$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3130302e302f32322d3232203d3e20313338393135.roa File: 3231312e3135352e3130302e302f32322d3232203d3e20313338393135.roa (raw, json) Hash identifier: b4z4tTY89/Ga0J0Dc9lDy7pLUYgbukf87p/xggmu81Y= Subject key identifier: 68:51:70:5C:9F:E7:32:B0:4B:07:BF:40:87:29:3D:FF:1B:E8:B9:A6 Certificate issuer: /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Certificate serial: 63C068C9CBD9088F38FB35BEDE4B06991DBA5DE8 Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3130302e302f32322d3232203d3e20313338393135.roa Signing time: Tue 02 Jun 2026 06:25:25 +0000 ROA not before: Tue 02 Jun 2026 06:20:25 +0000 ROA not after: Tue 01 Jun 2027 06:25:25 +0000 asID: 138915 IP address blocks: 211.155.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 20:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c0:68:c9:cb:d9:08:8f:38:fb:35:be:de:4b:06:99:1d:ba:5d:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Validity Not Before: Jun 2 06:20:25 2026 GMT Not After : Jun 1 06:25:25 2027 GMT Subject: CN=6851705C9FE732B04B07BF4087293DFF1BE8B9A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9b:d8:0f:e8:1a:3c:40:4c:54:b6:43:25:f9: 5d:62:6c:3a:8b:fa:d0:56:36:00:e5:e9:53:14:92: 14:e0:a1:42:a8:7e:e2:25:8f:32:c2:5a:5f:8a:4a: de:75:b4:93:dd:0a:9a:05:90:58:3d:c9:8a:d9:9d: 93:21:b7:57:3e:dd:42:c5:77:f7:d6:82:ee:e6:36: bf:90:8c:15:f6:9d:fe:5c:17:c4:e8:b6:e6:5e:29: 9d:d8:8a:76:50:1c:66:5d:d1:66:e7:25:93:68:8a: ae:c9:48:4f:86:9a:25:86:d2:c1:4c:e7:f0:e6:52: ea:4c:0b:bb:a6:cd:62:e6:1e:77:68:a4:db:81:4d: a0:d0:18:b5:e1:d6:c4:4d:93:5b:ad:63:08:4c:36: 8c:9a:04:8a:d2:ae:0d:18:4a:91:14:79:a4:1b:b9: 44:67:65:98:88:21:3d:7e:8d:b5:d3:27:46:a4:06: 08:91:ad:a1:59:0b:66:72:5a:74:46:00:11:b5:0f: 80:2a:5e:a4:3b:a7:d2:b0:71:fc:96:23:f1:4d:00: c6:70:36:6f:88:e1:22:60:da:aa:6a:2a:96:9a:c0: 2f:21:0c:06:ca:50:48:52:f6:c5:19:b8:e7:88:fd: b3:3f:22:45:ee:15:27:0d:ea:5f:40:81:bc:11:6c: 8b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:51:70:5C:9F:E7:32:B0:4B:07:BF:40:87:29:3D:FF:1B:E8:B9:A6 X509v3 Authority Key Identifier: keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3130302e302f32322d3232203d3e20313338393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.155.100.0/22 Signature Algorithm: sha256WithRSAEncryption 70:42:c5:f7:39:be:a7:9f:4e:8a:34:6a:43:1c:9f:8f:2b:0f: b9:ec:b2:42:81:30:b7:6d:d8:b6:38:27:d1:f5:5e:6c:a8:d5: e1:b6:92:58:f8:da:8c:dc:14:f5:fe:40:c7:62:d8:12:d0:8c: 04:49:33:73:04:35:e3:72:65:37:e7:a6:43:a4:6c:da:df:1b: e9:8a:55:8e:32:1e:fd:47:fb:3c:2c:24:77:7d:bb:d8:24:ea: 93:77:62:4b:e4:09:29:e5:37:55:16:f3:07:45:81:ca:52:89: e8:c3:14:74:6a:47:02:3b:a1:9f:96:5e:b4:e3:3b:dd:a9:e0: 8b:a7:d2:b0:b2:cc:e1:82:5f:f9:d0:d5:4d:fa:8a:fd:41:2d: 2c:5f:07:db:9c:47:69:63:a9:8b:b5:83:13:19:c5:50:2e:77: 7c:2e:3d:74:7e:62:1c:9a:61:4a:06:85:06:5c:cb:6e:51:a6: 90:81:62:a0:c1:2e:8a:c4:3a:91:b2:45:da:d3:13:67:d2:cd: 10:ff:5e:0f:7c:8c:77:41:a2:7c:b1:dc:03:9d:6c:e9:75:cf: f0:f6:f6:a1:ab:a7:3f:b8:df:e2:b1:88:a8:76:80:c3:de:9f: c1:1b:bf:d7:08:b9:d0:b4:48:29:c0:63:b0:e2:29:fb:80:66: 66:00:cf:6d -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUY8BoycvZCI84+zW+3ksGmR26XegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlE NzgxMDFENDAeFw0yNjA2MDIwNjIwMjVaFw0yNzA2MDEwNjI1MjVaMDMxMTAvBgNV BAMTKDY4NTE3MDVDOUZFNzMyQjA0QjA3QkY0MDg3MjkzREZGMUJFOEI5QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfm9gP6Bo8QExUtkMl+V1ibDqL +tBWNgDl6VMUkhTgoUKofuIljzLCWl+KSt51tJPdCpoFkFg9yYrZnZMht1c+3ULF d/fWgu7mNr+QjBX2nf5cF8TotuZeKZ3YinZQHGZd0WbnJZNoiq7JSE+GmiWG0sFM 5/DmUupMC7umzWLmHndopNuBTaDQGLXh1sRNk1utYwhMNoyaBIrSrg0YSpEUeaQb uURnZZiIIT1+jbXTJ0akBgiRraFZC2ZyWnRGABG1D4AqXqQ7p9KwcfyWI/FNAMZw Nm+I4SJg2qpqKpaawC8hDAbKUEhS9sUZuOeI/bM/IkXuFScN6l9AgbwRbIvvAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUaFFwXJ/nMrBLB79Ahyk9/xvouaYwHwYDVR0j BBgwFoAU7J4chAyHBedUwuP/MqRPudeBAdQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDQ4NzgwOS8wL0VDOUUxQzg0MEM4NzA1RTc1NEMyRTNGRjMyQTQ0 RkI5RDc4MTAxRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlENzgxMDFENC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0NDg3ODA5LzAvMzIzMTMxMmUz MTM1MzUyZTMxMzAzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzODM5MzEz NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAtObZDANBgkqhkiG9w0BAQsFAAOCAQEAcELF9zm+p59OijRq QxyfjysPueyyQoEwt23Ytjgn0fVebKjV4baSWPjajNwU9f5Ax2LYEtCMBEkzcwQ1 43JlN+emQ6Rs2t8b6YpVjjIe/Uf7PCwkd3272CTqk3diS+QJKeU3VRbzB0WBylKJ 6MMUdGpHAjuhn5ZetOM73angi6fSsLLM4YJf+dDVTfqK/UEtLF8H25xHaWOpi7WD ExnFUC53fC49dH5iHJphSgaFBlzLblGmkIFioMEuisQ6kbJF2tMTZ9LNEP9eD3yM d0GifLHcA51s6XXP8Pb2oaunP7jf4rGIqHaAw96fwRu/1wi50LRIKcBjsOIp+4Bm ZgDPbQ== -----END CERTIFICATE-----Generated at Thu Jun 4 11:12:39 2026 by rpki-client