$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3231312e39392e3134342e302f32302d3234203d3e203137343239.roa File: 3231312e39392e3134342e302f32302d3234203d3e203137343239.roa (raw, json) Hash identifier: SO5iCIzvNyICnxyP8ihjOtXg5kFc2Vs0eXX5tzZ4uRE= Subject key identifier: C1:98:27:2C:88:8B:A4:60:29:47:73:AD:99:1F:47:9B:CD:47:B4:C5 Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 66C3E8B98F4BF661417422A8FDF83AD9C2984926 Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3231312e39392e3134342e302f32302d3234203d3e203137343239.roa Signing time: Mon 13 Apr 2026 03:36:02 +0000 ROA not before: Mon 13 Apr 2026 03:31:02 +0000 ROA not after: Mon 12 Apr 2027 03:36:02 +0000 asID: 17429 IP address blocks: 211.99.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c3:e8:b9:8f:4b:f6:61:41:74:22:a8:fd:f8:3a:d9:c2:98:49:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Apr 13 03:31:02 2026 GMT Not After : Apr 12 03:36:02 2027 GMT Subject: CN=C198272C888BA460294773AD991F479BCD47B4C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e9:97:59:a6:e1:d5:4b:60:5c:bd:c0:49:6e: a5:62:bd:d7:79:44:c0:8c:ac:84:35:0e:26:ae:30: ad:3b:ea:82:dc:aa:4b:30:83:30:f8:fb:ff:4c:7d: 9c:2a:43:b8:e9:43:70:5f:be:c7:97:2b:50:19:28: b6:50:8e:6e:3a:76:f6:a6:96:8c:7c:4d:87:dd:d5: 87:8a:38:f7:b3:1f:36:06:eb:13:18:94:2d:a1:3e: 30:fc:8e:77:e4:ac:79:d1:cf:21:9a:6a:70:ca:00: 01:a6:47:37:c6:0c:3c:7f:57:da:df:0b:8b:07:f7: 6b:7d:c7:c0:33:67:fe:f1:85:36:92:55:31:f2:cc: b5:e0:4f:01:1f:b0:7d:63:c5:7f:6b:d8:bc:0f:85: 66:9a:df:5a:f4:eb:dd:de:66:4c:2b:2f:5b:94:5f: f0:17:bc:f1:23:f6:70:7a:cd:cb:4c:96:58:c7:8f: e3:a3:24:87:38:d3:61:4d:8a:8c:8f:bd:e0:6a:da: 2a:5a:bf:54:69:28:43:51:9b:37:98:5c:a3:c5:2c: 12:a0:62:f4:33:61:70:75:64:1a:33:e6:60:2a:8d: 82:02:23:97:64:29:f2:56:c7:ce:41:6b:5e:fd:a9: 40:23:ba:9d:21:ad:88:87:be:65:ac:50:68:12:54: 6c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:98:27:2C:88:8B:A4:60:29:47:73:AD:99:1F:47:9B:CD:47:B4:C5 X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3231312e39392e3134342e302f32302d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.99.144.0/20 Signature Algorithm: sha256WithRSAEncryption 5f:f3:fe:1f:bf:8b:71:28:75:32:d2:4d:d7:a9:bb:42:93:f2: ca:8a:12:6e:0e:10:d9:31:f5:55:46:c4:65:c1:83:68:e7:37: be:b5:7d:91:01:ea:ec:3e:d1:da:66:8a:0e:1e:65:59:b3:22: 5d:e3:f6:50:5c:c3:c6:d0:b7:4e:72:6c:93:05:dd:9c:d0:d1: b8:b1:e5:83:ef:2f:6b:6e:eb:7e:ac:ee:16:54:14:8c:4d:e1: 22:e3:5d:0c:25:f7:7e:e9:65:fd:62:2c:23:cd:4c:ed:52:40: 26:f8:9e:a2:76:59:f7:ca:63:3a:9a:64:73:46:57:46:14:5d: 98:7d:37:62:ba:4d:d7:ce:e1:c8:e3:25:0a:65:09:b5:58:34: db:57:1e:35:0b:d3:7f:1e:d4:62:56:e5:d6:77:42:fc:3e:f4: 54:d4:a2:43:3f:11:5a:6a:bd:78:75:ab:22:dc:0a:39:b0:4d: ff:15:25:c9:67:1f:f1:36:c3:cf:7d:9d:63:be:d7:85:53:27: 4b:b0:66:f2:be:39:83:f4:52:0b:f6:cd:2c:d4:74:b3:b0:42: b1:1d:36:a2:30:7a:4f:76:5a:eb:81:98:dc:2b:fc:d3:e1:17: 18:32:2c:80:6e:0b:ab:1b:a7:b1:d0:e6:c2:50:12:20:e5:75: d6:32:1f:f0 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUZsPouY9L9mFBdCKo/fg62cKYSSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA0MTMwMzMxMDJaFw0yNzA0MTIwMzM2MDJaMDMxMTAvBgNV BAMTKEMxOTgyNzJDODg4QkE0NjAyOTQ3NzNBRDk5MUY0NzlCQ0Q0N0I0QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi6ZdZpuHVS2BcvcBJbqVivdd5 RMCMrIQ1DiauMK076oLcqkswgzD4+/9MfZwqQ7jpQ3BfvseXK1AZKLZQjm46dvam lox8TYfd1YeKOPezHzYG6xMYlC2hPjD8jnfkrHnRzyGaanDKAAGmRzfGDDx/V9rf C4sH92t9x8AzZ/7xhTaSVTHyzLXgTwEfsH1jxX9r2LwPhWaa31r0693eZkwrL1uU X/AXvPEj9nB6zctMlljHj+OjJIc402FNioyPveBq2ipav1RpKENRmzeYXKPFLBKg YvQzYXB1ZBoz5mAqjYICI5dkKfJWx85Ba179qUAjup0hrYiHvmWsUGgSVGyBAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUwZgnLIiLpGApR3OtmR9Hm81HtMUwHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjg1MjA5Ny8wLzMyMzEzMTJlMzkz OTJlMzEzNDM0MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzEzNzM0MzIzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBNNjkDANBgkqhkiG9w0BAQsFAAOCAQEAX/P+H7+LcSh1MtJN16m7QpPy yooSbg4Q2TH1VUbEZcGDaOc3vrV9kQHq7D7R2maKDh5lWbMiXeP2UFzDxtC3TnJs kwXdnNDRuLHlg+8va27rfqzuFlQUjE3hIuNdDCX3full/WIsI81M7VJAJvieonZZ 98pjOppkc0ZXRhRdmH03YrpN187hyOMlCmUJtVg021ceNQvTfx7UYlbl1ndC/D70 VNSiQz8RWmq9eHWrItwKObBN/xUlyWcf8TbDz32dY77XhVMnS7Bm8r45g/RSC/bN LNR0s7BCsR02ojB6T3Za64GY3Cv80+EXGDIsgG4LqxunsdDmwlASIOV11jIf8A== -----END CERTIFICATE-----Generated at Mon Apr 13 15:20:49 2026 by rpki-client