$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e302e302f32312d3231203d3e2034383437.roa File: 3131392e35372e302e302f32312d3231203d3e2034383437.roa (raw, json) Hash identifier: Nm44mGSMKO+/TRGN6sWOtwXudOOKz+ZkebAlzAq++JA= Subject key identifier: 72:00:88:6D:7C:4A:AC:34:4E:04:D4:45:3E:3D:76:53:42:12:50:FE Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Certificate serial: 23B9199711AE063FD2C81799B2A51659BA47DA06 Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e302e302f32312d3231203d3e2034383437.roa Signing time: Fri 22 May 2026 08:46:41 +0000 ROA not before: Fri 22 May 2026 08:41:41 +0000 ROA not after: Fri 21 May 2027 08:46:41 +0000 asID: 4847 IP address blocks: 119.57.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b9:19:97:11:ae:06:3f:d2:c8:17:99:b2:a5:16:59:ba:47:da:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Validity Not Before: May 22 08:41:41 2026 GMT Not After : May 21 08:46:41 2027 GMT Subject: CN=7200886D7C4AAC344E04D4453E3D7653421250FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:00:79:67:ea:18:b8:ab:5b:34:2e:ff:36:3a: 7e:5e:bb:5f:4d:68:07:0a:a2:83:2e:16:b3:82:e3: 06:ac:e9:ca:72:bf:e1:3e:8f:67:dc:5b:14:de:ad: 6a:d9:32:2f:4a:8c:6e:8e:55:88:ac:18:3b:66:2a: 59:c3:52:cc:cc:d6:1b:a9:ae:a2:b6:19:10:3b:2f: 7a:75:3a:6c:d8:23:59:2a:a4:60:4c:25:1b:d1:ac: cd:0f:2f:eb:8f:be:3f:85:f1:08:8a:ca:41:d9:c9: 55:cc:d1:57:a3:36:fe:e7:5e:17:af:d4:61:f8:67: e9:22:ca:72:b0:01:fa:d5:5f:75:22:a4:78:7e:da: de:7e:e3:de:f6:7a:cb:ca:87:47:e6:a8:f7:cd:17: 66:c6:3e:b9:8c:98:9c:e5:d3:15:35:84:b2:8c:30: 15:77:83:5b:7f:f9:5c:0f:f6:df:6c:30:36:4f:0c: 28:8d:e9:60:fc:5a:a8:51:5b:64:de:76:8e:d4:ac: 4e:8e:26:cb:6f:48:cd:43:34:a5:34:eb:a9:aa:b4: 13:87:98:e1:0b:e9:80:92:f2:aa:20:fb:57:5c:01: 1a:7d:20:54:40:44:24:4c:54:c6:07:ae:3b:83:a0: 20:84:66:e2:59:1f:84:fd:5a:0d:c7:fc:75:f2:5e: 84:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:00:88:6D:7C:4A:AC:34:4E:04:D4:45:3E:3D:76:53:42:12:50:FE X509v3 Authority Key Identifier: keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e302e302f32312d3231203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.57.0.0/21 Signature Algorithm: sha256WithRSAEncryption 3d:9c:76:50:d9:34:aa:40:af:c2:f5:3d:c4:62:5f:30:dd:c7: 06:cd:ab:bd:79:57:4f:11:fe:9d:0d:7c:2c:6e:e4:33:1e:39: a5:0a:07:2a:eb:aa:e6:c3:97:fa:9d:1e:93:12:83:85:4d:3d: 1e:6c:4e:ce:1f:42:98:ba:a9:09:06:ff:44:49:04:01:d5:9c: 6a:9a:9c:4c:70:0b:88:57:82:27:0b:4e:64:17:31:0f:3a:81: d9:f8:d5:8e:e9:09:02:49:0d:82:c7:78:b9:09:fc:fa:01:e2: eb:bc:a6:d6:88:d3:81:80:f4:a0:d7:30:81:23:39:51:ad:c7: e4:f2:b2:2a:3e:4c:1a:18:2b:1d:28:d1:5d:bf:17:83:20:c0: 0b:64:97:bc:24:d1:fb:4d:e8:52:56:41:6b:cb:29:68:97:cc: 85:4d:0d:12:cd:19:ff:88:47:c6:fa:f1:3a:12:1c:b0:26:2d: fc:82:12:9f:92:89:d2:4b:6f:c0:42:7d:2d:63:49:44:5d:b7: 7c:77:12:50:9f:27:a7:a1:ba:cc:9c:5f:76:ad:43:ff:56:9b: c1:14:c4:c6:c9:ac:a6:2f:36:e2:7a:13:14:41:a2:c6:90:63: 9d:4c:1c:b2:4a:e5:f1:cb:a8:52:51:8b:1d:73:a2:47:ba:7b: fa:57:d1:94 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUI7kZlxGuBj/SyBeZsqUWWbpH2gYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw NDk1QzhDNDAeFw0yNjA1MjIwODQxNDFaFw0yNzA1MjEwODQ2NDFaMDMxMTAvBgNV BAMTKDcyMDA4ODZEN0M0QUFDMzQ0RTA0RDQ0NTNFM0Q3NjUzNDIxMjUwRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHAHln6hi4q1s0Lv82On5eu19N aAcKooMuFrOC4was6cpyv+E+j2fcWxTerWrZMi9KjG6OVYisGDtmKlnDUszM1hup rqK2GRA7L3p1OmzYI1kqpGBMJRvRrM0PL+uPvj+F8QiKykHZyVXM0VejNv7nXhev 1GH4Z+kiynKwAfrVX3UipHh+2t5+4972esvKh0fmqPfNF2bGPrmMmJzl0xU1hLKM MBV3g1t/+VwP9t9sMDZPDCiN6WD8WqhRW2Tedo7UrE6OJstvSM1DNKU066mqtBOH mOEL6YCS8qog+1dcARp9IFRARCRMVMYHrjuDoCCEZuJZH4T9Wg3H/HXyXoTrAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUcgCIbXxKrDROBNRFPj12U0ISUP4wHwYDVR0j BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4 NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1ODkwOTg1MjI2ODYyNTk1LzAvMzEzMTM5MmUzNTM3 MmUzMDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDM0MzgzNDM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD dzkAMA0GCSqGSIb3DQEBCwUAA4IBAQA9nHZQ2TSqQK/C9T3EYl8w3ccGzau9eVdP Ef6dDXwsbuQzHjmlCgcq66rmw5f6nR6TEoOFTT0ebE7OH0KYuqkJBv9ESQQB1Zxq mpxMcAuIV4InC05kFzEPOoHZ+NWO6QkCSQ2Cx3i5Cfz6AeLrvKbWiNOBgPSg1zCB IzlRrcfk8rIqPkwaGCsdKNFdvxeDIMALZJe8JNH7TehSVkFryylol8yFTQ0SzRn/ iEfG+vE6EhywJi38ghKfkonSS2/AQn0tY0lEXbd8dxJQnyenobrMnF92rUP/VpvB FMTGyaymLzbiehMUQaLGkGOdTByySuXxy6hSUYsdc6JHunv6V9GU -----END CERTIFICATE-----Generated at Fri May 29 23:51:22 2026 by rpki-client