$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3231392e3233372e3132382e302f31382d3234203d3e203137343239.roa File: 3231392e3233372e3132382e302f31382d3234203d3e203137343239.roa (raw, json) Hash identifier: su7uFIXgKF0sbJcovOB218FqwR14W9u3U0DPZzsSRZ8= Subject key identifier: 0D:39:E5:FF:B8:EF:ED:BD:99:98:B8:14:61:EF:5E:D6:DD:20:50:92 Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 60D0243BB40BBE5C5428314EBF611A821DD389D3 Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3231392e3233372e3132382e302f31382d3234203d3e203137343239.roa Signing time: Mon 13 Apr 2026 03:36:03 +0000 ROA not before: Mon 13 Apr 2026 03:31:03 +0000 ROA not after: Mon 12 Apr 2027 03:36:03 +0000 asID: 17429 IP address blocks: 219.237.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:d0:24:3b:b4:0b:be:5c:54:28:31:4e:bf:61:1a:82:1d:d3:89:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Apr 13 03:31:03 2026 GMT Not After : Apr 12 03:36:03 2027 GMT Subject: CN=0D39E5FFB8EFEDBD9998B81461EF5ED6DD205092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d6:93:cd:74:6f:81:bc:14:e3:0a:d4:a5:39: f5:68:84:66:f2:33:09:f1:db:6a:f9:46:c2:9e:7f: cf:af:8c:dd:bd:81:e3:d2:8d:14:15:e0:5d:f8:51: 8b:96:70:f4:5b:4d:56:d0:c8:11:71:af:8b:9d:cf: 5f:f5:f1:90:8c:53:32:25:ac:25:2a:25:8b:eb:69: 86:95:37:a0:bd:8f:4f:36:4b:77:f1:1c:f0:de:ae: f9:94:8b:09:55:fa:f6:20:21:77:e6:56:5f:45:7e: 3f:3b:94:2b:88:71:f4:37:87:3b:83:82:49:42:ba: 4d:77:32:7c:ea:6f:7c:eb:2c:6f:9a:f1:2b:02:70: 34:e1:8f:4a:23:c1:3a:51:a5:8b:c1:ab:f2:97:d3: a4:bf:87:fe:e7:f2:3b:e1:b7:58:f4:ea:ff:e0:cc: 9a:81:5f:12:90:9a:05:04:4a:84:3c:02:d0:ea:99: 9b:42:ab:25:04:45:af:b4:d6:86:ee:94:49:a1:57: d4:8b:dc:77:a1:c4:be:bf:d0:6c:05:ab:f9:a9:e0: 7e:77:1f:75:fb:a1:31:1f:24:d2:db:96:39:a7:b9: 4d:45:7d:3d:fe:63:04:eb:e6:0d:bf:e2:1e:10:fc: a2:a6:e4:e2:87:f2:2d:3b:1d:fd:16:c4:ef:28:8a: 81:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:39:E5:FF:B8:EF:ED:BD:99:98:B8:14:61:EF:5E:D6:DD:20:50:92 X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3231392e3233372e3132382e302f31382d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.237.128.0/18 Signature Algorithm: sha256WithRSAEncryption 20:ae:43:a9:f3:96:ae:b9:e3:9c:97:66:59:d1:e2:a9:21:b5: f7:57:b2:6b:85:55:0f:4f:d6:e9:5f:1f:cc:83:36:85:68:13: 3c:7a:f9:b4:53:61:78:ec:2b:04:e0:e8:eb:5a:c0:e9:95:16: 99:f5:e0:b8:47:54:16:41:70:61:6b:2d:dc:bc:8e:a0:12:70: 8e:af:f4:e8:15:84:fb:66:b5:62:64:a4:bf:db:5d:7f:e6:af: 4a:b0:2f:9a:be:54:5a:5e:c3:81:11:77:80:66:f6:c6:b7:23: bd:df:fd:7e:8a:14:fc:dc:15:bf:90:7c:58:40:d3:13:fe:d8: 50:8a:3d:c6:02:78:68:ab:73:7a:ad:0a:38:6a:10:30:43:20: a4:5b:59:b8:f6:d4:2a:30:0f:da:03:4b:a8:69:1f:e6:13:eb: 0a:8a:3f:ad:28:d9:f9:ae:4c:f9:9c:c6:ce:5f:19:ca:be:31: 7d:54:de:2a:6f:98:c1:f4:af:22:15:17:7e:8b:23:2d:85:8b: c3:7f:7f:bf:47:86:14:6b:29:a6:4b:43:b8:86:d8:7d:ba:19: 5e:b1:01:8e:79:8b:c7:f9:20:71:92:6c:1d:e9:2a:46:da:a5: 77:c9:de:33:4b:a6:11:35:b3:b6:9b:ee:c3:74:a6:0c:d5:fb: 7f:73:ef:9f -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUYNAkO7QLvlxUKDFOv2Eagh3TidMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA0MTMwMzMxMDNaFw0yNzA0MTIwMzM2MDNaMDMxMTAvBgNV BAMTKDBEMzlFNUZGQjhFRkVEQkQ5OTk4QjgxNDYxRUY1RUQ2REQyMDUwOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf1pPNdG+BvBTjCtSlOfVohGby Mwnx22r5RsKef8+vjN29gePSjRQV4F34UYuWcPRbTVbQyBFxr4udz1/18ZCMUzIl rCUqJYvraYaVN6C9j082S3fxHPDervmUiwlV+vYgIXfmVl9Ffj87lCuIcfQ3hzuD gklCuk13Mnzqb3zrLG+a8SsCcDThj0ojwTpRpYvBq/KX06S/h/7n8jvht1j06v/g zJqBXxKQmgUESoQ8AtDqmZtCqyUERa+01obulEmhV9SL3HehxL6/0GwFq/mp4H53 H3X7oTEfJNLbljmnuU1FfT3+YwTr5g2/4h4Q/KKm5OKH8i07Hf0WxO8oioGRAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUDTnl/7jv7b2ZmLgUYe9e1t0gUJIwHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI4NTIwOTcvMC8zMjMxMzkyZTMy MzMzNzJlMzEzMjM4MmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzEzNzM0MzIzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBtvtgDANBgkqhkiG9w0BAQsFAAOCAQEAIK5DqfOWrrnjnJdmWdHi qSG191eya4VVD0/W6V8fzIM2hWgTPHr5tFNheOwrBODo61rA6ZUWmfXguEdUFkFw YWst3LyOoBJwjq/06BWE+2a1YmSkv9tdf+avSrAvmr5UWl7DgRF3gGb2xrcjvd/9 fooU/NwVv5B8WEDTE/7YUIo9xgJ4aKtzeq0KOGoQMEMgpFtZuPbUKjAP2gNLqGkf 5hPrCoo/rSjZ+a5M+ZzGzl8Zyr4xfVTeKm+YwfSvIhUXfosjLYWLw39/v0eGFGsp pktDuIbYfboZXrEBjnmLx/kgcZJsHekqRtqld8neM0umETWztpvuw3SmDNX7f3Pv nw== -----END CERTIFICATE-----Generated at Mon Apr 13 13:54:31 2026 by rpki-client