$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e33322e302f32322d3232203d3e2034383437.roa File: 3131392e35372e33322e302f32322d3232203d3e2034383437.roa (raw, json) Hash identifier: A2RfPkgcs2q6JPNUHctXy8xtODK/NoK0ZZ0612B6x9E= Subject key identifier: C3:CD:A1:8F:54:2D:7B:9B:D2:4A:A7:D9:0B:41:9F:16:FF:F5:25:77 Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Certificate serial: 557C86913310075F9D9C84CB1112AD0968A84949 Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e33322e302f32322d3232203d3e2034383437.roa Signing time: Fri 22 May 2026 08:46:41 +0000 ROA not before: Fri 22 May 2026 08:41:41 +0000 ROA not after: Fri 21 May 2027 08:46:41 +0000 asID: 4847 IP address blocks: 119.57.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:7c:86:91:33:10:07:5f:9d:9c:84:cb:11:12:ad:09:68:a8:49:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Validity Not Before: May 22 08:41:41 2026 GMT Not After : May 21 08:46:41 2027 GMT Subject: CN=C3CDA18F542D7B9BD24AA7D90B419F16FFF52577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ea:08:92:64:76:79:dc:9e:9e:40:54:d8:60: 48:0c:2b:4e:13:b4:ff:b3:88:8d:78:2c:7b:fc:f2: a0:fc:ff:ff:dd:44:69:52:82:fa:5f:34:cc:90:17: 9b:18:2d:75:00:c3:65:67:ce:82:95:f7:c9:26:8d: 35:6f:f7:12:e8:82:c4:6a:95:62:3e:d6:c1:97:bb: 54:27:78:0a:7a:bf:fb:67:d9:20:93:f2:09:46:c7: ed:04:dc:d8:da:59:90:4e:eb:27:d0:0e:f0:8f:94: 32:eb:19:e6:a8:02:b0:29:f9:5d:aa:0f:42:06:3d: f6:de:95:3d:64:e9:9c:52:cd:9f:8a:fa:15:20:76: bd:e6:6a:d1:95:bc:b9:0a:12:79:c6:eb:41:3c:49: 3c:8a:b6:80:41:ae:d7:07:77:49:d7:b1:18:ed:f6: 04:5a:1c:75:16:09:8a:d0:3f:22:9c:d1:b8:01:64: c8:48:5d:1b:ec:fa:29:af:88:c8:6d:f3:95:26:3d: cc:ae:f0:74:a3:b6:4c:96:c7:ea:dc:d0:d6:f2:bf: c5:e3:cf:f2:ea:92:be:31:9f:f8:9e:56:70:61:68: dd:d3:99:01:ea:5a:8b:d5:2e:d0:d9:b4:1c:19:19: a5:75:a1:bb:80:f6:57:2c:83:86:66:d6:48:24:90: d2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CD:A1:8F:54:2D:7B:9B:D2:4A:A7:D9:0B:41:9F:16:FF:F5:25:77 X509v3 Authority Key Identifier: keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3131392e35372e33322e302f32322d3232203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.57.32.0/22 Signature Algorithm: sha256WithRSAEncryption 95:cb:b4:cf:ec:ef:59:bb:ed:b8:a6:2d:2f:fe:8e:9f:f5:02: e2:0d:78:bd:c9:d3:a5:5b:29:cd:91:6d:05:91:dc:a5:e2:04: 07:cf:a3:7d:8f:63:37:fc:74:e3:1b:06:f2:68:cd:f5:ea:c5: 3e:88:94:b9:75:71:16:a2:6a:8d:dd:4d:99:52:d3:79:bf:cc: 8c:0b:a0:ba:b3:50:4b:34:44:29:e7:3e:d9:78:b5:8c:61:74: 62:56:6c:2e:34:ff:4f:61:29:4a:99:88:fd:80:0a:e0:0f:6d: f8:8c:c2:20:f1:58:6c:83:64:b1:d0:95:d5:1f:9c:06:36:4c: 1e:d0:25:10:27:78:3f:35:7e:05:ee:11:17:c2:f0:33:ea:4d: c7:1f:11:80:d6:db:de:3c:01:f7:d2:17:69:c7:e0:69:be:95: 6b:95:8a:4f:d5:23:14:f7:78:fb:2d:f6:f9:11:8d:72:e7:46: c1:86:81:3c:fc:b8:d7:a7:83:74:d7:82:e3:b7:d4:23:65:bf: 15:12:bc:3d:82:d8:b2:37:46:ef:b7:05:43:fe:05:4f:27:25: df:27:48:91:dc:43:fa:4a:d6:33:f5:07:b9:4f:f8:81:d8:09: 3d:b0:99:3d:02:41:22:f5:39:af:f1:f5:2e:ec:20:8f:98:0f: 23:24:35:22 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUVXyGkTMQB1+dnITLERKtCWioSUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw NDk1QzhDNDAeFw0yNjA1MjIwODQxNDFaFw0yNzA1MjEwODQ2NDFaMDMxMTAvBgNV BAMTKEMzQ0RBMThGNTQyRDdCOUJEMjRBQTdEOTBCNDE5RjE2RkZGNTI1NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC16giSZHZ53J6eQFTYYEgMK04T tP+ziI14LHv88qD8///dRGlSgvpfNMyQF5sYLXUAw2VnzoKV98kmjTVv9xLogsRq lWI+1sGXu1QneAp6v/tn2SCT8glGx+0E3NjaWZBO6yfQDvCPlDLrGeaoArAp+V2q D0IGPfbelT1k6ZxSzZ+K+hUgdr3matGVvLkKEnnG60E8STyKtoBBrtcHd0nXsRjt 9gRaHHUWCYrQPyKc0bgBZMhIXRvs+imviMht85UmPcyu8HSjtkyWx+rc0Nbyv8Xj z/Lqkr4xn/ieVnBhaN3TmQHqWovVLtDZtBwZGaV1obuA9lcsg4Zm1kgkkNLjAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUw82hj1Qte5vSSqfZC0GfFv/1JXcwHwYDVR0j BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4 NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1ODkwOTg1MjI2ODYyNTk1LzAvMzEzMTM5MmUzNTM3 MmUzMzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzQzODM0Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJ3OSAwDQYJKoZIhvcNAQELBQADggEBAJXLtM/s71m77bimLS/+jp/1AuINeL3J 06VbKc2RbQWR3KXiBAfPo32PYzf8dOMbBvJozfXqxT6IlLl1cRaiao3dTZlS03m/ zIwLoLqzUEs0RCnnPtl4tYxhdGJWbC40/09hKUqZiP2ACuAPbfiMwiDxWGyDZLHQ ldUfnAY2TB7QJRAneD81fgXuERfC8DPqTccfEYDW2948AffSF2nH4Gm+lWuVik/V IxT3ePst9vkRjXLnRsGGgTz8uNeng3TXguO31CNlvxUSvD2C2LI3Ru+3BUP+BU8n Jd8nSJHcQ/pK1jP1B7lP+IHYCT2wmT0CQSL1Oa/x9S7sII+YDyMkNSI= -----END CERTIFICATE-----Generated at Fri May 29 23:53:05 2026 by rpki-client