$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135372e3233322e302f32312d3231203d3e203233373234.roa File: 3231312e3135372e3233322e302f32312d3231203d3e203233373234.roa (raw, json) Hash identifier: Mnad/Y1S3127qUStkj6/ae6IpUyrLetwKWDxhz310Tc= Subject key identifier: 94:20:04:B2:70:D8:16:AE:22:1E:2B:37:CD:3A:6C:13:18:1F:C5:E3 Certificate issuer: /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC Certificate serial: 0EC362F2372FDFC0F0F0B31B848C06B1BC0A81D0 Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135372e3233322e302f32312d3231203d3e203233373234.roa Signing time: Mon 13 Apr 2026 06:34:32 +0000 ROA not before: Mon 13 Apr 2026 06:29:32 +0000 ROA not after: Mon 12 Apr 2027 06:34:32 +0000 asID: 23724 IP address blocks: 211.157.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:c3:62:f2:37:2f:df:c0:f0:f0:b3:1b:84:8c:06:b1:bc:0a:81:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC Validity Not Before: Apr 13 06:29:32 2026 GMT Not After : Apr 12 06:34:32 2027 GMT Subject: CN=942004B270D816AE221E2B37CD3A6C13181FC5E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3f:b1:6a:71:b4:52:57:45:90:d9:14:61:d9: cb:cb:e7:57:75:93:a4:55:0b:d5:bf:8e:93:40:fb: a4:24:b8:5f:1a:5b:95:f9:54:0f:c2:8d:1f:3a:5f: 7c:08:87:a9:e3:5d:94:ef:7b:52:33:c9:7b:00:07: 18:65:fc:fe:61:a3:e7:30:da:88:b5:0b:5f:ba:30: f7:05:67:55:e4:bd:8c:1b:b5:cc:d1:d6:e1:c6:0b: 9a:b7:31:ab:d4:5a:b3:f7:6e:5b:0d:68:d9:e9:93: b8:70:ed:8a:b1:01:31:23:07:90:f4:c3:bd:bd:af: 52:83:09:bc:52:bd:e7:bb:9c:16:cf:14:d1:ab:03: 8f:70:2d:0c:94:92:0b:fc:42:c5:36:a1:ec:df:17: ca:d1:2b:c5:95:4b:55:ca:2f:3b:70:35:96:ec:23: 4a:0c:b7:ab:88:13:09:9a:85:ee:9a:b7:d3:7b:e4: ce:6b:77:e5:be:95:61:c1:58:2e:a8:1d:94:01:73: 4e:fd:67:5b:da:c1:aa:e4:b4:53:33:29:a9:f7:54: 2f:23:74:cf:2e:e5:47:7c:25:d7:fb:da:ef:85:6e: 03:1b:da:4f:53:62:17:b0:7e:89:c2:aa:a2:a2:01: 7a:30:07:33:78:c8:fb:2f:a9:27:2c:2c:0c:70:b4: 7d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:20:04:B2:70:D8:16:AE:22:1E:2B:37:CD:3A:6C:13:18:1F:C5:E3 X509v3 Authority Key Identifier: keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135372e3233322e302f32312d3231203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.157.232.0/21 Signature Algorithm: sha256WithRSAEncryption c5:53:ba:a9:28:f8:12:8c:6a:84:27:b1:ac:bf:18:70:c6:f7: 2a:21:8d:5d:8e:88:06:6d:3f:bc:73:12:fc:e1:7c:b5:8e:9b: e2:46:98:c9:fb:3d:07:22:92:6e:7a:71:32:97:18:0a:e9:f9: 10:fa:4b:9f:a3:e1:76:69:57:c3:23:7e:ab:ac:52:aa:79:1e: f9:de:46:cc:ee:dd:7f:81:0c:b7:b7:0e:b6:3c:f9:40:60:ec: a4:14:f4:14:c7:9e:ef:9f:7f:5d:1e:d2:04:56:f4:6b:e1:d0: a4:d5:b0:e7:d6:36:8a:a3:e3:ba:44:17:24:68:6d:6d:50:b7: d4:a4:b4:f6:06:05:2f:49:f1:62:73:88:8c:f2:e1:cb:a7:e6: d8:65:89:fe:e7:6f:35:3e:0c:98:b1:e9:61:32:8b:08:df:a3: b9:23:42:8d:77:71:78:e7:24:22:7b:d3:ee:4f:bb:9e:42:20: d1:d7:18:a3:43:84:1c:95:40:f1:2e:0d:db:42:2c:ba:42:4e: 48:38:b6:fe:2f:12:7b:97:b0:67:db:97:29:78:4a:5f:76:34: 66:26:4a:f7:83:8a:90:39:0c:c1:05:0b:5d:b4:23:ce:1c:d5: 9a:45:d7:0d:71:f2:83:0c:dd:ea:e6:7e:e0:42:8f:16:4c:3c: 15:7b:db:57 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUDsNi8jcv38Dw8LMbhIwGsbwKgdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYy NDM1NTNDQzAeFw0yNjA0MTMwNjI5MzJaFw0yNzA0MTIwNjM0MzJaMDMxMTAvBgNV BAMTKDk0MjAwNEIyNzBEODE2QUUyMjFFMkIzN0NEM0E2QzEzMTgxRkM1RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdP7FqcbRSV0WQ2RRh2cvL51d1 k6RVC9W/jpNA+6QkuF8aW5X5VA/CjR86X3wIh6njXZTve1IzyXsABxhl/P5ho+cw 2oi1C1+6MPcFZ1XkvYwbtczR1uHGC5q3MavUWrP3blsNaNnpk7hw7YqxATEjB5D0 w729r1KDCbxSvee7nBbPFNGrA49wLQyUkgv8QsU2oezfF8rRK8WVS1XKLztwNZbs I0oMt6uIEwmahe6at9N75M5rd+W+lWHBWC6oHZQBc079Z1vawarktFMzKan3VC8j dM8u5Ud8Jdf72u+FbgMb2k9TYhewfonCqqKiAXowBzN4yPsvqScsLAxwtH2VAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUlCAEsnDYFq4iHis3zTpsExgfxeMwHwYDVR0j BBgwFoAUIhAvfqs3yB6Hu16yFWC/piQ1U8wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkyMDAwNjk1NDIyMTU2OS8xLzIyMTAyRjdFQUIzN0M4MUU4N0JCNUVCMjE1NjBC RkE2MjQzNTUzQ0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYyNDM1NTNDQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTU5MjAwMDY5NTQyMjE1NjkvMS8zMjMxMzEyZTMx MzUzNzJlMzIzMzMyMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzMzM3MzIzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA9Od6DANBgkqhkiG9w0BAQsFAAOCAQEAxVO6qSj4EoxqhCexrL8Y cMb3KiGNXY6IBm0/vHMS/OF8tY6b4kaYyfs9ByKSbnpxMpcYCun5EPpLn6PhdmlX wyN+q6xSqnke+d5GzO7df4EMt7cOtjz5QGDspBT0FMee759/XR7SBFb0a+HQpNWw 59Y2iqPjukQXJGhtbVC31KS09gYFL0nxYnOIjPLhy6fm2GWJ/udvNT4MmLHpYTKL CN+juSNCjXdxeOckInvT7k+7nkIg0dcYo0OEHJVA8S4N20IsukJOSDi2/i8Se5ew Z9uXKXhKX3Y0ZiZK94OKkDkMwQULXbQjzhzVmkXXDXHygwzd6uZ+4EKPFkw8FXvb Vw== -----END CERTIFICATE-----Generated at Mon Apr 13 15:20:53 2026 by rpki-client