$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231392e3233392e3132382e302f31382d3138203d3e2034383038.roa File: 3231392e3233392e3132382e302f31382d3138203d3e2034383038.roa (raw, json) Hash identifier: upQKHnyKkkaJ/eyzwQ1zwXf5ahbFneMZoxrL0cBlgHQ= Subject key identifier: B2:1A:51:F0:9B:59:F7:0F:7E:20:10:2E:21:76:01:1E:24:50:E7:77 Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Certificate serial: 3EF438880B37792F2283D7B2A5CAB02B252CE19B Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231392e3233392e3132382e302f31382d3138203d3e2034383038.roa Signing time: Fri 05 Jun 2026 05:58:00 +0000 ROA not before: Fri 05 Jun 2026 05:53:00 +0000 ROA not after: Fri 04 Jun 2027 05:58:00 +0000 asID: 4808 IP address blocks: 219.239.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f4:38:88:0b:37:79:2f:22:83:d7:b2:a5:ca:b0:2b:25:2c:e1:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Validity Not Before: Jun 5 05:53:00 2026 GMT Not After : Jun 4 05:58:00 2027 GMT Subject: CN=B21A51F09B59F70F7E20102E2176011E2450E777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9b:64:2a:a8:5b:84:1f:06:43:fd:de:44:82: de:54:52:52:35:58:c2:ac:4d:04:e3:0b:10:b7:5d: 6d:03:9b:0a:c0:c3:cc:9e:aa:2f:41:5b:87:9c:6d: fc:fd:c2:45:94:dd:ff:06:46:6b:6f:17:28:86:31: 74:5e:e9:12:59:36:4d:87:c0:42:f5:31:74:3e:6f: 0a:08:9b:5e:de:78:91:15:00:17:33:f1:5c:4f:14: 52:a9:27:cb:8c:53:1a:20:54:aa:02:2b:ac:dd:3e: b1:03:97:e9:cb:44:f8:d2:99:ea:dc:39:2d:d4:09: a2:91:66:f2:d7:e8:78:95:70:98:c5:50:cb:77:22: e0:df:5a:2f:f1:6e:8c:d5:33:d6:7f:92:a7:0f:39: c6:96:9d:68:5f:fa:d8:b4:04:a1:20:2f:f9:ac:54: bf:fd:aa:8f:08:ef:6d:59:f4:e1:be:08:e8:c9:21: 2f:f9:0e:06:a1:bb:08:3b:d6:9d:9f:08:d2:92:26: 43:ef:f0:c6:1d:17:74:20:00:a6:c3:88:f6:dd:a6: 00:8a:1c:54:7c:ff:66:4a:56:6f:01:f2:71:1b:77: 01:6a:84:d6:f2:2f:1d:ba:3a:f6:39:a5:52:d8:43: 49:0c:38:e0:3d:4b:dc:ed:70:d7:d9:7a:2f:11:25: ff:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1A:51:F0:9B:59:F7:0F:7E:20:10:2E:21:76:01:1E:24:50:E7:77 X509v3 Authority Key Identifier: keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231392e3233392e3132382e302f31382d3138203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.239.128.0/18 Signature Algorithm: sha256WithRSAEncryption 02:70:5a:bb:a9:8f:38:cd:71:27:e8:a1:fe:a4:e9:4d:7e:c9: 1d:2b:5a:90:c7:a7:bb:17:fb:68:d2:9c:04:0b:15:50:7e:b5: 6d:6e:79:1f:6a:66:7b:2b:37:b1:9f:be:06:ae:ab:95:01:7a: 92:cd:2d:09:0a:fc:a3:b5:bb:7c:87:3e:9d:4f:60:5f:63:7f: 80:f9:95:5f:31:ea:20:f0:27:a1:b0:f2:62:33:d2:ee:05:22: 7d:56:76:b2:9a:a8:38:d7:de:89:b0:4d:93:12:dd:63:e2:28: e6:c9:b7:8c:f6:9a:21:62:9c:b4:fc:c7:60:c4:39:7a:bc:30: 24:cb:de:e7:6e:84:e2:a3:38:f7:78:30:58:aa:d0:55:29:69: d3:5a:21:61:08:39:54:f1:91:30:62:f2:df:57:9c:6b:9b:de: 0a:61:cd:66:88:20:e2:27:b7:2f:5f:13:0d:42:81:b4:ad:8e: 51:aa:83:52:62:15:94:84:e2:66:29:68:3c:65:78:d3:e8:68: d3:07:b3:af:d1:37:13:d3:f9:bf:5a:fc:0e:36:8c:7d:e0:d2: 7e:4c:e6:94:8c:49:2c:11:81:66:63:6a:d8:22:ee:8f:b8:b7: aa:60:fe:08:ef:c0:68:32:20:1d:66:d0:e1:13:86:47:1e:88: a1:6a:23:12 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUPvQ4iAs3eS8ig9eypcqwKyUs4ZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw NUJEOTUxNTAeFw0yNjA2MDUwNTUzMDBaFw0yNzA2MDQwNTU4MDBaMDMxMTAvBgNV BAMTKEIyMUE1MUYwOUI1OUY3MEY3RTIwMTAyRTIxNzYwMTFFMjQ1MEU3NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjm2QqqFuEHwZD/d5Egt5UUlI1 WMKsTQTjCxC3XW0DmwrAw8yeqi9BW4ecbfz9wkWU3f8GRmtvFyiGMXRe6RJZNk2H wEL1MXQ+bwoIm17eeJEVABcz8VxPFFKpJ8uMUxogVKoCK6zdPrEDl+nLRPjSmerc OS3UCaKRZvLX6HiVcJjFUMt3IuDfWi/xbozVM9Z/kqcPOcaWnWhf+ti0BKEgL/ms VL/9qo8I721Z9OG+COjJIS/5Dgahuwg71p2fCNKSJkPv8MYdF3QgAKbDiPbdpgCK HFR8/2ZKVm8B8nEbdwFqhNbyLx26OvY5pVLYQ0kMOOA9S9ztcNfZei8RJf9JAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUshpR8JtZ9w9+IBAuIXYBHiRQ53cwHwYDVR0j BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3 NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0Nzk0MzkzOS8wLzMyMzEzOTJlMzIz MzM5MmUzMTMyMzgyZTMwMmYzMTM4MmQzMTM4MjAzZDNlMjAzNDM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBtvvgDANBgkqhkiG9w0BAQsFAAOCAQEAAnBau6mPOM1xJ+ih/qTpTX7J HStakMenuxf7aNKcBAsVUH61bW55H2pmeys3sZ++Bq6rlQF6ks0tCQr8o7W7fIc+ nU9gX2N/gPmVXzHqIPAnobDyYjPS7gUifVZ2spqoONfeibBNkxLdY+Io5sm3jPaa IWKctPzHYMQ5erwwJMve526E4qM493gwWKrQVSlp01ohYQg5VPGRMGLy31eca5ve CmHNZogg4ie3L18TDUKBtK2OUaqDUmIVlITiZiloPGV40+ho0wezr9E3E9P5v1r8 DjaMfeDSfkzmlIxJLBGBZmNq2CLuj7i3qmD+CO/AaDIgHWbQ4ROGRx6IoWojEg== -----END CERTIFICATE-----Generated at Fri Jun 12 02:24:51 2026 by rpki-client