$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135372e3132382e302f31382d3138203d3e203233373234.roa File: 3231312e3135372e3132382e302f31382d3138203d3e203233373234.roa (raw, json) Hash identifier: 9DsUsc7xqSEgA76x3QVEUXlO+lwxmzsItElrdqQxlu8= Subject key identifier: 19:F5:CA:A9:7B:94:BB:95:40:03:2D:C8:18:75:B7:E2:E1:E9:9A:B9 Certificate issuer: /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC Certificate serial: 147564258789D58E645F26B16E34F4B850B244F9 Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135372e3132382e302f31382d3138203d3e203233373234.roa Signing time: Mon 13 Apr 2026 06:51:41 +0000 ROA not before: Mon 13 Apr 2026 06:46:41 +0000 ROA not after: Mon 12 Apr 2027 06:51:41 +0000 asID: 23724 IP address blocks: 211.157.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:75:64:25:87:89:d5:8e:64:5f:26:b1:6e:34:f4:b8:50:b2:44:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC Validity Not Before: Apr 13 06:46:41 2026 GMT Not After : Apr 12 06:51:41 2027 GMT Subject: CN=19F5CAA97B94BB9540032DC81875B7E2E1E99AB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ec:80:74:2e:5f:5a:d7:c5:8f:14:51:d7:42: e7:d2:3f:9b:ab:8e:73:95:43:eb:f3:de:3f:d8:37: ea:ca:c1:bf:f6:06:57:13:a8:bd:ba:79:87:f8:35: a1:cd:33:89:50:0f:ed:bb:18:53:7d:8b:e5:d0:ae: c0:ea:d7:e2:8f:22:d8:8a:1c:58:3a:74:cc:c6:5e: 0d:b0:11:da:01:7d:4e:0e:7d:72:7c:51:e7:5c:96: fd:70:93:1d:a0:cb:c1:b6:a7:2a:58:67:1d:e8:09: ba:4f:d0:21:1e:45:71:a5:2e:ff:66:5c:5a:76:37: 18:9e:59:20:5a:4c:59:9b:4a:ed:a3:7d:96:13:3b: 65:97:51:69:41:0d:6c:a0:61:e2:45:97:be:0b:16: a0:a2:fa:95:24:be:d3:f6:0f:96:2b:04:e2:dd:39: c5:eb:58:6e:59:11:47:c5:64:60:c4:6d:5f:37:4c: 6c:ef:ab:54:13:37:70:b3:05:55:84:df:77:db:e6: 55:34:d3:fb:54:2e:29:ff:af:c8:e8:67:6a:57:9f: 32:97:8c:03:c3:02:86:16:a3:77:ed:ee:ab:89:0a: 0f:e6:30:cb:6e:c0:66:cb:96:ba:68:f9:64:b4:ad: 85:ca:b6:b8:3f:94:32:08:40:55:8c:af:ea:80:21: f1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F5:CA:A9:7B:94:BB:95:40:03:2D:C8:18:75:B7:E2:E1:E9:9A:B9 X509v3 Authority Key Identifier: keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135372e3132382e302f31382d3138203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.157.128.0/18 Signature Algorithm: sha256WithRSAEncryption 9b:98:cd:1e:bc:78:af:4d:6a:ad:46:b4:97:9f:e0:b9:ea:68: 44:09:20:7a:13:ee:90:82:5f:1d:b2:71:f8:75:b5:03:8e:d6: a2:39:a4:1d:9e:a7:c3:f5:32:b9:08:c4:18:85:20:db:14:96: d0:de:04:d3:a0:41:3e:e7:18:67:71:04:9e:dd:89:bc:3c:ae: be:f3:fc:e8:3c:a4:3e:91:b5:9e:22:b0:22:f8:30:67:78:e0: b5:5f:83:e1:c6:09:9d:f7:13:f8:b2:2d:3a:5f:c7:d9:00:b8: fe:e0:ad:cd:f3:51:06:59:df:d9:94:14:e5:06:df:ef:2b:93: 09:dc:60:04:67:20:ff:00:18:10:a1:8c:61:68:88:2d:83:95: ca:af:fd:22:de:4f:bf:f1:ad:f4:fc:09:5f:4a:93:37:b9:28: c8:3e:13:7a:db:95:a6:66:86:2b:50:a9:95:a7:1f:ff:6d:f8: e3:ea:d8:76:38:29:e4:00:2a:f4:78:b7:ff:07:1c:fe:dc:ae: b3:f0:19:15:fd:0d:18:0e:b9:22:c0:b4:a1:bb:e4:40:dc:d5: a6:d5:37:8f:0f:9c:30:98:b2:1f:1b:8a:1a:eb:ff:c5:0a:ee: b5:36:86:c2:35:78:1a:7c:74:b4:68:8d:e4:36:e8:a5:55:ed: 13:3f:19:97 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUFHVkJYeJ1Y5kXyaxbjT0uFCyRPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYy NDM1NTNDQzAeFw0yNjA0MTMwNjQ2NDFaFw0yNzA0MTIwNjUxNDFaMDMxMTAvBgNV BAMTKDE5RjVDQUE5N0I5NEJCOTU0MDAzMkRDODE4NzVCN0UyRTFFOTlBQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ7IB0Ll9a18WPFFHXQufSP5ur jnOVQ+vz3j/YN+rKwb/2BlcTqL26eYf4NaHNM4lQD+27GFN9i+XQrsDq1+KPItiK HFg6dMzGXg2wEdoBfU4OfXJ8Uedclv1wkx2gy8G2pypYZx3oCbpP0CEeRXGlLv9m XFp2NxieWSBaTFmbSu2jfZYTO2WXUWlBDWygYeJFl74LFqCi+pUkvtP2D5YrBOLd OcXrWG5ZEUfFZGDEbV83TGzvq1QTN3CzBVWE33fb5lU00/tULin/r8joZ2pXnzKX jAPDAoYWo3ft7quJCg/mMMtuwGbLlrpo+WS0rYXKtrg/lDIIQFWMr+qAIfElAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUGfXKqXuUu5VAAy3IGHW34uHpmrkwHwYDVR0j BBgwFoAUIhAvfqs3yB6Hu16yFWC/piQ1U8wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkyMDAwNjk1NDIyMTU2OS8xLzIyMTAyRjdFQUIzN0M4MUU4N0JCNUVCMjE1NjBC RkE2MjQzNTUzQ0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYyNDM1NTNDQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTU5MjAwMDY5NTQyMjE1NjkvMS8zMjMxMzEyZTMx MzUzNzJlMzEzMjM4MmUzMDJmMzEzODJkMzEzODIwM2QzZTIwMzIzMzM3MzIzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBtOdgDANBgkqhkiG9w0BAQsFAAOCAQEAm5jNHrx4r01qrUa0l5/g uepoRAkgehPukIJfHbJx+HW1A47WojmkHZ6nw/UyuQjEGIUg2xSW0N4E06BBPucY Z3EEnt2JvDyuvvP86DykPpG1niKwIvgwZ3jgtV+D4cYJnfcT+LItOl/H2QC4/uCt zfNRBlnf2ZQU5Qbf7yuTCdxgBGcg/wAYEKGMYWiILYOVyq/9It5Pv/Gt9PwJX0qT N7koyD4TetuVpmaGK1Cplacf/2344+rYdjgp5AAq9Hi3/wcc/tyus/AZFf0NGA65 IsC0obvkQNzVptU3jw+cMJiyHxuKGuv/xQrutTaGwjV4Gnx0tGiN5DbopVXtEz8Z lw== -----END CERTIFICATE-----Generated at Mon Apr 13 15:21:52 2026 by rpki-client