$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135372e3139322e302f32302d3230203d3e203233373234.roa File: 3231312e3135372e3139322e302f32302d3230203d3e203233373234.roa (raw, json) Hash identifier: g7NQxqPIo2ezw+OBoAAEIKfoyKL904Ydaym44JJkCQc= Subject key identifier: 3B:DF:CC:F0:05:08:B3:78:BA:8C:75:5E:3E:CE:A9:9E:67:D7:15:21 Certificate issuer: /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC Certificate serial: 7F3573B263960BC76A6D86D7F4D2899AD57C2265 Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135372e3139322e302f32302d3230203d3e203233373234.roa Signing time: Mon 13 Apr 2026 05:57:38 +0000 ROA not before: Mon 13 Apr 2026 05:52:38 +0000 ROA not after: Mon 12 Apr 2027 05:57:38 +0000 asID: 23724 IP address blocks: 211.157.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:35:73:b2:63:96:0b:c7:6a:6d:86:d7:f4:d2:89:9a:d5:7c:22:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC Validity Not Before: Apr 13 05:52:38 2026 GMT Not After : Apr 12 05:57:38 2027 GMT Subject: CN=3BDFCCF00508B378BA8C755E3ECEA99E67D71521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f0:62:38:7f:e8:af:0c:6b:99:e7:a4:0d:d4: 52:f1:e9:47:c9:31:36:65:49:00:46:f0:70:f7:40: 12:4a:f6:da:2d:75:a6:7a:67:3c:e6:19:74:89:fc: e1:8b:b3:f5:08:2f:a2:d0:22:2f:83:8d:47:df:02: 48:cf:16:d8:54:19:fc:1b:e8:c6:4d:03:39:9c:3a: e8:6f:f4:9e:e5:61:27:4c:88:41:f8:d2:62:00:03: 3d:29:37:ef:1b:6d:6c:00:12:0a:ef:7b:e4:83:61: 02:1e:4b:aa:a1:71:69:af:ca:b2:c9:87:71:90:c6: df:7f:25:fc:19:41:88:e0:cf:13:16:3f:fe:0e:13: 81:f5:e9:4e:b9:e5:49:4e:fb:11:14:35:bb:83:30: b4:ab:ad:2b:d6:7b:72:01:68:89:c3:d2:cb:33:17: 47:19:36:cf:0b:0f:9e:69:ac:d2:be:73:41:c4:a7: a7:a6:b6:02:65:ef:cb:c7:c5:35:f1:68:ae:31:59: 18:fb:2c:41:7a:8b:32:2f:87:4d:97:ab:c1:44:bb: 2b:67:83:a6:00:ed:fc:e3:5b:33:ca:9e:f2:af:81: 96:c0:b1:ee:23:d3:6a:2e:c5:96:a6:15:9d:0a:1e: d3:46:6f:04:b8:5c:7f:0b:a5:34:57:8d:31:08:f2: 05:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DF:CC:F0:05:08:B3:78:BA:8C:75:5E:3E:CE:A9:9E:67:D7:15:21 X509v3 Authority Key Identifier: keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135372e3139322e302f32302d3230203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.157.192.0/20 Signature Algorithm: sha256WithRSAEncryption 9d:81:b7:9b:13:41:0e:25:8c:a5:2b:2a:57:7c:84:75:b3:35: 56:79:e8:1c:5f:32:6d:4a:98:72:04:ad:ae:c9:f3:ab:6d:98: c5:4e:2c:9a:8c:52:7c:16:90:33:28:2e:7f:bb:a0:c1:b2:d0: b4:8c:0c:11:4b:dd:81:0b:e1:41:65:a9:c7:6a:be:c6:73:41: 65:d1:2e:e5:58:29:93:75:8b:e4:8a:5d:03:89:99:60:01:2a: 47:42:43:64:8a:12:a2:65:7d:9c:a8:9f:ff:8a:1c:8a:32:36: c7:d1:3a:a2:f5:95:4e:08:47:a7:71:90:56:78:19:9e:8e:14: df:62:6c:a1:0d:4e:71:80:df:ef:ef:54:b2:d0:56:a6:7c:1b: 57:b1:7f:4a:9f:73:d4:b1:8f:c7:28:e8:4e:d9:ed:ff:fb:75: 46:28:5f:d8:81:20:66:d0:dd:56:0d:bf:d2:13:16:0c:84:f8: 05:39:b6:ec:c4:81:36:12:f0:0f:ca:47:fc:51:72:98:c5:7d: d4:85:0f:79:6e:2e:28:ff:5e:66:a6:a0:47:34:d5:70:37:50: 28:69:b5:8a:6d:d6:fe:46:aa:e4:5c:79:eb:f1:99:fe:2d:a9: a3:f6:9c:90:fd:13:5c:e5:a5:6f:53:a9:28:0a:0c:4b:82:8c: 61:59:82:e4 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUfzVzsmOWC8dqbYbX9NKJmtV8ImUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYy NDM1NTNDQzAeFw0yNjA0MTMwNTUyMzhaFw0yNzA0MTIwNTU3MzhaMDMxMTAvBgNV BAMTKDNCREZDQ0YwMDUwOEIzNzhCQThDNzU1RTNFQ0VBOTlFNjdENzE1MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv8GI4f+ivDGuZ56QN1FLx6UfJ MTZlSQBG8HD3QBJK9totdaZ6ZzzmGXSJ/OGLs/UIL6LQIi+DjUffAkjPFthUGfwb 6MZNAzmcOuhv9J7lYSdMiEH40mIAAz0pN+8bbWwAEgrve+SDYQIeS6qhcWmvyrLJ h3GQxt9/JfwZQYjgzxMWP/4OE4H16U655UlO+xEUNbuDMLSrrSvWe3IBaInD0ssz F0cZNs8LD55prNK+c0HEp6emtgJl78vHxTXxaK4xWRj7LEF6izIvh02Xq8FEuytn g6YA7fzjWzPKnvKvgZbAse4j02ouxZamFZ0KHtNGbwS4XH8LpTRXjTEI8gVzAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUO9/M8AUIs3i6jHVePs6pnmfXFSEwHwYDVR0j BBgwFoAUIhAvfqs3yB6Hu16yFWC/piQ1U8wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkyMDAwNjk1NDIyMTU2OS8xLzIyMTAyRjdFQUIzN0M4MUU4N0JCNUVCMjE1NjBC RkE2MjQzNTUzQ0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYyNDM1NTNDQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTU5MjAwMDY5NTQyMjE1NjkvMS8zMjMxMzEyZTMx MzUzNzJlMzEzOTMyMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzIzMzM3MzIzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBNOdwDANBgkqhkiG9w0BAQsFAAOCAQEAnYG3mxNBDiWMpSsqV3yE dbM1VnnoHF8ybUqYcgStrsnzq22YxU4smoxSfBaQMyguf7ugwbLQtIwMEUvdgQvh QWWpx2q+xnNBZdEu5Vgpk3WL5IpdA4mZYAEqR0JDZIoSomV9nKif/4ocijI2x9E6 ovWVTghHp3GQVngZno4U32JsoQ1OcYDf7+9UstBWpnwbV7F/Sp9z1LGPxyjoTtnt //t1Rihf2IEgZtDdVg2/0hMWDIT4BTm27MSBNhLwD8pH/FFymMV91IUPeW4uKP9e ZqagRzTVcDdQKGm1im3W/kaq5Fx56/GZ/i2po/ackP0TXOWlb1OpKAoMS4KMYVmC 5A== -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:11 2026 by rpki-client