$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3231312e3135342e3135322e302f32312d3231203d3e20313334373734.roa File: 3231312e3135342e3135322e302f32312d3231203d3e20313334373734.roa (raw, json) Hash identifier: byAn39COUxaC7Cs5bPgXOGF7jH2c/8jROlnudnhtFIE= Subject key identifier: 83:C1:8D:F4:ED:8E:5B:05:A9:62:90:96:1E:19:26:FF:A6:7C:DF:68 Certificate issuer: /CN=9B87DFEBDCCDA813116988D4421B088404578168 Certificate serial: 6C2E8CC3FF9CD886DF3F2080C5A24D1AD362D38A Authority key identifier: 9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3231312e3135342e3135322e302f32312d3231203d3e20313334373734.roa Signing time: Thu 09 Apr 2026 08:13:33 +0000 ROA not before: Thu 09 Apr 2026 08:08:33 +0000 ROA not after: Thu 08 Apr 2027 08:13:33 +0000 asID: 134774 IP address blocks: 211.154.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 02:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:2e:8c:c3:ff:9c:d8:86:df:3f:20:80:c5:a2:4d:1a:d3:62:d3:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B87DFEBDCCDA813116988D4421B088404578168 Validity Not Before: Apr 9 08:08:33 2026 GMT Not After : Apr 8 08:13:33 2027 GMT Subject: CN=83C18DF4ED8E5B05A96290961E1926FFA67CDF68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9e:d5:33:b3:0c:a2:cb:bb:b2:f8:8f:01:db: d4:9b:4b:fd:94:3b:a8:f0:5f:a4:ff:41:22:87:36: 48:24:26:9c:99:46:45:f1:ef:c4:cd:40:40:71:be: e7:53:e9:63:44:48:17:71:6e:cb:8f:db:e0:a8:5a: fc:a5:fc:0a:bd:1c:cd:c2:53:9d:78:7e:93:da:c1: 23:ff:85:1c:91:d6:ac:53:ac:eb:2e:8b:93:d9:6b: 02:d7:bd:18:63:86:aa:1a:96:49:6b:8b:df:d5:55: b0:42:b5:9b:e0:dd:17:9e:f4:31:31:05:53:27:0c: c2:39:ca:84:56:a9:1b:3d:8b:9f:08:7b:b4:40:57: aa:5a:87:bf:2f:ce:da:39:e7:ea:79:77:10:0f:89: 00:a6:93:1b:36:3e:2a:d6:42:6d:94:bf:1c:60:75: 34:16:50:b2:e8:21:49:aa:7a:95:c6:67:f2:bd:1a: eb:95:05:97:b0:0d:a4:14:d4:55:ab:35:3b:5d:cb: 0a:25:67:97:e4:71:6c:62:e9:2d:fa:55:44:27:33: 58:a5:bc:55:5e:7b:cf:59:39:f8:23:89:62:4d:55: 46:a3:eb:97:a6:63:5c:51:3b:ae:f9:b6:81:85:f7: 2f:88:13:b2:72:16:69:6a:6f:3d:d6:25:7a:8f:1f: e6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C1:8D:F4:ED:8E:5B:05:A9:62:90:96:1E:19:26:FF:A6:7C:DF:68 X509v3 Authority Key Identifier: keyid:9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3231312e3135342e3135322e302f32312d3231203d3e20313334373734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.154.152.0/21 Signature Algorithm: sha256WithRSAEncryption 67:a7:d6:c1:83:9c:45:91:5f:5d:79:e9:1b:d8:f2:c8:5d:e4: 