6d:2f:4c:59:7f:51:69:1b:de:54:d3:2f:be:7f: 6b:93:e1:5f:7c:14:c7:88:f0:af:aa:72:6a:07:1b:8e:bd:39: 63:24:b9:d5:50:7e:4e:11:00:9f:ee:e4:26:dc:bb:0d:e4:e9: bb:a4:9d:81:b3:43:f1:7b:d4:c7:c4:6d:f4:4e:47:e2:06:e0: 89:6f:30:58:ac:be:16:3b:27:4f:83:39:23:ea:78:d8:ca:69: eb:46:1a:ac:54:7c:f8:0c:25:4d:a2:53:c9:ea:2e:c5:c8:7a: 9c:b8:54:5c:68:b2:2e:ea:83:aa:f3:60:09:78:3b:81:4c:18: 4f:30:6a:87:47:44:cc:5e:1b:1b:08:ff:35:7f:49:b5:f6:4e: 21:d5:0b:f7:50:33:34:93:c3:2d:1d:2e:1a:b6:d7:86:ed:41: 47:9f:62:ac:0c:67:f0:6c:81:31:3b:0c:ff:07:5e:a9:10:f9: aa:53:2d:b2:13:1c:19:67:99:6a:3d:92:d0:60:2e:c3:4c:7b: 1f:ea:f9:a1:bd:a6:50:bc:46:ef:e6:a1:69:0b:eb:13:12:f8: c4:8c:6b:10 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUUMamUtX/yflaxq64wYdZkdCzXx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA0MTMwMzMxMDJaFw0yNzA0MTIwMzM2MDJaMDMxMTAvBgNV BAMTKDBEMDhDNTY5ODc1MDdGRDRFOEY3MDFDRjQ0Mjc1MTYzRjMwRTUyQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpJCI310YEOI99XOfEt/JpSttW ++02N2lh/EHJ+iVK7QPLmd/7Zf6UjCMG9LlwaRFK4XEKfQyjKfi99ayeh8uYGCM2 sPV1SswYjvEKvOmbENcTMrNLM7B2jJ83MSAeWRPPATG8bZ7M8WGqC0qeDgaCIHmo hEFba+Mr7jtsOukzG7K/2xkgfcnWsfSUNFZWdRks/MpHhCDDrBmhQgI0z5j4ndYX 7OHZGOIIPykeVzZucWrdXtWknQjzYSASezqT2fOCf3cHaOaYWUXW6Cufc4ELBRYi 90tXpKTwftrCgWHN8q1nhvAC/gZwnyMZgvg3O07nonQcsIdLjnr6KftIbm3JAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUDQjFaYdQf9To9wHPRCdRY/MOUqAwHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjg1MjA5Ny8wLzMyMzEzMTJlMzkz OTJlMzEzMjM4MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzEzNzM0MzIzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBNNjgDANBgkqhkiG9w0BAQsFAAOCAQEAWTolMIm4EPWfFCf3wHscdQlX 5rr06UKMNGfahTvlpwpjwHbD+FRYnm0vTFl/UWkb3lTTL75/a5PhX3wUx4jwr6py agcbjr05YyS51VB+ThEAn+7kJty7DeTpu6SdgbND8XvUx8Rt9E5H4gbgiW8wWKy+ FjsnT4M5I+p42Mpp60YarFR8+AwlTaJTyeouxch6nLhUXGiyLuqDqvNgCXg7gUwY TzBqh0dEzF4bGwj/NX9JtfZOIdUL91AzNJPDLR0uGrbXhu1BR59irAxn8GyBMTsM /wdeqRD5qlMtshMcGWeZaj2S0GAuw0x7H+r5ob2mULxG7+ahaQvrExL4xIxrEA== -----END CERTIFICATE-----Generated at Mon Apr 13 13:53:25 2026 by rpki-client