$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3231382e3234362e3130382e302f32342d3234203d3e203137343239.roa File: 3231382e3234362e3130382e302f32342d3234203d3e203137343239.roa (raw, json) Hash identifier: zVWjTpGUar8rRA/3i/hxc88fJ5xataE8mT89BFtjOT4= Subject key identifier: B4:91:A4:91:3F:AC:72:0A:9C:EC:63:41:A5:00:07:D3:40:95:0D:1F Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 70920CAFC0E65454482D08AACE94D55A8B66E2FF Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3231382e3234362e3130382e302f32342d3234203d3e203137343239.roa Signing time: Mon 13 Apr 2026 03:36:02 +0000 ROA not before: Mon 13 Apr 2026 03:31:02 +0000 ROA not after: Mon 12 Apr 2027 03:36:02 +0000 asID: 17429 IP address blocks: 218.246.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:92:0c:af:c0:e6:54:54:48:2d:08:aa:ce:94:d5:5a:8b:66:e2:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Apr 13 03:31:02 2026 GMT Not After : Apr 12 03:36:02 2027 GMT Subject: CN=B491A4913FAC720A9CEC6341A50007D340950D1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:42:c5:11:d1:d8:c3:5c:ef:c0:e8:f0:0b:bf: 81:75:c4:17:55:4d:eb:81:8f:cb:4a:2e:6c:47:1a: df:0a:3a:80:45:2b:c4:27:87:a8:7b:49:9e:93:af: 84:e1:17:a8:0a:83:ed:d1:ee:5c:ed:94:e8:68:bf: e2:a8:42:e1:58:17:50:96:29:db:04:80:20:4a:87: 5a:9f:39:19:e8:ab:3a:76:b9:12:7f:f6:22:0b:c0: ff:fb:3e:0f:d2:c5:43:da:b6:e0:19:ec:b4:7b:40: a7:cb:31:4d:c3:85:b0:10:e8:2a:13:0e:61:b2:26: 1a:98:30:3b:cc:e1:eb:1e:1d:3e:60:99:79:c0:21: a9:72:f6:d7:3d:ef:28:b0:13:fe:4e:24:8b:e8:69: b8:0f:45:52:00:52:e0:41:08:6f:e2:83:6a:b2:f0: 3e:6a:04:36:3f:f6:ac:e7:9d:3e:d6:5e:ef:fe:3d: c5:23:68:71:6b:2d:26:b4:54:48:fc:f6:a9:9c:e5: d3:2c:a3:13:ed:15:fb:fe:04:66:dd:e3:fb:7a:65: d2:ad:80:f5:d6:e0:74:06:80:cc:b5:d8:09:78:50: 64:93:84:a7:fd:73:72:fa:9d:79:62:ce:1f:13:54: ee:0f:1a:fc:7a:84:19:9a:e8:d1:e4:b5:69:5e:0a: 4c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:91:A4:91:3F:AC:72:0A:9C:EC:63:41:A5:00:07:D3:40:95:0D:1F X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3231382e3234362e3130382e302f32342d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.246.108.0/24 Signature Algorithm: sha256WithRSAEncryption 22:07:7b:6e:d6:44:d5:34:62:be:73:e8:e0:a0:41:76:86:8e: 64:95:bd:45:71:cf:31:31:e1:32:16:c9:1f:09:52:b2:cb:a4: be:be:a9:6d:a1:46:04:77:f5:f7:c8:2f:52:bd:68:ac:60:1e: 9b:41:2f:55:4a:fb:bc:b6:17:a5:b2:81:5f:18:8c:6f:a8:d8: c8:76:df:81:5a:ee:89:c1:00:a7:c1:35:36:e8:e3:73:6b:6d: d2:c1:c8:1e:e8:ee:3b:f7:cc:cc:7d:5d:69:3f:e7:f4:c0:54: 59:4b:61:6e:72:d1:4b:91:34:46:fb:4b:98:b7:7c:72:c8:ca: 9b:e4:10:7c:32:48:15:29:30:8e:71:00:aa:0c:95:c3:b0:98: 44:22:65:83:35:ef:42:0a:59:9f:22:4d:2a:2f:17:5a:c3:b8: 22:06:6c:bf:07:43:7a:ef:e4:6e:c0:70:0c:43:81:a3:0e:57: 34:fa:59:22:2f:0a:bf:d0:b5:5d:c9:cd:fc:b2:c2:fa:b7:ba: 32:00:3c:52:eb:9b:cc:fb:b7:f0:9f:8e:b9:8f:73:46:d1:ef: 9c:c4:b9:f3:8f:47:14:fd:35:46:d4:01:50:d4:ef:28:00:21: bc:01:6b:32:08:24:b0:cf:57:26:a2:c3:62:e7:1c:a0:2e:7c: 7f:58:43:b2 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUcJIMr8DmVFRILQiqzpTVWotm4v8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA0MTMwMzMxMDJaFw0yNzA0MTIwMzM2MDJaMDMxMTAvBgNV BAMTKEI0OTFBNDkxM0ZBQzcyMEE5Q0VDNjM0MUE1MDAwN0QzNDA5NTBEMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAQsUR0djDXO/A6PALv4F1xBdV TeuBj8tKLmxHGt8KOoBFK8Qnh6h7SZ6Tr4ThF6gKg+3R7lztlOhov+KoQuFYF1CW KdsEgCBKh1qfORnoqzp2uRJ/9iILwP/7Pg/SxUPatuAZ7LR7QKfLMU3DhbAQ6CoT DmGyJhqYMDvM4eseHT5gmXnAIaly9tc97yiwE/5OJIvoabgPRVIAUuBBCG/ig2qy 8D5qBDY/9qznnT7WXu/+PcUjaHFrLSa0VEj89qmc5dMsoxPtFfv+BGbd4/t6ZdKt gPXW4HQGgMy12Al4UGSThKf9c3L6nXlizh8TVO4PGvx6hBma6NHktWleCkxvAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUtJGkkT+scgqc7GNBpQAH00CVDR8wHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI4NTIwOTcvMC8zMjMxMzgyZTMy MzQzNjJlMzEzMDM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM0MzIzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEANr2bDANBgkqhkiG9w0BAQsFAAOCAQEAIgd7btZE1TRivnPo4KBB doaOZJW9RXHPMTHhMhbJHwlSssukvr6pbaFGBHf198gvUr1orGAem0EvVUr7vLYX pbKBXxiMb6jYyHbfgVruicEAp8E1Nujjc2tt0sHIHujuO/fMzH1daT/n9MBUWUth bnLRS5E0RvtLmLd8csjKm+QQfDJIFSkwjnEAqgyVw7CYRCJlgzXvQgpZnyJNKi8X WsO4IgZsvwdDeu/kbsBwDEOBow5XNPpZIi8Kv9C1XcnN/LLC+re6MgA8UuubzPu3 8J+OuY9zRtHvnMS5849HFP01RtQBUNTvKAAhvAFrMggksM9XJqLDYuccoC58f1hD sg== -----END CERTIFICATE-----Generated at Mon Apr 13 12:26:43 2026 by rpki-client