10:4c:b3:1c:e8:46:b8:86:32:a3:c9:23:e0:ec:d7:36:5d:5f: c5:f5:cf:86:d0:7a:22:50:5f:4d:da:8c:23:84:85:c8:43:a6: 57:59:6e:33:29:eb:ed:ff:fa:38:0e:dc:bd:ca:f1:63:85:c6: 95:10:c0:50:10:09:16:fe:db:f9:53:d2:eb:ef:3c:90:dc:cb: 8e:ab:8a:22:80:9a:78:6a:3e:d0:9d:46:bf:ef:85:e7:21:f9: 87:9f:3c:36:84:93:80:ae:0a:f4:e4:46:e7:90:99:c8:13:43: fb:d5:3c:f2:42:98:ec:74:c9:7b:58:51:b7:76:08:e1:39:ca: f5:87:bd:3f:a4:2c:fe:54:cb:0f:5f:09:82:11:6e:a1:9d:db: 82:1c:92:1d:82:31:b4:cd:c4:b1:b1:17:55:37:88:05:8c:1e: d6:e6:fc:2b:43:0c:2b:a8:12:d0:3b:22:a3:66:53:98:30:35: 95:82:20:c9:6e:29:95:a2:2a:7b:3b:17:b2:eb:b7:27:d5:cc: 22:bf:ac:38:28:11:12:6f:36:2a:37:a8:a7:14:f5:e5:0a:6c: 68:1b:8d:93:66:c5:72:94:22:15:70:3e:6b:31:97:d7:5a:d6: 94:ce:cb:61 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUbC6Mw/+c2IbfPyCAxaJNGtNi04owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI4N0RGRUJEQ0NEQTgxMzExNjk4OEQ0NDIxQjA4ODQw NDU3ODE2ODAeFw0yNjA0MDkwODA4MzNaFw0yNzA0MDgwODEzMzNaMDMxMTAvBgNV BAMTKDgzQzE4REY0RUQ4RTVCMDVBOTYyOTA5NjFFMTkyNkZGQTY3Q0RGNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOntUzswyiy7uy+I8B29SbS/2U O6jwX6T/QSKHNkgkJpyZRkXx78TNQEBxvudT6WNESBdxbsuP2+CoWvyl/Aq9HM3C U514fpPawSP/hRyR1qxTrOsui5PZawLXvRhjhqoalklri9/VVbBCtZvg3Ree9DEx BVMnDMI5yoRWqRs9i58Ie7RAV6pah78vzto55+p5dxAPiQCmkxs2PirWQm2Uvxxg dTQWULLoIUmqepXGZ/K9GuuVBZewDaQU1FWrNTtdywolZ5fkcWxi6S36VUQnM1il vFVee89ZOfgjiWJNVUaj65emY1xRO675toGF9y+IE7JyFmlqbz3WJXqPH+avAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUg8GN9O2OWwWpYpCWHhkm/6Z832gwHwYDVR0j BBgwFoAUm4ff69zNqBMRaYjUQhsIhARXgWgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDc0OTk1My8wLzlCODdERkVCRENDREE4MTMxMTY5ODhENDQyMUIw ODg0MDQ1NzgxNjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUI4N0RGRUJEQ0NEQTgxMzExNjk4OEQ0NDIxQjA4ODQwNDU3ODE2OC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0NzQ5OTUzLzAvMzIzMTMxMmUz MTM1MzQyZTMxMzUzMjJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMxMzMzNDM3Mzcz NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEA9OamDANBgkqhkiG9w0BAQsFAAOCAQEAZ6fWwYOcRZFfXXnp G9jyyF3kEEyzHOhGuIYyo8kj4OzXNl1fxfXPhtB6IlBfTdqMI4SFyEOmV1luMynr 7f/6OA7cvcrxY4XGlRDAUBAJFv7b+VPS6+88kNzLjquKIoCaeGo+0J1Gv++F5yH5 h588NoSTgK4K9ORG55CZyBND+9U88kKY7HTJe1hRt3YI4TnK9Ye9P6Qs/lTLD18J ghFuoZ3bghySHYIxtM3EsbEXVTeIBYwe1ub8K0MMK6gS0Dsio2ZTmDA1lYIgyW4p laIqezsXsuu3J9XMIr+sOCgREm82KjeopxT15QpsaBuNk2bFcpQiFXA+azGX11rW lM7LYQ== -----END CERTIFICATE-----Generated at Mon Apr 13 15:31:42 2026 by rpki-client