$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3134372e32342e302f32312d3231203d3e2034383038.roa File: 3231312e3134372e32342e302f32312d3231203d3e2034383038.roa (raw, json) Hash identifier: yTzcnjRUJR5vawUS4lykwWfA4IU6/H2P1yhlkeG38hs= Subject key identifier: 6C:B3:B5:A3:94:26:52:87:36:CB:E9:46:1F:79:01:02:61:06:48:2D Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Certificate serial: 5CA0B757C2C3E4D3A5B048A67A73F32D97CA35CC Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3134372e32342e302f32312d3231203d3e2034383038.roa Signing time: Tue 19 May 2026 06:39:12 +0000 ROA not before: Tue 19 May 2026 06:34:12 +0000 ROA not after: Tue 18 May 2027 06:39:12 +0000 asID: 4808 IP address blocks: 211.147.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:a0:b7:57:c2:c3:e4:d3:a5:b0:48:a6:7a:73:f3:2d:97:ca:35:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Validity Not Before: May 19 06:34:12 2026 GMT Not After : May 18 06:39:12 2027 GMT Subject: CN=6CB3B5A39426528736CBE9461F7901026106482D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b1:08:a3:6e:e6:60:8c:9c:ca:22:8b:29:61: 41:b1:48:0a:6a:14:1e:d6:5b:74:8e:76:02:98:b2: c4:c6:91:79:da:6c:e0:c3:48:ed:a8:dc:4c:1d:6e: 1f:b1:82:36:27:be:f4:33:73:62:f9:ee:fa:2c:49: d7:d2:4b:ce:74:a8:26:c7:ee:51:fb:af:bc:8f:1b: ae:e0:07:76:ab:a7:e2:a6:da:d6:5a:5a:0b:79:d9: d4:f3:b3:ad:c6:58:d3:b9:5a:ba:ec:e2:c2:46:53: f9:a2:7f:ac:46:e4:a0:5d:3d:43:9f:1f:42:1b:59: 04:0a:28:c3:86:00:f9:e9:86:6e:76:89:45:7e:11: 41:28:d8:ab:3f:d0:2d:04:41:72:03:93:8b:58:95: 9c:87:a4:bd:f9:c6:01:52:23:8e:8a:be:67:ee:55: 68:bc:ca:30:60:bf:e5:65:38:60:32:f5:1a:dd:a7: a6:89:6b:7a:25:09:50:6c:c2:0e:9b:b0:36:c8:9d: 54:2f:b6:6d:7c:18:da:30:10:b5:33:04:9f:c5:b7: 86:26:05:b6:c4:5b:ae:a7:fd:a7:d8:ea:e5:fc:fb: 06:5e:1a:61:aa:ed:4f:e0:39:eb:68:8f:eb:f4:5b: ca:d2:81:c6:5e:ee:c0:2b:d7:9d:91:2e:ae:4a:de: 47:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B3:B5:A3:94:26:52:87:36:CB:E9:46:1F:79:01:02:61:06:48:2D X509v3 Authority Key Identifier: keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3134372e32342e302f32312d3231203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.147.24.0/21 Signature Algorithm: sha256WithRSAEncryption af:e1:cb:86:e2:01:13:73:c8:5c:86:9c:a8:98:e2:07:a4:b5: 15:94:50:48:95:9a:b8:93:a8:97:27:15:31:b9:cd:00:a9:30: e4:44:1a:b2:4f:32:22:96:7a:ce:06:f3:2e:c1:1b:41:74:00: 43:6d:59:1d:72:c2:0b:bc:b9:df:de:3c:c0:c9:84:7c:d7:37: 25:26:15:db:7c:46:0c:97:a8:e7:8b:f9:d8:26:0e:82:f6:5e: a8:6c:ba:01:ce:41:62:a5:70:49:85:c7:0e:9e:11:d9:ab:e2: b5:12:e0:a5:f3:b8:a9:7b:6a:7c:af:eb:02:de:bc:2f:fa:2a: fa:40:9a:a0:a6:ec:71:78:61:41:c1:40:36:f9:a3:94:c1:43: d5:12:e8:6a:27:15:c3:f3:66:23:a8:6a:14:ae:72:91:f2:20: ac:26:6e:ab:75:67:f7:78:52:fc:09:bf:6b:ff:a1:38:e2:d5: a0:10:e0:f8:36:3c:1b:8d:39:cc:17:f0:df:13:8c:f2:33:c6: a6:a8:34:6b:df:93:d2:26:35:ef:1c:d6:17:a2:47:fe:3b:33: e9:67:a0:30:19:cd:5a:d9:04:1a:dd:c0:a8:3b:ca:2e:18:f8: 85:63:f4:a6:5f:77:4c:5e:3c:9d:33:12:91:f9:ea:d0:c5:3b: 70:32:cf:76 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUXKC3V8LD5NOlsEimenPzLZfKNcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw NUJEOTUxNTAeFw0yNjA1MTkwNjM0MTJaFw0yNzA1MTgwNjM5MTJaMDMxMTAvBgNV BAMTKDZDQjNCNUEzOTQyNjUyODczNkNCRTk0NjFGNzkwMTAyNjEwNjQ4MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVsQijbuZgjJzKIospYUGxSApq FB7WW3SOdgKYssTGkXnabODDSO2o3Ewdbh+xgjYnvvQzc2L57vosSdfSS850qCbH 7lH7r7yPG67gB3arp+Km2tZaWgt52dTzs63GWNO5Wrrs4sJGU/mif6xG5KBdPUOf H0IbWQQKKMOGAPnphm52iUV+EUEo2Ks/0C0EQXIDk4tYlZyHpL35xgFSI46Kvmfu VWi8yjBgv+VlOGAy9Rrdp6aJa3olCVBswg6bsDbInVQvtm18GNowELUzBJ/Ft4Ym BbbEW66n/afY6uX8+wZeGmGq7U/gOetoj+v0W8rSgcZe7sAr152RLq5K3ke7AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUbLO1o5QmUoc2y+lGH3kBAmEGSC0wHwYDVR0j BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3 NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3OTQzOTM5LzAvMzIzMTMxMmUzMTM0 MzcyZTMyMzQyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA9OTGDANBgkqhkiG9w0BAQsFAAOCAQEAr+HLhuIBE3PIXIacqJjiB6S1FZRQ SJWauJOolycVMbnNAKkw5EQask8yIpZ6zgbzLsEbQXQAQ21ZHXLCC7y53948wMmE fNc3JSYV23xGDJeo54v52CYOgvZeqGy6Ac5BYqVwSYXHDp4R2avitRLgpfO4qXtq fK/rAt68L/oq+kCaoKbscXhhQcFANvmjlMFD1RLoaicVw/NmI6hqFK5ykfIgrCZu q3Vn93hS/Am/a/+hOOLVoBDg+DY8G405zBfw3xOM8jPGpqg0a9+T0iY17xzWF6JH /jsz6WegMBnNWtkEGt3AqDvKLhj4hWP0pl93TF48nTMSkfnq0MU7cDLPdg== -----END CERTIFICATE-----Generated at Fri Jun 12 02:23:53 2026 by rpki-client