$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e32382e302f32322d3232203d3e2034383437.roa File: 3131392e35372e32382e302f32322d3232203d3e2034383437.roa (raw, json) Hash identifier: ZBM/dTKD2qK2DSXhmIMpm9t15CcMiFgPrCAOQNeSzzI= Subject key identifier: 17:3C:DA:23:E4:7B:2B:76:2A:5D:75:A4:53:A6:E9:5F:FD:CE:9A:53 Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Certificate serial: 6666E8B859032F7CE93FB23C5597B93050822618 Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e32382e302f32322d3232203d3e2034383437.roa Signing time: Fri 22 May 2026 08:46:42 +0000 ROA not before: Fri 22 May 2026 08:41:42 +0000 ROA not after: Fri 21 May 2027 08:46:42 +0000 asID: 4847 IP address blocks: 119.57.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:66:e8:b8:59:03:2f:7c:e9:3f:b2:3c:55:97:b9:30:50:82:26:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Validity Not Before: May 22 08:41:42 2026 GMT Not After : May 21 08:46:42 2027 GMT Subject: CN=173CDA23E47B2B762A5D75A453A6E95FFDCE9A53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ec:47:92:16:42:99:b9:b6:ab:4b:a4:46:3b: 65:93:4d:ba:97:bc:d6:5f:ea:30:c0:38:19:a8:20: 77:af:14:86:c3:5f:09:7b:07:ee:1d:80:2d:85:2b: 7f:11:8a:49:54:24:13:36:53:27:c1:47:13:27:ef: 61:51:30:ca:fc:af:2b:69:43:59:af:3d:a2:5d:fd: f0:fb:1a:75:cf:9b:3a:79:16:71:c8:49:52:1c:8c: fb:a3:08:c5:e9:7d:12:7d:e6:da:72:57:17:e9:03: dc:b3:9b:25:1d:ea:b2:ca:71:df:93:c6:1e:90:50: 5a:ef:26:c2:db:6e:8e:cd:c3:f3:b0:10:54:4d:bc: 3a:0b:a3:68:59:c5:01:bd:99:f6:1d:1c:85:8e:b7: df:33:e5:11:5a:06:56:51:8e:21:ef:33:17:15:cf: 25:ea:da:af:ff:d3:a2:42:58:94:df:91:d4:48:f1: 66:cd:68:03:8e:51:c2:77:04:e5:e0:c8:57:34:f7: 55:d0:2f:a5:7f:ac:db:36:d7:bb:f8:c0:80:fd:e7: 09:c2:c1:0c:84:ac:78:26:be:b4:81:ad:7b:f4:1a: 39:7d:9b:27:7f:e1:bc:36:72:fd:97:a6:c9:ca:48: 71:eb:75:c1:07:18:d5:56:4d:fd:d4:3a:a7:d6:24: 04:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:3C:DA:23:E4:7B:2B:76:2A:5D:75:A4:53:A6:E9:5F:FD:CE:9A:53 X509v3 Authority Key Identifier: keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e32382e302f32322d3232203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.57.28.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:f2:a7:71:69:1d:19:78:71:4d:07:51:88:67:df:01:1e:4b: ac:9a:18:5a:c9:1f:b9:b3:6f:66:d8:14:a5:d6:4b:27:1d:4c: a8:26:31:99:89:cb:d3:c2:ca:5c:c0:f9:35:b5:3d:57:a3:9f: 1a:22:9f:2a:e9:ea:bc:4b:40:6a:d0:60:a2:99:09:ca:0b:08: d0:b5:0d:8d:04:c0:54:18:9e:57:1b:b2:a1:d4:94:ff:82:64: a1:45:6b:43:e0:bb:1c:22:1e:d4:d0:cb:12:28:0e:a6:67:17: e3:89:80:94:c7:94:81:06:ab:5c:b2:a4:a2:31:fd:bd:4b:4f: 09:ff:87:87:63:de:c4:c3:91:40:43:19:c4:0f:ed:86:2c:f9: 1c:f6:8e:3e:6f:91:f2:0d:10:86:ca:8c:90:b2:95:9e:3f:42: 5f:db:c8:de:d8:d1:42:59:90:8b:81:98:2e:ad:e7:47:9b:c4: f8:c3:69:a7:6e:df:e9:d8:05:d0:4e:c7:77:c8:d6:7c:5a:67: d0:61:4f:bb:a7:ba:43:85:01:07:bb:7e:a3:68:de:e3:f8:17: c8:14:c3:e8:43:a0:40:24:61:1f:d9:15:6c:52:66:1e:cc:57: 05:d8:ca:f0:11:4f:c2:1b:d1:39:28:44:47:91:16:ec:cd:03: 93:42:67:de -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUZmbouFkDL3zpP7I8VZe5MFCCJhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw NDk1QzhDNDAeFw0yNjA1MjIwODQxNDJaFw0yNzA1MjEwODQ2NDJaMDMxMTAvBgNV BAMTKDE3M0NEQTIzRTQ3QjJCNzYyQTVENzVBNDUzQTZFOTVGRkRDRTlBNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC67EeSFkKZubarS6RGO2WTTbqX vNZf6jDAOBmoIHevFIbDXwl7B+4dgC2FK38RiklUJBM2UyfBRxMn72FRMMr8rytp Q1mvPaJd/fD7GnXPmzp5FnHISVIcjPujCMXpfRJ95tpyVxfpA9yzmyUd6rLKcd+T xh6QUFrvJsLbbo7Nw/OwEFRNvDoLo2hZxQG9mfYdHIWOt98z5RFaBlZRjiHvMxcV zyXq2q//06JCWJTfkdRI8WbNaAOOUcJ3BOXgyFc091XQL6V/rNs217v4wID95wnC wQyErHgmvrSBrXv0Gjl9myd/4bw2cv2XpsnKSHHrdcEHGNVWTf3UOqfWJATJAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUFzzaI+R7K3YqXXWkU6bpX/3OmlMwHwYDVR0j BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4 NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1ODkwOTg1MjI2ODYyNTk1LzAvMzEzMTM5MmUzNTM3 MmUzMjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzQzODM0Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJ3ORwwDQYJKoZIhvcNAQELBQADggEBAE/yp3FpHRl4cU0HUYhn3wEeS6yaGFrJ H7mzb2bYFKXWSycdTKgmMZmJy9PCylzA+TW1PVejnxoinyrp6rxLQGrQYKKZCcoL CNC1DY0EwFQYnlcbsqHUlP+CZKFFa0PguxwiHtTQyxIoDqZnF+OJgJTHlIEGq1yy pKIx/b1LTwn/h4dj3sTDkUBDGcQP7YYs+Rz2jj5vkfINEIbKjJCylZ4/Ql/byN7Y 0UJZkIuBmC6t50ebxPjDaadu3+nYBdBOx3fI1nxaZ9BhT7unukOFAQe7fqNo3uP4 F8gUw+hDoEAkYR/ZFWxSZh7MVwXYyvART8Ib0TkoREeRFuzNA5NCZ94= -----END CERTIFICATE-----Generated at Fri May 29 22:56:20 2026 by rpki-client