$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3130302e36342e302f31392d3139203d3e203233373234.roa File: 3231312e3130302e36342e302f31392d3139203d3e203233373234.roa (raw, json) Hash identifier: gPtJjP9+di7GKh8vu1YDLm/PtPnxTpfuc3EHNBfjqYg= Subject key identifier: 26:01:E5:05:87:15:81:D5:5A:4B:79:80:29:75:A9:D9:CD:52:33:32 Certificate issuer: /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC Certificate serial: 381D87143EB0108BE48EFFA5703DBAA2C2FE4D35 Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3130302e36342e302f31392d3139203d3e203233373234.roa Signing time: Mon 13 Apr 2026 06:03:51 +0000 ROA not before: Mon 13 Apr 2026 05:58:51 +0000 ROA not after: Mon 12 Apr 2027 06:03:51 +0000 asID: 23724 IP address blocks: 211.100.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:1d:87:14:3e:b0:10:8b:e4:8e:ff:a5:70:3d:ba:a2:c2:fe:4d:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC Validity Not Before: Apr 13 05:58:51 2026 GMT Not After : Apr 12 06:03:51 2027 GMT Subject: CN=2601E505871581D55A4B79802975A9D9CD523332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1f:da:9c:32:2e:94:b3:87:9e:63:6f:90:c1: c1:81:4d:54:c8:01:5c:f3:c8:9e:33:65:9c:62:40: 04:ca:9b:2d:10:a5:92:47:ed:1d:28:db:cc:08:00: 40:37:8e:bb:b5:29:80:ba:8f:e8:7d:b8:cf:a6:86: 76:30:a4:18:26:48:90:78:0b:a1:f7:66:57:b2:e3: 54:0c:ba:8f:d7:a7:5b:1b:b6:c7:05:bd:8f:d1:97: f0:b0:8e:27:f6:57:83:40:c5:45:7b:77:6f:1d:ec: 8a:4c:8b:22:e6:c4:a1:c3:90:fe:bb:4e:79:a0:c1: c3:ee:1a:80:9e:4f:34:8f:64:7d:23:bb:bd:22:26: e6:d9:0f:94:3f:2b:7d:17:5b:9a:92:cc:d3:0d:17: fa:04:2e:70:ab:47:63:56:c1:73:88:81:b4:d2:21: ac:c9:4f:90:60:84:37:65:2e:bb:a6:6b:e6:81:e7: c5:77:1f:93:ae:9a:43:57:ba:80:9c:fe:3a:45:65: 30:8a:1d:9b:ad:77:4d:20:c1:6e:87:f7:2b:df:89: 2f:a6:d0:c5:a5:e7:a5:ca:dd:c7:a7:84:0e:90:96: cd:8b:66:3e:91:1a:d4:47:f3:a5:20:17:0f:8a:7d: de:16:0b:ce:15:8b:e3:34:74:4a:b6:bb:6f:6a:da: 5d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:01:E5:05:87:15:81:D5:5A:4B:79:80:29:75:A9:D9:CD:52:33:32 X509v3 Authority Key Identifier: keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3130302e36342e302f31392d3139203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.100.64.0/19 Signature Algorithm: sha256WithRSAEncryption 10:f4:07:34:4a:56:de:d2:84:f8:0e:28:32:12:f7:1d:3a:95: d8:8a:76:14:4a:7c:4b:d0:dd:4b:4e:3b:c3:3f:85:6e:5f:43: b7:77:22:84:3b:99:97:d8:32:92:51:ad:01:d8:e0:38:2f:72: 94:82:aa:f3:8f:15:f6:23:97:f2:61:49:4a:13:11:0a:ae:2f: 0d:70:06:02:18:6e:e8:9c:ab:01:6b:52:13:5a:b4:92:30:40: cd:19:9e:ea:55:ce:36:60:24:68:8d:28:e5:13:80:34:ac:bc: f1:b7:3d:2c:3f:cb:e0:38:6c:e5:e0:98:c9:71:cd:4a:9a:92: da:db:7c:be:66:3f:56:5f:0c:ef:6d:d6:72:fa:fa:b1:cb:cb: 1f:64:2c:c6:62:47:f0:fc:4a:9e:fd:5a:e3:89:eb:04:c1:8d: 95:e3:63:86:74:40:99:1c:41:c9:e3:3a:ba:a6:c2:42:d9:ff: 87:34:ec:53:65:c7:2c:6d:b0:7e:3d:54:52:cf:52:b1:38:06: 62:59:3a:fc:9f:20:9a:53:ee:61:b3:6c:a7:04:f5:74:32:54: fc:12:40:c8:8e:2b:27:53:c1:d4:40:1d:a7:33:73:43:80:30: fc:f0:35:af:dc:94:0e:0b:fa:94:3a:d2:bf:09:c4:db:2b:5d: 51:39:de:d9 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUOB2HFD6wEIvkjv+lcD26osL+TTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYy NDM1NTNDQzAeFw0yNjA0MTMwNTU4NTFaFw0yNzA0MTIwNjAzNTFaMDMxMTAvBgNV BAMTKDI2MDFFNTA1ODcxNTgxRDU1QTRCNzk4MDI5NzVBOUQ5Q0Q1MjMzMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChH9qcMi6Us4eeY2+QwcGBTVTI AVzzyJ4zZZxiQATKmy0QpZJH7R0o28wIAEA3jru1KYC6j+h9uM+mhnYwpBgmSJB4 C6H3Zley41QMuo/Xp1sbtscFvY/Rl/Cwjif2V4NAxUV7d28d7IpMiyLmxKHDkP67 TnmgwcPuGoCeTzSPZH0ju70iJubZD5Q/K30XW5qSzNMNF/oELnCrR2NWwXOIgbTS IazJT5BghDdlLruma+aB58V3H5OumkNXuoCc/jpFZTCKHZutd00gwW6H9yvfiS+m 0MWl56XK3cenhA6Qls2LZj6RGtRH86UgFw+Kfd4WC84Vi+M0dEq2u29q2l3tAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUJgHlBYcVgdVaS3mAKXWp2c1SMzIwHwYDVR0j BBgwFoAUIhAvfqs3yB6Hu16yFWC/piQ1U8wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkyMDAwNjk1NDIyMTU2OS8xLzIyMTAyRjdFQUIzN0M4MUU4N0JCNUVCMjE1NjBC RkE2MjQzNTUzQ0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYyNDM1NTNDQy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTkyMDAwNjk1NDIyMTU2OS8xLzMyMzEzMTJlMzEz MDMwMmUzNjM0MmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzIzMzM3MzIzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBdNkQDANBgkqhkiG9w0BAQsFAAOCAQEAEPQHNEpW3tKE+A4oMhL3HTqV 2Ip2FEp8S9DdS047wz+Fbl9Dt3cihDuZl9gyklGtAdjgOC9ylIKq848V9iOX8mFJ ShMRCq4vDXAGAhhu6JyrAWtSE1q0kjBAzRme6lXONmAkaI0o5ROANKy88bc9LD/L 4Dhs5eCYyXHNSpqS2tt8vmY/Vl8M723Wcvr6scvLH2QsxmJH8PxKnv1a44nrBMGN leNjhnRAmRxByeM6uqbCQtn/hzTsU2XHLG2wfj1UUs9SsTgGYlk6/J8gmlPuYbNs pwT1dDJU/BJAyI4rJ1PB1EAdpzNzQ4Aw/PA1r9yUDgv6lDrSvwnE2ytdUTne2Q== -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:16 2026 by rpki-client