$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135302e38302e302f32302d3230203d3e203233373234.roa File: 3231312e3135302e38302e302f32302d3230203d3e203233373234.roa (raw, json) Hash identifier: 10TCtF8APFuMCUSbElN3rH/asDRjrTjYEzpEFraWYXU= Subject key identifier: 3A:FC:21:DB:B8:A5:7A:F0:37:72:8D:CC:A0:4F:DE:6F:C0:07:20:38 Certificate issuer: /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC Certificate serial: 40837152493994BF7433228BB7CBEC6716546470 Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135302e38302e302f32302d3230203d3e203233373234.roa Signing time: Mon 13 Apr 2026 05:49:34 +0000 ROA not before: Mon 13 Apr 2026 05:44:34 +0000 ROA not after: Mon 12 Apr 2027 05:49:34 +0000 asID: 23724 IP address blocks: 211.150.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:83:71:52:49:39:94:bf:74:33:22:8b:b7:cb:ec:67:16:54:64:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC Validity Not Before: Apr 13 05:44:34 2026 GMT Not After : Apr 12 05:49:34 2027 GMT Subject: CN=3AFC21DBB8A57AF037728DCCA04FDE6FC0072038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:07:f4:bc:d3:9b:57:6f:a7:1f:ea:91:d5:e2: 09:e6:82:c1:fb:68:bc:14:26:2c:a0:bf:6f:4e:ad: b5:50:9f:2a:50:d6:5f:23:5c:95:db:fa:a0:90:14: b2:40:b8:98:4b:8c:dc:e0:f3:7a:30:02:ab:2d:6c: 6c:31:d2:bd:55:0b:c3:81:c4:3c:f8:63:3b:31:2e: 2b:aa:f7:7b:88:9b:7c:88:1e:d4:29:4f:a3:88:2a: c9:ca:57:5c:de:f1:22:8b:38:3f:38:ea:22:30:33: 74:93:80:09:3b:3c:38:7b:1d:e8:4f:a3:ae:96:77: 48:16:3d:59:84:1c:c8:b5:12:9d:21:df:ff:4b:1c: 12:b0:bf:b2:c7:f7:83:54:89:6e:bf:b3:e8:1a:d3: 46:f5:50:e9:d4:b4:61:1a:39:cb:c4:45:2f:73:b3: 37:a9:e0:60:86:0c:96:fd:26:e2:c8:9d:08:98:39: e6:9e:e6:2f:22:7c:8d:eb:a3:46:31:e9:da:d2:b7: 4e:9d:f6:d9:bd:43:5a:08:d8:5d:7b:ae:89:9c:28: df:54:50:37:a1:c8:3a:fd:8c:d4:41:4f:57:4d:e1: 2e:24:22:c9:fd:22:be:12:8f:75:e1:df:ed:f9:bf: ea:04:f3:47:cc:90:25:db:da:24:68:75:ed:d0:71: ae:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FC:21:DB:B8:A5:7A:F0:37:72:8D:CC:A0:4F:DE:6F:C0:07:20:38 X509v3 Authority Key Identifier: keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135302e38302e302f32302d3230203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.150.80.0/20 Signature Algorithm: sha256WithRSAEncryption db:b0:39:7b:ac:54:8c:8a:ed:8c:f0:b8:6b:73:aa:97:40:45: a7:6f:35:a0:66:28:db:b3:0b:e9:18:6b:49:ab:b6:ed:cc:25: 0b:bd:e5:60:e9:5e:c7:e0:ec:72:20:a2:10:66:27:6e:db:1e: cd:a4:74:a9:2c:e5:12:43:07:98:62:51:6b:9e:e7:53:93:4d: 48:36:d9:76:ae:dc:d6:74:62:66:73:ec:bb:e0:b1:4b:4d:8d: f4:18:67:4f:34:fd:e4:a5:79:6b:d2:e7:2a:a6:80:f5:b2:51: cf:d5:3f:2c:02:3b:67:dd:62:2b:c8:97:27:a7:81:81:3a:de: 23:1b:6c:93:49:10:f2:4f:88:85:27:07:9f:eb:03:3d:19:45: 28:33:6c:90:11:44:11:f4:ac:87:fe:3e:27:cf:fc:dd:4f:8f: 41:88:bc:5a:1b:5f:92:18:85:e5:d2:97:6d:82:91:1e:26:00: ed:da:d8:6a:02:fa:b0:5c:d4:60:82:82:d4:67:25:63:8c:4b: c4:13:81:78:3c:b1:a8:99:3a:d3:23:b1:a8:fc:2e:70:34:98: f5:24:c6:bb:e9:c6:f8:7c:75:fe:f3:b1:08:bf:09:ad:4b:c1: 78:90:f0:96:cc:d0:b8:3b:01:b2:0c:e3:d8:70:b5:34:e5:c5: c3:7a:26:2b -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUQINxUkk5lL90MyKLt8vsZxZUZHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYy NDM1NTNDQzAeFw0yNjA0MTMwNTQ0MzRaFw0yNzA0MTIwNTQ5MzRaMDMxMTAvBgNV BAMTKDNBRkMyMURCQjhBNTdBRjAzNzcyOERDQ0EwNEZERTZGQzAwNzIwMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZB/S805tXb6cf6pHV4gnmgsH7 aLwUJiygv29OrbVQnypQ1l8jXJXb+qCQFLJAuJhLjNzg83owAqstbGwx0r1VC8OB xDz4YzsxLiuq93uIm3yIHtQpT6OIKsnKV1ze8SKLOD846iIwM3STgAk7PDh7HehP o66Wd0gWPVmEHMi1Ep0h3/9LHBKwv7LH94NUiW6/s+ga00b1UOnUtGEaOcvERS9z szep4GCGDJb9JuLInQiYOeae5i8ifI3ro0Yx6drSt06d9tm9Q1oI2F17romcKN9U UDehyDr9jNRBT1dN4S4kIsn9Ir4Sj3Xh3+35v+oE80fMkCXb2iRode3Qca7pAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUOvwh27ilevA3co3MoE/eb8AHIDgwHwYDVR0j BBgwFoAUIhAvfqs3yB6Hu16yFWC/piQ1U8wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkyMDAwNjk1NDIyMTU2OS8xLzIyMTAyRjdFQUIzN0M4MUU4N0JCNUVCMjE1NjBC RkE2MjQzNTUzQ0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYyNDM1NTNDQy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTkyMDAwNjk1NDIyMTU2OS8xLzMyMzEzMTJlMzEz NTMwMmUzODMwMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzIzMzM3MzIzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBNOWUDANBgkqhkiG9w0BAQsFAAOCAQEA27A5e6xUjIrtjPC4a3Oql0BF p281oGYo27ML6RhrSau27cwlC73lYOlex+DsciCiEGYnbtsezaR0qSzlEkMHmGJR a57nU5NNSDbZdq7c1nRiZnPsu+CxS02N9BhnTzT95KV5a9LnKqaA9bJRz9U/LAI7 Z91iK8iXJ6eBgTreIxtsk0kQ8k+IhScHn+sDPRlFKDNskBFEEfSsh/4+J8/83U+P QYi8WhtfkhiF5dKXbYKRHiYA7drYagL6sFzUYIKC1GclY4xLxBOBeDyxqJk60yOx qPwucDSY9STGu+nG+Hx1/vOxCL8JrUvBeJDwlszQuDsBsgzj2HC1NOXFw3omKw== -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:18 2026 by rpki-client