$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3231312e3135322e33322e302f31392d3234203d3e2034383132.roa File: 3231312e3135322e33322e302f31392d3234203d3e2034383132.roa (raw, json) Hash identifier: pXiO707ra+w+F9zPcxMhGJ+XVTRhubVloDmzHiJywWg= Subject key identifier: 1F:59:D1:EB:78:C9:84:DB:30:9D:56:E1:0B:64:BF:98:98:DE:41:5E Certificate issuer: /CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Certificate serial: 53CA8C0996FABCCD859FFC925BF5B0173A97EAD1 Authority key identifier: 9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3231312e3135322e33322e302f31392d3234203d3e2034383132.roa Signing time: Thu 23 Apr 2026 03:07:24 +0000 ROA not before: Thu 23 Apr 2026 03:02:24 +0000 ROA not after: Thu 22 Apr 2027 03:07:24 +0000 asID: 4812 IP address blocks: 211.152.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 04:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ca:8c:09:96:fa:bc:cd:85:9f:fc:92:5b:f5:b0:17:3a:97:ea:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Validity Not Before: Apr 23 03:02:24 2026 GMT Not After : Apr 22 03:07:24 2027 GMT Subject: CN=1F59D1EB78C984DB309D56E10B64BF9898DE415E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:24:84:b2:e1:6a:8e:63:13:6f:38:9b:62:fb: 5f:9e:da:4d:c9:7f:6c:22:df:42:2f:54:fa:9b:25: 1a:d6:db:2f:b5:39:a2:50:ba:e8:b9:1d:69:77:bb: 05:65:84:1b:05:30:e8:cb:ad:26:04:cf:71:13:97: 96:ef:15:fd:5b:d1:94:74:68:65:29:bb:64:e6:03: 06:c2:6b:7d:b6:e8:ac:90:c1:b4:ad:a9:bd:43:3a: 28:07:de:fc:5c:cf:db:db:81:c1:27:db:21:c4:ec: 48:29:1b:1b:0f:e4:7a:ec:6d:7a:6c:65:4d:86:9d: ed:70:90:d1:28:af:7e:32:6f:1c:0c:94:80:66:8e: ce:3b:99:39:64:fe:73:68:2c:42:d0:ba:f5:c5:56: 50:29:ae:18:3b:15:cf:0d:5b:d4:98:48:b7:10:75: f6:35:67:17:71:ff:c0:48:47:94:54:a8:0b:d9:cf: a4:e9:d9:9a:7f:e3:45:e8:d4:78:f7:a2:8b:e9:05: 41:a3:46:85:1e:e3:de:d6:18:06:25:76:fb:2f:db: 6b:ed:5e:e4:74:a3:02:7f:d0:f6:62:5b:74:a4:16: b0:b1:cb:c6:f0:7c:29:e8:92:a7:6c:cb:bd:47:16: f2:e7:ee:4f:2c:41:7f:35:05:9d:6b:e8:e8:13:3d: b4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:59:D1:EB:78:C9:84:DB:30:9D:56:E1:0B:64:BF:98:98:DE:41:5E X509v3 Authority Key Identifier: keyid:9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3231312e3135322e33322e302f31392d3234203d3e2034383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.152.32.0/19 Signature Algorithm: sha256WithRSAEncryption 5f:ee:bd:81:68:a4:fb:c2:58:b1:8c:45:f8:02:78:cb:1e:06: