$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097313663875809283/0/3231302e37372e3230382e302f32302d3230203d3e2030.roa File: 3231302e37372e3230382e302f32302d3230203d3e2030.roa (raw, json) Hash identifier: V8CJqCjvjDtIPGw4nc30/IhvUVAHMewbKoIi+GYs1uo= Subject key identifier: 1F:E4:77:02:40:13:D7:71:1C:AF:F3:13:81:4B:40:BA:91:6E:79:FE Certificate issuer: /CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5 Certificate serial: 5182B17DBDFA6A8CE676C3927A82D7C1A9F94794 Authority key identifier: 4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/3231302e37372e3230382e302f32302d3230203d3e2030.roa Signing time: Tue 19 May 2026 00:45:56 +0000 ROA not before: Tue 19 May 2026 00:40:56 +0000 ROA not after: Tue 18 May 2027 00:45:56 +0000 asID: 0 IP address blocks: 210.77.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 21:41:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:82:b1:7d:bd:fa:6a:8c:e6:76:c3:92:7a:82:d7:c1:a9:f9:47:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5 Validity Not Before: May 19 00:40:56 2026 GMT Not After : May 18 00:45:56 2027 GMT Subject: CN=1FE477024013D7711CAFF313814B40BA916E79FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:10:68:a8:2d:9b:57:34:f8:45:6f:d2:96:86: 5e:72:54:e4:74:c3:58:26:05:10:fd:83:f3:31:93: 13:26:54:0a:95:9a:e7:2d:9f:b1:b4:2d:19:0f:de: 82:a7:13:d7:92:2c:ee:4b:db:1c:96:8f:a2:76:99: 5c:68:10:6e:03:46:2b:70:5a:7f:ba:47:5a:91:9d: 81:fd:18:85:40:31:a2:f9:4e:3a:ad:51:c0:a0:0d: 97:76:67:08:52:f7:64:0c:52:53:12:97:d2:73:d4: a5:7b:f0:ed:33:f3:0d:7a:78:05:30:2a:0a:9f:c8: 85:42:80:08:cf:5c:93:9b:d4:17:f8:94:30:05:c0: 21:86:31:11:35:28:57:aa:0e:f8:04:c6:b0:74:b5: a5:04:a6:07:7e:8c:f3:aa:b3:3d:c3:49:ba:d3:b0: 64:10:02:77:dc:9b:3d:27:07:87:fa:5b:c6:9a:22: 86:e8:e3:fe:e0:bb:98:77:4f:17:cb:fe:af:8d:73: 35:48:1c:c9:e2:e6:a4:03:9b:79:02:e8:ce:82:20: 60:07:1c:2c:51:ee:bf:44:d4:89:48:93:bd:10:0d: a3:12:03:5d:63:9a:36:87:72:b7:70:52:7d:1d:14: 26:aa:42:1f:c3:76:45:a4:24:b7:52:53:ac:2f:4f: d2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E4:77:02:40:13:D7:71:1C:AF:F3:13:81:4B:40:BA:91:6E:79:FE X509v3 Authority Key Identifier: keyid:4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/3231302e37372e3230382e302f32302d3230203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.77.208.0/20 Signature Algorithm: sha256WithRSAEncryption ab:b2:b1:86:cd:fa:3e:f9:f0:da:1f:fc:40:03:8b:e0:c3:0f: 