$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3130302e36362e302f32342d3234203d3e203233373234.roa File: 3231312e3130302e36362e302f32342d3234203d3e203233373234.roa (raw, json) Hash identifier: 6sfldsJiJl/wp77yBQ0u4qj4DV6FiX2vcT2hKVsFe3o= Subject key identifier: 00:0A:B7:F0:16:F4:3A:54:0B:6F:D0:EB:2F:66:C7:1E:88:C6:79:53 Certificate issuer: /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC Certificate serial: 5F281B75AC0F40DA36929D6FB5FB2E93D5ADB1A0 Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3130302e36362e302f32342d3234203d3e203233373234.roa Signing time: Mon 13 Apr 2026 06:50:03 +0000 ROA not before: Mon 13 Apr 2026 06:45:03 +0000 ROA not after: Mon 12 Apr 2027 06:50:03 +0000 asID: 23724 IP address blocks: 211.100.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:28:1b:75:ac:0f:40:da:36:92:9d:6f:b5:fb:2e:93:d5:ad:b1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC Validity Not Before: Apr 13 06:45:03 2026 GMT Not After : Apr 12 06:50:03 2027 GMT Subject: CN=000AB7F016F43A540B6FD0EB2F66C71E88C67953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0d:2c:08:cc:a4:11:d8:17:35:6a:28:52:a4: 70:89:0a:af:81:a6:a6:aa:09:76:c5:d0:19:64:d3: b2:56:ea:b5:2a:b8:39:24:93:40:c4:8d:71:92:80: e1:87:63:54:df:3c:1a:dc:c1:ae:da:33:1a:a2:21: 74:ee:f6:b4:73:46:26:d6:29:29:7f:fd:f5:7c:98: e5:8d:68:5e:25:1a:54:fa:76:40:3d:d6:1d:77:d6: 4e:4d:41:e9:a7:c6:c7:78:6e:26:13:52:11:c3:dd: 4c:ed:f3:19:62:50:57:92:ee:a8:96:66:32:11:06: e5:64:26:ed:96:c3:f6:28:4d:4e:5f:20:36:8f:88: 3c:4d:5b:2d:d9:7e:dc:af:a0:54:2b:3c:61:22:7c: f1:05:99:52:f1:1d:ab:3e:ae:31:7e:43:8d:cf:3d: 8c:a1:26:bc:20:50:87:1b:55:7e:9f:9b:3e:3b:b7: 09:37:8c:b7:71:8e:c5:24:dd:14:3a:db:f3:4f:e3: 7e:da:17:41:b2:2e:47:03:b4:89:18:33:2c:1f:b6: 21:bb:39:ea:5b:3e:45:83:c5:33:f2:98:88:fc:47: 60:bd:a1:44:70:bc:34:2f:7f:bd:15:73:7f:31:dd: 98:96:f4:f0:4a:0b:b9:96:a6:f3:bd:09:76:9b:32: 5c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0A:B7:F0:16:F4:3A:54:0B:6F:D0:EB:2F:66:C7:1E:88:C6:79:53 X509v3 Authority Key Identifier: keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3130302e36362e302f32342d3234203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.100.66.0/24 Signature Algorithm: sha256WithRSAEncryption 61:af:b0:be:ad:3c:e3:9e:4c:a4:63:56:09:22:d5:44:8e:34: 91:00:97:c1:09:83:f5:61:63:dc:d6:ce:47:a6:c4:17:bc:ad: 36:ff:86:74:dc:1c:74:5f:6f:03:bb:fc:21:9b:a4:94:da:49: 01:6c:a2:a7:0d:5f:f4:33:4f:f2:6e:75:98:2c:00:67:44:85: 65:68:ec:c2:87:62:cd:57:50:50:6b:c4:be:77:b6:94:a2:fb: 9f:ee:40:dc:ce:21:ac:5a:9e:b7:f6:f9:1a:e9:3e:1d:7d:8e: ab:75:f3:29:11:1c:4e:49:85:c7:3a:cb:c3:de:76:32:bc:70: 03:f9:35:c5:ba:66:40:ab:2e:e0:1c:0f:1b:02:19:fd:1b:58: cd:c7:55:f6:14:5c:3e:81:aa:27:b8:67:b3:68:72:8f:18:13: 21:6b:56:27:32:dc:30:70:f5:c2:db:23:87:30:94:1c:85:77: 49:b9:0b:29:0d:32:42:05:25:ad:40:12:30:4b:b7:f5:9a:af: 09:38:4f:db:45:58:ca:d0:d7:03:32:0b:6f:78:3b:35:d4:60: 52:57:42:6c:db:d0:1f:c3:f3:7f:71:fb:e9:5b:c4:5e:ca:f6: d1:fe:7b:e4:28:e5:9d:3c:3d:44:62:cb:00:8c:2f:04:8e:9b: 8c:14:36:90 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUXygbdawPQNo2kp1vtfsuk9WtsaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYy NDM1NTNDQzAeFw0yNjA0MTMwNjQ1MDNaFw0yNzA0MTIwNjUwMDNaMDMxMTAvBgNV BAMTKDAwMEFCN0YwMTZGNDNBNTQwQjZGRDBFQjJGNjZDNzFFODhDNjc5NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnDSwIzKQR2Bc1aihSpHCJCq+B pqaqCXbF0Blk07JW6rUquDkkk0DEjXGSgOGHY1TfPBrcwa7aMxqiIXTu9rRzRibW KSl//fV8mOWNaF4lGlT6dkA91h131k5NQemnxsd4biYTUhHD3Uzt8xliUFeS7qiW ZjIRBuVkJu2Ww/YoTU5fIDaPiDxNWy3ZftyvoFQrPGEifPEFmVLxHas+rjF+Q43P PYyhJrwgUIcbVX6fmz47twk3jLdxjsUk3RQ62/NP437aF0GyLkcDtIkYMywftiG7 OepbPkWDxTPymIj8R2C9oURwvDQvf70Vc38x3ZiW9PBKC7mWpvO9CXabMlyNAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUAAq38Bb0OlQLb9DrL2bHHojGeVMwHwYDVR0j BBgwFoAUIhAvfqs3yB6Hu16yFWC/piQ1U8wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkyMDAwNjk1NDIyMTU2OS8xLzIyMTAyRjdFQUIzN0M4MUU4N0JCNUVCMjE1NjBC RkE2MjQzNTUzQ0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYyNDM1NTNDQy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTkyMDAwNjk1NDIyMTU2OS8xLzMyMzEzMTJlMzEz MDMwMmUzNjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM3MzIzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEANNkQjANBgkqhkiG9w0BAQsFAAOCAQEAYa+wvq08455MpGNWCSLVRI40 kQCXwQmD9WFj3NbOR6bEF7ytNv+GdNwcdF9vA7v8IZuklNpJAWyipw1f9DNP8m51 mCwAZ0SFZWjswodizVdQUGvEvne2lKL7n+5A3M4hrFqet/b5Guk+HX2Oq3XzKREc TkmFxzrLw952MrxwA/k1xbpmQKsu4BwPGwIZ/RtYzcdV9hRcPoGqJ7hns2hyjxgT IWtWJzLcMHD1wtsjhzCUHIV3SbkLKQ0yQgUlrUASMEu39ZqvCThP20VYytDXAzIL b3g7NdRgUldCbNvQH8Pzf3H76VvEXsr20f575CjlnTw9RGLLAIwvBI6bjBQ2kA== -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:11 2026 by rpki-client