$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3135302e3234322e3232342e302f32322d3232203d3e2030.roa File: 3135302e3234322e3232342e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: 8B51/FSxI9C/6jw0qS6a2P9d2NLwwFnuyvtAY5QcNHs= Subject key identifier: 6A:15:32:C9:CE:62:4B:97:D8:A8:DE:42:33:12:CE:3F:F7:1F:20:F0 Certificate issuer: /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Certificate serial: 61840AB1BE51A88013951F6C7E834AC59FFC51F8 Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3135302e3234322e3232342e302f32322d3232203d3e2030.roa Signing time: Thu 28 May 2026 08:56:14 +0000 ROA not before: Thu 28 May 2026 08:51:14 +0000 ROA not after: Thu 27 May 2027 08:56:14 +0000 asID: 0 IP address blocks: 150.242.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:84:0a:b1:be:51:a8:80:13:95:1f:6c:7e:83:4a:c5:9f:fc:51:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Validity Not Before: May 28 08:51:14 2026 GMT Not After : May 27 08:56:14 2027 GMT Subject: CN=6A1532C9CE624B97D8A8DE423312CE3FF71F20F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:85:0d:a9:73:78:d6:28:f1:95:28:01:7f:05: 85:b5:bc:95:3a:f4:c4:5a:0e:05:0d:db:96:f3:06: 6d:4a:73:67:be:fb:95:95:39:f6:53:7f:3f:93:b9: 4e:a1:d8:fe:50:1d:f1:28:31:71:62:08:98:7e:ab: 85:6d:80:98:54:51:98:e8:dc:82:3f:0a:7a:b6:a7: 8f:d4:cc:30:e9:30:8b:45:e3:bd:b2:dc:65:7d:22: cb:90:b0:91:f1:8a:54:a8:0d:7d:df:4c:fb:9a:bc: 7f:9e:dd:a8:6f:15:ed:9a:cc:9a:45:48:ce:73:59: 2d:f9:16:31:ac:39:d4:d2:ea:70:ad:0e:f7:6d:2c: 3f:51:8f:3f:98:9d:f3:62:56:6c:d3:c1:6a:0b:39: 7e:c9:a3:d6:68:fd:8d:7d:bf:53:67:1e:d8:22:72: a5:01:f9:eb:a0:69:24:b4:4a:fa:78:ba:6c:29:85: 6b:a6:9a:5b:cd:4f:c3:09:db:72:c5:1b:57:d6:46: 69:c5:3c:b7:0c:39:18:cd:13:1c:8d:35:2f:b8:2c: 68:97:15:cf:59:9f:91:2f:f2:1e:3c:56:04:f1:ba: 60:e4:51:9f:ab:76:51:21:f9:86:db:65:8a:3e:8d: 9d:b4:60:c9:e8:f0:e2:88:28:ae:d1:0d:22:70:24: 92:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:15:32:C9:CE:62:4B:97:D8:A8:DE:42:33:12:CE:3F:F7:1F:20:F0 X509v3 Authority Key Identifier: keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3135302e3234322e3232342e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.242.224.0/22 Signature Algorithm: sha256WithRSAEncryption 50:6a:a8:1d:96:14:86:92:57:1f:37:a7:7f:b6:b6:f3:3a:8c: 59:58:33:26:84:a7:c1:a0:72:5b:18:61:5c:15:dc:86:0f:74: 17:a0:c2:d8:6b:57:5d:d6:79:96:32:44:06:41:10:1b:17:18: 7a:87:94:91:fe:66:68:f1:10:30:ab:c3:c2:3e:ab:a8:74:c1: ee:6a:c4:ba:48:7a:4a:d4:05:b7:fa:6e:7e:36:7d:90:7b:ed: 64:88:e2:3e:96:44:56:5a:ee:fd:f2:df:7d:19:0e:7b:95:8c: 63:7c:6b:3d:c6:84:46:37:70:26:a9:a8:6b:0b:51:ea:da:03: ce:00:57:f3:1e:97:6e:99:e2:6e:b0:f1:74:e8:f3:ff:8f:63: f5:cc:9a:e8:ef:19:ba:c7:82:2f:42:28:9b:27:fc:f7:68:0c: 06:7f:4e:c9:7d:a0:b5:bc:44:64:f1:fe:1c:01:5e:e3:de:d2: 40:ba:86:ab:64:c7:46:73:1f:61:82:6e:3c:b3:79:51:c6:d9: ce:95:91:40:ca:85:0b:4e:2b:b0:55:7c:e1:2e:ca:fb:40:80: d5:e1:92:02:d1:8d:dd:0f:6b:05:a9:8e:ef:75:64:5f:51:09: 2f:a1:3f:5b:50:6f:05:9d:ef:2d:31:54:a1:bd:00:6f:5c:ef: 20:dc:fa:09 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUYYQKsb5RqIATlR9sfoNKxZ/8UfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlG NjEwRjNDMDAeFw0yNjA1MjgwODUxMTRaFw0yNzA1MjcwODU2MTRaMDMxMTAvBgNV BAMTKDZBMTUzMkM5Q0U2MjRCOTdEOEE4REU0MjMzMTJDRTNGRjcxRjIwRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuhQ2pc3jWKPGVKAF/BYW1vJU6 9MRaDgUN25bzBm1Kc2e++5WVOfZTfz+TuU6h2P5QHfEoMXFiCJh+q4VtgJhUUZjo 3II/Cnq2p4/UzDDpMItF472y3GV9IsuQsJHxilSoDX3fTPuavH+e3ahvFe2azJpF SM5zWS35FjGsOdTS6nCtDvdtLD9Rjz+YnfNiVmzTwWoLOX7Jo9Zo/Y19v1NnHtgi cqUB+eugaSS0Svp4umwphWummlvNT8MJ23LFG1fWRmnFPLcMORjNExyNNS+4LGiX Fc9Zn5Ev8h48VgTxumDkUZ+rdlEh+YbbZYo+jZ20YMno8OKIKK7RDSJwJJLdAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUahUyyc5iS5fYqN5CMxLOP/cfIPAwHwYDVR0j BBgwFoAUcZUrD/m8p85UNrDbUAnKCfYQ88AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQwMDMyMS8wLzcxOTUyQjBGRjlCQ0E3Q0U1NDM2QjBEQjUwMDlD QTA5RjYxMEYzQzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlGNjEwRjNDMC5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNDAwMzIxLzAvMzEzNTMwMmUzMjM0 MzIyZTMyMzIzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC lvLgMA0GCSqGSIb3DQEBCwUAA4IBAQBQaqgdlhSGklcfN6d/trbzOoxZWDMmhKfB oHJbGGFcFdyGD3QXoMLYa1dd1nmWMkQGQRAbFxh6h5SR/mZo8RAwq8PCPquodMHu asS6SHpK1AW3+m5+Nn2Qe+1kiOI+lkRWWu798t99GQ57lYxjfGs9xoRGN3Amqahr C1Hq2gPOAFfzHpdumeJusPF06PP/j2P1zJro7xm6x4IvQiibJ/z3aAwGf07JfaC1 vERk8f4cAV7j3tJAuoarZMdGcx9hgm48s3lRxtnOlZFAyoULTiuwVXzhLsr7QIDV 4ZIC0Y3dD2sFqY7vdWRfUQkvoT9bUG8Fne8tMVShvQBvXO8g3PoJ -----END CERTIFICATE-----Generated at Fri May 29 22:56:00 2026 by rpki-client