2c:d5:b6:73:39:b6:bf:5f:d9:a6:cf:b3:86:3d:bc:29:3e:78: 6a:ae:19:65:cc:0d:7c:81:7d:8f:15:27:73:91:c8:1d:d2:23: 42:62:84:50:23:f6:48:e3:3f:1e:67:d6:2e:a2:f1:dc:dc:6f: 9f:f3:31:cd:b0:6c:25:74:b9:59:93:c5:78:a6:75:cc:59:3d: 82:eb:41:d4:4f:9e:75:b6:83:4b:53:97:a0:87:64:db:76:75: ae:c8:f5:50:36:a9:2e:bf:a9:5e:ba:ae:5b:20:e6:b7:1f:8c: 49:77:df:8a:14:73:72:e6:31:3b:da:4a:ee:76:c0:81:d5:d7: 03:ab:86:79:26:c8:d4:2c:ed:bc:bb:b0:db:3c:1b:84:d4:d7: 1b:aa:ea:52:7a:81:a2:c9:ca:f4:a5:a6:01:96:1f:59:35:83: 21:37:2a:3c:2e:a8:da:dd:c5:d0:3a:32:bb:1b:e5:a2:46:06: 93:0a:5f:73:47:d9:95:d9:ec:b5:c6:f4:e9:db:09:30:68:54: ea:4d:cc:d7:e2:28:f3:df:9c:bb:63:b6:36:6f:72:9b:53:54: 70:e9:b8:cc:51:66:52:24:15:76:01:81:91:4a:e3:29:23:d3: 28:1d:67:ab -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUUYKxfb36aozmdsOSeoLXwan5R5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwNkVDQjg1QzRGNDNBMjNFN0IyNzYzMkU5NTNGN0ZB QTQ3N0VENTAeFw0yNjA1MTkwMDQwNTZaFw0yNzA1MTgwMDQ1NTZaMDMxMTAvBgNV BAMTKDFGRTQ3NzAyNDAxM0Q3NzExQ0FGRjMxMzgxNEI0MEJBOTE2RTc5RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsEGioLZtXNPhFb9KWhl5yVOR0 w1gmBRD9g/MxkxMmVAqVmuctn7G0LRkP3oKnE9eSLO5L2xyWj6J2mVxoEG4DRitw Wn+6R1qRnYH9GIVAMaL5TjqtUcCgDZd2ZwhS92QMUlMSl9Jz1KV78O0z8w16eAUw KgqfyIVCgAjPXJOb1Bf4lDAFwCGGMRE1KFeqDvgExrB0taUEpgd+jPOqsz3DSbrT sGQQAnfcmz0nB4f6W8aaIobo4/7gu5h3TxfL/q+NczVIHMni5qQDm3kC6M6CIGAH HCxR7r9E1IlIk70QDaMSA11jmjaHcrdwUn0dFCaqQh/DdkWkJLdSU6wvT9IzAgMB AAGjggILMIICBzAdBgNVHQ4EFgQUH+R3AkAT13Ecr/MTgUtAupFuef4wHwYDVR0j BBgwFoAUTwbsuFxPQ6I+eydjLpU/f6pHftUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzMxMzY2Mzg3NTgwOTI4My8wLzRGMDZFQ0I4NUM0RjQzQTIzRTdCMjc2MzJFOTUz RjdGQUE0NzdFRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEYwNkVDQjg1QzRGNDNBMjNFN0IyNzYzMkU5NTNGN0ZBQTQ3N0VENS5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3MzEzNjYzODc1ODA5MjgzLzAvMzIzMTMwMmUzNzM3 MmUzMjMwMzgyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNJN 0DANBgkqhkiG9w0BAQsFAAOCAQEAq7Kxhs36Pvnw2h/8QAOL4MMPLNW2czm2v1/Z ps+zhj28KT54aq4ZZcwNfIF9jxUnc5HIHdIjQmKEUCP2SOM/HmfWLqLx3Nxvn/Mx zbBsJXS5WZPFeKZ1zFk9gutB1E+edbaDS1OXoIdk23Z1rsj1UDapLr+pXrquWyDm tx+MSXffihRzcuYxO9pK7nbAgdXXA6uGeSbI1CztvLuw2zwbhNTXG6rqUnqBosnK 9KWmAZYfWTWDITcqPC6o2t3F0DoyuxvlokYGkwpfc0fZldnstcb06dsJMGhU6k3M 1+Io89+cu2O2Nm9ym1NUcOm4zFFmUiQVdgGBkUrjKSPTKB1nqw== -----END CERTIFICATE-----Generated at Sat May 23 03:03:29 2026 by rpki-client