$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e382e302f32312d3234203d3e2030.roa File: 3138322e31382e382e302f32312d3234203d3e2030.roa (raw, json) Hash identifier: mvqrxsbdkh6xW7CPjK8wLp8SS0A3U1bUzaHghkUoQqg= Subject key identifier: B5:34:9E:70:0D:5B:D1:80:B7:57:1C:A9:E2:1E:15:32:48:C3:EB:FE Certificate issuer: /CN=EA1B92DE3A39218C88302E877CD7677E74606B38 Certificate serial: 59B2551457E5D01082529A552A2213815C05C925 Authority key identifier: EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e382e302f32312d3234203d3e2030.roa Signing time: Wed 27 May 2026 05:58:26 +0000 ROA not before: Wed 27 May 2026 05:53:26 +0000 ROA not after: Wed 26 May 2027 05:58:26 +0000 asID: 0 IP address blocks: 182.18.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:b2:55:14:57:e5:d0:10:82:52:9a:55:2a:22:13:81:5c:05:c9:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA1B92DE3A39218C88302E877CD7677E74606B38 Validity Not Before: May 27 05:53:26 2026 GMT Not After : May 26 05:58:26 2027 GMT Subject: CN=B5349E700D5BD180B7571CA9E21E153248C3EBFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5a:b5:b7:ec:1a:29:07:96:84:9d:2c:cc:d3: a5:c8:e8:df:27:cc:18:5c:a0:4d:88:a8:1d:19:a4: 89:a0:58:78:29:9d:3f:1c:d1:d2:de:b1:18:b0:e4: 0e:35:58:ee:82:e8:06:40:7b:10:cd:6f:4c:28:0c: 6d:7b:f8:1b:4e:1d:97:b2:63:75:b6:90:f2:f9:85: 4f:0e:27:d7:f4:ba:88:a6:c2:9a:a3:07:3f:05:ea: f3:94:2b:c8:20:2d:07:4c:92:27:c2:1c:15:e4:c4: bb:bc:8f:fa:8f:91:06:67:30:09:48:66:2a:a8:06: 01:cd:b6:44:a7:18:87:62:62:9e:65:d8:6f:ed:02: d4:5e:34:0b:07:79:80:dc:44:d4:8a:19:1e:83:61: 9d:e6:95:e5:db:3d:0c:24:2e:30:7f:4e:c8:e2:24: 49:db:e2:71:61:ae:7c:db:a0:4b:a0:d5:bd:37:c5: 5a:47:f8:c4:61:09:41:8c:7b:eb:ed:7e:3b:87:90: af:d2:47:2a:b1:42:d0:e3:e1:28:37:a5:ef:22:12: 1e:ab:33:16:58:36:e4:e7:f1:f9:ed:17:c8:62:db: 34:09:b9:64:6e:72:7b:e2:6f:83:78:46:fe:80:32: c9:a5:ac:c4:bf:b5:cc:43:4f:ba:f4:5c:61:e8:77: c5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:34:9E:70:0D:5B:D1:80:B7:57:1C:A9:E2:1E:15:32:48:C3:EB:FE X509v3 Authority Key Identifier: keyid:EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e382e302f32312d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 182.18.8.0/21 Signature Algorithm: sha256WithRSAEncryption 20:19:95:9a:56:c1:7a:8d:5f:77:af:42:7f:68:34:72:a9:10: b3:34:9d:48:a0:a2:b6:60:72:e4:a5:53:01:12:19:04:4c:8d: