$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135302e302e302f31372d3137203d3e2039383033.roa File: 3231312e3135302e302e302f31372d3137203d3e2039383033.roa (raw, json) Hash identifier: AXXRnjUqEURYElm3WaGN7OOXEzIGcz5XFQR6ldopvJc= Subject key identifier: A8:57:6C:03:2B:6A:57:46:FB:98:99:EC:BE:A3:39:A9:22:B1:DC:82 Certificate issuer: /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC Certificate serial: 33A9EA5BE00B8F2F5CC582FA3E0A366503F85B59 Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135302e302e302f31372d3137203d3e2039383033.roa Signing time: Mon 13 Apr 2026 06:31:08 +0000 ROA not before: Mon 13 Apr 2026 06:26:08 +0000 ROA not after: Mon 12 Apr 2027 06:31:08 +0000 asID: 9803 IP address blocks: 211.150.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a9:ea:5b:e0:0b:8f:2f:5c:c5:82:fa:3e:0a:36:65:03:f8:5b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC Validity Not Before: Apr 13 06:26:08 2026 GMT Not After : Apr 12 06:31:08 2027 GMT Subject: CN=A8576C032B6A5746FB9899ECBEA339A922B1DC82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a0:22:c6:af:d5:37:a5:6d:2f:73:42:a3:a0: a1:05:6c:04:dd:20:53:cf:0a:86:0f:91:93:08:43: 37:ab:e8:e0:4f:81:29:1d:5e:80:a1:d9:c0:35:d3: ea:5b:64:05:32:47:82:17:35:cf:e6:f3:17:c8:be: 8f:53:40:a6:fe:66:0b:ab:dd:8c:19:ee:43:38:62: 15:d1:ad:36:4d:c8:d9:95:c7:49:b8:68:5b:20:ad: fc:9b:52:7a:05:33:bf:f7:44:55:b1:de:5b:0e:d2: 60:b6:4a:c8:96:b4:c7:0d:ba:30:e6:23:11:5b:f5: 2b:b8:f5:1b:93:f9:8f:68:33:84:d2:bf:70:a0:78: b7:53:a4:24:90:1c:ff:6c:a7:c8:50:7e:96:b5:32: 81:d6:55:31:ae:18:b8:40:54:55:72:17:3c:e0:80: 9c:85:32:3d:0f:85:dd:3f:6e:d5:e4:48:e9:2e:d9: 1c:1d:bd:4a:28:9b:c7:e2:d8:47:93:12:4d:6d:49: e8:88:15:49:68:a5:ea:f7:6d:c2:01:f7:2e:f3:fa: fe:50:f0:a7:4f:7d:7d:d5:4e:ea:3c:55:2c:bb:45: 85:af:ca:71:4b:90:88:3c:31:d9:ed:07:b2:6a:49: 5c:ca:8d:f7:80:e5:3c:02:63:ab:aa:6c:5b:49:6a: 80:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:57:6C:03:2B:6A:57:46:FB:98:99:EC:BE:A3:39:A9:22:B1:DC:82 X509v3 Authority Key Identifier: keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135302e302e302f31372d3137203d3e2039383033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.150.0.0/17 Signature Algorithm: sha256WithRSAEncryption d7:9b:12:9d:b5:ea:98:65:83:38:6d:14:15:39:88:71:0a:3e: 0a:85:6e:f1:26:00:c9:76:c4:ef:f7:72:b3:c1:94:64:aa:11: 40:d9:0b:2c:3b:fb:2f:5e:93:a2:cd:cd:e2:ab:d6:04:ac:38: 75:50:28:f5:59:a1:d9:27:5d:51:61:fe:04:76:01:6a:4a:ca: de:d6:cf:be:86:67:55:b9:a1:17:03:32:d5:91:a8:fb:80:0e: fd:34:95:9a:82:eb:55:ed:7c:a1:bb:63:d7:ac:c4:1f:48:68: da:23:2c:29:b6:bb:a6:39:90:f3:44:d3:99:69:0d:23:ed:d7: 25:ec:a2:69:2b:20:c0:a2:3d:0e:c5:66:2f:0f:e0:b3:db:19: 0f:30:37:22:15:67:79:c9:33:7d:e2:ba:d6:1f:7a:c3:f8:c8: d1:d8:c1:de:75:e4:46:2f:c8:f0:35:46:fd:59:13:4d:10:92: bb:6d:2c:2c:7e:9f:40:29:04:04:6a:91:c5:6b:ac:92:21:4e: d7:ff:90:16:e7:d6:90:d1:7c:06:0a:2a:e6:ef:82:2f:49:6a: 7e:55:5a:f2:37:37:bc:e9:89:d6:64:16:64:af:ff:90:3f:12: 0e:2d:9a:a1:be:53:74:ff:45:ce:ea:73:f8:d9:3b:b0:fc:d5: 42:15:e6:1f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUM6nqW+ALjy9cxYL6Pgo2ZQP4W1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYy NDM1NTNDQzAeFw0yNjA0MTMwNjI2MDhaFw0yNzA0MTIwNjMxMDhaMDMxMTAvBgNV BAMTKEE4NTc2QzAzMkI2QTU3NDZGQjk4OTlFQ0JFQTMzOUE5MjJCMURDODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDioCLGr9U3pW0vc0KjoKEFbATd IFPPCoYPkZMIQzer6OBPgSkdXoCh2cA10+pbZAUyR4IXNc/m8xfIvo9TQKb+Zgur 3YwZ7kM4YhXRrTZNyNmVx0m4aFsgrfybUnoFM7/3RFWx3lsO0mC2SsiWtMcNujDm IxFb9Su49RuT+Y9oM4TSv3CgeLdTpCSQHP9sp8hQfpa1MoHWVTGuGLhAVFVyFzzg gJyFMj0Phd0/btXkSOku2RwdvUoom8fi2EeTEk1tSeiIFUloper3bcIB9y7z+v5Q 8KdPfX3VTuo8VSy7RYWvynFLkIg8MdntB7JqSVzKjfeA5TwCY6uqbFtJaoBVAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUqFdsAytqV0b7mJnsvqM5qSKx3IIwHwYDVR0j BBgwFoAUIhAvfqs3yB6Hu16yFWC/piQ1U8wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkyMDAwNjk1NDIyMTU2OS8xLzIyMTAyRjdFQUIzN0M4MUU4N0JCNUVCMjE1NjBC RkE2MjQzNTUzQ0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYyNDM1NTNDQy5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1OTIwMDA2OTU0MjIxNTY5LzEvMzIzMTMxMmUzMTM1 MzAyZTMwMmUzMDJmMzEzNzJkMzEzNzIwM2QzZTIwMzkzODMwMzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAfTlgAwDQYJKoZIhvcNAQELBQADggEBANebEp216phlgzhtFBU5iHEKPgqFbvEm AMl2xO/3crPBlGSqEUDZCyw7+y9ek6LNzeKr1gSsOHVQKPVZodknXVFh/gR2AWpK yt7Wz76GZ1W5oRcDMtWRqPuADv00lZqC61XtfKG7Y9esxB9IaNojLCm2u6Y5kPNE 05lpDSPt1yXsomkrIMCiPQ7FZi8P4LPbGQ8wNyIVZ3nJM33iutYfesP4yNHYwd51 5EYvyPA1Rv1ZE00QkrttLCx+n0ApBARqkcVrrJIhTtf/kBbn1pDRfAYKKubvgi9J an5VWvI3N7zpidZkFmSv/5A/Eg4tmqG+U3T/Rc7qc/jZO7D81UIV5h8= -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:19 2026 by rpki-client