$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097313663875809283/0/3231302e37372e3139322e302f32312d3231203d3e2030.roa File: 3231302e37372e3139322e302f32312d3231203d3e2030.roa (raw, json) Hash identifier: WfbvNX93kQjBJL0FXE2FBSdr09UfIAVD1IN6lHyh0Tc= Subject key identifier: 7D:67:BB:4B:52:87:BA:0E:88:E8:94:74:A3:B7:1F:C2:A0:FB:C6:4F Certificate issuer: /CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5 Certificate serial: 70783919A6EE1DABF26FC989CF0E245F4EF50EFB Authority key identifier: 4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/3231302e37372e3139322e302f32312d3231203d3e2030.roa Signing time: Tue 19 May 2026 00:45:56 +0000 ROA not before: Tue 19 May 2026 00:40:56 +0000 ROA not after: Tue 18 May 2027 00:45:56 +0000 asID: 0 IP address blocks: 210.77.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 21:41:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:78:39:19:a6:ee:1d:ab:f2:6f:c9:89:cf:0e:24:5f:4e:f5:0e:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5 Validity Not Before: May 19 00:40:56 2026 GMT Not After : May 18 00:45:56 2027 GMT Subject: CN=7D67BB4B5287BA0E88E89474A3B71FC2A0FBC64F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3a:13:28:4c:34:56:f6:17:c1:95:65:98:d3: 18:1d:e9:3f:58:e1:2a:59:f9:6d:d7:f2:2f:b4:e8: 39:c0:31:39:b1:f5:74:09:61:2a:7e:3a:e4:bf:7c: 73:0a:c5:55:54:b0:3a:7c:b5:05:ab:b3:b7:61:87: 50:b8:6c:20:21:a1:ae:d7:9d:e0:07:27:6e:a6:7d: 31:6e:eb:b2:5e:eb:ce:00:c3:76:43:aa:d3:64:d0: 60:6d:7d:64:4d:02:4d:55:0d:5e:7c:a8:e0:65:0d: 84:ab:7c:79:ae:a1:87:73:77:8e:3a:fd:6e:9f:90: 43:8e:4a:50:90:63:54:df:14:2d:e7:01:2d:2a:34: a4:46:b0:c5:3a:68:26:83:1d:84:55:23:e4:6b:cf: 19:b7:ab:a7:00:75:69:71:fe:7a:fa:87:c8:d0:8f: e2:af:9f:b5:3d:3d:ee:76:cd:37:bc:52:c3:73:0a: a6:fe:cd:21:15:c0:9b:49:a2:6b:af:12:e6:05:93: 06:b0:d4:3c:ef:7c:2d:d3:b1:df:35:0e:4a:32:60: 60:41:3a:9c:1f:45:a1:94:2e:39:52:98:95:04:b6: 08:57:33:cc:36:73:d7:7b:30:09:2e:c6:32:dd:08: b4:68:b3:54:b6:2d:62:29:4e:f5:21:3c:d9:e8:fd: 3d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:67:BB:4B:52:87:BA:0E:88:E8:94:74:A3:B7:1F:C2:A0:FB:C6:4F X509v3 Authority Key Identifier: keyid:4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/3231302e37372e3139322e302f32312d3231203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.77.192.0/21 Signature Algorithm: sha256WithRSAEncryption a1:90:6f:2b:1d:c9:5a:46:f4:a9:76:45:63:84:97:72:60:d6: 