$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3130342e302f32322d3232203d3e20313333373734.roa File: 3231312e3135352e3130342e302f32322d3232203d3e20313333373734.roa (raw, json) Hash identifier: g7URIOtpeptv0I7W/H+Q02JimqVDks0/5btGuJMLPrQ= Subject key identifier: D7:66:FD:EC:81:25:AB:6B:C2:C1:72:09:95:8E:0A:E8:02:0D:88:07 Certificate issuer: /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Certificate serial: 35827875AAFCC33C666F4C2FD91165A932D7FF35 Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3130342e302f32322d3232203d3e20313333373734.roa Signing time: Tue 02 Jun 2026 06:25:25 +0000 ROA not before: Tue 02 Jun 2026 06:20:25 +0000 ROA not after: Tue 01 Jun 2027 06:25:25 +0000 asID: 133774 IP address blocks: 211.155.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 14:21:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:82:78:75:aa:fc:c3:3c:66:6f:4c:2f:d9:11:65:a9:32:d7:ff:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Validity Not Before: Jun 2 06:20:25 2026 GMT Not After : Jun 1 06:25:25 2027 GMT Subject: CN=D766FDEC8125AB6BC2C17209958E0AE8020D8807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:27:35:7a:fa:e7:0c:60:02:50:25:5e:b8:72: 94:9c:58:69:47:30:1e:1f:a5:3e:e9:dd:57:d4:99: 8c:16:7d:f8:04:c8:60:e1:bc:f3:c3:11:e4:14:d0: fc:fe:93:78:0f:dc:9b:18:64:0e:38:3f:ae:b2:03: 5a:8a:b1:bb:22:e6:38:e4:a3:c8:8a:b3:fb:41:ed: e3:5e:b7:3c:99:45:6e:5c:e7:bb:4e:60:59:ff:0b: b9:67:f4:50:19:66:44:9a:7d:4e:30:8d:ed:dc:db: bb:50:0b:36:f1:2c:80:8e:47:cf:11:88:66:80:82: 81:11:fa:31:5c:47:73:2a:02:e5:9d:f9:bf:9a:ea: 3e:42:73:bb:ab:40:f6:16:c0:77:80:8f:a9:d3:0b: 52:12:da:cc:9b:29:fd:40:9c:26:fe:7b:4c:c2:59: cb:ed:dd:18:2a:ca:8f:ea:4c:a3:b4:92:d7:55:b6: 24:ab:da:68:05:25:41:bf:16:a0:d4:d1:5d:73:77: c4:11:82:48:54:6c:54:58:99:b8:c2:ec:6b:d3:da: 1c:01:f1:9d:00:36:8c:94:ec:01:66:75:59:11:57: 5a:cb:3d:68:3b:1f:0c:e7:5b:50:bf:5e:84:db:9d: 6f:d0:36:a2:3b:e2:b1:54:ab:1e:78:ff:f2:02:e3: e4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:66:FD:EC:81:25:AB:6B:C2:C1:72:09:95:8E:0A:E8:02:0D:88:07 X509v3 Authority Key Identifier: keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3130342e302f32322d3232203d3e20313333373734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.155.104.0/22 Signature Algorithm: sha256WithRSAEncryption be:4a:8a:99:70:5c:28:fe:1e:28:00:5f:ca:1b:87:02:4c:bb: cd:c8:a8:5f:02:66:7a:9d:59:9d:eb:89:67:ce:88:bb:fe:57: 84:36:ec:d2:51:f8:31:d7:68:87:d0:e3:33:38:e2:c1:58:3f: 82:67:99:1a:2a:bd:62:5f:d3:ac:8d:13:11:f2:df:d5:42:70: 68:bd:66:d4:d6:3f:4b:61:4d:2f:78:c6:43:1e:31:22:24:b6: 55:da:d6:7d:87:78:bd:6c:0c:f2:c2:f9:d8:1a:50:0a:ba:0f: 12:bc:9d:ef:40:1c:2f:0d:b8:18:6e:1b:04:02:81:dc:c4:5d: 36:33:10:5c:31:e4:80:c1:06:2b:68:9f:a4:9d:0e:46:7e:4f: 59:c0:a8:9b:bd:35:fa:6b:31:a2:41:8f:4f:3b:49:00:e9:d5: 3e:4b:84:ab:b3:93:9d:45:0f:5c:fe:1b:c5:0b:6a:39:66:f4: 89:90:8b:cd:f0:67:a5:b8:34:bc:9d:db:27:30:94:80:47:c5: 14:3e:f4:db:07:ba:0c:54:f5:23:f8:9f:c9:b5:ea:73:e5:bf: bd:17:15:7f:3f:66:1e:bf:6e:59:89:f3:1f:56:26:97:f4:7c: 01:b4:0d:2e:94:4b:4f:7b:41:e7:c2:37:fd:e2:cc:5c:22:af: e2:4b:fd:82 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUNYJ4dar8wzxmb0wv2RFlqTLX/zUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlE NzgxMDFENDAeFw0yNjA2MDIwNjIwMjVaFw0yNzA2MDEwNjI1MjVaMDMxMTAvBgNV BAMTKEQ3NjZGREVDODEyNUFCNkJDMkMxNzIwOTk1OEUwQUU4MDIwRDg4MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyJzV6+ucMYAJQJV64cpScWGlH MB4fpT7p3VfUmYwWffgEyGDhvPPDEeQU0Pz+k3gP3JsYZA44P66yA1qKsbsi5jjk o8iKs/tB7eNetzyZRW5c57tOYFn/C7ln9FAZZkSafU4wje3c27tQCzbxLICOR88R iGaAgoER+jFcR3MqAuWd+b+a6j5Cc7urQPYWwHeAj6nTC1IS2sybKf1AnCb+e0zC Wcvt3Rgqyo/qTKO0ktdVtiSr2mgFJUG/FqDU0V1zd8QRgkhUbFRYmbjC7GvT2hwB 8Z0ANoyU7AFmdVkRV1rLPWg7HwznW1C/XoTbnW/QNqI74rFUqx54//IC4+ThAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQU12b97IElq2vCwXIJlY4K6AINiAcwHwYDVR0j BBgwFoAU7J4chAyHBedUwuP/MqRPudeBAdQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDQ4NzgwOS8wL0VDOUUxQzg0MEM4NzA1RTc1NEMyRTNGRjMyQTQ0 RkI5RDc4MTAxRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlENzgxMDFENC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0NDg3ODA5LzAvMzIzMTMxMmUz MTM1MzUyZTMxMzAzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzMzM3Mzcz NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAtObaDANBgkqhkiG9w0BAQsFAAOCAQEAvkqKmXBcKP4eKABf yhuHAky7zcioXwJmep1ZneuJZ86Iu/5XhDbs0lH4Mddoh9DjMzjiwVg/gmeZGiq9 Yl/TrI0TEfLf1UJwaL1m1NY/S2FNL3jGQx4xIiS2VdrWfYd4vWwM8sL52BpQCroP Eryd70AcLw24GG4bBAKB3MRdNjMQXDHkgMEGK2ifpJ0ORn5PWcCom701+msxokGP TztJAOnVPkuEq7OTnUUPXP4bxQtqOWb0iZCLzfBnpbg0vJ3bJzCUgEfFFD702we6 DFT1I/ifybXqc+W/vRcVfz9mHr9uWYnzH1Yml/R8AbQNLpRLT3tB58I3/eLMXCKv 4kv9gg== -----END CERTIFICATE-----Generated at Fri Jun 12 02:41:06 2026 by rpki-client