$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972271107/0/3131352e3137342e39362e302f31392d3139203d3e2030.roa File: 3131352e3137342e39362e302f31392d3139203d3e2030.roa (raw, json) Hash identifier: kamwCCyQPpnZAvND7bd4dwpmFetGdr6CIP2dKgixvS8= Subject key identifier: 42:96:35:7B:DF:12:A9:AA:0E:F4:1A:60:00:1C:A9:19:33:A6:1B:48 Certificate issuer: /CN=8FAB27452D80D270582E88C3F77F13734A31720D Certificate serial: 724AE29AC2C11E5BF231400FB371184810644DA0 Authority key identifier: 8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/3131352e3137342e39362e302f31392d3139203d3e2030.roa Signing time: Fri 29 May 2026 07:27:22 +0000 ROA not before: Fri 29 May 2026 07:22:22 +0000 ROA not after: Fri 28 May 2027 07:27:22 +0000 asID: 0 IP address blocks: 115.174.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 08:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:4a:e2:9a:c2:c1:1e:5b:f2:31:40:0f:b3:71:18:48:10:64:4d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FAB27452D80D270582E88C3F77F13734A31720D Validity Not Before: May 29 07:22:22 2026 GMT Not After : May 28 07:27:22 2027 GMT Subject: CN=4296357BDF12A9AA0EF41A60001CA91933A61B48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:81:6a:1a:f5:39:7a:a4:7b:58:60:ce:05:24: 92:1b:44:91:23:a6:85:e6:ae:31:27:c1:00:08:29: 7a:5c:52:32:27:5d:5c:1b:b7:05:99:30:ef:f4:6d: 6f:e4:3a:6c:07:7d:a8:96:45:67:3e:84:7d:e9:18: 13:8f:46:f7:eb:2e:39:81:7b:2b:13:8b:f3:bc:b6: 62:ca:00:10:33:9d:21:af:f7:e1:66:2c:49:37:ca: 22:cc:f0:22:17:20:9b:bb:a5:00:94:f0:fa:a7:06: bd:5f:0f:42:ab:70:f9:74:0c:6e:c7:7b:53:70:95: 3c:03:0b:2d:39:38:8d:2b:da:53:6e:11:36:2d:26: f0:6b:c3:47:4e:a4:83:ec:0f:93:09:3d:c2:44:7c: e5:c4:15:1d:e0:77:17:0f:3c:06:de:7c:d3:6b:1f: ba:3a:ba:30:ac:a0:7e:86:e0:00:ce:0e:c3:26:55: b7:ff:6f:e5:59:89:db:2a:97:57:83:a9:d3:af:5e: b1:fd:30:d5:ab:9e:73:d6:15:48:53:b3:16:4f:97: d7:62:6a:de:d3:36:ac:f3:a5:5a:f8:16:59:17:86: ee:6a:fa:cc:37:90:82:98:83:55:4d:0b:6c:f4:33: 1c:60:0b:cf:38:be:bc:b5:2a:2f:0f:89:32:27:64: 35:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:96:35:7B:DF:12:A9:AA:0E:F4:1A:60:00:1C:A9:19:33:A6:1B:48 X509v3 Authority Key Identifier: keyid:8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/3131352e3137342e39362e302f31392d3139203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 115.174.96.0/19 Signature Algorithm: sha256WithRSAEncryption