$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3130382e302f32322d3232203d3e20313333373734.roa File: 3231312e3135352e3130382e302f32322d3232203d3e20313333373734.roa (raw, json) Hash identifier: ogYFO207LFn8kLObTi8Qo2cpfCdN22qWreV61dxA9c0= Subject key identifier: BD:95:6C:42:38:D0:8E:0A:F4:64:74:E7:A1:1A:DD:D4:BE:DC:E3:9A Certificate issuer: /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Certificate serial: 5F94B75C17E319999555EA26D652CCE6236DBE52 Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3130382e302f32322d3232203d3e20313333373734.roa Signing time: Wed 27 May 2026 08:40:43 +0000 ROA not before: Wed 27 May 2026 08:35:43 +0000 ROA not after: Wed 26 May 2027 08:40:43 +0000 asID: 133774 IP address blocks: 211.155.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 13:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:94:b7:5c:17:e3:19:99:95:55:ea:26:d6:52:cc:e6:23:6d:be:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Validity Not Before: May 27 08:35:43 2026 GMT Not After : May 26 08:40:43 2027 GMT Subject: CN=BD956C4238D08E0AF46474E7A11ADDD4BEDCE39A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:15:5a:6f:e9:87:34:e6:5e:50:a3:e8:16:6d: 69:68:61:a1:70:22:07:5b:f7:ec:c0:d7:a1:0a:c8: b3:4d:8c:d2:61:6c:5b:28:f3:47:76:1c:e8:d8:78: 68:d3:a8:b7:01:66:38:9f:79:80:16:08:fb:62:96: ba:87:b2:ad:f7:89:97:0b:ab:81:0f:ff:56:0e:8a: 8c:86:c1:a7:33:45:39:26:cb:74:5d:21:84:38:b9: ab:44:d1:75:8b:6c:f9:83:4a:27:71:c5:9b:04:dc: 86:61:5b:e9:1e:75:4b:32:15:73:6d:47:ad:6a:5b: 0b:14:be:3a:d8:8a:4c:bb:f6:cd:6e:73:79:29:58: 73:b8:b7:63:f4:bf:3d:46:21:0c:9a:9c:3f:ef:b5: 18:ab:fc:2d:03:58:4b:85:fb:08:33:4a:b6:3b:c7: df:91:61:88:d0:42:aa:12:8b:c4:9f:c4:ce:e0:83: 35:bf:21:00:a9:4d:07:b5:56:c2:1f:72:da:58:0b: 8d:8f:af:1e:a1:8f:94:e5:07:cc:ec:32:7e:35:2b: f1:ba:a1:47:ca:bd:0d:34:b7:d2:e6:c7:64:c0:38: d9:5d:11:bd:64:32:a6:11:4b:81:03:8b:e7:2e:d0: 12:ac:d5:91:f7:00:e3:7a:9e:d8:a4:a6:04:04:d6: a7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:95:6C:42:38:D0:8E:0A:F4:64:74:E7:A1:1A:DD:D4:BE:DC:E3:9A X509v3 Authority Key Identifier: keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3130382e302f32322d3232203d3e20313333373734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.155.108.0/22 Signature Algorithm: sha256WithRSAEncryption 25:93:f4:0b:8e:64:f2:e4:21:4b:3d:33:d7:e9:46:80:63:a8: 29:cf:ce:d7:26:07:5c:f8:33:30:6c:ba:ed:34:56:99:be:36: 90:50:3c:62:61:d9:23:e8:c6:80:7a:ca:b4:c3:cd:05:39:72: 24:e6:8f:6b:0b:a8:6c:f0:f3:7e:25:af:ab:71:dc:e6:53:8a: df:fc:1b:b2:2f:be:1f:e1:2d:1e:6d:b5:5a:d8:ca:68:ad:67: 04:fd:01:bd:09:80:94:82:85:a6:dc:b5:5f:33:b7:3f:37:69: 83:45:81:cf:dc:67:be:e3:bb:3e:4e:03:14:8d:10:d6:aa:9b: 46:a4:e0:ba:c6:43:79:4b:9a:c6:dd:0e:9c:d9:87:c4:82:62: e7:06:0e:1c:da:49:87:9a:16:c8:df:71:f6:6d:37:b7:ce:b6: 7f:03:63:58:76:62:d6:db:e9:99:86:f0:12:9d:1e:06:31:74: 76:1c:e6:83:51:aa:c7:06:e0:3f:77:95:a6:c7:68:7f:29:31: 0d:54:fa:56:5e:43:eb:31:0c:19:00:35:82:07:68:12:b1:64: 6c:52:87:f4:97:f9:6a:f3:4f:73:1c:9c:ec:46:f9:39:3a:5a: e9:e1:a6:fc:90:8b:b0:6c:9f:b3:6c:02:58:bd:3c:fe:fd:d4: 44:cf:53:b5 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUX5S3XBfjGZmVVeom1lLM5iNtvlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlE NzgxMDFENDAeFw0yNjA1MjcwODM1NDNaFw0yNzA1MjYwODQwNDNaMDMxMTAvBgNV BAMTKEJEOTU2QzQyMzhEMDhFMEFGNDY0NzRFN0ExMUFEREQ0QkVEQ0UzOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMFVpv6Yc05l5Qo+gWbWloYaFw Igdb9+zA16EKyLNNjNJhbFso80d2HOjYeGjTqLcBZjifeYAWCPtilrqHsq33iZcL q4EP/1YOioyGwaczRTkmy3RdIYQ4uatE0XWLbPmDSidxxZsE3IZhW+kedUsyFXNt R61qWwsUvjrYiky79s1uc3kpWHO4t2P0vz1GIQyanD/vtRir/C0DWEuF+wgzSrY7 x9+RYYjQQqoSi8SfxM7ggzW/IQCpTQe1VsIfctpYC42Prx6hj5TlB8zsMn41K/G6 oUfKvQ00t9Lmx2TAONldEb1kMqYRS4EDi+cu0BKs1ZH3AON6ntikpgQE1qfZAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUvZVsQjjQjgr0ZHTnoRrd1L7c45owHwYDVR0j BBgwFoAU7J4chAyHBedUwuP/MqRPudeBAdQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDQ4NzgwOS8wL0VDOUUxQzg0MEM4NzA1RTc1NEMyRTNGRjMyQTQ0 RkI5RDc4MTAxRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlENzgxMDFENC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0NDg3ODA5LzAvMzIzMTMxMmUz MTM1MzUyZTMxMzAzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzMzM3Mzcz NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAtObbDANBgkqhkiG9w0BAQsFAAOCAQEAJZP0C45k8uQhSz0z 1+lGgGOoKc/O1yYHXPgzMGy67TRWmb42kFA8YmHZI+jGgHrKtMPNBTlyJOaPawuo bPDzfiWvq3Hc5lOK3/wbsi++H+EtHm21WtjKaK1nBP0BvQmAlIKFpty1XzO3Pzdp g0WBz9xnvuO7Pk4DFI0Q1qqbRqTgusZDeUuaxt0OnNmHxIJi5wYOHNpJh5oWyN9x 9m03t862fwNjWHZi1tvpmYbwEp0eBjF0dhzmg1GqxwbgP3eVpsdofykxDVT6Vl5D 6zEMGQA1ggdoErFkbFKH9Jf5avNPcxyc7Eb5OTpa6eGm/JCLsGyfs2wCWL08/v3U RM9TtQ== -----END CERTIFICATE-----Generated at Fri May 29 23:53:56 2026 by rpki-client