$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097313663875809283/0/3231302e37372e3230302e302f32312d3231203d3e2030.roa File: 3231302e37372e3230302e302f32312d3231203d3e2030.roa (raw, json) Hash identifier: n6DlSUA+FzSwEXmdTC0EuhRQME0ZQ/wePSzEFioF7+U= Subject key identifier: 52:53:08:31:7E:95:B3:E0:62:6F:1F:5D:69:4E:1B:53:9A:63:0B:7E Certificate issuer: /CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5 Certificate serial: 5E74695D86DDB9178C48DB428450AD9CD9C733E1 Authority key identifier: 4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/3231302e37372e3230302e302f32312d3231203d3e2030.roa Signing time: Tue 19 May 2026 00:45:56 +0000 ROA not before: Tue 19 May 2026 00:40:56 +0000 ROA not after: Tue 18 May 2027 00:45:56 +0000 asID: 0 IP address blocks: 210.77.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 21:41:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:74:69:5d:86:dd:b9:17:8c:48:db:42:84:50:ad:9c:d9:c7:33:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5 Validity Not Before: May 19 00:40:56 2026 GMT Not After : May 18 00:45:56 2027 GMT Subject: CN=525308317E95B3E0626F1F5D694E1B539A630B7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:61:6d:20:bd:35:c0:bd:ae:ec:4e:0f:2f:9a: 6d:96:d7:fa:d6:72:0a:ea:48:0f:df:3a:d4:f1:d5: 35:9a:0e:fc:29:95:6b:c4:8b:86:8d:bd:76:70:f0: 98:30:8f:fe:71:8e:d6:78:a7:c0:ad:ce:a4:3f:9f: b5:a6:6f:91:49:2a:97:be:fb:95:af:22:a6:05:c0: 78:03:85:01:0a:a6:cb:93:32:0d:3d:63:04:46:cd: a6:38:a8:ef:97:1a:02:38:15:42:e7:95:0e:be:f0: 8e:d4:91:aa:5f:66:56:be:99:b7:42:f9:92:02:a0: 89:8c:b0:6c:e2:91:08:63:4f:f4:92:e8:d6:73:ce: 96:54:b1:40:7e:82:83:50:f6:ab:09:06:37:2e:ff: 55:1e:50:34:50:43:3c:16:24:51:e5:f1:df:3a:33: e0:d2:d4:52:02:fe:01:20:02:be:07:d3:02:65:82: 60:5a:29:73:1a:4a:68:c4:9d:10:7b:99:7e:4e:8d: 3b:f8:57:07:2e:6a:30:2e:fc:94:20:42:04:29:4a: 15:84:fb:16:d9:5e:86:d7:7d:dd:2e:0b:fc:64:22: 0f:48:c2:89:25:d2:98:e1:54:7b:a4:53:80:c9:21: 7f:4a:7b:ca:c0:ef:80:e4:a8:35:67:64:46:79:09: fd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:53:08:31:7E:95:B3:E0:62:6F:1F:5D:69:4E:1B:53:9A:63:0B:7E X509v3 Authority Key Identifier: keyid:4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/3231302e37372e3230302e302f32312d3231203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.77.200.0/21 Signature Algorithm: sha256WithRSAEncryption 3d:43:8e:19:81:ef:46:83:80:bf:69:4a:14:4b:c9:52:ba:11: 