$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524773889/1/3134302e3231302e302e302f32322d3234203d3e20323031373730.roa File: 3134302e3231302e302e302f32322d3234203d3e20323031373730.roa (raw, json) Hash identifier: 3purJaEYFAgSAJSXKodn304qzZLpTeyy6XpJTQop9UY= Subject key identifier: B4:3D:12:E3:4C:35:9D:EF:BF:FF:38:22:07:29:7B:56:37:EB:C8:F7 Certificate issuer: /CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76 Certificate serial: 568A526BE310CFE8FB2906BFEA3A5215E61F7C8B Authority key identifier: 80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/3134302e3231302e302e302f32322d3234203d3e20323031373730.roa Signing time: Wed 08 Apr 2026 03:24:53 +0000 ROA not before: Wed 08 Apr 2026 03:19:53 +0000 ROA not after: Wed 07 Apr 2027 03:24:53 +0000 asID: 201770 IP address blocks: 140.210.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:8a:52:6b:e3:10:cf:e8:fb:29:06:bf:ea:3a:52:15:e6:1f:7c:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76 Validity Not Before: Apr 8 03:19:53 2026 GMT Not After : Apr 7 03:24:53 2027 GMT Subject: CN=B43D12E34C359DEFBFFF382207297B5637EBC8F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0e:26:6d:2d:0c:39:0b:f0:b1:cb:73:f6:44: 5c:30:e0:40:e6:d6:9e:f3:09:8d:f4:53:fb:2c:54: 31:82:b7:dc:9c:2f:fe:f7:53:c3:c4:33:02:85:51: a7:c7:01:67:18:cf:f1:73:e5:49:cf:19:6c:b5:98: 8d:54:af:1e:c8:9b:e1:bc:6f:ac:d2:59:53:8d:1c: ab:2a:59:32:37:3f:8f:55:8b:46:cc:a0:16:8f:81: fa:6c:9d:38:15:af:2c:33:91:6f:b6:6b:c2:97:c0: f2:34:29:ce:c8:ac:2f:b5:f6:77:f0:b1:1a:d8:7f: 64:a5:fb:6f:01:7d:c6:93:f7:02:b6:ca:8b:78:6c: a9:8b:dc:0b:41:25:6f:0e:e1:2e:98:93:05:1c:9d: 8f:6b:8e:62:79:79:ea:fd:56:9a:be:9f:99:87:63: 51:2a:ed:de:94:f3:17:68:40:32:76:e6:9b:e0:05: 11:11:c6:44:31:de:67:93:3d:b3:f7:04:df:82:35: 7d:b3:99:44:ce:14:fd:4c:c6:59:b8:13:a1:e5:c2: d4:a8:8d:1f:66:d5:eb:d6:f6:59:b0:4e:ba:d9:01: ed:23:17:fd:4a:ba:1a:72:e6:60:e7:1b:b2:80:ef: 98:dc:8e:d0:21:c4:e3:27:d8:e3:8a:1f:dd:71:aa: 9b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3D:12:E3:4C:35:9D:EF:BF:FF:38:22:07:29:7B:56:37:EB:C8:F7 X509v3 Authority Key Identifier: keyid:80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/3134302e3231302e302e302f32322d3234203d3e20323031373730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.210.0.0/22 Signature Algorithm: sha256WithRSAEncryption 26:c2:39:6c:ab:b0:e9:2c:d9:87:aa:4b:0d:c8:89:cc:28:d7: aa:80:ee:a8:e4:96:93:a2:1e:bb:05:72:5a:0d:59:29:67:16: 