$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231382e3234392e33322e302f32302d3230203d3e2034383038.roa File: 3231382e3234392e33322e302f32302d3230203d3e2034383038.roa (raw, json) Hash identifier: cc7kf9qDupM23cLt5EgLWk2Eg3H8o36FO0b5rLsqISw= Subject key identifier: FB:65:AE:74:B0:F0:90:9E:6D:84:D0:AA:61:04:95:23:63:2E:E5:23 Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Certificate serial: 051C97152AED864326D6CAA0B960E4BE0A4FB5A1 Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231382e3234392e33322e302f32302d3230203d3e2034383038.roa Signing time: Tue 21 Apr 2026 06:26:41 +0000 ROA not before: Tue 21 Apr 2026 06:21:41 +0000 ROA not after: Tue 20 Apr 2027 06:26:41 +0000 asID: 4808 IP address blocks: 218.249.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 00:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:1c:97:15:2a:ed:86:43:26:d6:ca:a0:b9:60:e4:be:0a:4f:b5:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Validity Not Before: Apr 21 06:21:41 2026 GMT Not After : Apr 20 06:26:41 2027 GMT Subject: CN=FB65AE74B0F0909E6D84D0AA61049523632EE523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8b:64:b2:ce:84:37:d7:74:0b:16:f3:da:01: cc:1e:1d:9c:95:ed:3f:19:4e:d5:e3:44:ac:82:51: 9e:3d:80:2b:23:11:ea:fd:17:7d:45:7c:31:06:78: 9e:b3:df:2f:71:c5:69:d3:89:5f:99:81:b6:55:26: 9f:48:df:32:f8:60:5c:e1:92:0c:8f:34:6e:35:aa: 09:5b:26:5b:dc:d5:3f:60:cd:3c:c3:15:3b:40:05: 36:04:76:94:51:87:8e:31:d1:2f:16:d7:ac:55:33: ac:46:5f:55:02:7e:54:6d:ca:00:a1:b7:56:54:d8: 64:c7:ea:2c:6d:0e:b5:36:a8:49:ec:d9:02:94:d1: 57:33:75:e8:c9:fa:14:08:1e:65:cd:83:69:4b:44: 4c:0c:81:0d:a5:2b:7d:1a:9a:fc:e9:16:ef:d0:54: 97:87:3f:b7:bd:11:3c:f3:31:a6:d0:0a:96:95:a8: 29:50:89:e0:90:cb:0e:8f:80:12:f2:94:cc:54:ed: f7:f9:bd:e6:dd:00:ca:e7:6e:3b:84:a4:3d:34:c9: 0a:28:31:6d:ec:09:b2:d7:1a:fe:41:b9:7a:0c:8f: 1d:e4:6b:5a:90:df:c8:0d:6e:ad:23:cf:98:41:fb: 50:f8:88:a3:6e:27:b8:17:21:c9:4a:63:80:3e:c5: e3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:65:AE:74:B0:F0:90:9E:6D:84:D0:AA:61:04:95:23:63:2E:E5:23 X509v3 Authority Key Identifier: keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231382e3234392e33322e302f32302d3230203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.249.32.0/20 Signature Algorithm: sha256WithRSAEncryption 19:d4:48:a2:d0:4c:6f:74:c2:da:d3:bc:ef:c4:82:6c:f1:42: 8b:0e:6e:06:d8:53:4c:ae:12:d1:f3:c1:13:8d:4c:f5:12:4e: 39:b2:cc:06:3e:5b:1f:37:29:b8:c8:f3:d6:93:e7:4e:5c:19: b5:5e:81:b0:f4:a4:da:aa:a1:2e:81:ec:74:21:af:e6:f3:ea: a2:cc:a9:5b:67:b9:f1:fb:b6:66:cd:57:35:9b:64:1c:e7:a3: 71:31:7f:d7:46:bf:6b:e8:0f:f9:03:47:cc:ca:5d:3f:1c:aa: 7d:63:99:e9:42:87:10:ca:41:7f:af:df:b1:b1:a5:61:77:87: e6:0f:e8:3b:86:5d:ae:1f:99:eb:96:5f:5f:8b:20:01:ed:13: 44:50:1c:f8:47:b2:82:1d:94:a7:8f:56:c4:5b:52:57:f4:41: 6b:19:9d:87:e4:b1:b7:ff:39:08:97:e3:c6:54:83:5b:e4:c5: 4d:86:7d:f4:d1:70:be:84:79:06:88:fc:14:32:79:99:76:59: 29:63:b3:49:3f:8d:f2:c5:6d:58:b6:61:18:35:bf:04:ac:d9: a9:75:31:a0:f9:4c:ff:9e:a3:72:ec:c6:fe:cc:5b:4c:46:3d: 19:75:97:20:40:e7:a0:59:0e:53:0a:50:84:98:59:c9:2b:06: a8:af:7b:22 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUBRyXFSrthkMm1sqguWDkvgpPtaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw NUJEOTUxNTAeFw0yNjA0MjEwNjIxNDFaFw0yNzA0MjAwNjI2NDFaMDMxMTAvBgNV BAMTKEZCNjVBRTc0QjBGMDkwOUU2RDg0RDBBQTYxMDQ5NTIzNjMyRUU1MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDai2SyzoQ313QLFvPaAcweHZyV 7T8ZTtXjRKyCUZ49gCsjEer9F31FfDEGeJ6z3y9xxWnTiV+ZgbZVJp9I3zL4YFzh kgyPNG41qglbJlvc1T9gzTzDFTtABTYEdpRRh44x0S8W16xVM6xGX1UCflRtygCh t1ZU2GTH6ixtDrU2qEns2QKU0VczdejJ+hQIHmXNg2lLREwMgQ2lK30amvzpFu/Q VJeHP7e9ETzzMabQCpaVqClQieCQyw6PgBLylMxU7ff5vebdAMrnbjuEpD00yQoo MW3sCbLXGv5BuXoMjx3ka1qQ38gNbq0jz5hB+1D4iKNuJ7gXIclKY4A+xeOdAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU+2WudLDwkJ5thNCqYQSVI2Mu5SMwHwYDVR0j BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3 NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3OTQzOTM5LzAvMzIzMTM4MmUzMjM0 MzkyZTMzMzIyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNr5IDANBgkqhkiG9w0BAQsFAAOCAQEAGdRIotBMb3TC2tO878SCbPFCiw5u BthTTK4S0fPBE41M9RJOObLMBj5bHzcpuMjz1pPnTlwZtV6BsPSk2qqhLoHsdCGv 5vPqosypW2e58fu2Zs1XNZtkHOejcTF/10a/a+gP+QNHzMpdPxyqfWOZ6UKHEMpB f6/fsbGlYXeH5g/oO4Zdrh+Z65ZfX4sgAe0TRFAc+Eeygh2Up49WxFtSV/RBaxmd h+Sxt/85CJfjxlSDW+TFTYZ99NFwvoR5Boj8FDJ5mXZZKWOzST+N8sVtWLZhGDW/ BKzZqXUxoPlM/56jcuzG/sxbTEY9GXWXIEDnoFkOUwpQhJhZySsGqK97Ig== -----END CERTIFICATE-----Generated at Mon Apr 27 14:19:47 2026 by rpki-client