$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3132302e302f32312d3231203d3e203538353431.roa File: 3231312e3135352e3132302e302f32312d3231203d3e203538353431.roa (raw, json) Hash identifier: H6Z1n4816A3cvrcg/4JXWuWg2N4DIsmC9oHT0+xO5As= Subject key identifier: 2E:61:21:8F:7C:86:95:7E:EC:61:5E:CD:4D:7C:77:F2:2E:6C:82:5A Certificate issuer: /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Certificate serial: 175AF8566BD0CA00522698F3E6EC41AA9D5F282D Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3132302e302f32312d3231203d3e203538353431.roa Signing time: Wed 27 May 2026 08:36:55 +0000 ROA not before: Wed 27 May 2026 08:31:55 +0000 ROA not after: Wed 26 May 2027 08:36:55 +0000 asID: 58541 IP address blocks: 211.155.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 13:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:5a:f8:56:6b:d0:ca:00:52:26:98:f3:e6:ec:41:aa:9d:5f:28:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Validity Not Before: May 27 08:31:55 2026 GMT Not After : May 26 08:36:55 2027 GMT Subject: CN=2E61218F7C86957EEC615ECD4D7C77F22E6C825A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c0:da:5a:6b:7b:6a:7d:e1:bf:7f:36:90:1c: 87:73:72:1d:81:b7:c6:dc:99:0b:06:a0:1b:05:73: cb:79:00:56:70:04:1d:da:f5:e1:da:79:7b:05:83: d6:7d:68:64:f2:2e:79:95:41:28:08:03:ef:42:ec: 26:4f:1a:74:55:64:d2:27:2e:2b:33:5c:90:14:cf: 5a:7c:e3:7c:93:0d:e5:77:d7:7a:fe:b3:80:a1:ac: 43:ce:51:e9:f9:e7:98:00:aa:b8:55:a5:d2:b5:63: 96:64:89:01:4f:f9:24:f5:72:fa:e9:de:f2:86:80: f5:03:53:66:47:b1:36:9f:df:d8:e2:68:b9:5b:cc: 95:84:33:7a:ea:fe:03:4e:21:2c:f5:6d:e4:f3:f5: 6a:45:f7:c1:7c:6f:6e:8a:a7:f4:09:22:da:ce:c7: db:14:5b:c5:57:2f:2a:51:67:a3:5a:92:0d:da:51: a0:a0:2b:18:c9:8f:32:6b:0c:b6:f9:da:77:a0:1a: eb:c7:5f:9e:6f:79:3a:d1:44:1a:ba:3a:93:9b:b5: 2f:c8:4d:f9:66:54:c5:f6:ff:34:db:d6:17:cb:32: e7:dd:68:bd:0a:91:ce:7f:55:1f:24:9b:d9:cc:5c: 01:8c:25:97:7e:9e:7b:24:c6:ed:00:63:c1:ed:73: 00:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:61:21:8F:7C:86:95:7E:EC:61:5E:CD:4D:7C:77:F2:2E:6C:82:5A X509v3 Authority Key Identifier: keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3132302e302f32312d3231203d3e203538353431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.155.120.0/21 Signature Algorithm: sha256WithRSAEncryption ab:13:b0:12:15:47:48:a3:01:94:f0:05:b2:4d:15:d7:fb:0e: df:b3:37:07:de:58:24:0a:67:f3:90:71:85:4d:6f:0c:da:80: 9c:8d:c7:0e:d4:f2:09:97:70:6a:38:75:0d:d4:f8:c5:3b:fb: 23:3d:59:43:ad:6c:cf:46:47:82:b8:05:62:ce:02:f7:33:25: 7c:b2:3f:4d:b7:56:4c:3e:b6:cc:8e:b0:95:7f:93:7a:2d:70: e1:5b:61:fa:a2:f6:46:f1:b1:56:47:23:59:7c:d4:b6:f2:b7: b2:8c:29:25:6d:88:86:8b:5a:79:e3:19:a4:c6:4c:43:b0:59: 28:a5:7b:f8:9e:56:6b:3f:6b:da:b8:fd:ae:ca:76:22:5a:06: 47:e8:aa:cf:81:c0:04:8d:91:85:fe:e1:fa:bd:00:d8:a1:94: cd:84:f8:80:f2:09:c8:3a:d4:a4:36:b6:b1:af:5b:29:db:56: 5f:69:3d:f7:c6:e2:28:a6:25:80:4e:ba:b3:6c:0c:8f:f4:09: 4b:0c:2e:f2:b8:c3:55:81:b6:29:a0:f3:4c:c6:c6:fb:3d:e7: e6:7c:22:1e:3b:50:98:52:0b:26:c3:9a:ab:b7:4d:b7:1e:d4: c1:5a:ff:ee:5b:ad:e2:e4:4b:27:a7:41:8b:68:a2:2c:5c:4c: a4:53:b7:ca -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUF1r4VmvQygBSJpjz5uxBqp1fKC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlE NzgxMDFENDAeFw0yNjA1MjcwODMxNTVaFw0yNzA1MjYwODM2NTVaMDMxMTAvBgNV BAMTKDJFNjEyMThGN0M4Njk1N0VFQzYxNUVDRDREN0M3N0YyMkU2QzgyNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiwNpaa3tqfeG/fzaQHIdzch2B t8bcmQsGoBsFc8t5AFZwBB3a9eHaeXsFg9Z9aGTyLnmVQSgIA+9C7CZPGnRVZNIn LiszXJAUz1p843yTDeV313r+s4ChrEPOUen555gAqrhVpdK1Y5ZkiQFP+ST1cvrp 3vKGgPUDU2ZHsTaf39jiaLlbzJWEM3rq/gNOISz1beTz9WpF98F8b26Kp/QJItrO x9sUW8VXLypRZ6Nakg3aUaCgKxjJjzJrDLb52negGuvHX55veTrRRBq6OpObtS/I TflmVMX2/zTb1hfLMufdaL0Kkc5/VR8km9nMXAGMJZd+nnskxu0AY8HtcwDNAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQULmEhj3yGlX7sYV7NTXx38i5sglowHwYDVR0j BBgwFoAU7J4chAyHBedUwuP/MqRPudeBAdQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDQ4NzgwOS8wL0VDOUUxQzg0MEM4NzA1RTc1NEMyRTNGRjMyQTQ0 RkI5RDc4MTAxRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlENzgxMDFENC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ0ODc4MDkvMC8zMjMxMzEyZTMx MzUzNTJlMzEzMjMwMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzUzODM1MzQzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA9ObeDANBgkqhkiG9w0BAQsFAAOCAQEAqxOwEhVHSKMBlPAFsk0V 1/sO37M3B95YJApn85BxhU1vDNqAnI3HDtTyCZdwajh1DdT4xTv7Iz1ZQ61sz0ZH grgFYs4C9zMlfLI/TbdWTD62zI6wlX+Tei1w4Vth+qL2RvGxVkcjWXzUtvK3sowp JW2IhotaeeMZpMZMQ7BZKKV7+J5Waz9r2rj9rsp2IloGR+iqz4HABI2Rhf7h+r0A 2KGUzYT4gPIJyDrUpDa2sa9bKdtWX2k998biKKYlgE66s2wMj/QJSwwu8rjDVYG2 KaDzTMbG+z3n5nwiHjtQmFILJsOaq7dNtx7UwVr/7lut4uRLJ6dBi2iiLFxMpFO3 yg== -----END CERTIFICATE-----Generated at Fri May 29 22:56:53 2026 by rpki-client