d0:a4:4c:da:de:aa:78:ea:20:4f:7d:c9:bf:66:4b:74:a1:7c: f4:17:22:a9:6d:36:a8:7f:5d:d0:1f:e9:14:67:43:f1:f9:9c: b6:a7:f5:b6:3b:7f:65:c2:9d:62:da:7b:35:9d:94:83:7f:84: 6e:84:ed:3a:a5:05:3f:75:8e:51:aa:42:52:34:b7:3e:17:cc: c6:2b:54:94:42:8c:57:ec:10:18:d9:db:db:4f:0d:1c:f1:d8: 4d:a5:fb:5f:20:49:50:ba:e4:d1:15:8a:f9:ed:a0:a2:b3:cf: 29:66:ed:cd:68:73:e0:ca:cf:59:dc:eb:e6:dd:85:c2:24:76: a7:fc:4b:12:a7:48:53:17:39:e5:93:ea:bf:21:5a:43:50:d5: 41:92:e9:0b:a0:8e:c0:90:ee:9e:32:00:e6:32:a7:51:b0:2d: 07:9e:d4:55:b8:d7:58:31:d2:08:0e:17:46:34:b2:f8:4c:6c: bf:84:b4:e7:f0:0e:94:cb:4f:b1:d6:f8:d0:ea:f7:87:07:28: e9:c3:c1:dc:a1:1d:fe:32:f2:b6:7a:21:07:43:3c:0e:9a:40: 55:2e:3e:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgIUWbJVFFfl0BCCUppVKiITgVwFySUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUExQjkyREUzQTM5MjE4Qzg4MzAyRTg3N0NENzY3N0U3 NDYwNkIzODAeFw0yNjA1MjcwNTUzMjZaFw0yNzA1MjYwNTU4MjZaMDMxMTAvBgNV BAMTKEI1MzQ5RTcwMEQ1QkQxODBCNzU3MUNBOUUyMUUxNTMyNDhDM0VCRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0WrW37BopB5aEnSzM06XI6N8n zBhcoE2IqB0ZpImgWHgpnT8c0dLesRiw5A41WO6C6AZAexDNb0woDG17+BtOHZey Y3W2kPL5hU8OJ9f0uoimwpqjBz8F6vOUK8ggLQdMkifCHBXkxLu8j/qPkQZnMAlI ZiqoBgHNtkSnGIdiYp5l2G/tAtReNAsHeYDcRNSKGR6DYZ3mleXbPQwkLjB/Tsji JEnb4nFhrnzboEug1b03xVpH+MRhCUGMe+vtfjuHkK/SRyqxQtDj4Sg3pe8iEh6r MxZYNuTn8fntF8hi2zQJuWRucnvib4N4Rv6AMsmlrMS/tcxDT7r0XGHod8XpAgMB AAGjggIHMIICAzAdBgNVHQ4EFgQUtTSecA1b0YC3Vxyp4h4VMkjD6/4wHwYDVR0j BBgwFoAU6huS3jo5IYyIMC6HfNdnfnRgazgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 MjExNjYwOTIwOTc5NDU2MS8wL0VBMUI5MkRFM0EzOTIxOEM4ODMwMkU4NzdDRDc2 NzdFNzQ2MDZCMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUExQjkyREUzQTM5MjE4Qzg4MzAyRTg3N0NENzY3N0U3NDYwNkIzOC5jZXIw gYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDgyMTE2NjA5MjA5Nzk0NTYxLzAvMzEzODMyMmUzMTM4 MmUzODJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDthIIMA0G CSqGSIb3DQEBCwUAA4IBAQAgGZWaVsF6jV93r0J/aDRyqRCzNJ1IoKK2YHLkpVMB EhkETI3QpEza3qp46iBPfcm/Zkt0oXz0FyKpbTaof13QH+kUZ0Px+Zy2p/W2O39l wp1i2ns1nZSDf4RuhO06pQU/dY5RqkJSNLc+F8zGK1SUQoxX7BAY2dvbTw0c8dhN pftfIElQuuTRFYr57aCis88pZu3NaHPgys9Z3Ovm3YXCJHan/EsSp0hTFznlk+q/ IVpDUNVBkukLoI7AkO6eMgDmMqdRsC0HntRVuNdYMdIIDhdGNLL4TGy/hLTn8A6U y0+x1vjQ6veHByjpw8HcoR3+MvK2eiEHQzwOmkBVLj7K -----END CERTIFICATE-----Generated at Fri May 29 22:55:56 2026 by rpki-client