$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1088651015181303810/0/3231392e3233322e35362e302f32312d3231203d3e2034383437.roa File: 3231392e3233322e35362e302f32312d3231203d3e2034383437.roa (raw, json) Hash identifier: lw/R3INf1/Of5Zr58lokdX06wXsULy/mmXgkyhpRaBw= Subject key identifier: 14:4C:4B:FB:24:18:77:2A:0C:8F:07:52:BE:B0:46:AF:3B:DB:D0:5A Certificate issuer: /CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Certificate serial: 54148EE571CC54D854D96347298FD520416B2275 Authority key identifier: D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/3231392e3233322e35362e302f32312d3231203d3e2034383437.roa Signing time: Sun 19 Apr 2026 10:11:19 +0000 ROA not before: Sun 19 Apr 2026 10:06:19 +0000 ROA not after: Sun 18 Apr 2027 10:11:19 +0000 asID: 4847 IP address blocks: 219.232.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 21:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:14:8e:e5:71:cc:54:d8:54:d9:63:47:29:8f:d5:20:41:6b:22:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Validity Not Before: Apr 19 10:06:19 2026 GMT Not After : Apr 18 10:11:19 2027 GMT Subject: CN=144C4BFB2418772A0C8F0752BEB046AF3BDBD05A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ad:4f:8f:a1:b4:d8:f5:a3:16:37:db:69:3b: e7:51:c5:6f:83:dc:26:eb:d8:b4:10:3a:a6:9e:b7: 77:27:24:73:b6:3f:a0:34:b3:1b:80:91:f7:9b:6f: 50:99:0d:f9:12:cf:57:b7:67:e8:9a:3f:77:78:6d: 12:98:b4:ee:ef:d3:48:89:04:34:bc:bf:04:9d:44: 4a:4c:7d:0a:e0:27:d9:60:4b:29:b1:6c:80:f0:53: 71:31:c4:63:50:e3:6a:ff:41:d4:1c:91:82:e6:4d: 27:82:a2:a8:41:03:67:c2:5f:36:13:e9:28:be:54: 0e:09:7f:66:c3:62:59:49:5a:ec:c5:23:d2:e4:15: 94:1e:46:2c:a5:9d:4c:52:69:be:f4:77:3f:58:5b: 6d:be:22:48:cd:11:c8:27:a6:ee:18:f6:43:5d:bb: 41:5d:76:b3:0d:16:80:24:34:60:e3:54:28:d7:cf: fa:ed:c4:e7:50:b0:1f:5a:9d:a1:bd:fe:0c:45:c9: a5:6c:ca:b3:cf:6a:10:b9:7c:9f:07:16:13:9b:0f: 3f:84:a4:1e:ca:f3:b4:25:c0:b5:d3:1e:86:6c:db: 94:91:23:cd:f2:82:9d:ce:ea:a4:d6:54:de:0e:fe: 43:f7:68:3b:cd:80:aa:59:69:6c:02:2d:19:e5:07: a2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4C:4B:FB:24:18:77:2A:0C:8F:07:52:BE:B0:46:AF:3B:DB:D0:5A X509v3 Authority Key Identifier: keyid:D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/3231392e3233322e35362e302f32312d3231203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.232.56.0/21 Signature Algorithm: sha256WithRSAEncryption b3:eb:0b:23:ce:5f:f8:38:19:fb:15:28:dd:fa:9f:7a:55:2e: c1:ae:0c:a5:8e:f3:0a:56:bc:30:86:31:13:7b:b9:32:86:71: b7:11:59:4e:1e:42:c2:c9:cc:9c:80:b2:48:8c:fd:57:47:20: d7:0f:74:98:e3:7c:b5:f0:6c:b0:7f:c1:39:db:b0:2c:7d:07: 44:02:04:33:32:81:5f:d1:a4:2f:ab:0d:58:6f:50:35:96:ab: 70:37:a8:0c:99:5c:f2:a7:9a:1e:ec:fb:e2:42:4d:d0:9f:2f: 21:b0:82:02:ce:11:4f:73:e3:1b:c5:fd:38:42:23:9e:e1:03: 2f:3b:9e:68:05:94:9a:7b:42:17:9b:0e:5d:74:76:5c:00:44: d2:fa:28:ad:9d:c8:1b:0c:44:1c:dc:30:c6:0b:38:2a:67:84: b9:a3:dc:a0:c2:2f:a4:77:de:da:e7:8b:74:df:1c:f3:78:69: 48:77:e3:4e:8a:ec:9d:ea:47:a8:58:d5:f9:09:17:48:62:7b: 97:b4:97:14:fe:7b:b2:e4:c0:b5:48:b9:85:b6:e2:92:63:15: 5b:95:4d:78:2d:56:ea:29:81:29:30:ec:fc:5b:29:c6:5c:d2: f6:a8:94:e0:6c:8e:d7:80:36:b2:e9:f6:c1:67:b8:92:ee:83: d4:a6:4b:ce -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUVBSO5XHMVNhU2WNHKY/VIEFrInUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVE MkZDMkY4MDAeFw0yNjA0MTkxMDA2MTlaFw0yNzA0MTgxMDExMTlaMDMxMTAvBgNV BAMTKDE0NEM0QkZCMjQxODc3MkEwQzhGMDc1MkJFQjA0NkFGM0JEQkQwNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDErU+PobTY9aMWN9tpO+dRxW+D 3Cbr2LQQOqaet3cnJHO2P6A0sxuAkfebb1CZDfkSz1e3Z+iaP3d4bRKYtO7v00iJ BDS8vwSdREpMfQrgJ9lgSymxbIDwU3ExxGNQ42r/QdQckYLmTSeCoqhBA2fCXzYT 6Si+VA4Jf2bDYllJWuzFI9LkFZQeRiylnUxSab70dz9YW22+IkjNEcgnpu4Y9kNd u0FddrMNFoAkNGDjVCjXz/rtxOdQsB9anaG9/gxFyaVsyrPPahC5fJ8HFhObDz+E pB7K87QlwLXTHoZs25SRI83ygp3O6qTWVN4O/kP3aDvNgKpZaWwCLRnlB6LHAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUFExL+yQYdyoMjwdSvrBGrzvb0FowHwYDVR0j BBgwFoAU1e8qeSFm+U++Mzd+AjkDTtL8L4AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 ODY1MTAxNTE4MTMwMzgxMC8wL0Q1RUYyQTc5MjE2NkY5NEZCRTMzMzc3RTAyMzkw MzRFRDJGQzJGODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVEMkZDMkY4MC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDg4NjUxMDE1MTgxMzAzODEwLzAvMzIzMTM5MmUzMjMz MzIyZTM1MzYyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA9voODANBgkqhkiG9w0BAQsFAAOCAQEAs+sLI85f+DgZ+xUo3fqfelUuwa4M pY7zCla8MIYxE3u5MoZxtxFZTh5CwsnMnICySIz9V0cg1w90mON8tfBssH/BOduw LH0HRAIEMzKBX9GkL6sNWG9QNZarcDeoDJlc8qeaHuz74kJN0J8vIbCCAs4RT3Pj G8X9OEIjnuEDLzueaAWUmntCF5sOXXR2XABE0voorZ3IGwxEHNwwxgs4KmeEuaPc oMIvpHfe2ueLdN8c83hpSHfjTorsnepHqFjV+QkXSGJ7l7SXFP57suTAtUi5hbbi kmMVW5VNeC1W6imBKTDs/FspxlzS9qiU4GyO14A2sun2wWe4ku6D1KZLzg== -----END CERTIFICATE-----Generated at Mon Apr 27 13:46:37 2026 by rpki-client