b2:ea:69:9f:7c:d1:7d:7e:18:ca:d4:24:12:ec:19:ff:eb:a7: 45:0e:cd:91:54:c7:af:0b:19:32:cb:e7:4d:a7:d0:a3:23:ac: 68:a7:9a:44:27:18:6e:9c:a9:b8:f9:b7:0d:79:95:c1:93:37: 8d:c2:41:44:90:c2:c4:5e:15:c2:8c:90:31:80:d5:f2:f1:c1: 33:c0:5e:87:af:f5:74:d6:13:20:f2:a2:38:62:ec:e4:d9:a2: f8:e1:d3:92:3d:4d:5c:bf:27:69:db:fc:e5:86:ff:18:82:55: 54:ed:de:9b:6c:7f:f2:66:73:7f:d6:18:fe:f8:9c:c4:ce:b5: 35:c6:a8:79:5e:f1:b4:07:83:a4:64:6a:04:b4:50:f3:13:da: 02:e0:ca:03:51:18:d0:46:99:55:be:bf:da:7f:d2:9f:e5:94: 86:bc:c5:1a:4b:de:c0:53:c0:7a:28:15:9f:ec:15:91:11:51: 37:86:52:49:dc:d0:4d:70:73:5f:bd:a5:b8:4c:4c:27:e7:fd: 02:b2:b8:ac:25:bc:26:8e:f1:07:ef:13:1c:62:47:d7:1a:10: 9c:5f:06:fc:ee:ed:eb:e6:e2:a3:3a:d7:9e:d2:34:99:24:70: 86:9d:07:33:59:98:c4:f8:78:5b:cf:6c:ca:79:0d:c7:7b:5c: b3:4e:8f:41 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUckrimsLBHlvyMUAPs3EYSBBkTaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0 QTMxNzIwRDAeFw0yNjA1MjkwNzIyMjJaFw0yNzA1MjgwNzI3MjJaMDMxMTAvBgNV BAMTKDQyOTYzNTdCREYxMkE5QUEwRUY0MUE2MDAwMUNBOTE5MzNBNjFCNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0gWoa9Tl6pHtYYM4FJJIbRJEj poXmrjEnwQAIKXpcUjInXVwbtwWZMO/0bW/kOmwHfaiWRWc+hH3pGBOPRvfrLjmB eysTi/O8tmLKABAznSGv9+FmLEk3yiLM8CIXIJu7pQCU8PqnBr1fD0KrcPl0DG7H e1NwlTwDCy05OI0r2lNuETYtJvBrw0dOpIPsD5MJPcJEfOXEFR3gdxcPPAbefNNr H7o6ujCsoH6G4ADODsMmVbf/b+VZidsql1eDqdOvXrH9MNWrnnPWFUhTsxZPl9di at7TNqzzpVr4FlkXhu5q+sw3kIKYg1VNC2z0MxxgC884vry1Ki8PiTInZDW/AgMB AAGjggILMIICBzAdBgNVHQ4EFgQUQpY1e98SqaoO9BpgABypGTOmG0gwHwYDVR0j BBgwFoAUj6snRS2A0nBYLojD938Tc0oxcg0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjI3MTEwNy8wLzhGQUIyNzQ1MkQ4MEQyNzA1ODJFODhDM0Y3N0Yx MzczNEEzMTcyMEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0QTMxNzIwRC5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcyMjcxMTA3LzAvMzEzMTM1MmUzMTM3 MzQyZTM5MzYyZTMwMmYzMTM5MmQzMTM5MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXOu YDANBgkqhkiG9w0BAQsFAAOCAQEAsuppn3zRfX4YytQkEuwZ/+unRQ7NkVTHrwsZ MsvnTafQoyOsaKeaRCcYbpypuPm3DXmVwZM3jcJBRJDCxF4VwoyQMYDV8vHBM8Be h6/1dNYTIPKiOGLs5Nmi+OHTkj1NXL8nadv85Yb/GIJVVO3em2x/8mZzf9YY/vic xM61NcaoeV7xtAeDpGRqBLRQ8xPaAuDKA1EY0EaZVb6/2n/Sn+WUhrzFGkvewFPA eigVn+wVkRFRN4ZSSdzQTXBzX72luExMJ+f9ArK4rCW8Jo7xB+8THGJH1xoQnF8G /O7t6+biozrXntI0mSRwhp0HM1mYxPh4W89synkNx3tcs06PQQ== -----END CERTIFICATE-----Generated at Fri May 29 22:56:34 2026 by rpki-client