$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135372e3132382e302f31392d3139203d3e203233373234.roa File: 3231312e3135372e3132382e302f31392d3139203d3e203233373234.roa (raw, json) Hash identifier: sl7qhUm7RxG5b+OGwzvCXDL0+hR40yg+L5bjzzlV0aU= Subject key identifier: A3:A9:95:0C:84:3C:0B:2D:9A:FD:0F:15:CD:32:83:1A:52:51:ED:05 Certificate issuer: /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC Certificate serial: 1BD9098F1956444516E0D9085758B996F1D3A49E Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135372e3132382e302f31392d3139203d3e203233373234.roa Signing time: Mon 13 Apr 2026 06:51:41 +0000 ROA not before: Mon 13 Apr 2026 06:46:41 +0000 ROA not after: Mon 12 Apr 2027 06:51:41 +0000 asID: 23724 IP address blocks: 211.157.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d9:09:8f:19:56:44:45:16:e0:d9:08:57:58:b9:96:f1:d3:a4:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC Validity Not Before: Apr 13 06:46:41 2026 GMT Not After : Apr 12 06:51:41 2027 GMT Subject: CN=A3A9950C843C0B2D9AFD0F15CD32831A5251ED05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:ba:bb:cb:40:12:4e:dd:97:6b:1b:5f:64:ae: 94:b4:2b:84:61:fe:e0:82:ed:e8:11:ea:53:ca:18: 60:73:7e:cb:70:88:2e:81:cf:16:d9:18:8c:67:80: 48:0c:20:af:97:b6:1d:16:a7:b5:c3:26:96:0c:a9: 29:5e:a8:a5:df:ee:ac:f7:8f:4b:05:13:a5:4c:b8: 41:61:4b:1d:17:9a:68:e3:cf:f0:2a:dc:38:31:c1: 66:0d:f2:24:02:9c:51:7a:de:f0:78:fe:04:7b:fb: f5:ca:0e:72:cc:64:f6:33:a8:54:81:c4:4e:0e:bb: 8a:cc:f3:0e:34:0b:5e:99:6b:18:ed:87:70:f1:18: 0e:06:46:28:f7:8b:ef:f0:6b:e7:c9:89:e9:dc:dc: 47:4a:8d:56:d5:cb:3c:1b:ea:7f:d4:d1:80:96:80: 59:16:25:37:00:aa:4b:7a:53:33:02:c4:6e:74:7a: b6:bc:98:36:0e:fe:ba:ba:98:9f:55:aa:99:ce:1b: 74:3b:4b:53:9f:bb:42:f4:f8:55:ef:8c:aa:e4:f0: 11:36:ce:ba:2f:d9:25:12:d4:ab:d2:c6:a2:37:6b: 5e:e5:a7:45:3e:9c:0b:c1:f3:a9:bc:b4:4b:5c:80: 4f:6e:90:50:61:4c:08:b8:7f:5f:af:05:bb:69:af: 45:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A9:95:0C:84:3C:0B:2D:9A:FD:0F:15:CD:32:83:1A:52:51:ED:05 X509v3 Authority Key Identifier: keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135372e3132382e302f31392d3139203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.157.128.0/19 Signature Algorithm: sha256WithRSAEncryption 3e:49:16:3d:85:1b:a6:4f:ba:a5:d5:cc:be:f1:b6:af:68:f6: 7d:fe:17:c1:42:a1:e2:fa:0f:1a:57:d1:78:c2:dc:3e:b3:91: d8:fc:27:b5:2c:38:9b:08:54:be:be:e2:f0:aa:62:a2:d1:63: 76:0e:a7:4f:31:c9:eb:25:09:f7:86:ed:d1:de:be:61:cc:31: 8f:0c:80:47:93:bc:b6:c0:32:2c:a7:e3:b2:33:76:cb:5d:39: b6:8c:8d:2d:de:29:41:54:86:bf:6c:b1:99:5e:92:c4:bd:54: a2:e6:d5:e3:ef:27:2b:5d:cb:51:28:57:f3:2b:26:be:88:dd: 10:48:e6:91:9c:ed:f2:ba:10:27:0d:a5:6c:4b:c1:f7:f9:20: 9b:19:27:4d:9d:12:16:8f:5d:a5:61:42:f8:23:f3:59:dd:ea: f6:05:b7:41:e5:1b:43:86:f7:e4:68:9d:04:52:97:16:f5:8d: d7:d3:00:f8:64:8a:fa:80:93:d7:2a:38:90:62:85:bf:94:97: 43:94:75:e6:ee:dc:cd:ad:c5:26:f3:c5:f9:2a:55:99:47:13: 6d:d4:48:d4:da:82:e1:bc:9d:f0:60:61:89:f7:e4:b2:db:1b: 91:4f:a6:9b:27:34:ab:a6:1b:8e:a3:b6:1c:aa:dd:af:04:a3: b4:02:53:94 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUG9kJjxlWREUW4NkIV1i5lvHTpJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYy NDM1NTNDQzAeFw0yNjA0MTMwNjQ2NDFaFw0yNzA0MTIwNjUxNDFaMDMxMTAvBgNV BAMTKEEzQTk5NTBDODQzQzBCMkQ5QUZEMEYxNUNEMzI4MzFBNTI1MUVEMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7urvLQBJO3ZdrG19krpS0K4Rh /uCC7egR6lPKGGBzfstwiC6BzxbZGIxngEgMIK+Xth0Wp7XDJpYMqSleqKXf7qz3 j0sFE6VMuEFhSx0Xmmjjz/Aq3DgxwWYN8iQCnFF63vB4/gR7+/XKDnLMZPYzqFSB xE4Ou4rM8w40C16Zaxjth3DxGA4GRij3i+/wa+fJienc3EdKjVbVyzwb6n/U0YCW gFkWJTcAqkt6UzMCxG50era8mDYO/rq6mJ9VqpnOG3Q7S1Ofu0L0+FXvjKrk8BE2 zrov2SUS1KvSxqI3a17lp0U+nAvB86m8tEtcgE9ukFBhTAi4f1+vBbtpr0XrAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUo6mVDIQ8Cy2a/Q8VzTKDGlJR7QUwHwYDVR0j BBgwFoAUIhAvfqs3yB6Hu16yFWC/piQ1U8wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkyMDAwNjk1NDIyMTU2OS8xLzIyMTAyRjdFQUIzN0M4MUU4N0JCNUVCMjE1NjBC RkE2MjQzNTUzQ0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYyNDM1NTNDQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTU5MjAwMDY5NTQyMjE1NjkvMS8zMjMxMzEyZTMx MzUzNzJlMzEzMjM4MmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzIzMzM3MzIzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBdOdgDANBgkqhkiG9w0BAQsFAAOCAQEAPkkWPYUbpk+6pdXMvvG2 r2j2ff4XwUKh4voPGlfReMLcPrOR2PwntSw4mwhUvr7i8KpiotFjdg6nTzHJ6yUJ 94bt0d6+YcwxjwyAR5O8tsAyLKfjsjN2y105toyNLd4pQVSGv2yxmV6SxL1UoubV 4+8nK13LUShX8ysmvojdEEjmkZzt8roQJw2lbEvB9/kgmxknTZ0SFo9dpWFC+CPz Wd3q9gW3QeUbQ4b35GidBFKXFvWN19MA+GSK+oCT1yo4kGKFv5SXQ5R15u7cza3F JvPF+SpVmUcTbdRI1NqC4byd8GBhiffkstsbkU+mmyc0q6YbjqO2HKrdrwSjtAJT lA== -----END CERTIFICATE-----Generated at Mon Apr 13 15:22:08 2026 by rpki-client