$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135372e3232372e302f32342d3234203d3e203233373234.roa File: 3231312e3135372e3232372e302f32342d3234203d3e203233373234.roa (raw, json) Hash identifier: 1QaZwfBCqfvHN54sX/bej2ZJXj1WVip/KSr91tGlqIg= Subject key identifier: 59:E5:1E:8B:45:26:D4:B8:61:0F:B3:F3:BB:5B:99:35:15:17:ED:83 Certificate issuer: /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC Certificate serial: 14905968FE199D8120A63B3E526EF419CFD40B85 Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135372e3232372e302f32342d3234203d3e203233373234.roa Signing time: Mon 13 Apr 2026 05:57:39 +0000 ROA not before: Mon 13 Apr 2026 05:52:39 +0000 ROA not after: Mon 12 Apr 2027 05:57:39 +0000 asID: 23724 IP address blocks: 211.157.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:90:59:68:fe:19:9d:81:20:a6:3b:3e:52:6e:f4:19:cf:d4:0b:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC Validity Not Before: Apr 13 05:52:39 2026 GMT Not After : Apr 12 05:57:39 2027 GMT Subject: CN=59E51E8B4526D4B8610FB3F3BB5B99351517ED83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ff:1f:9f:de:3a:67:fc:8e:dc:30:c4:a3:36: ab:d7:b1:aa:eb:ba:50:19:48:b8:d9:61:7e:39:3a: cb:11:24:1c:12:e2:4e:a2:18:5f:b0:c3:77:35:53: ee:3c:39:0c:5a:ca:00:15:a1:78:55:fd:a9:8a:94: e4:88:08:9e:88:0f:aa:5e:1c:60:21:c4:d3:a9:95: 58:d8:10:39:a6:b2:c3:c7:1d:10:dd:2e:02:2e:69: ed:5e:8f:89:16:27:2f:a8:6f:47:65:0f:18:cb:7a: 98:3a:14:cc:5b:d7:b4:78:b4:a2:52:77:72:2b:7b: 78:1a:d4:49:ff:93:e5:c8:7d:bc:16:50:ee:d1:7c: b9:b7:22:09:b4:9a:68:6d:01:c6:7c:21:4e:5d:f8: 32:c2:c9:a4:9e:65:43:be:d5:a0:ea:ea:c1:48:de: cd:d8:7c:41:6d:30:75:c5:45:e0:48:b4:32:d9:14: 88:5c:ae:f9:67:78:71:f2:85:05:d4:ce:61:2f:64: da:8b:dd:f3:cb:a3:bb:ac:e0:a9:a7:e4:7c:32:97: 8c:80:9e:2e:17:b8:91:fd:13:88:64:06:d4:1f:14: 86:0b:ae:8e:93:7a:5d:d7:c9:17:b1:ab:c5:a3:23: 94:48:da:fd:16:04:49:15:83:21:27:e2:c4:4c:70: f8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E5:1E:8B:45:26:D4:B8:61:0F:B3:F3:BB:5B:99:35:15:17:ED:83 X509v3 Authority Key Identifier: keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135372e3232372e302f32342d3234203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.157.227.0/24 Signature Algorithm: sha256WithRSAEncryption 39:58:d6:32:c3:da:42:6c:7e:dd:57:65:74:54:3a:ef:00:d0: 6e:4e:11:a1:49:24:c0:aa:0a:bf:d0:0e:c3:6b:e5:1f:93:f5: e7:bc:f4:dc:01:52:f4:cb:a3:f9:0c:a1:bb:5d:d1:1b:3f:1c: 99:2f:b4:b5:04:73:28:18:12:a4:a8:05:78:3a:c1:5b:4b:65: 8b:ac:24:a6:13:4b:85:09:84:cb:90:0e:f3:f0:9a:57:ec:80: 2e:7c:e4:6f:d1:22:a7:3c:bc:f1:28:6a:ef:18:1b:34:32:5f: 1c:36:17:14:64:b8:bc:b8:1a:c6:3b:0c:e8:64:76:ba:5a:40: 3c:d2:16:32:e7:07:98:f2:55:db:ad:19:3a:2c:dc:7a:b9:17: 04:48:de:69:5f:c3:61:8d:f4:67:f9:1b:0a:de:91:cc:92:e8: 68:ef:e1:4a:f7:2c:a1:b0:86:50:cc:48:fc:5c:fd:6b:87:1e: 81:72:2f:94:79:81:76:ad:f4:95:da:1e:ab:e7:99:6f:f6:9a: 08:2c:16:81:fe:0e:12:b6:6c:3d:f7:d0:9f:87:b2:56:56:d7: d7:48:0b:55:8a:f0:ee:a4:b9:08:ee:0c:e2:ad:d3:76:0f:96: 73:58:ab:67:97:72:f1:af:e0:fa:b6:4b:e6:e2:8b:6e:80:9e: 67:e0:ed:db -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUFJBZaP4ZnYEgpjs+Um70Gc/UC4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYy NDM1NTNDQzAeFw0yNjA0MTMwNTUyMzlaFw0yNzA0MTIwNTU3MzlaMDMxMTAvBgNV BAMTKDU5RTUxRThCNDUyNkQ0Qjg2MTBGQjNGM0JCNUI5OTM1MTUxN0VEODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6/x+f3jpn/I7cMMSjNqvXsarr ulAZSLjZYX45OssRJBwS4k6iGF+ww3c1U+48OQxaygAVoXhV/amKlOSICJ6ID6pe HGAhxNOplVjYEDmmssPHHRDdLgIuae1ej4kWJy+ob0dlDxjLepg6FMxb17R4tKJS d3Ire3ga1En/k+XIfbwWUO7RfLm3Igm0mmhtAcZ8IU5d+DLCyaSeZUO+1aDq6sFI 3s3YfEFtMHXFReBItDLZFIhcrvlneHHyhQXUzmEvZNqL3fPLo7us4Kmn5Hwyl4yA ni4XuJH9E4hkBtQfFIYLro6Tel3XyRexq8WjI5RI2v0WBEkVgyEn4sRMcPgnAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUWeUei0Um1LhhD7Pzu1uZNRUX7YMwHwYDVR0j BBgwFoAUIhAvfqs3yB6Hu16yFWC/piQ1U8wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkyMDAwNjk1NDIyMTU2OS8xLzIyMTAyRjdFQUIzN0M4MUU4N0JCNUVCMjE1NjBC RkE2MjQzNTUzQ0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYyNDM1NTNDQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTU5MjAwMDY5NTQyMjE1NjkvMS8zMjMxMzEyZTMx MzUzNzJlMzIzMjM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM3MzIzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEANOd4zANBgkqhkiG9w0BAQsFAAOCAQEAOVjWMsPaQmx+3VdldFQ6 7wDQbk4RoUkkwKoKv9AOw2vlH5P157z03AFS9Muj+Qyhu13RGz8cmS+0tQRzKBgS pKgFeDrBW0tli6wkphNLhQmEy5AO8/CaV+yALnzkb9Eipzy88Shq7xgbNDJfHDYX FGS4vLgaxjsM6GR2ulpAPNIWMucHmPJV260ZOizcerkXBEjeaV/DYY30Z/kbCt6R zJLoaO/hSvcsobCGUMxI/Fz9a4cegXIvlHmBdq30ldoeq+eZb/aaCCwWgf4OErZs PffQn4eyVlbX10gLVYrw7qS5CO4M4q3Tdg+Wc1irZ5dy8a/g+rZL5uKLboCeZ+Dt 2w== -----END CERTIFICATE-----Generated at Mon Apr 13 13:54:26 2026 by rpki-client