09:e5:41:f7:66:8b:0b:cf:d5:38:22:69:40:c7:b8:45:35:2d: 67:be:8f:6b:dd:b6:06:65:03:2d:8c:1c:00:97:2f:08:1d:0f: bb:78:1c:12:1b:75:27:34:27:5e:f3:de:53:4c:a8:4e:96:89: 9e:76:da:7a:92:69:e1:2a:67:70:35:af:0e:57:58:68:d0:2d: b4:54:51:9f:1a:b9:0a:c6:82:fd:f9:fc:a0:37:dc:a2:35:a3: 2a:18:50:56:b5:6c:83:4c:df:83:65:e0:1d:52:69:16:c5:ba: 69:99:81:70:e2:06:43:46:98:89:52:7e:d0:9e:8f:1d:20:9a: 0c:f6:9a:49:bc:07:64:7b:fa:2e:e1:bd:c2:85:18:21:22:06: 22:fb:79:dc:2d:96:42:09:5c:f9:1d:3d:98:60:90:a5:7a:62: 56:65:96:86:55:12:ec:36:d1:ad:e5:60:27:bd:1f:63:76:2b: a5:4c:82:e9:b7:14:59:99:4f:26:00:88:c9:63:39:8d:f7:45: 52:12:de:9d:17:43:bc:d3:8a:2d:56:e4:2d:d4:cd:76:36:94: 6f:63:5c:e4:cc:9c:d2:41:a4:4a:c1:bf:7c:c5:30:9f:d2:76: c3:b8:2f:03 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUcHg5GabuHavyb8mJzw4kX071DvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwNkVDQjg1QzRGNDNBMjNFN0IyNzYzMkU5NTNGN0ZB QTQ3N0VENTAeFw0yNjA1MTkwMDQwNTZaFw0yNzA1MTgwMDQ1NTZaMDMxMTAvBgNV BAMTKDdENjdCQjRCNTI4N0JBMEU4OEU4OTQ3NEEzQjcxRkMyQTBGQkM2NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfOhMoTDRW9hfBlWWY0xgd6T9Y 4SpZ+W3X8i+06DnAMTmx9XQJYSp+OuS/fHMKxVVUsDp8tQWrs7dhh1C4bCAhoa7X neAHJ26mfTFu67Je684Aw3ZDqtNk0GBtfWRNAk1VDV58qOBlDYSrfHmuoYdzd446 /W6fkEOOSlCQY1TfFC3nAS0qNKRGsMU6aCaDHYRVI+Rrzxm3q6cAdWlx/nr6h8jQ j+Kvn7U9Pe52zTe8UsNzCqb+zSEVwJtJomuvEuYFkwaw1DzvfC3Tsd81DkoyYGBB OpwfRaGULjlSmJUEtghXM8w2c9d7MAkuxjLdCLRos1S2LWIpTvUhPNno/T0HAgMB AAGjggILMIICBzAdBgNVHQ4EFgQUfWe7S1KHug6I6JR0o7cfwqD7xk8wHwYDVR0j BBgwFoAUTwbsuFxPQ6I+eydjLpU/f6pHftUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzMxMzY2Mzg3NTgwOTI4My8wLzRGMDZFQ0I4NUM0RjQzQTIzRTdCMjc2MzJFOTUz RjdGQUE0NzdFRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEYwNkVDQjg1QzRGNDNBMjNFN0IyNzYzMkU5NTNGN0ZBQTQ3N0VENS5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3MzEzNjYzODc1ODA5MjgzLzAvMzIzMTMwMmUzNzM3 MmUzMTM5MzIyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA9JN wDANBgkqhkiG9w0BAQsFAAOCAQEAoZBvKx3JWkb0qXZFY4SXcmDWCeVB92aLC8/V OCJpQMe4RTUtZ76Pa922BmUDLYwcAJcvCB0Pu3gcEht1JzQnXvPeU0yoTpaJnnba epJp4SpncDWvDldYaNAttFRRnxq5CsaC/fn8oDfcojWjKhhQVrVsg0zfg2XgHVJp FsW6aZmBcOIGQ0aYiVJ+0J6PHSCaDPaaSbwHZHv6LuG9woUYISIGIvt53C2WQglc +R09mGCQpXpiVmWWhlUS7DbRreVgJ70fY3YrpUyC6bcUWZlPJgCIyWM5jfdFUhLe nRdDvNOKLVbkLdTNdjaUb2Nc5Myc0kGkSsG/fMUwn9J2w7gvAw== -----END CERTIFICATE-----Generated at Sat May 23 03:04:20 2026 by rpki-client