$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36362e37322e302f32312d3231203d3e203536323832.roa File: 3131342e36362e37322e302f32312d3231203d3e203536323832.roa (raw, json) Hash identifier: sIeb7e27o0NBroF0owyGCpLb4HF3h2mRpPAHo02x70k= Subject key identifier: E4:1F:06:6F:B0:98:52:D3:B2:5D:2D:FA:3B:09:EC:0F:21:E7:26:F5 Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Certificate serial: 6888094D528D332FF9FCE80032BF873C715ADB9E Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36362e37322e302f32312d3231203d3e203536323832.roa Signing time: Tue 09 Jun 2026 06:54:00 +0000 ROA not before: Tue 09 Jun 2026 06:49:00 +0000 ROA not after: Tue 08 Jun 2027 06:54:00 +0000 asID: 56282 IP address blocks: 114.66.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 14:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:88:09:4d:52:8d:33:2f:f9:fc:e8:00:32:bf:87:3c:71:5a:db:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Validity Not Before: Jun 9 06:49:00 2026 GMT Not After : Jun 8 06:54:00 2027 GMT Subject: CN=E41F066FB09852D3B25D2DFA3B09EC0F21E726F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fb:76:f3:d2:92:1e:91:19:ed:af:45:0a:68: b4:c6:48:1d:d4:33:ce:f7:7e:92:d9:d3:8e:d7:31: e0:ea:2c:ee:17:cb:02:38:b0:f5:f8:a5:e8:4a:0b: b1:b0:8a:13:5a:16:e8:73:5f:9e:b2:dc:15:a8:1b: 20:f2:96:31:d5:97:00:2b:ec:33:45:6e:ff:2a:f2: 5c:bc:58:d0:dd:99:10:1d:8d:6c:00:cf:23:59:8b: 81:2d:75:31:ff:0b:63:b6:0d:22:1b:17:fb:cc:e6: 7f:a6:96:fa:ff:30:72:41:ec:e5:be:b4:41:b4:59: 32:ba:b1:5c:3a:23:81:75:7b:d8:13:b2:aa:1a:8c: 9f:74:c5:73:5a:31:25:5a:63:e1:1f:0b:3a:c5:9f: 25:95:e5:a9:08:5e:40:44:44:b9:a5:6f:d9:08:f7: 33:d6:46:a9:91:04:c0:a7:22:81:57:db:08:0d:5e: 93:ea:44:c3:a7:af:cc:7b:39:10:c7:f0:21:93:0e: 51:58:d0:96:b3:e6:9d:ac:a2:aa:fa:c7:01:a1:20: 19:5e:ad:0e:80:cf:b7:a5:07:95:8f:95:92:fb:14: 72:13:b3:75:9f:62:09:06:47:33:f3:9c:5f:dc:6c: 75:6d:81:80:0d:bd:2b:05:15:39:62:e1:f1:ef:2d: 79:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1F:06:6F:B0:98:52:D3:B2:5D:2D:FA:3B:09:EC:0F:21:E7:26:F5 X509v3 Authority Key Identifier: keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36362e37322e302f32312d3231203d3e203536323832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.66.72.0/21 Signature Algorithm: sha256WithRSAEncryption 31:a3:89:3b:6b:c0:e8:d5:27:9a:00:7a:86:f3:4e:2a:02:02: 24:05:48:ce:24:96:47:57:41:60:c3:66:61:2c:ee:23:95:af: 8e:e3:2d:ee:14:f6:3f:b5:9d:01:d4:e7:ac:a5:58:50:3e:fe: c6:d8:39:67:70:43:d3:5d:bf:5c:11:e6:2f:14:dd:c1:9d:eb: 0b:c1:49:4a:65:5c:60:a4:fc:4a:00:f8:34:c8:2b:6c:86:5a: 75:40:6e:a3:16:5b:10:5a:fc:74:3e:fa:3b:40:95:df:d9:12: 5b:56:3f:fd:b0:46:46:20:94:ab:56:13:58:c1:b8:e6:e4:1d: 3a:43:37:2a:cd:e8:04:9c:0e:e4:19:70:48:95:ed:9f:75:0a: 93:9d:c1:10:75:80:4a:8f:0a:2f:dd:68:b3:ab:b2:33:39:ed: 86:e9:46:f8:f6:b4:54:bb:b7:66:0f:f8:09:5d:f3:11:45:98: 98:8e:b6:ab:f3:d3:7e:13:59:90:00:cf:a1:8f:98:21:aa:6e: 36:a1:f3:08:50:e3:00:b9:db:91:c7:ea:ce:7a:d6:e1:9e:f0: ae:61:d1:a6:de:e7:71:5c:31:47:f6:a2:52:44:03:8b:10:7f: 0b:02:f4:fb:23:1c:d8:16:dd:61:de:6f:e8:4e:ce:0b:15:85: 4e:f0:43:65 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUaIgJTVKNMy/5/OgAMr+HPHFa254wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD QUYyQkRFODAeFw0yNjA2MDkwNjQ5MDBaFw0yNzA2MDgwNjU0MDBaMDMxMTAvBgNV BAMTKEU0MUYwNjZGQjA5ODUyRDNCMjVEMkRGQTNCMDlFQzBGMjFFNzI2RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN+3bz0pIekRntr0UKaLTGSB3U M873fpLZ047XMeDqLO4XywI4sPX4pehKC7GwihNaFuhzX56y3BWoGyDyljHVlwAr 7DNFbv8q8ly8WNDdmRAdjWwAzyNZi4EtdTH/C2O2DSIbF/vM5n+mlvr/MHJB7OW+ tEG0WTK6sVw6I4F1e9gTsqoajJ90xXNaMSVaY+EfCzrFnyWV5akIXkBERLmlb9kI 9zPWRqmRBMCnIoFX2wgNXpPqRMOnr8x7ORDH8CGTDlFY0Jaz5p2soqr6xwGhIBle rQ6Az7elB5WPlZL7FHITs3WfYgkGRzPznF/cbHVtgYANvSsFFTli4fHvLXmlAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU5B8Gb7CYUtOyXS36OwnsDyHnJvUwHwYDVR0j BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjY4NDgxLzAvMzEzMTM0MmUzNjM2 MmUzNzMyMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzUzNjMyMzgzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA3JCSDANBgkqhkiG9w0BAQsFAAOCAQEAMaOJO2vA6NUnmgB6hvNOKgICJAVI ziSWR1dBYMNmYSzuI5WvjuMt7hT2P7WdAdTnrKVYUD7+xtg5Z3BD012/XBHmLxTd wZ3rC8FJSmVcYKT8SgD4NMgrbIZadUBuoxZbEFr8dD76O0CV39kSW1Y//bBGRiCU q1YTWMG45uQdOkM3Ks3oBJwO5BlwSJXtn3UKk53BEHWASo8KL91os6uyMznthulG +Pa0VLu3Zg/4CV3zEUWYmI62q/PTfhNZkADPoY+YIapuNqHzCFDjALnbkcfqznrW 4Z7wrmHRpt7ncVwxR/aiUkQDixB/CwL0+yMc2BbdYd5v6E7OCxWFTvBDZQ== -----END CERTIFICATE-----Generated at Fri Jun 12 01:01:06 2026 by rpki-client