$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e34382e302f32312d3231203d3e2034383038.roa File: 3131382e3139342e34382e302f32312d3231203d3e2034383038.roa (raw, json) Hash identifier: Wlv1ILc08DXaAYSI+HkiftdI5PHLcW7mnRqo6voD11w= Subject key identifier: CD:B9:6B:29:1A:E4:60:C9:73:C4:2A:63:37:11:8A:18:9B:8D:AE:7C Certificate issuer: /CN=098D421CB46F292F13CE71DF3D685D5E82893289 Certificate serial: 1E7F48C8879D3198C4859F1A1002E3C6CA59648F Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e34382e302f32312d3231203d3e2034383038.roa Signing time: Tue 02 Jun 2026 07:44:13 +0000 ROA not before: Tue 02 Jun 2026 07:39:13 +0000 ROA not after: Tue 01 Jun 2027 07:44:13 +0000 asID: 4808 IP address blocks: 118.194.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:7f:48:c8:87:9d:31:98:c4:85:9f:1a:10:02:e3:c6:ca:59:64:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289 Validity Not Before: Jun 2 07:39:13 2026 GMT Not After : Jun 1 07:44:13 2027 GMT Subject: CN=CDB96B291AE460C973C42A6337118A189B8DAE7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:64:17:6c:7f:21:f5:e8:fd:23:7a:d0:74:b1: bb:21:b8:d1:db:58:fd:c0:9b:17:cb:38:c4:e7:3b: 02:82:a0:ae:f6:41:66:aa:c0:69:44:bd:ff:62:52: cd:05:b0:97:17:47:dc:36:6e:14:34:fb:e4:25:67: cd:66:88:d9:95:2f:6d:de:af:08:f0:32:14:da:f9: c6:dc:19:8f:c4:6f:02:93:c3:ad:bd:9c:26:a9:e0: 94:19:a8:7a:4b:1b:ae:00:f7:49:db:80:a8:4d:66: a1:d2:c9:e0:87:ff:1b:e1:54:6c:47:c2:85:4a:06: 31:58:f6:fe:a1:07:2c:05:32:7a:20:f7:31:13:d6: c7:06:b2:66:9b:70:e8:1e:ed:f6:74:bd:9f:34:97: 88:72:07:d2:a7:2e:41:18:37:b6:7d:52:90:8a:c2: 4e:23:2b:45:86:28:6a:c8:4c:c0:7c:b2:3d:65:d2: bd:7b:05:bb:27:44:5f:71:74:26:6a:22:43:70:d1: 7f:67:96:d4:4d:bb:83:18:e2:a8:d8:d1:24:47:57: 46:01:13:47:e9:87:37:51:a5:66:8e:4b:e7:da:02: aa:78:5a:5f:60:f7:15:76:9b:91:45:97:0c:01:27: 0a:73:a1:c4:83:bb:6d:84:70:80:c4:8b:2f:22:a9: cb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B9:6B:29:1A:E4:60:C9:73:C4:2A:63:37:11:8A:18:9B:8D:AE:7C X509v3 Authority Key Identifier: keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e34382e302f32312d3231203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 118.194.48.0/21 Signature Algorithm: sha256WithRSAEncryption 08:ec:00:c0:8c:07:f9:78:7d:87:0e:e9:60:05:7c:b5:f1:13: 42:4f:0c:9f:09:9f:b2:2e:54:82:da:04:63:e5:63:82:16:e1: 5a:28:ad:b9:4c:5e:38:0e:0e:a8:d1:69:fd:18:a4:30:2c:85: 46:00:c4:f5:b1:21:c5:03:c5:f2:24:6a:d7:f3:1a:12:02:0d: 1c:f1:e4:70:05:d1:b1:9b:7a:ba:88:c0:b5:49:b4:f5:b2:32: c9:83:3a:8b:48:44:49:b4:3b:65:5a:e7:76:38:fd:65:44:b5: c6:01:94:18:b0:a6:72:ce:a4:4a:9a:ac:ef:ee:0e:33:40:1d: 0f:f9:7b:fd:3c:33:4b:b3:40:c0:0d:5b:57:73:c4:19:95:3b: ca:16:24:04:30:25:74:f2:92:92:4d:6d:b5:26:69:6e:3e:b7: 3a:26:45:5f:36:5f:56:bc:bb:36:a2:d8:9c:e7:6f:84:97:8c: f4:d0:40:82:0d:a0:98:7a:f6:66:d4:92:fd:6a:81:92:dd:66: 12:5f:9e:a3:1a:12:4c:2d:14:88:a4:f1:0c:bb:08:27:d1:eb: f8:3a:26:1f:28:52:76:4c:fb:e0:bc:79:79:78:44:41:2e:c5: df:3c:9d:d8:94:69:b0:6f:69:f3:28:d8:ff:58:bc:52:f9:f3: de:38:54:bc -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUHn9IyIedMZjEhZ8aEALjxspZZI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4 Mjg5MzI4OTAeFw0yNjA2MDIwNzM5MTNaFw0yNzA2MDEwNzQ0MTNaMDMxMTAvBgNV BAMTKENEQjk2QjI5MUFFNDYwQzk3M0M0MkE2MzM3MTE4QTE4OUI4REFFN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNZBdsfyH16P0jetB0sbshuNHb WP3AmxfLOMTnOwKCoK72QWaqwGlEvf9iUs0FsJcXR9w2bhQ0++QlZ81miNmVL23e rwjwMhTa+cbcGY/EbwKTw629nCap4JQZqHpLG64A90nbgKhNZqHSyeCH/xvhVGxH woVKBjFY9v6hBywFMnog9zET1scGsmabcOge7fZ0vZ80l4hyB9KnLkEYN7Z9UpCK wk4jK0WGKGrITMB8sj1l0r17BbsnRF9xdCZqIkNw0X9nltRNu4MY4qjY0SRHV0YB E0fphzdRpWaOS+faAqp4Wl9g9xV2m5FFlwwBJwpzocSDu22EcIDEiy8iqcv7AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUzblrKRrkYMlzxCpjNxGKGJuNrnwwHwYDVR0j BBgwFoAUCY1CHLRvKS8TznHfPWhdXoKJMokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzY2MjQ2Ni8wLzA5OEQ0MjFDQjQ2RjI5MkYxM0NFNzFERjNENjg1 RDVFODI4OTMyODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4Mjg5MzI4OS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3NjYyNDY2LzAvMzEzMTM4MmUzMTM5 MzQyZTM0MzgyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA3bCMDANBgkqhkiG9w0BAQsFAAOCAQEACOwAwIwH+Xh9hw7pYAV8tfETQk8M nwmfsi5UgtoEY+VjghbhWiituUxeOA4OqNFp/RikMCyFRgDE9bEhxQPF8iRq1/Ma EgINHPHkcAXRsZt6uojAtUm09bIyyYM6i0hESbQ7ZVrndjj9ZUS1xgGUGLCmcs6k Spqs7+4OM0AdD/l7/TwzS7NAwA1bV3PEGZU7yhYkBDAldPKSkk1ttSZpbj63OiZF XzZfVry7NqLYnOdvhJeM9NBAgg2gmHr2ZtSS/WqBkt1mEl+eoxoSTC0UiKTxDLsI J9Hr+DomHyhSdkz74Lx5eXhEQS7F3zyd2JRpsG9p8yjY/1i8Uvnz3jhUvA== -----END CERTIFICATE-----Generated at Fri Jun 12 02:24:47 2026 by rpki-client