$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231392e3233382e302e302f31382d3138203d3e2034383038.roa File: 3231392e3233382e302e302f31382d3138203d3e2034383038.roa (raw, json) Hash identifier: 1bnhy51bCQ3EGkI7beELo+Jm1n+Gt694d3zKJRWLMG8= Subject key identifier: 6E:48:6F:09:2B:0D:D1:8A:A4:4B:B6:0A:E4:6E:37:43:57:51:01:7D Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Certificate serial: 114183B9E44ED65DE67AE0B84DC03DADFED73AA8 Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231392e3233382e302e302f31382d3138203d3e2034383038.roa Signing time: Fri 05 Jun 2026 05:58:21 +0000 ROA not before: Fri 05 Jun 2026 05:53:21 +0000 ROA not after: Fri 04 Jun 2027 05:58:21 +0000 asID: 4808 IP address blocks: 219.238.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:41:83:b9:e4:4e:d6:5d:e6:7a:e0:b8:4d:c0:3d:ad:fe:d7:3a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Validity Not Before: Jun 5 05:53:21 2026 GMT Not After : Jun 4 05:58:21 2027 GMT Subject: CN=6E486F092B0DD18AA44BB60AE46E37435751017D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:56:73:16:bc:5d:e9:cb:06:01:9e:aa:50:06: 28:15:1d:8d:51:a0:9d:e0:0a:74:b8:47:00:6a:31: 6f:95:0f:37:9f:98:d0:d9:06:eb:2a:51:99:c9:c0: 18:a5:cb:6a:5c:db:6f:dd:de:d4:c6:6c:bd:1b:d2: f1:8c:76:d6:f0:fd:ab:8e:17:3e:9b:03:b0:9b:33: 81:ac:a1:70:b1:92:ba:4b:fb:2e:89:a7:f5:7d:89: 7a:5f:5d:d7:0f:3f:93:34:83:0f:b6:54:05:dc:5a: c8:cf:f1:b3:87:32:0b:81:05:c3:af:93:70:90:9c: f1:19:29:b4:a3:56:26:d7:46:f3:0f:f6:b7:4e:8b: 65:f8:01:4c:3f:a2:2e:c7:8e:2f:8f:18:2b:a4:da: b0:75:0a:2e:e2:7a:05:d7:94:9a:67:ea:e0:16:44: 80:46:c5:f9:bc:48:1a:79:ed:29:bd:62:93:be:f3: de:7f:7b:d6:f7:2f:16:a1:71:fa:fb:63:ec:f4:fc: 96:60:a5:52:f1:b4:a6:4e:f2:d5:cc:92:c3:05:a3: 09:98:e1:d3:b6:32:d1:c6:65:00:af:f2:6d:35:ba: 55:c3:f4:5f:d7:cf:47:cf:c4:17:dc:5d:61:1b:cc: 92:58:3e:d0:51:ec:ce:c8:be:dd:71:78:81:ce:dd: 60:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:48:6F:09:2B:0D:D1:8A:A4:4B:B6:0A:E4:6E:37:43:57:51:01:7D X509v3 Authority Key Identifier: keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231392e3233382e302e302f31382d3138203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.238.0.0/18 Signature Algorithm: sha256WithRSAEncryption 4d:64:7f:d5:ba:56:04:38:a4:5f:03:23:45:c1:81:ee:a6:09: 7c:32:8a:de:53:ef:cf:1b:b7:0e:25:f0:68:5d:24:c1:9e:8b: c7:72:62:27:4c:74:bf:a4:cb:50:66:fb:a1:67:97:01:4d:cb: 87:ef:ce:91:da:21:29:d1:65:77:7a:53:c1:a7:3c:a2:9f:04: 1f:6f:87:0b:a6:c2:e0:66:8f:8c:da:43:a3:76:fb:a8:2c:95: 44:f4:f1:75:29:01:66:36:3e:e9:9c:12:bc:14:bf:9c:d8:13: 26:a8:54:4e:62:81:77:78:05:3d:93:9c:44:86:ad:56:26:43: 83:65:c0:f2:90:39:6c:ab:90:48:8c:98:32:87:4f:4c:45:09: 6a:c5:fa:12:c5:72:a0:7b:3b:7d:5d:71:2b:cd:ce:7a:3c:63: 33:b3:9a:5b:de:6a:f9:50:15:73:2f:a9:15:5d:1a:31:c5:cf: 67:a6:34:2a:2f:47:d7:0c:40:99:fa:be:64:d2:2e:6f:73:57: 57:f5:d3:29:f6:39:a6:b4:63:55:b1:a6:1d:38:74:74:a1:22: 7f:8d:6d:5c:1b:60:c8:2f:08:1e:e4:dd:fd:07:45:f6:4c:ed: 2c:ce:07:10:50:a5:1c:2d:7e:e5:6d:d9:2e:21:8c:d4:40:bf: 27:3c:b9:4f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUEUGDueRO1l3meuC4TcA9rf7XOqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw NUJEOTUxNTAeFw0yNjA2MDUwNTUzMjFaFw0yNzA2MDQwNTU4MjFaMDMxMTAvBgNV BAMTKDZFNDg2RjA5MkIwREQxOEFBNDRCQjYwQUU0NkUzNzQzNTc1MTAxN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIVnMWvF3pywYBnqpQBigVHY1R oJ3gCnS4RwBqMW+VDzefmNDZBusqUZnJwBily2pc22/d3tTGbL0b0vGMdtbw/auO Fz6bA7CbM4GsoXCxkrpL+y6Jp/V9iXpfXdcPP5M0gw+2VAXcWsjP8bOHMguBBcOv k3CQnPEZKbSjVibXRvMP9rdOi2X4AUw/oi7Hji+PGCuk2rB1Ci7iegXXlJpn6uAW RIBGxfm8SBp57Sm9YpO+895/e9b3Lxahcfr7Y+z0/JZgpVLxtKZO8tXMksMFowmY 4dO2MtHGZQCv8m01ulXD9F/Xz0fPxBfcXWEbzJJYPtBR7M7Ivt1xeIHO3WD1AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUbkhvCSsN0YqkS7YK5G43Q1dRAX0wHwYDVR0j BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3 NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3OTQzOTM5LzAvMzIzMTM5MmUzMjMz MzgyZTMwMmUzMDJmMzEzODJkMzEzODIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAbb7gAwDQYJKoZIhvcNAQELBQADggEBAE1kf9W6VgQ4pF8DI0XBge6mCXwyit5T 788btw4l8GhdJMGei8dyYidMdL+ky1Bm+6FnlwFNy4fvzpHaISnRZXd6U8GnPKKf BB9vhwumwuBmj4zaQ6N2+6gslUT08XUpAWY2PumcErwUv5zYEyaoVE5igXd4BT2T nESGrVYmQ4NlwPKQOWyrkEiMmDKHT0xFCWrF+hLFcqB7O31dcSvNzno8YzOzmlve avlQFXMvqRVdGjHFz2emNCovR9cMQJn6vmTSLm9zV1f10yn2Oaa0Y1Wxph04dHSh In+NbVwbYMgvCB7k3f0HRfZM7SzOBxBQpRwtfuVt2S4hjNRAvyc8uU8= -----END CERTIFICATE-----Generated at Fri Jun 12 02:23:47 2026 by rpki-client