$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3133322e302f32322d3234203d3e20323133373035.roa File: 3131392e35392e3133322e302f32322d3234203d3e20323133373035.roa (raw, json) Hash identifier: tmZcf1Wo2bCOf5RQWYhRyMOFU8sz/C0CdGOBYHvzEsM= Subject key identifier: 6C:6B:1A:56:FC:CC:D0:CD:CA:DC:F0:FB:52:54:C1:5F:2F:97:F1:07 Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 0854E1849A243D37A422B34B731C020B17ACE0A7 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3133322e302f32322d3234203d3e20323133373035.roa Signing time: Tue 17 Mar 2026 10:31:52 +0000 ROA not before: Tue 17 Mar 2026 10:26:52 +0000 ROA not after: Tue 16 Mar 2027 10:31:52 +0000 asID: 213705 IP address blocks: 119.59.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 08:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:54:e1:84:9a:24:3d:37:a4:22:b3:4b:73:1c:02:0b:17:ac:e0:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Mar 17 10:26:52 2026 GMT Not After : Mar 16 10:31:52 2027 GMT Subject: CN=6C6B1A56FCCCD0CDCADCF0FB5254C15F2F97F107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d3:fc:6a:d7:22:4e:ea:a0:eb:bc:b3:18:5f: d8:73:85:45:08:b0:60:e9:14:1e:18:2f:79:fa:48: 53:cc:6e:1d:f7:fa:11:29:49:ac:3b:ea:fd:08:bd: 21:6f:c6:11:e8:e4:45:c3:48:1b:c8:55:ec:f8:43: c9:e8:50:a5:66:2e:fc:d4:9e:52:13:27:42:8a:2f: c7:11:02:a3:b3:13:34:4b:36:39:35:22:bd:98:a5: a5:51:aa:88:0e:51:e0:17:58:7e:f1:25:2e:35:ff: 1d:ef:0d:07:de:20:df:cb:d0:8c:de:b7:f6:27:05: e4:7a:2a:2d:be:e3:b0:e0:ea:2b:4d:6f:a5:bd:9b: 40:00:60:8a:62:f8:36:ba:6d:2f:55:5d:bb:db:fc: a8:7b:01:b3:48:49:2f:78:0c:fa:da:f2:58:9e:d4: fb:cb:d6:c3:21:a2:62:dd:48:6d:25:79:9b:c9:3b: d6:7a:af:7d:60:68:23:32:02:12:76:76:a5:f5:af: e6:cb:99:fb:6e:d9:3a:c0:43:dd:85:b4:91:1f:94: fb:e7:7f:46:bc:fc:51:04:cf:57:33:e7:f4:5d:00: 70:b3:86:d6:18:be:f6:be:c3:6e:de:78:28:bd:16: 80:09:14:a1:61:10:60:da:0e:0f:38:41:20:bd:02: e1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:6B:1A:56:FC:CC:D0:CD:CA:DC:F0:FB:52:54:C1:5F:2F:97:F1:07 X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3133322e302f32322d3234203d3e20323133373035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.59.132.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:a7:81:7a:a5:f1:c0:fc:0e:f8:22:48:06:9c:52:d8:df:00: 08:ff:0e:c2:b5:93:0e:a9:b5:a3:a3:34:c6:8c:0f:56:c9:58: 9a:7f:0b:fe:89:15:11:23:30:b0:4a:a6:51:3c:bb:16:7e:68: 41:17:e3:10:44:a3:50:f5:43:e0:ea:97:3a:34:5f:0b:fa:17: a1:2d:db:fe:56:21:00:1f:b7:4f:63:28:83:10:a9:7a:ee:bc: c1:bc:d7:2f:74:4e:2f:2f:12:91:52:d0:d3:65:a3:dd:32:bf: 1f:10:18:5c:48:11:10:59:71:f3:b9:79:d1:20:bd:e7:31:d1: 3a:1c:7a:43:1b:8a:a3:8a:18:c9:2e:99:64:e3:3d:8f:f7:d4: b2:e7:74:0f:e8:e9:c5:d1:0f:02:01:21:5b:a4:95:4d:01:18: aa:71:ed:7f:5e:3e:7d:0c:dd:c6:d6:5c:7a:de:05:36:e5:5c: be:cf:ef:35:5a:87:7f:59:20:af:c8:73:98:d2:4e:d6:1f:73: 38:05:b3:49:07:ec:57:53:60:3f:73:62:11:24:cb:36:8b:b2: d2:e7:74:61:6a:52:f5:cc:11:98:f0:85:40:65:21:6d:64:41: cd:51:43:5b:bc:30:bc:a5:ac:5c:fd:55:fa:fc:35:59:d5:28: ae:32:f8:6f -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUCFThhJokPTekIrNLcxwCCxes4KcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjAzMTcxMDI2NTJaFw0yNzAzMTYxMDMxNTJaMDMxMTAvBgNV BAMTKDZDNkIxQTU2RkNDQ0QwQ0RDQURDRjBGQjUyNTRDMTVGMkY5N0YxMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU0/xq1yJO6qDrvLMYX9hzhUUI sGDpFB4YL3n6SFPMbh33+hEpSaw76v0IvSFvxhHo5EXDSBvIVez4Q8noUKVmLvzU nlITJ0KKL8cRAqOzEzRLNjk1Ir2YpaVRqogOUeAXWH7xJS41/x3vDQfeIN/L0Ize t/YnBeR6Ki2+47Dg6itNb6W9m0AAYIpi+Da6bS9VXbvb/Kh7AbNISS94DPra8lie 1PvL1sMhomLdSG0leZvJO9Z6r31gaCMyAhJ2dqX1r+bLmftu2TrAQ92FtJEflPvn f0a8/FEEz1cz5/RdAHCzhtYYvva+w27eeCi9FoAJFKFhEGDaDg84QSC9AuE3AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUbGsaVvzM0M3K3PD7UlTBXy+X8QcwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC8zMTMxMzkyZTM1 MzkyZTMxMzMzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzEzMzM3MzAzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAnc7hDANBgkqhkiG9w0BAQsFAAOCAQEAa6eBeqXxwPwO+CJIBpxS 2N8ACP8OwrWTDqm1o6M0xowPVslYmn8L/okVESMwsEqmUTy7Fn5oQRfjEESjUPVD 4OqXOjRfC/oXoS3b/lYhAB+3T2MogxCpeu68wbzXL3ROLy8SkVLQ02Wj3TK/HxAY XEgREFlx87l50SC95zHROhx6QxuKo4oYyS6ZZOM9j/fUsud0D+jpxdEPAgEhW6SV TQEYqnHtf14+fQzdxtZcet4FNuVcvs/vNVqHf1kgr8hzmNJO1h9zOAWzSQfsV1Ng P3NiESTLNouy0ud0YWpS9cwRmPCFQGUhbWRBzVFDW7wwvKWsXP1V+vw1WdUorjL4 bw== -----END CERTIFICATE-----Generated at Sat Mar 21 12:18:24 2026 by rpki-client