$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131392e33382e3132382e302f31382d3234203d3e2033343931.roa File: 3131392e33382e3132382e302f31382d3234203d3e2033343931.roa (raw, json) Hash identifier: yVFMxKLzQBQ3vGn3QNalL8JpeR8Aile1vv4c7VfMzIA= Subject key identifier: C1:BC:1A:E5:B9:C2:09:24:57:55:64:BB:1B:57:DD:25:FE:11:2D:78 Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD Certificate serial: 0E4C5FC37425C98FC01C3B7A1A2281178B2AECEB Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131392e33382e3132382e302f31382d3234203d3e2033343931.roa Signing time: Tue 26 May 2026 08:07:09 +0000 ROA not before: Tue 26 May 2026 08:02:09 +0000 ROA not after: Tue 25 May 2027 08:07:09 +0000 asID: 3491 IP address blocks: 119.38.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Jun 2026 23:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:4c:5f:c3:74:25:c9:8f:c0:1c:3b:7a:1a:22:81:17:8b:2a:ec:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD Validity Not Before: May 26 08:02:09 2026 GMT Not After : May 25 08:07:09 2027 GMT Subject: CN=C1BC1AE5B9C20924575564BB1B57DD25FE112D78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ea:f4:5e:94:07:d6:3c:09:59:84:d0:8d:0a: 91:b5:b4:16:33:82:50:6f:79:fb:ec:13:78:59:63: 4b:c3:3b:15:ec:d9:8a:9c:3d:6d:d3:01:8c:39:d2: 66:a7:b0:74:7a:9c:ba:64:ad:a7:2a:67:6c:a5:58: 3c:d5:d6:ae:91:96:de:a1:16:8e:62:60:13:b9:c6: 10:27:88:67:66:43:f2:5f:cc:7b:39:42:97:5e:91: d3:4e:0d:93:5a:b9:58:c1:e2:80:e2:58:77:d6:3e: 5e:f5:56:88:28:71:98:64:16:49:d1:70:09:62:ff: 41:21:a5:4c:b6:b3:e8:ca:95:e0:cb:c3:b0:bd:21: ae:08:a4:7b:96:73:57:01:fa:98:f8:bb:c7:c6:48: bf:5f:1e:ca:4a:7a:6f:14:d8:f5:ff:3b:94:23:39: 7e:c8:0a:41:60:e6:15:db:a7:44:e7:eb:37:b6:2c: 38:1a:ee:9d:40:24:49:88:36:ee:48:1b:ea:e0:8e: 65:13:24:c4:0a:1a:b3:ac:75:0b:27:cf:3e:65:78: 6d:e8:ff:52:a9:10:29:b2:7d:4c:37:68:4c:db:45: 6a:fe:37:67:0c:4a:40:2f:77:21:79:e5:e3:f4:d8: d7:ce:66:d5:d1:4c:85:12:a8:23:37:fa:69:2f:02: cc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:BC:1A:E5:B9:C2:09:24:57:55:64:BB:1B:57:DD:25:FE:11:2D:78 X509v3 Authority Key Identifier: keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131392e33382e3132382e302f31382d3234203d3e2033343931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.38.128.0/18 Signature Algorithm: sha256WithRSAEncryption cc:99:5c:a4:9b:f5:0e:47:e4:67:7f:4d:c1:ff:5e:5b:f9:f7: 53:78:55:df:c9:a2:47:97:58:2f:62:94:a8:91:9a:e0:bf:16: 7f:45:60:ad:be:f0:bd:c9:42:62:32:e0:c3:34:e2:b2:9c:01: 7d:80:53:1b:23:35:41:27:2f:8e:69:61:35:c7:36:7c:37:60: ce:19:5c:71:de:38:ed:5d:d6:29:e8:bf:b9:d4:5b:bd:8a:8f: b0:db:9b:f2:c6:6f:d5:dd:be:15:2f:c0:34:6a:12:af:c9:c3: b6:97:de:17:e0:fd:55:8c:90:61:d2:56:d6:6a:fc:ed:16:36: 21:95:40:f6:c6:0d:1b:8d:cb:da:53:3f:68:2a:b0:38:40:4b: 6b:18:d1:b2:df:d2:85:24:77:da:25:0e:72:91:55:78:a0:f6: 21:c8:ec:2d:1b:73:07:a4:0c:af:37:4d:07:0b:ad:21:33:e2: 08:f7:61:43:35:34:53:64:c5:04:5a:1c:1c:ed:d7:4f:0c:61: 47:57:05:ae:e6:4e:dd:35:14:4c:39:f0:37:4a:28:bb:21:ae: 85:5b:69:ef:7e:8b:08:7b:45:0b:91:f8:46:42:35:42:09:ca: 63:0d:ef:b4:5c:4e:9b:a8:ff:b8:2c:fe:59:14:e7:a8:3a:8b: ca:c1:cc:1e -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUDkxfw3QlyY/AHDt6GiKBF4sq7OswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEy QjAzQjBCRDAeFw0yNjA1MjYwODAyMDlaFw0yNzA1MjUwODA3MDlaMDMxMTAvBgNV BAMTKEMxQkMxQUU1QjlDMjA5MjQ1NzU1NjRCQjFCNTdERDI1RkUxMTJENzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk6vRelAfWPAlZhNCNCpG1tBYz glBvefvsE3hZY0vDOxXs2YqcPW3TAYw50mansHR6nLpkracqZ2ylWDzV1q6Rlt6h Fo5iYBO5xhAniGdmQ/JfzHs5QpdekdNODZNauVjB4oDiWHfWPl71VogocZhkFknR cAli/0EhpUy2s+jKleDLw7C9Ia4IpHuWc1cB+pj4u8fGSL9fHspKem8U2PX/O5Qj OX7ICkFg5hXbp0Tn6ze2LDga7p1AJEmINu5IG+rgjmUTJMQKGrOsdQsnzz5leG3o /1KpECmyfUw3aEzbRWr+N2cMSkAvdyF55eP02NfOZtXRTIUSqCM3+mkvAsz/AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUwbwa5bnCCSRXVWS7G1fdJf4RLXgwHwYDVR0j BBgwFoAUGIQcY82JODMD8boEgIXCISsDsL0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzU4NjE3OS8wLzE4ODQxQzYzQ0Q4OTM4MzMwM0YxQkEwNDgwODVD MjIxMkIwM0IwQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEyQjAzQjBCRC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NTg2MTc5LzAvMzEzMTM5MmUzMzM4 MmUzMTMyMzgyZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzMzM0MzkzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBncmgDANBgkqhkiG9w0BAQsFAAOCAQEAzJlcpJv1DkfkZ39Nwf9eW/n3U3hV 38miR5dYL2KUqJGa4L8Wf0Vgrb7wvclCYjLgwzTispwBfYBTGyM1QScvjmlhNcc2 fDdgzhlccd447V3WKei/udRbvYqPsNub8sZv1d2+FS/ANGoSr8nDtpfeF+D9VYyQ YdJW1mr87RY2IZVA9sYNG43L2lM/aCqwOEBLaxjRst/ShSR32iUOcpFVeKD2Icjs LRtzB6QMrzdNBwutITPiCPdhQzU0U2TFBFocHO3XTwxhR1cFruZO3TUUTDnwN0oo uyGuhVtp736LCHtFC5H4RkI1QgnKYw3vtFxOm6j/uCz+WRTnqDqLysHMHg== -----END CERTIFICATE-----Generated at Sat Jun 6 14:54:16 2026 by rpki-client