$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e35372e302f32342d3234203d3e203536323832.roa File: 3131342e36372e35372e302f32342d3234203d3e203536323832.roa (raw, json) Hash identifier: Y38WLcBNGHTEMncDKv5rtOdzZwU2TOZInqjQacjKw6E= Subject key identifier: CE:89:ED:D0:8D:88:D2:20:30:AE:CA:44:94:27:9C:AC:48:93:AD:CD Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Certificate serial: 226F56A7E34439443CACE731627C475B7F887B4E Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e35372e302f32342d3234203d3e203536323832.roa Signing time: Tue 09 Jun 2026 06:53:45 +0000 ROA not before: Tue 09 Jun 2026 06:48:45 +0000 ROA not after: Tue 08 Jun 2027 06:53:45 +0000 asID: 56282 IP address blocks: 114.67.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 14:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:6f:56:a7:e3:44:39:44:3c:ac:e7:31:62:7c:47:5b:7f:88:7b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Validity Not Before: Jun 9 06:48:45 2026 GMT Not After : Jun 8 06:53:45 2027 GMT Subject: CN=CE89EDD08D88D22030AECA4494279CAC4893ADCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f3:9d:2b:2a:07:b8:13:3b:64:35:fd:47:77: 59:11:bb:d6:40:f2:ae:97:a4:c5:67:3f:e7:f3:9c: 33:3b:55:8f:88:6d:4e:1d:23:e9:7e:c1:6b:af:55: 8d:f8:a9:bd:c0:64:7f:1e:86:c6:8e:0a:b1:a4:96: e5:ca:92:8b:bb:01:00:54:08:80:a6:66:71:4f:b6: da:c9:59:de:64:4d:42:5c:ba:9c:73:ee:8c:e1:67: ff:f2:d3:e8:25:01:5e:4c:80:3f:45:84:46:01:dc: fb:03:d7:c7:b1:ed:54:f4:d6:7b:0d:c7:d1:48:eb: b5:7f:47:b6:40:6e:8f:fa:34:59:81:76:c6:5e:cd: 69:0e:d0:90:73:6c:f9:ef:30:47:76:0e:21:72:ee: c1:b6:f4:3f:b9:05:f0:20:81:d7:37:59:82:c5:5c: 36:7c:aa:ae:9a:8c:82:87:cd:2c:ce:eb:6f:c7:40: e6:5b:32:48:c1:50:ec:a2:52:aa:53:c9:11:36:ac: 5d:05:7e:7d:0f:e0:e4:ff:14:39:e0:90:8f:e2:37: 28:bf:5c:f0:3a:16:93:58:8c:12:d8:da:97:fb:4f: 59:69:bf:07:c6:1a:82:ae:47:aa:32:b4:28:00:be: 70:f9:77:e5:ab:8f:ed:b6:8a:5b:ec:5d:e9:71:7a: 3b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:89:ED:D0:8D:88:D2:20:30:AE:CA:44:94:27:9C:AC:48:93:AD:CD X509v3 Authority Key Identifier: keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e35372e302f32342d3234203d3e203536323832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.67.57.0/24 Signature Algorithm: sha256WithRSAEncryption 27:f1:86:0c:f6:46:89:e1:69:38:7f:48:0a:ff:6d:81:fa:fe: 16:54:4a:d0:38:d8:4f:6e:7a:0b:ea:13:c7:86:9c:9a:df:ca: 49:1f:67:8a:8e:5d:c2:20:c6:a9:4c:d2:2e:3e:7e:90:68:85: 2e:a8:77:c3:5f:58:8e:bc:7b:cd:fa:73:6c:3b:97:8a:f6:f6: 0f:7e:ce:7d:44:6b:a9:f7:10:75:40:7a:a1:94:71:de:47:86: f9:f7:c6:c3:0b:97:b0:48:38:62:b7:39:78:a0:67:0d:c8:2f: 0a:cf:46:cd:2e:0f:61:85:79:b7:22:dc:b9:f4:ce:7e:17:ba: 0a:f5:e6:f2:44:ff:08:e9:df:93:54:71:d6:20:aa:77:73:c7: 03:12:ad:00:2f:05:b6:bd:51:7c:6f:f5:5d:2c:e1:9f:0b:d3: a9:09:8a:0d:26:e9:f9:1e:57:2b:1d:01:f5:0e:c8:5e:9f:c3: c3:6e:29:32:75:3e:7f:e6:05:7b:c8:5b:37:e8:0d:82:1b:5a: cf:b8:21:2d:18:72:ed:86:b6:47:f8:f8:1d:d6:dc:49:6b:40: 48:f4:d4:51:c0:01:31:06:a3:ec:1d:91:22:cd:ca:88:88:ec: 9a:f2:35:f6:30:ee:95:87:0a:1e:d6:e9:fa:24:74:d5:e0:67: c2:0d:a8:6d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUIm9Wp+NEOUQ8rOcxYnxHW3+Ie04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD QUYyQkRFODAeFw0yNjA2MDkwNjQ4NDVaFw0yNzA2MDgwNjUzNDVaMDMxMTAvBgNV BAMTKENFODlFREQwOEQ4OEQyMjAzMEFFQ0E0NDk0Mjc5Q0FDNDg5M0FEQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf850rKge4EztkNf1Hd1kRu9ZA 8q6XpMVnP+fznDM7VY+IbU4dI+l+wWuvVY34qb3AZH8ehsaOCrGkluXKkou7AQBU CICmZnFPttrJWd5kTUJcupxz7ozhZ//y0+glAV5MgD9FhEYB3PsD18ex7VT01nsN x9FI67V/R7ZAbo/6NFmBdsZezWkO0JBzbPnvMEd2DiFy7sG29D+5BfAggdc3WYLF XDZ8qq6ajIKHzSzO62/HQOZbMkjBUOyiUqpTyRE2rF0Ffn0P4OT/FDngkI/iNyi/ XPA6FpNYjBLY2pf7T1lpvwfGGoKuR6oytCgAvnD5d+Wrj+22ilvsXelxeju5AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUzont0I2I0iAwrspElCecrEiTrc0wHwYDVR0j BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjY4NDgxLzAvMzEzMTM0MmUzNjM3 MmUzNTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMyMzgzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHJDOTANBgkqhkiG9w0BAQsFAAOCAQEAJ/GGDPZGieFpOH9ICv9tgfr+FlRK 0DjYT256C+oTx4acmt/KSR9nio5dwiDGqUzSLj5+kGiFLqh3w19Yjrx7zfpzbDuX ivb2D37OfURrqfcQdUB6oZRx3keG+ffGwwuXsEg4Yrc5eKBnDcgvCs9GzS4PYYV5 tyLcufTOfhe6CvXm8kT/COnfk1Rx1iCqd3PHAxKtAC8Ftr1RfG/1XSzhnwvTqQmK DSbp+R5XKx0B9Q7IXp/Dw24pMnU+f+YFe8hbN+gNghtaz7ghLRhy7Ya2R/j4Hdbc SWtASPTUUcABMQaj7B2RIs3KiIjsmvI19jDulYcKHtbp+iR01eBnwg2obQ== -----END CERTIFICATE-----Generated at Fri Jun 12 01:01:08 2026 by rpki-client