$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3136332e35332e38382e302f32312d3231203d3e2034383132.roa File: 3136332e35332e38382e302f32312d3231203d3e2034383132.roa (raw, json) Hash identifier: mEL0+Im+kiAEKTEeUB2SIwg8G0ByBc4jQgcGW2vwIi8= Subject key identifier: 98:79:C7:BC:A0:A0:13:78:B5:55:D8:B3:92:AD:F8:3D:B4:5F:30:1F Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Certificate serial: 628F01638BDB20C69905CC7027D507A746E2D3F1 Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3136332e35332e38382e302f32312d3231203d3e2034383132.roa Signing time: Wed 13 May 2026 05:30:06 +0000 ROA not before: Wed 13 May 2026 05:25:06 +0000 ROA not after: Wed 12 May 2027 05:30:06 +0000 asID: 4812 IP address blocks: 163.53.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 14:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:8f:01:63:8b:db:20:c6:99:05:cc:70:27:d5:07:a7:46:e2:d3:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Validity Not Before: May 13 05:25:06 2026 GMT Not After : May 12 05:30:06 2027 GMT Subject: CN=9879C7BCA0A01378B555D8B392ADF83DB45F301F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b2:bb:1c:a4:85:fe:3b:40:d1:2e:49:21:ad: e4:82:7a:31:55:81:ac:e9:3f:73:11:0b:dd:09:a9: 97:13:02:a2:03:bf:3c:79:cd:0f:a4:ac:b1:cc:78: 70:4a:5c:51:48:0c:af:c0:1a:ec:84:f8:57:a9:6b: 8c:6c:e5:8a:29:c8:b9:c6:ec:3e:b3:7a:e4:3d:52: 80:30:c9:4a:0f:84:e0:7b:3a:87:b3:dd:44:b8:91: 9b:e3:2f:ec:2d:17:c8:f1:e5:f1:c2:63:47:6a:74: 33:0e:07:ef:b4:06:52:9f:3b:07:d6:69:2f:8c:0b: d4:3d:6e:97:9b:02:53:36:77:52:8a:49:08:52:3c: 7f:45:ab:dc:8c:97:d4:9c:9f:3d:5b:ae:61:90:2f: 95:7b:1b:2d:6e:8d:ae:66:36:05:ae:2e:68:3e:d4: fb:34:66:7e:ce:d0:05:76:a7:64:a4:34:59:e5:6d: 04:50:bc:73:b6:76:80:4f:d1:5c:b7:2c:f8:d8:aa: e0:a3:20:d6:18:44:48:a1:68:3d:4e:7c:43:b3:48: 9b:b5:9d:79:0c:0a:e6:0c:b1:e3:87:f3:59:a6:cf: 8d:1b:16:98:2f:2b:ae:c8:7c:ab:97:44:38:d6:c9: a1:7a:c9:e1:cc:35:a0:5c:f4:c3:26:36:93:55:ca: ef:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:79:C7:BC:A0:A0:13:78:B5:55:D8:B3:92:AD:F8:3D:B4:5F:30:1F X509v3 Authority Key Identifier: keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3136332e35332e38382e302f32312d3231203d3e2034383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.53.88.0/21 Signature Algorithm: sha256WithRSAEncryption 57:2e:8c:60:20:68:60:e0:f0:42:f1:6e:b1:c0:cf:b9:5a:be: c2:9f:05:e4:41:1c:cf:51:a3:22:bb:51:87:cf:93:2b:b3:45: 24:ab:64:68:36:1e:53:09:a0:cb:51:49:1e:2e:ca:0a:a5:99: aa:2b:cf:82:55:ca:10:b3:00:bd:59:67:43:30:29:19:5a:59: 90:cf:d0:3d:43:c3:86:43:3f:87:9e:bc:5d:e6:12:e8:06:d8: 22:eb:d7:8d:e5:ac:98:2d:19:69:ff:a1:b7:12:2b:89:f5:41: 63:bd:7b:7a:a4:f3:13:79:c0:67:3a:89:de:f4:6c:ff:cf:b7: 7c:11:01:f0:f4:0b:a1:06:40:44:a1:a5:2b:b3:9e:ef:81:26: aa:eb:ae:de:34:35:2a:b6:d6:c7:7d:4c:8c:e5:6d:5a:8a:15: 4f:85:3c:fb:59:41:2e:81:3a:46:42:dc:c3:33:26:d4:9d:ff: bc:0f:a8:57:63:e8:35:09:6c:da:b7:13:a1:0b:b4:0b:b8:7a: 2c:09:1e:35:63:d8:e1:2c:cf:8c:ff:a7:30:4b:1a:1a:81:9f: 8c:2a:0b:f4:af:f5:40:76:9a:d0:38:2f:ce:3c:4f:81:cf:95: 02:66:26:51:54:19:d7:a5:62:4b:bf:ad:63:f2:72:af:50:d6: 32:0e:ed:bd -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUYo8BY4vbIMaZBcxwJ9UHp0bi0/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD QUYyQkRFODAeFw0yNjA1MTMwNTI1MDZaFw0yNzA1MTIwNTMwMDZaMDMxMTAvBgNV BAMTKDk4NzlDN0JDQTBBMDEzNzhCNTU1RDhCMzkyQURGODNEQjQ1RjMwMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5srscpIX+O0DRLkkhreSCejFV gazpP3MRC90JqZcTAqIDvzx5zQ+krLHMeHBKXFFIDK/AGuyE+Fepa4xs5YopyLnG 7D6zeuQ9UoAwyUoPhOB7Ooez3US4kZvjL+wtF8jx5fHCY0dqdDMOB++0BlKfOwfW aS+MC9Q9bpebAlM2d1KKSQhSPH9Fq9yMl9Scnz1brmGQL5V7Gy1uja5mNgWuLmg+ 1Ps0Zn7O0AV2p2SkNFnlbQRQvHO2doBP0Vy3LPjYquCjINYYREihaD1OfEOzSJu1 nXkMCuYMseOH81mmz40bFpgvK67IfKuXRDjWyaF6yeHMNaBc9MMmNpNVyu+pAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUmHnHvKCgE3i1Vdizkq34PbRfMB8wHwYDVR0j BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjY4NDgxLzAvMzEzNjMzMmUzNTMz MmUzODM4MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzQzODMxMzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAOjNVgwDQYJKoZIhvcNAQELBQADggEBAFcujGAgaGDg8ELxbrHAz7lavsKfBeRB HM9RoyK7UYfPkyuzRSSrZGg2HlMJoMtRSR4uygqlmaorz4JVyhCzAL1ZZ0MwKRla WZDP0D1Dw4ZDP4eevF3mEugG2CLr143lrJgtGWn/obcSK4n1QWO9e3qk8xN5wGc6 id70bP/Pt3wRAfD0C6EGQEShpSuznu+BJqrrrt40NSq21sd9TIzlbVqKFU+FPPtZ QS6BOkZC3MMzJtSd/7wPqFdj6DUJbNq3E6ELtAu4eiwJHjVj2OEsz4z/pzBLGhqB n4wqC/Sv9UB2mtA4L848T4HPlQJmJlFUGdelYku/rWPycq9Q1jIO7b0= -----END CERTIFICATE-----Generated at Thu Jun 11 21:19:34 2026 by rpki-client