$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3231392e3233372e36342e302f31382d3234203d3e203137343239.roa File: 3231392e3233372e36342e302f31382d3234203d3e203137343239.roa (raw, json) Hash identifier: r0Ygqxzd/KAbL19K+n0mcxRbTUW9LDAWqtmc8AHxOXY= Subject key identifier: B6:BD:FC:B4:BA:A0:F3:20:F0:EF:0A:3B:3A:04:E4:9F:D2:4A:5E:BD Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 678DB2C2A243F17BE7DF78D65639E1D0970CA03A Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3231392e3233372e36342e302f31382d3234203d3e203137343239.roa Signing time: Mon 13 Apr 2026 03:36:02 +0000 ROA not before: Mon 13 Apr 2026 03:31:02 +0000 ROA not after: Mon 12 Apr 2027 03:36:02 +0000 asID: 17429 IP address blocks: 219.237.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:8d:b2:c2:a2:43:f1:7b:e7:df:78:d6:56:39:e1:d0:97:0c:a0:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Apr 13 03:31:02 2026 GMT Not After : Apr 12 03:36:02 2027 GMT Subject: CN=B6BDFCB4BAA0F320F0EF0A3B3A04E49FD24A5EBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ef:4d:d1:a8:78:61:68:91:7c:3e:54:27:b0: 08:27:78:f3:46:72:35:90:8a:60:95:87:e3:54:eb: ac:43:2f:e9:8c:90:53:12:de:14:07:c0:63:01:ba: fd:ad:c7:90:c2:2f:c3:89:0f:35:55:8d:ed:9b:26: 3b:06:1b:f6:40:da:72:8b:a2:cf:a2:11:9b:50:aa: 6d:c5:68:e3:96:fd:ea:57:77:27:a8:1c:9d:1f:e3: cd:6f:1c:c1:27:06:3e:01:0c:4c:27:88:65:26:d7: cf:73:16:d9:6d:b9:4b:0e:52:a1:d0:2d:74:68:ae: d9:02:7e:c6:1e:07:75:2f:2f:87:58:57:3b:ee:c6: f6:f4:64:0b:b3:5f:be:56:2e:22:19:14:f7:40:a0: f6:3b:22:e4:32:68:0f:5e:58:03:62:d8:12:24:88: 90:b1:39:cb:fd:8b:86:18:0e:af:96:fd:62:11:ad: d3:fd:35:b1:d2:a9:2d:03:08:b3:76:c7:a5:b7:16: cc:b8:6c:d2:36:fe:b6:b9:cd:d6:20:ba:44:b3:f3: 57:e8:bf:9b:07:13:cf:b1:93:b2:b8:33:18:ae:b3: a4:97:ca:f5:31:7b:f5:d7:44:41:d2:43:32:63:9d: 57:33:00:ba:2a:7b:6c:4f:5b:f3:e3:ca:c4:79:e8: b4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BD:FC:B4:BA:A0:F3:20:F0:EF:0A:3B:3A:04:E4:9F:D2:4A:5E:BD X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3231392e3233372e36342e302f31382d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.237.64.0/18 Signature Algorithm: sha256WithRSAEncryption 41:00:3b:8b:bd:0a:ca:46:7b:51:aa:63:15:94:64:da:6d:11: 1c:32:6c:91:fa:58:67:0e:d3:98:84:83:45:08:af:3e:b8:60: b4:b9:2a:42:e8:3f:c9:00:f7:60:6f:fa:2b:ee:d3:52:22:54: ca:e5:28:d0:87:26:21:ed:d6:1c:4a:93:6a:85:b4:a1:01:87: 73:bc:ec:f3:1b:e8:07:f0:d5:de:15:10:c3:b4:74:6e:8f:da: 44:56:a1:be:a2:4e:7f:30:31:72:d3:13:be:0b:27:55:7e:97: 11:84:0e:45:a0:48:b0:ac:d4:ea:41:8b:f4:63:1a:f4:44:d3: 86:5b:45:d5:66:a4:13:12:70:6a:52:38:f1:d0:95:a6:98:fb: 7a:52:af:f1:d2:1c:de:c1:ba:02:87:15:4a:21:ad:70:e9:f0: 32:71:28:8c:48:34:48:53:32:ec:78:c0:37:3f:99:45:62:2f: 60:c1:02:f0:49:27:4d:f2:8d:59:80:e7:cb:22:b3:e7:0f:58: 87:77:65:46:be:42:ba:23:2c:0c:2d:7f:be:d4:18:4c:e1:86: 78:e5:a6:25:2f:2c:ef:52:e2:a5:8b:12:76:37:3c:58:56:6c: 93:e7:98:2d:34:32:8f:bc:7c:65:8a:86:41:6c:e0:f8:e0:16: c6:c0:a7:8b -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUZ42ywqJD8Xvn33jWVjnh0JcMoDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA0MTMwMzMxMDJaFw0yNzA0MTIwMzM2MDJaMDMxMTAvBgNV BAMTKEI2QkRGQ0I0QkFBMEYzMjBGMEVGMEEzQjNBMDRFNDlGRDI0QTVFQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9703RqHhhaJF8PlQnsAgnePNG cjWQimCVh+NU66xDL+mMkFMS3hQHwGMBuv2tx5DCL8OJDzVVje2bJjsGG/ZA2nKL os+iEZtQqm3FaOOW/epXdyeoHJ0f481vHMEnBj4BDEwniGUm189zFtltuUsOUqHQ LXRortkCfsYeB3UvL4dYVzvuxvb0ZAuzX75WLiIZFPdAoPY7IuQyaA9eWANi2BIk iJCxOcv9i4YYDq+W/WIRrdP9NbHSqS0DCLN2x6W3Fsy4bNI2/ra5zdYgukSz81fo v5sHE8+xk7K4Mxius6SXyvUxe/XXREHSQzJjnVczALoqe2xPW/PjysR56LTLAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUtr38tLqg8yDw7wo7OgTkn9JKXr0wHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjg1MjA5Ny8wLzMyMzEzOTJlMzIz MzM3MmUzNjM0MmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzEzNzM0MzIzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBtvtQDANBgkqhkiG9w0BAQsFAAOCAQEAQQA7i70KykZ7UapjFZRk2m0R HDJskfpYZw7TmISDRQivPrhgtLkqQug/yQD3YG/6K+7TUiJUyuUo0IcmIe3WHEqT aoW0oQGHc7zs8xvoB/DV3hUQw7R0bo/aRFahvqJOfzAxctMTvgsnVX6XEYQORaBI sKzU6kGL9GMa9ETThltF1WakExJwalI48dCVppj7elKv8dIc3sG6AocVSiGtcOnw MnEojEg0SFMy7HjANz+ZRWIvYMEC8EknTfKNWYDnyyKz5w9Yh3dlRr5CuiMsDC1/ vtQYTOGGeOWmJS8s71LipYsSdjc8WFZsk+eYLTQyj7x8ZYqGQWzg+OAWxsCniw== -----END CERTIFICATE-----Generated at Mon Apr 13 13:53:30 2026 by rpki-client