90:fe:66:8a:04:27:cb:b2:f2:57:55:ff:50:0e:9e:70:9d:71: 07:5c:dc:22:1b:72:96:0e:8f:aa:9a:9f:91:5a:6b:bf:71:fa: ee:b4:54:89:be:71:3d:16:d5:bd:99:d4:45:fb:52:08:a8:7f: 0e:36:22:19:a1:d3:50:9f:a6:5a:3f:18:80:46:69:3a:65:1d: 5f:c9:67:ac:5e:d4:4c:fc:b1:b2:1e:20:0d:f2:a0:ba:1a:5e: 9b:8c:3e:6f:3e:de:28:0f:aa:ec:d9:c8:c9:4a:29:7e:b3:13: 5d:ba:46:27:37:f2:51:a5:50:f8:df:f9:4b:2e:0f:cd:8b:cd: 12:6d:93:e1:80:50:10:b5:e4:ec:6b:22:21:cb:82:ab:80:42: f3:48:24:e4:d8:a0:d0:2b:78:94:19:03:21:11:f4:e9:70:0a: b0:a2:3d:1e:a4:e7:b8:70:1a:db:b8:85:8c:4d:dd:9f:1e:27: 08:44:df:25:49:c5:07:91:e4:88:cb:fc:70:f9:68:ac:dc:f4: aa:45:46:f3:ed:1c:70:4e:3f:29:98:09:43:7a:18:56:a6:b2: 7c:0c:d4:20 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUVopSa+MQz+j7KQa/6jpSFeYffIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA0NjQyM0FDNkE1QjdENkQxMUU5QkNCOTc4QUM0MDY1 RUU5Q0E3NjAeFw0yNjA0MDgwMzE5NTNaFw0yNzA0MDcwMzI0NTNaMDMxMTAvBgNV BAMTKEI0M0QxMkUzNEMzNTlERUZCRkZGMzgyMjA3Mjk3QjU2MzdFQkM4RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMDiZtLQw5C/Cxy3P2RFww4EDm 1p7zCY30U/ssVDGCt9ycL/73U8PEMwKFUafHAWcYz/Fz5UnPGWy1mI1Urx7Im+G8 b6zSWVONHKsqWTI3P49Vi0bMoBaPgfpsnTgVrywzkW+2a8KXwPI0Kc7IrC+19nfw sRrYf2Sl+28BfcaT9wK2yot4bKmL3AtBJW8O4S6YkwUcnY9rjmJ5eer9Vpq+n5mH Y1Eq7d6U8xdoQDJ25pvgBRERxkQx3meTPbP3BN+CNX2zmUTOFP1Mxlm4E6HlwtSo jR9m1evW9lmwTrrZAe0jF/1Kuhpy5mDnG7KA75jcjtAhxOMn2OOKH91xqpvjAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUtD0S40w1ne+//zgiByl7VjfryPcwHwYDVR0j BBgwFoAUgEZCOsalt9bRHpvLl4rEBl7pynYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8xLzgwNDY0MjNBQzZBNUI3RDZEMTFFOUJDQjk3OEFD NDA2NUVFOUNBNzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODA0NjQyM0FDNkE1QjdENkQxMUU5QkNCOTc4QUM0MDY1RUU5Q0E3Ni5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4ODMzNTUyNDc3Mzg4OS8xLzMxMzQzMDJlMzIz MTMwMmUzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzMTM3MzczMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAozSADANBgkqhkiG9w0BAQsFAAOCAQEAJsI5bKuw6SzZh6pLDciJzCjX qoDuqOSWk6IeuwVyWg1ZKWcWkP5migQny7LyV1X/UA6ecJ1xB1zcIhtylg6Pqpqf kVprv3H67rRUib5xPRbVvZnURftSCKh/DjYiGaHTUJ+mWj8YgEZpOmUdX8lnrF7U TPyxsh4gDfKguhpem4w+bz7eKA+q7NnIyUopfrMTXbpGJzfyUaVQ+N/5Sy4PzYvN Em2T4YBQELXk7GsiIcuCq4BC80gk5Nig0Ct4lBkDIRH06XAKsKI9HqTnuHAa27iF jE3dnx4nCETfJUnFB5HkiMv8cPlorNz0qkVG8+0ccE4/KZgJQ3oYVqayfAzUIA== -----END CERTIFICATE-----Generated at Mon Apr 13 15:31:16 2026 by rpki-client