$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135302e3132342e302f32332d3234203d3e2039383033.roa File: 3231312e3135302e3132342e302f32332d3234203d3e2039383033.roa (raw, json) Hash identifier: 0i23c59Yk1Pcej/NF+Ghnc/xXyH5hIz75ae7eLtgQUw= Subject key identifier: 7E:0E:0B:50:3B:F4:91:53:79:0C:6F:6B:76:F8:16:4E:A7:1C:ED:96 Certificate issuer: /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC Certificate serial: 41B28AB1DA87D21D337D2AA2E1FDEE1ACB1EF03D Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135302e3132342e302f32332d3234203d3e2039383033.roa Signing time: Mon 13 Apr 2026 04:07:09 +0000 ROA not before: Mon 13 Apr 2026 04:02:09 +0000 ROA not after: Mon 12 Apr 2027 04:07:09 +0000 asID: 9803 IP address blocks: 211.150.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:b2:8a:b1:da:87:d2:1d:33:7d:2a:a2:e1:fd:ee:1a:cb:1e:f0:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC Validity Not Before: Apr 13 04:02:09 2026 GMT Not After : Apr 12 04:07:09 2027 GMT Subject: CN=7E0E0B503BF49153790C6F6B76F8164EA71CED96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c7:1b:bd:94:d4:08:e9:b9:82:f4:9e:48:46: a5:f3:ba:0b:55:67:4b:b5:81:c1:8c:b8:03:0a:16: 51:ac:05:4f:15:ec:4c:1b:4c:7a:19:68:3d:ef:07: 8b:05:85:3d:41:18:9b:5d:42:94:b7:6b:d9:af:d0: 40:d0:c0:4b:fb:c9:d2:b1:e3:99:06:33:af:cb:08: 86:70:17:0c:00:48:59:4d:be:45:03:a9:2c:5b:0d: 5c:1d:2b:b5:11:32:02:e5:58:3f:18:9c:e0:33:2b: f5:78:64:91:70:53:3b:bb:3f:f6:78:75:f0:e6:ec: 54:60:c3:e5:84:3e:57:68:6e:c5:62:b6:ed:0a:04: b1:5d:0d:4b:a1:e3:56:66:8c:f1:0d:c0:cd:a1:85: 42:b1:15:82:b2:45:03:6c:16:ea:ae:a4:9e:fd:94: a7:6a:22:c9:4a:24:1b:d0:39:7e:a6:7e:7a:2a:65: 2e:4c:ba:b5:80:1d:f7:98:1c:4e:2e:2d:b8:1e:ac: 8d:a2:e7:fc:d6:ff:e4:61:4d:cf:ae:c0:df:ad:1d: ca:46:61:ae:6d:1f:34:85:a3:a6:af:93:9b:7e:93: a7:4d:dd:21:34:2b:b4:36:d6:f7:77:76:06:be:a6: 17:ba:4d:da:a3:8d:de:d3:09:d8:33:6c:6a:6c:26: 04:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:0E:0B:50:3B:F4:91:53:79:0C:6F:6B:76:F8:16:4E:A7:1C:ED:96 X509v3 Authority Key Identifier: keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135302e3132342e302f32332d3234203d3e2039383033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.150.124.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:25:9d:46:14:de:bc:08:55:da:b0:f9:18:27:6a:ed:25:4d: 31:9c:1c:1b:c2:29:82:1e:2e:43:ba:8e:b0:3c:1f:a0:46:38: 3b:19:2c:f8:55:81:1f:d4:50:7a:e6:45:95:98:db:22:49:bd: 61:d7:fb:d1:af:cf:2d:11:9d:b5:c2:86:47:4e:63:22:84:11: 47:8d:58:a0:35:51:08:8d:9d:4d:8d:99:cb:bb:07:84:92:18: e4:54:77:f6:41:78:6b:e7:d7:f4:97:d3:55:ba:fc:39:1c:f8: 8b:d4:e3:3a:0f:88:dc:7e:25:19:f1:0c:09:eb:73:cf:53:1e: 02:2b:41:78:65:0d:74:3c:35:c4:9a:4d:36:62:86:23:93:63: f1:28:e1:4e:41:b0:b0:6c:26:3a:87:bd:37:3f:6e:43:f3:0d: 3e:43:9e:2f:34:e7:8c:5a:e4:69:63:e8:d5:b1:0c:af:49:0b: c6:5d:31:6e:61:0f:96:38:f2:7f:d2:f5:6f:28:4e:b3:e9:68: 52:51:c7:cc:12:79:2c:2f:14:5e:4f:b2:2f:9b:c2:27:0b:92: 90:94:d4:db:c9:60:53:98:42:8b:db:8d:d7:19:15:ad:17:e6: 00:6c:69:0c:30:61:9a:5a:79:04:a9:50:3b:f0:03:82:45:c4: 3d:ca:16:2b -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUQbKKsdqH0h0zfSqi4f3uGsse8D0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYy NDM1NTNDQzAeFw0yNjA0MTMwNDAyMDlaFw0yNzA0MTIwNDA3MDlaMDMxMTAvBgNV BAMTKDdFMEUwQjUwM0JGNDkxNTM3OTBDNkY2Qjc2RjgxNjRFQTcxQ0VEOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQxxu9lNQI6bmC9J5IRqXzugtV Z0u1gcGMuAMKFlGsBU8V7EwbTHoZaD3vB4sFhT1BGJtdQpS3a9mv0EDQwEv7ydKx 45kGM6/LCIZwFwwASFlNvkUDqSxbDVwdK7URMgLlWD8YnOAzK/V4ZJFwUzu7P/Z4 dfDm7FRgw+WEPldobsVitu0KBLFdDUuh41ZmjPENwM2hhUKxFYKyRQNsFuqupJ79 lKdqIslKJBvQOX6mfnoqZS5MurWAHfeYHE4uLbgerI2i5/zW/+RhTc+uwN+tHcpG Ya5tHzSFo6avk5t+k6dN3SE0K7Q21vd3dga+phe6Tdqjjd7TCdgzbGpsJgQ5AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUfg4LUDv0kVN5DG9rdvgWTqcc7ZYwHwYDVR0j BBgwFoAUIhAvfqs3yB6Hu16yFWC/piQ1U8wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkyMDAwNjk1NDIyMTU2OS8xLzIyMTAyRjdFQUIzN0M4MUU4N0JCNUVCMjE1NjBC RkE2MjQzNTUzQ0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYyNDM1NTNDQy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTkyMDAwNjk1NDIyMTU2OS8xLzMyMzEzMTJlMzEz NTMwMmUzMTMyMzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzOTM4MzAzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAdOWfDANBgkqhkiG9w0BAQsFAAOCAQEAHSWdRhTevAhV2rD5GCdq7SVN MZwcG8Ipgh4uQ7qOsDwfoEY4Oxks+FWBH9RQeuZFlZjbIkm9Ydf70a/PLRGdtcKG R05jIoQRR41YoDVRCI2dTY2Zy7sHhJIY5FR39kF4a+fX9JfTVbr8ORz4i9TjOg+I 3H4lGfEMCetzz1MeAitBeGUNdDw1xJpNNmKGI5Nj8SjhTkGwsGwmOoe9Nz9uQ/MN PkOeLzTnjFrkaWPo1bEMr0kLxl0xbmEPljjyf9L1byhOs+loUlHHzBJ5LC8UXk+y L5vCJwuSkJTU28lgU5hCi9uN1xkVrRfmAGxpDDBhmlp5BKlQO/ADgkXEPcoWKw== -----END CERTIFICATE-----Generated at Mon Apr 13 12:23:25 2026 by rpki-client