0f:d6:1f:e9:f4:9b:a0:47:5c:30:d1:f8:b9:ca:55:61:47:65: 79:03:2c:80:4a:10:7b:fb:de:38:35:66:1d:e0:bb:ef:b4:b7: 19:82:86:7e:e9:27:41:b8:05:57:56:61:bc:09:54:6f:99:23: 66:0a:0e:69:87:a0:9b:51:db:9f:0a:8b:94:9c:06:06:8d:be: 5d:cb:6d:62:c3:8b:58:d8:d5:3e:9f:40:2e:bb:64:3e:03:07: c6:2c:e1:92:4b:7e:b1:de:00:42:f6:9b:6a:b7:29:93:b2:f2: 36:95:43:6c:a3:a3:f2:fc:23:c0:c5:8f:f2:ff:41:fb:d5:67: 62:99:57:30:5b:66:c6:a4:8f:ab:50:c0:80:00:26:a3:67:31: ab:3f:f9:96:29:47:6b:81:84:3b:9f:12:6e:35:01:d5:47:c9: 32:43:59:ad:ea:85:f5:be:23:3c:92:c5:79:a0:92:cf:bf:5a: d2:dd:8e:55:99:e2:c2:d0:1a:ec:ac:d1:25:22:5b:d3:03:54: 01:d3:68:ae:b8:44:ee:85:82:0a:f3:ee:21:77:40:06:5e:c5: e1:fa:5e:e9:9b:9d:d7:c7:d4:c3:d3:45:87:33:e4:7a:29:f8: d2:4d:fb:29 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUXnRpXYbduReMSNtChFCtnNnHM+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwNkVDQjg1QzRGNDNBMjNFN0IyNzYzMkU5NTNGN0ZB QTQ3N0VENTAeFw0yNjA1MTkwMDQwNTZaFw0yNzA1MTgwMDQ1NTZaMDMxMTAvBgNV BAMTKDUyNTMwODMxN0U5NUIzRTA2MjZGMUY1RDY5NEUxQjUzOUE2MzBCN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgYW0gvTXAva7sTg8vmm2W1/rW cgrqSA/fOtTx1TWaDvwplWvEi4aNvXZw8Jgwj/5xjtZ4p8CtzqQ/n7Wmb5FJKpe+ +5WvIqYFwHgDhQEKpsuTMg09YwRGzaY4qO+XGgI4FULnlQ6+8I7UkapfZla+mbdC +ZICoImMsGzikQhjT/SS6NZzzpZUsUB+goNQ9qsJBjcu/1UeUDRQQzwWJFHl8d86 M+DS1FIC/gEgAr4H0wJlgmBaKXMaSmjEnRB7mX5OjTv4VwcuajAu/JQgQgQpShWE +xbZXobXfd0uC/xkIg9Iwokl0pjhVHukU4DJIX9Ke8rA74DkqDVnZEZ5Cf1TAgMB AAGjggILMIICBzAdBgNVHQ4EFgQUUlMIMX6Vs+Bibx9daU4bU5pjC34wHwYDVR0j BBgwFoAUTwbsuFxPQ6I+eydjLpU/f6pHftUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzMxMzY2Mzg3NTgwOTI4My8wLzRGMDZFQ0I4NUM0RjQzQTIzRTdCMjc2MzJFOTUz RjdGQUE0NzdFRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEYwNkVDQjg1QzRGNDNBMjNFN0IyNzYzMkU5NTNGN0ZBQTQ3N0VENS5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3MzEzNjYzODc1ODA5MjgzLzAvMzIzMTMwMmUzNzM3 MmUzMjMwMzAyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA9JN yDANBgkqhkiG9w0BAQsFAAOCAQEAPUOOGYHvRoOAv2lKFEvJUroRD9Yf6fSboEdc MNH4ucpVYUdleQMsgEoQe/veODVmHeC777S3GYKGfuknQbgFV1ZhvAlUb5kjZgoO aYegm1HbnwqLlJwGBo2+XcttYsOLWNjVPp9ALrtkPgMHxizhkkt+sd4AQvabarcp k7LyNpVDbKOj8vwjwMWP8v9B+9VnYplXMFtmxqSPq1DAgAAmo2cxqz/5lilHa4GE O58SbjUB1UfJMkNZreqF9b4jPJLFeaCSz79a0t2OVZniwtAa7KzRJSJb0wNUAdNo rrhE7oWCCvPuIXdABl7F4fpe6Zud18fUw9NFhzPkein40k37KQ== -----END CERTIFICATE-----Generated at Sat May 23 03:03:28 2026 by rpki-client