$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e31362e302f32312d3231203d3e203538343636.roa File: 3131342e36372e31362e302f32312d3231203d3e203538343636.roa (raw, json) Hash identifier: enPWgps1ep+7E88UIuGPiAE6OD0vdVRsDk1ST/9B+Yo= Subject key identifier: 99:8B:EB:F4:ED:F8:D4:67:30:AD:6E:68:DA:53:C7:49:F5:9C:01:D3 Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Certificate serial: 3FF0A0058D939A35A315B8C5C50DAF97B926CED0 Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e31362e302f32312d3231203d3e203538343636.roa Signing time: Wed 13 May 2026 05:33:23 +0000 ROA not before: Wed 13 May 2026 05:28:23 +0000 ROA not after: Wed 12 May 2027 05:33:23 +0000 asID: 58466 IP address blocks: 114.67.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 11:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:f0:a0:05:8d:93:9a:35:a3:15:b8:c5:c5:0d:af:97:b9:26:ce:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Validity Not Before: May 13 05:28:23 2026 GMT Not After : May 12 05:33:23 2027 GMT Subject: CN=998BEBF4EDF8D46730AD6E68DA53C749F59C01D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8d:40:b2:35:0f:1e:5e:c6:b8:75:c8:cb:7d: 3a:16:f2:f7:44:0f:13:74:36:fe:56:77:0a:87:8f: 7d:29:12:8a:d1:c1:89:6e:22:14:6d:58:a1:cb:6a: 61:ad:fe:0d:69:17:78:78:77:28:08:3d:1e:68:1e: 76:3f:73:27:a0:fe:48:a1:b2:b8:f3:80:c1:84:99: 3c:df:ff:f0:6b:fb:ed:b1:fd:0c:a5:76:fb:67:7d: bd:44:cb:5d:87:1c:f0:a8:a1:0a:5b:74:e2:a8:a7: 6f:fa:e9:6d:1e:4e:91:cc:d6:0d:9b:9a:86:28:89: 85:09:12:c3:13:60:24:a8:14:d8:b1:d6:69:c7:76: 9f:41:66:3d:c2:70:bc:d6:ce:82:71:d6:6c:e1:74: 13:11:82:7b:e8:8f:14:51:63:5f:99:83:a9:2a:19: 23:47:cc:c8:b6:d6:de:de:dd:98:6a:66:6c:a0:5b: 68:45:d9:28:91:19:7b:b8:97:c1:f1:9e:42:b8:8b: 55:d8:0a:73:70:7d:16:f4:6d:18:91:86:8b:47:bf: da:19:00:6b:42:dd:d5:5f:71:0f:f0:25:2e:f8:99: 7f:79:85:01:e9:da:f1:57:6d:de:5e:71:03:48:32: 01:d4:32:58:ff:11:ab:60:fe:79:89:f9:03:da:36: d5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8B:EB:F4:ED:F8:D4:67:30:AD:6E:68:DA:53:C7:49:F5:9C:01:D3 X509v3 Authority Key Identifier: keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e31362e302f32312d3231203d3e203538343636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.67.16.0/21 Signature Algorithm: sha256WithRSAEncryption 70:e7:cb:84:7f:4b:25:d5:3d:6f:9b:a4:a0:56:5a:fc:6c:f7: e7:5d:15:80:02:28:b3:23:f6:60:b2:e1:7e:1f:87:d0:ca:3d: 2b:34:06:ae:57:11:59:93:f3:75:81:c5:09:d8:8a:fe:5b:a5: 53:8b:62:b6:84:0a:49:2e:6f:34:8a:da:86:44:f9:19:37:e2: df:1f:45:00:ec:d6:86:1c:da:2c:48:c2:dd:8a:7b:02:16:c4: dd:a5:20:41:7c:dd:7f:9e:d7:00:78:97:7d:9a:c2:5c:44:3b: 95:c0:6c:f6:16:f5:0c:89:ee:e3:ce:2a:c9:4c:d1:bf:20:02: e7:04:dd:43:71:64:5b:b7:f9:0f:65:49:ae:fa:55:6b:5a:eb: a4:6d:a5:ae:3b:ea:56:19:d4:9c:b7:f1:05:ad:32:66:bf:5a: 99:5d:e7:b2:c7:77:f6:aa:f6:a5:88:4c:2a:4c:f1:e4:56:dd: 38:18:36:f4:97:0f:bc:9c:ae:56:69:e9:5b:ba:82:fe:12:64: 25:50:a2:07:6b:bb:c6:25:0e:61:ed:1b:5b:aa:33:fa:88:6e: 65:c7:2b:b0:38:3e:56:37:4a:99:77:23:4e:a6:92:78:b4:b8: 83:cd:13:88:41:4b:8e:76:f2:b6:48:8e:00:47:a2:4b:78:9e: de:be:0e:64 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUP/CgBY2TmjWjFbjFxQ2vl7kmztAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD QUYyQkRFODAeFw0yNjA1MTMwNTI4MjNaFw0yNzA1MTIwNTMzMjNaMDMxMTAvBgNV BAMTKDk5OEJFQkY0RURGOEQ0NjczMEFENkU2OERBNTNDNzQ5RjU5QzAxRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrjUCyNQ8eXsa4dcjLfToW8vdE DxN0Nv5WdwqHj30pEorRwYluIhRtWKHLamGt/g1pF3h4dygIPR5oHnY/cyeg/kih srjzgMGEmTzf//Br++2x/Qyldvtnfb1Ey12HHPCooQpbdOKop2/66W0eTpHM1g2b moYoiYUJEsMTYCSoFNix1mnHdp9BZj3CcLzWzoJx1mzhdBMRgnvojxRRY1+Zg6kq GSNHzMi21t7e3ZhqZmygW2hF2SiRGXu4l8HxnkK4i1XYCnNwfRb0bRiRhotHv9oZ AGtC3dVfcQ/wJS74mX95hQHp2vFXbd5ecQNIMgHUMlj/Eatg/nmJ+QPaNtUHAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUmYvr9O341GcwrW5o2lPHSfWcAdMwHwYDVR0j BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjY4NDgxLzAvMzEzMTM0MmUzNjM3 MmUzMTM2MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzUzODM0MzYzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA3JDEDANBgkqhkiG9w0BAQsFAAOCAQEAcOfLhH9LJdU9b5ukoFZa/Gz3510V gAIosyP2YLLhfh+H0Mo9KzQGrlcRWZPzdYHFCdiK/lulU4titoQKSS5vNIrahkT5 GTfi3x9FAOzWhhzaLEjC3Yp7AhbE3aUgQXzdf57XAHiXfZrCXEQ7lcBs9hb1DInu 484qyUzRvyAC5wTdQ3FkW7f5D2VJrvpVa1rrpG2lrjvqVhnUnLfxBa0yZr9amV3n ssd39qr2pYhMKkzx5FbdOBg29JcPvJyuVmnpW7qC/hJkJVCiB2u7xiUOYe0bW6oz +ohuZccrsDg+VjdKmXcjTqaSeLS4g80TiEFLjnbytkiOAEeiS3ie3r4OZA== -----END CERTIFICATE-----Generated at Sat May 30 00:41:51 2026 by rpki-client