$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3131392e33372e322e302f32342d3234203d3e2034383131.roa File: 3131392e33372e322e302f32342d3234203d3e2034383131.roa (raw, json) Hash identifier: UZhjLIYHRzK7JN3krn3xdzxbu5zGNQyiEHSwmbjCoEg= Subject key identifier: 35:D0:95:07:09:DE:7C:B3:5E:C4:D9:19:2E:99:33:F3:D1:EB:2B:D0 Certificate issuer: /CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Certificate serial: 3352C9862C3995D5B86B9423F8F06E945E03BD82 Authority key identifier: 9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3131392e33372e322e302f32342d3234203d3e2034383131.roa Signing time: Fri 05 Jun 2026 03:16:38 +0000 ROA not before: Fri 05 Jun 2026 03:11:38 +0000 ROA not after: Fri 04 Jun 2027 03:16:38 +0000 asID: 4811 IP address blocks: 119.37.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 13:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:52:c9:86:2c:39:95:d5:b8:6b:94:23:f8:f0:6e:94:5e:03:bd:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Validity Not Before: Jun 5 03:11:38 2026 GMT Not After : Jun 4 03:16:38 2027 GMT Subject: CN=35D0950709DE7CB35EC4D9192E9933F3D1EB2BD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:43:97:a1:cf:25:77:bc:4b:2c:bd:dd:2d:f2: 14:5d:32:e8:b9:c5:f9:51:f6:9c:6b:bc:95:9b:2c: 2e:b6:e2:4b:ee:fe:34:9f:d8:51:0a:4d:fc:f7:ee: 71:66:b5:29:6f:ac:cf:71:01:33:5f:b5:7a:d2:a1: 10:08:29:29:27:76:d2:e0:73:63:a8:e3:fe:e8:d4: 8d:c2:db:19:00:df:ce:4c:0c:b0:b7:68:5d:39:90: 3c:3b:d4:1f:28:db:85:8d:c8:b6:20:f6:33:25:48: a8:45:c7:44:64:12:e6:0c:6e:95:05:37:69:a2:6c: b6:bf:2e:b1:da:cd:bb:b9:5a:fb:d8:79:ba:b4:40: 6c:c7:d7:bf:7c:3a:ff:0c:fb:4b:46:30:6f:93:eb: 09:7d:9b:43:1d:9c:8f:38:0b:f3:81:7f:88:34:13: 2e:30:fc:6a:2e:7b:0d:20:85:cc:15:06:3a:fe:44: 82:54:82:55:7d:e6:42:4c:16:03:6a:a0:9c:9c:82: 3c:b1:8e:74:3e:7a:51:c1:d7:dd:1f:56:0c:ae:6f: 72:f0:d9:d6:a1:11:d5:27:57:cc:8a:ec:be:b6:4e: 7f:30:7e:39:98:c1:ad:d1:fc:fb:5d:e7:6c:e0:be: 0f:e4:aa:f0:88:0a:fe:1f:c2:9e:5e:69:f6:28:a3: 4a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D0:95:07:09:DE:7C:B3:5E:C4:D9:19:2E:99:33:F3:D1:EB:2B:D0 X509v3 Authority Key Identifier: keyid:9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3131392e33372e322e302f32342d3234203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.37.2.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:a6:c2:a1:2b:4c:3f:d6:9b:49:20:82:44:33:f5:e9:41:19: df:83:bb:6a:c5:8b:c3:3e:6b:87:eb:db:81:0c:cd:9c:ea:00: a7:a6:04:27:64:01:9d:95:a4:c1:dd:f4:0e:13:da:89:ac:78: 1e:b0:a7:a1:06:54:c0:ad:e5:95:86:7d:e3:5e:e1:d2:bf:49: a4:74:d0:0c:8e:2d:7b:6a:1b:50:00:76:03:28:74:d2:8c:dc: bd:c0:77:c0:b5:c0:8e:9e:68:71:22:b0:d5:bd:51:e0:a0:61: 6f:a1:28:79:c7:d1:96:9c:36:a5:14:da:9e:3e:b7:74:e1:c5: 92:fe:95:db:61:88:8a:1b:c1:dc:46:08:29:4b:a9:a3:6a:da: 6c:30:e7:16:30:b7:4a:e1:4f:70:52:9c:fe:5a:a2:2e:40:63: 81:8f:a9:f8:3c:9f:54:6b:ca:8c:dd:ad:d3:ae:2f:7b:fe:fb: 1c:19:9e:48:08:e0:62:7d:79:1e:97:16:5c:c2:49:83:d0:cc: 1f:98:6e:5c:08:8f:07:31:bd:b6:90:42:d5:2f:d7:3d:b3:6d: b6:7e:d5:a2:81:87:a3:8d:c9:84:12:2d:37:d8:1f:4d:98:21: cd:6d:61:c9:10:f7:02:de:ae:14:f2:46:2d:0e:8f:1c:6f:2b: f5:f0:0a:91 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUM1LJhiw5ldW4a5Qj+PBulF4DvYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1 RjNFNDI0RTAeFw0yNjA2MDUwMzExMzhaFw0yNzA2MDQwMzE2MzhaMDMxMTAvBgNV BAMTKDM1RDA5NTA3MDlERTdDQjM1RUM0RDkxOTJFOTkzM0YzRDFFQjJCRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXQ5ehzyV3vEssvd0t8hRdMui5 xflR9pxrvJWbLC624kvu/jSf2FEKTfz37nFmtSlvrM9xATNftXrSoRAIKSkndtLg c2Oo4/7o1I3C2xkA385MDLC3aF05kDw71B8o24WNyLYg9jMlSKhFx0RkEuYMbpUF N2mibLa/LrHazbu5WvvYebq0QGzH1798Ov8M+0tGMG+T6wl9m0MdnI84C/OBf4g0 Ey4w/Gouew0ghcwVBjr+RIJUglV95kJMFgNqoJycgjyxjnQ+elHB190fVgyub3Lw 2dahEdUnV8yK7L62Tn8wfjmYwa3R/Ptd52zgvg/kqvCICv4fwp5eafYoo0pDAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUNdCVBwnefLNexNkZLpkz89HrK9AwHwYDVR0j BBgwFoAUmor6fwM5VuBCXxWxBwpgb18+Qk4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM4NzM5ODQ2MDg2NjU2MS8wLzlBOEFGQTdGMDMzOTU2RTA0MjVGMTVCMTA3MEE2 MDZGNUYzRTQyNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1RjNFNDI0RS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3Mzg3Mzk4NDYwODY2NTYxLzAvMzEzMTM5MmUzMzM3 MmUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzgzMTMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA dyUCMA0GCSqGSIb3DQEBCwUAA4IBAQBKpsKhK0w/1ptJIIJEM/XpQRnfg7tqxYvD PmuH69uBDM2c6gCnpgQnZAGdlaTB3fQOE9qJrHgesKehBlTAreWVhn3jXuHSv0mk dNAMji17ahtQAHYDKHTSjNy9wHfAtcCOnmhxIrDVvVHgoGFvoSh5x9GWnDalFNqe Prd04cWS/pXbYYiKG8HcRggpS6mjatpsMOcWMLdK4U9wUpz+WqIuQGOBj6n4PJ9U a8qM3a3Tri97/vscGZ5ICOBifXkelxZcwkmD0MwfmG5cCI8HMb22kELVL9c9s222 ftWigYejjcmEEi032B9NmCHNbWHJEPcC3q4U8kYtDo8cbyv18AqR -----END CERTIFICATE-----Generated at Thu Jun 11 23:49:19 2026 by rpki-client