$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3231392e3233362e36342e302f31382d3234203d3e203137343239.roa File: 3231392e3233362e36342e302f31382d3234203d3e203137343239.roa (raw, json) Hash identifier: 7VgSuxeOTst2a1n236zgwJQgmYDy6eAerSprDv1aCGQ= Subject key identifier: E4:C5:00:67:65:0E:20:AC:0E:BE:9E:FD:2E:DF:BC:68:57:75:E5:D8 Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 661546779065D5117825D9A17DA9B5033E41A08E Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3231392e3233362e36342e302f31382d3234203d3e203137343239.roa Signing time: Mon 13 Apr 2026 03:36:03 +0000 ROA not before: Mon 13 Apr 2026 03:31:03 +0000 ROA not after: Mon 12 Apr 2027 03:36:03 +0000 asID: 17429 IP address blocks: 219.236.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:15:46:77:90:65:d5:11:78:25:d9:a1:7d:a9:b5:03:3e:41:a0:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Apr 13 03:31:03 2026 GMT Not After : Apr 12 03:36:03 2027 GMT Subject: CN=E4C50067650E20AC0EBE9EFD2EDFBC685775E5D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:52:f1:3c:83:38:4d:c3:75:60:62:8d:0d:25: 4e:fa:1a:8a:59:54:87:44:64:18:93:9b:b6:c9:be: 9c:ce:42:e8:e8:c7:8a:89:c9:39:81:e6:13:60:d2: 05:b8:bc:a6:1f:2d:df:a1:86:aa:bd:ad:48:1c:5a: 8b:cf:1c:75:b2:1a:f0:bb:01:d9:2f:5e:56:2c:03: 1f:90:d3:ac:bd:b0:9f:88:56:20:06:73:ba:0f:e0: 0c:e7:db:a4:42:1d:db:ad:5f:e9:93:3c:1a:01:2b: 3a:30:cb:3e:23:fd:7d:b9:1e:48:32:1e:14:e6:6c: f4:37:c5:56:58:6e:f7:80:3e:2b:bd:1f:59:88:79: e5:37:b8:0d:33:59:67:45:a1:2a:4d:7f:da:3e:d1: ea:18:e0:17:56:2c:0d:0f:ee:9b:fe:87:df:10:35: b5:a5:95:f1:a0:d5:8b:dc:37:29:72:3c:57:9a:90: 12:83:81:53:a9:b2:a8:41:c6:ce:67:b7:1a:63:ac: 2f:a8:a9:1e:4d:ff:98:b4:86:b1:b0:17:a4:b4:7a: c7:f0:a2:c7:3f:b8:a3:ed:a6:94:7d:06:ce:12:85: b7:55:7f:ba:90:82:7d:c1:9a:92:7c:7a:34:16:20: 7c:07:9c:ac:75:b3:f8:35:de:11:b4:56:38:20:04: d9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C5:00:67:65:0E:20:AC:0E:BE:9E:FD:2E:DF:BC:68:57:75:E5:D8 X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3231392e3233362e36342e302f31382d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.236.64.0/18 Signature Algorithm: sha256WithRSAEncryption a7:d5:df:62:eb:e1:5b:ea:a9:0e:d6:11:5e:70:81:1e:6b:5c: bb:0e:ef:3d:70:61:00:e6:a3:29:b9:a0:d4:30:a2:39:48:26: b0:5e:68:1f:06:30:bd:88:3f:d1:9a:13:af:fd:f3:d3:89:77: b2:06:95:38:9f:6b:2b:65:53:96:77:e7:03:1a:a5:0c:79:2a: c9:f1:20:b5:9d:67:bf:3c:d3:5d:a1:4a:26:3f:61:03:73:6a: d1:c8:0d:1f:34:5a:5d:c6:20:ad:37:aa:33:51:9b:2d:f9:3f: ec:10:ac:26:88:a1:03:ed:55:ef:26:66:82:ea:f1:96:22:20: c7:f2:aa:53:a2:48:42:75:57:50:1a:d5:eb:d0:ef:5e:2c:99: 9e:71:94:0e:7f:1d:e0:83:8c:ae:c9:25:57:f7:6c:6e:5a:be: 7e:48:4b:4e:65:60:c1:6e:69:f0:5c:be:ba:ce:c4:39:2a:45: 8e:72:8f:2e:23:a1:3b:8b:db:4c:f4:d5:15:3b:f2:fe:82:26: 6f:d9:5d:b9:b5:8c:59:15:5e:4a:70:9b:b6:ba:0a:7e:76:c8: f2:1f:b1:e6:01:49:4a:19:2b:eb:69:47:dc:65:64:14:e4:4e: e3:2b:6a:44:b7:68:f0:97:27:41:f2:e2:7a:c9:03:8a:bb:bf: 3c:1b:ed:73 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUZhVGd5Bl1RF4Jdmhfam1Az5BoI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA0MTMwMzMxMDNaFw0yNzA0MTIwMzM2MDNaMDMxMTAvBgNV BAMTKEU0QzUwMDY3NjUwRTIwQUMwRUJFOUVGRDJFREZCQzY4NTc3NUU1RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPUvE8gzhNw3VgYo0NJU76GopZ VIdEZBiTm7bJvpzOQujox4qJyTmB5hNg0gW4vKYfLd+hhqq9rUgcWovPHHWyGvC7 AdkvXlYsAx+Q06y9sJ+IViAGc7oP4Azn26RCHdutX+mTPBoBKzowyz4j/X25Hkgy HhTmbPQ3xVZYbveAPiu9H1mIeeU3uA0zWWdFoSpNf9o+0eoY4BdWLA0P7pv+h98Q NbWllfGg1YvcNylyPFeakBKDgVOpsqhBxs5ntxpjrC+oqR5N/5i0hrGwF6S0esfw osc/uKPtppR9Bs4ShbdVf7qQgn3BmpJ8ejQWIHwHnKx1s/g13hG0VjggBNnPAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU5MUAZ2UOIKwOvp79Lt+8aFd15dgwHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjg1MjA5Ny8wLzMyMzEzOTJlMzIz MzM2MmUzNjM0MmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzEzNzM0MzIzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBtvsQDANBgkqhkiG9w0BAQsFAAOCAQEAp9XfYuvhW+qpDtYRXnCBHmtc uw7vPXBhAOajKbmg1DCiOUgmsF5oHwYwvYg/0ZoTr/3z04l3sgaVOJ9rK2VTlnfn AxqlDHkqyfEgtZ1nvzzTXaFKJj9hA3Nq0cgNHzRaXcYgrTeqM1GbLfk/7BCsJoih A+1V7yZmgurxliIgx/KqU6JIQnVXUBrV69DvXiyZnnGUDn8d4IOMrsklV/dsblq+ fkhLTmVgwW5p8Fy+us7EOSpFjnKPLiOhO4vbTPTVFTvy/oImb9ldubWMWRVeSnCb troKfnbI8h+x5gFJShkr62lH3GVkFORO4ytqRLdo8JcnQfLieskDiru/PBvtcw== -----END CERTIFICATE-----Generated at Mon Apr 13 13:53:28 2026 by rpki-client