b1:07:90:7e:8c:01:7c:c2:d4:66:96:d5:b5:c8:89:cf:ef:e2: ea:6a:96:88:9c:ca:09:39:57:66:a7:c3:bc:5b:6e:ca:1b:d9: 83:74:3f:c4:5c:6c:0b:25:f3:43:33:ce:9f:10:d0:b6:2a:e6: 8a:ff:e3:cb:61:7e:6c:00:e3:84:d0:66:d6:c2:db:37:f0:62: d9:c2:d5:1f:33:9d:76:1c:6f:60:e4:e9:49:50:72:d6:41:3e: eb:ea:f0:8a:80:2f:9c:dc:8c:00:1a:3c:a4:6d:cb:51:a7:d1: 9e:a7:e7:4b:b7:61:ec:01:77:25:6a:52:60:c3:31:df:d9:fd: 97:70:c8:fa:17:32:b7:62:90:b2:7d:87:f7:cd:a9:12:2c:01: 7d:e5:0a:40:a4:29:8d:77:a1:89:e9:ac:a0:73:ba:a5:b1:ac: 3b:20:d8:fb:c7:22:0a:5f:9b:b0:38:0b:e1:cb:7c:85:12:52: ce:1e:b2:8f:4e:5c:e1:e5:69:75:8c:02:19:bc:73:ac:5e:53: bd:64:aa:41:ed:72:c9:fb:57:7e:8e:97:5d:eb:fa:10:8d:2f: 6e:f7:cc:21:98:71:4a:cf:82:c8:d4:84:cc:11:8b:b4:cc:69: e7:94:8c:ce -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUU8qMCZb6vM2Fn/ySW/WwFzqX6tEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1 RjNFNDI0RTAeFw0yNjA0MjMwMzAyMjRaFw0yNzA0MjIwMzA3MjRaMDMxMTAvBgNV BAMTKDFGNTlEMUVCNzhDOTg0REIzMDlENTZFMTBCNjRCRjk4OThERTQxNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkJISy4WqOYxNvOJti+1+e2k3J f2wi30IvVPqbJRrW2y+1OaJQuui5HWl3uwVlhBsFMOjLrSYEz3ETl5bvFf1b0ZR0 aGUpu2TmAwbCa3226KyQwbStqb1DOigH3vxcz9vbgcEn2yHE7EgpGxsP5HrsbXps ZU2Gne1wkNEor34ybxwMlIBmjs47mTlk/nNoLELQuvXFVlAprhg7Fc8NW9SYSLcQ dfY1Zxdx/8BIR5RUqAvZz6Tp2Zp/40Xo1Hj3oovpBUGjRoUe497WGAYldvsv22vt XuR0owJ/0PZiW3SkFrCxy8bwfCnokqdsy71HFvLn7k8sQX81BZ1r6OgTPbT5AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUH1nR63jJhNswnVbhC2S/mJjeQV4wHwYDVR0j BBgwFoAUmor6fwM5VuBCXxWxBwpgb18+Qk4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM4NzM5ODQ2MDg2NjU2MS8wLzlBOEFGQTdGMDMzOTU2RTA0MjVGMTVCMTA3MEE2 MDZGNUYzRTQyNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1RjNFNDI0RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3Mzg3Mzk4NDYwODY2NTYxLzAvMzIzMTMxMmUzMTM1 MzIyZTMzMzIyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzNDM4MzEzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBdOYIDANBgkqhkiG9w0BAQsFAAOCAQEAX+69gWik+8JYsYxF+AJ4yx4GsQeQ fowBfMLUZpbVtciJz+/i6mqWiJzKCTlXZqfDvFtuyhvZg3Q/xFxsCyXzQzPOnxDQ tirmiv/jy2F+bADjhNBm1sLbN/Bi2cLVHzOddhxvYOTpSVBy1kE+6+rwioAvnNyM ABo8pG3LUafRnqfnS7dh7AF3JWpSYMMx39n9l3DI+hcyt2KQsn2H982pEiwBfeUK QKQpjXehiemsoHO6pbGsOyDY+8ciCl+bsDgL4ct8hRJSzh6yj05c4eVpdYwCGbxz rF5TvWSqQe1yyftXfo6XXev6EI0vbvfMIZhxSs+CyNSEzBGLtMxp55SMzg== -----END CERTIFICATE-----Generated at Mon Apr 27 08:24:33 2026 by rpki-client