$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135372e3136302e302f31392d3139203d3e203233373234.roa File: 3231312e3135372e3136302e302f31392d3139203d3e203233373234.roa (raw, json) Hash identifier: t58PvWUroeia0P5TL6X1Bz4D3AUlx6o+sfFf/IteIdI= Subject key identifier: BA:4F:D4:90:1F:67:0B:F1:A6:1E:FB:01:8B:99:F7:A8:3D:9B:A5:93 Certificate issuer: /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC Certificate serial: 5FD7140DF5153CC3F1434F8389F7E8B0DB7168C5 Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135372e3136302e302f31392d3139203d3e203233373234.roa Signing time: Mon 13 Apr 2026 05:57:39 +0000 ROA not before: Mon 13 Apr 2026 05:52:39 +0000 ROA not after: Mon 12 Apr 2027 05:57:39 +0000 asID: 23724 IP address blocks: 211.157.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d7:14:0d:f5:15:3c:c3:f1:43:4f:83:89:f7:e8:b0:db:71:68:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC Validity Not Before: Apr 13 05:52:39 2026 GMT Not After : Apr 12 05:57:39 2027 GMT Subject: CN=BA4FD4901F670BF1A61EFB018B99F7A83D9BA593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:87:4a:cd:45:4f:de:2e:9b:9a:ec:ba:0f:cd: 91:36:ed:05:54:a3:64:f8:31:3d:67:63:bd:56:c4: 7a:ce:ab:99:1d:4b:26:31:8e:e1:2c:e2:c2:18:e7: f2:c8:a2:77:52:2e:be:7f:45:33:5b:d5:50:f8:7f: e5:62:a4:51:0e:89:42:be:96:6c:80:1a:f7:e8:66: d1:db:3d:a5:65:fa:6f:5e:bb:68:c6:dd:99:49:c7: c5:63:ec:00:57:e8:5e:0f:7d:1b:2a:fa:2d:c0:23: 55:60:57:ea:89:75:84:05:8e:86:a5:08:31:9e:bc: 8d:91:37:86:6f:19:68:fb:7d:59:97:e8:fe:23:6b: 74:9e:9d:96:19:09:b5:d2:b9:d5:3a:60:ab:64:82: e0:92:b8:60:ec:90:a5:82:f3:e6:5f:41:e2:14:08: a0:dd:de:ee:24:31:6e:09:c2:cb:df:43:90:e6:7a: b8:25:fb:47:fa:cf:4f:19:0c:21:29:63:73:ce:26: 78:b1:17:c1:09:ab:96:aa:9d:b0:d2:52:25:11:8f: 57:7d:ef:8a:3c:76:a9:61:50:b8:5f:2e:57:97:35: d8:c5:be:dc:d1:d1:3f:4d:93:89:88:02:eb:15:21: 05:8f:d0:84:6b:43:41:e5:af:f4:87:bb:90:f9:f5: de:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:4F:D4:90:1F:67:0B:F1:A6:1E:FB:01:8B:99:F7:A8:3D:9B:A5:93 X509v3 Authority Key Identifier: keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135372e3136302e302f31392d3139203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.157.160.0/19 Signature Algorithm: sha256WithRSAEncryption 87:b4:83:bf:cc:ee:60:64:ae:92:87:f4:84:d9:b1:3d:62:3e: de:0e:29:8c:0b:41:b4:12:1a:11:2e:c3:96:32:8b:e9:7a:39: b7:8c:d4:47:51:06:86:9e:ed:8d:a2:33:58:e8:58:0c:5c:28: 8a:fe:7a:f1:12:4e:b9:09:88:04:ec:1f:29:c6:11:bf:a8:02: 21:43:1c:eb:57:d1:13:e8:4e:e1:bc:3a:46:1d:37:54:80:15: f2:d4:39:d1:e9:8e:b3:f3:d8:4c:f2:4c:8d:5a:3f:32:b4:04: 98:83:3e:b7:0f:1b:57:a9:68:44:50:3b:f4:ca:58:8a:f1:ec: 1f:dd:07:5f:ed:d2:80:82:2a:03:07:26:d0:f7:bd:09:97:7d: 34:ca:fc:44:39:57:c0:29:e2:ec:f0:b6:99:d4:da:2a:97:58: da:3a:e1:eb:d9:9a:b4:46:8f:e6:5b:59:fd:ef:3a:4e:65:04: 4e:02:6a:d5:fc:b6:60:dc:a2:a2:97:3d:47:17:fb:9d:55:b7: 85:6f:bb:ce:4d:27:d1:02:b2:c5:e6:c2:d9:0d:2b:f2:27:36: 9b:2a:ea:04:de:ab:0d:11:50:ac:ce:fb:30:ee:a0:c5:38:f9: d3:33:c5:aa:2d:43:f5:6f:ee:26:dd:b2:87:67:0b:7c:a2:0c: e9:80:e4:22 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUX9cUDfUVPMPxQ0+DiffosNtxaMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYy NDM1NTNDQzAeFw0yNjA0MTMwNTUyMzlaFw0yNzA0MTIwNTU3MzlaMDMxMTAvBgNV BAMTKEJBNEZENDkwMUY2NzBCRjFBNjFFRkIwMThCOTlGN0E4M0Q5QkE1OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSh0rNRU/eLpua7LoPzZE27QVU o2T4MT1nY71WxHrOq5kdSyYxjuEs4sIY5/LIondSLr5/RTNb1VD4f+VipFEOiUK+ lmyAGvfoZtHbPaVl+m9eu2jG3ZlJx8Vj7ABX6F4PfRsq+i3AI1VgV+qJdYQFjoal CDGevI2RN4ZvGWj7fVmX6P4ja3SenZYZCbXSudU6YKtkguCSuGDskKWC8+ZfQeIU CKDd3u4kMW4JwsvfQ5Dmergl+0f6z08ZDCEpY3POJnixF8EJq5aqnbDSUiURj1d9 74o8dqlhULhfLleXNdjFvtzR0T9Nk4mIAusVIQWP0IRrQ0Hlr/SHu5D59d6tAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUuk/UkB9nC/GmHvsBi5n3qD2bpZMwHwYDVR0j BBgwFoAUIhAvfqs3yB6Hu16yFWC/piQ1U8wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkyMDAwNjk1NDIyMTU2OS8xLzIyMTAyRjdFQUIzN0M4MUU4N0JCNUVCMjE1NjBC RkE2MjQzNTUzQ0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYyNDM1NTNDQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTU5MjAwMDY5NTQyMjE1NjkvMS8zMjMxMzEyZTMx MzUzNzJlMzEzNjMwMmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzIzMzM3MzIzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBdOdoDANBgkqhkiG9w0BAQsFAAOCAQEAh7SDv8zuYGSukof0hNmx PWI+3g4pjAtBtBIaES7DljKL6Xo5t4zUR1EGhp7tjaIzWOhYDFwoiv568RJOuQmI BOwfKcYRv6gCIUMc61fRE+hO4bw6Rh03VIAV8tQ50emOs/PYTPJMjVo/MrQEmIM+ tw8bV6loRFA79MpYivHsH90HX+3SgIIqAwcm0Pe9CZd9NMr8RDlXwCni7PC2mdTa KpdY2jrh69matEaP5ltZ/e86TmUETgJq1fy2YNyiopc9Rxf7nVW3hW+7zk0n0QKy xebC2Q0r8ic2myrqBN6rDRFQrM77MO6gxTj50zPFqi1D9W/uJt2yh2cLfKIM6YDk Ig== -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:28 2026 by rpki-client