$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3232312e3133332e3232352e302f32342d3234203d3e2034383132.roa File: 3232312e3133332e3232352e302f32342d3234203d3e2034383132.roa (raw, json) Hash identifier: oSxen+avH3yqnVUcHFHfBxSONh2HEHoFvmKh9qAM9WI= Subject key identifier: 95:7B:E5:E7:48:66:7C:E7:6E:AB:CC:FE:A1:29:2F:8C:56:6C:68:E3 Certificate issuer: /CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A Certificate serial: 7B99FC42E95AEE1465DE7AA0F4D6611BCDA7556C Authority key identifier: AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3232312e3133332e3232352e302f32342d3234203d3e2034383132.roa Signing time: Wed 22 Apr 2026 07:51:41 +0000 ROA not before: Wed 22 Apr 2026 07:46:41 +0000 ROA not after: Wed 21 Apr 2027 07:51:41 +0000 asID: 4812 IP address blocks: 221.133.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 23:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:99:fc:42:e9:5a:ee:14:65:de:7a:a0:f4:d6:61:1b:cd:a7:55:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A Validity Not Before: Apr 22 07:46:41 2026 GMT Not After : Apr 21 07:51:41 2027 GMT Subject: CN=957BE5E748667CE76EABCCFEA1292F8C566C68E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:df:26:e0:c9:4f:bf:be:9c:a6:40:f4:8e:1b: 92:2e:87:18:c9:08:d6:77:69:b5:45:2a:5c:d2:5d: 3b:9c:12:97:61:ca:0a:50:f5:d8:ee:14:75:00:03: 88:e5:23:a2:2e:b7:ff:82:72:ca:30:7e:15:af:47: 05:5a:4e:47:37:30:74:ac:3b:24:e5:fd:70:70:6e: 10:21:94:d8:1b:90:22:25:6a:45:86:28:60:a4:89: 0b:ab:42:5a:49:9b:ef:6c:39:d2:9f:75:ab:13:8d: 03:14:3a:4d:3c:e1:b3:31:87:b6:37:94:33:04:39: 89:3f:54:db:3f:b2:4e:a7:36:8e:5b:5c:f3:6b:cb: c1:c2:af:3b:b5:76:dd:59:f2:82:3e:e0:74:2f:f7: 49:2c:c3:b2:48:0f:c1:0f:12:82:5c:9a:e3:80:42: a6:e4:69:87:81:4e:34:30:36:fc:de:1b:5a:a7:e3: 8a:27:b1:12:50:46:a1:9f:e9:09:dd:b8:b1:42:11: 42:60:da:51:2d:ba:97:8e:a7:50:10:14:99:99:e3: 59:ba:7e:1c:57:c0:31:92:82:0c:6e:c4:8b:45:ff: 1a:9f:bd:2c:2b:9e:af:95:92:a0:36:97:4e:49:ed: 75:d2:26:56:b4:14:8f:5e:fc:2e:7f:0c:d8:c9:06: 4a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7B:E5:E7:48:66:7C:E7:6E:AB:CC:FE:A1:29:2F:8C:56:6C:68:E3 X509v3 Authority Key Identifier: keyid:AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3232312e3133332e3232352e302f32342d3234203d3e2034383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 221.133.225.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:03:b0:29:10:6d:31:e7:36:de:1d:0c:3a:2c:2f:9c:eb:f0: d5:65:a2:c1:18:f7:47:e2:16:24:cb:6f:e1:83:56:43:2a:ca: 15:7e:46:32:16:f7:d8:f0:6f:2d:bf:8c:e4:fa:91:1d:b6:f5: 67:e8:4e:7a:a7:7e:a6:8e:4a:61:e8:dd:61:d0:27:70:77:66: ee:db:43:ff:de:fb:71:93:b0:b6:e7:18:04:39:4a:c8:41:d7: 99:0d:08:4e:f8:91:bd:4a:b9:91:7e:ee:66:05:03:f6:9e:70: 5f:8a:a8:46:62:0e:95:30:49:81:ae:9f:09:87:cb:2f:30:29: f6:c6:92:36:ae:f6:20:18:13:c1:35:80:51:cf:3e:61:c8:5a: d2:e8:4c:2f:0f:b1:31:dd:35:ac:3f:1c:2c:a6:2c:12:81:d7: e2:76:bb:72:92:19:ae:ac:4f:50:95:2d:31:a8:15:31:a0:a6: 91:4f:f9:54:ce:fe:9a:bd:0b:bd:d7:0d:65:88:c6:8e:50:3a: 36:e8:5d:69:b1:4c:56:82:fd:b1:d1:3d:96:23:aa:a4:9a:ca: b9:a1:c9:de:43:b6:77:3f:a2:2b:fd:45:1f:4f:6a:c5:5d:53: 4e:a3:38:d6:2a:62:af:33:31:62:d9:99:5d:c4:2b:02:ec:95: 20:e2:3f:4c -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUe5n8Qula7hRl3nqg9NZhG82nVWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCNjE0QzI0RkZDMkE2QkUwRTJEQjFDN0EzRTBBQUY2 NDFFNkE4QTAeFw0yNjA0MjIwNzQ2NDFaFw0yNzA0MjEwNzUxNDFaMDMxMTAvBgNV BAMTKDk1N0JFNUU3NDg2NjdDRTc2RUFCQ0NGRUExMjkyRjhDNTY2QzY4RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi3ybgyU+/vpymQPSOG5IuhxjJ CNZ3abVFKlzSXTucEpdhygpQ9djuFHUAA4jlI6Iut/+CcsowfhWvRwVaTkc3MHSs OyTl/XBwbhAhlNgbkCIlakWGKGCkiQurQlpJm+9sOdKfdasTjQMUOk084bMxh7Y3 lDMEOYk/VNs/sk6nNo5bXPNry8HCrzu1dt1Z8oI+4HQv90ksw7JID8EPEoJcmuOA QqbkaYeBTjQwNvzeG1qn44onsRJQRqGf6QnduLFCEUJg2lEtupeOp1AQFJmZ41m6 fhxXwDGSggxuxItF/xqfvSwrnq+VkqA2l05J7XXSJla0FI9e/C5/DNjJBkpnAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUlXvl50hmfOduq8z+oSkvjFZsaOMwHwYDVR0j BBgwFoAUrrYUwk/8Kmvg4tscej4Kr2QeaoowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTE5MjU1MjM5NDg1MDMwNy8wL0FFQjYxNEMyNEZGQzJBNkJFMEUyREIxQzdBM0Uw QUFGNjQxRTZBOEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUVCNjE0QzI0RkZDMkE2QkUwRTJEQjFDN0EzRTBBQUY2NDFFNkE4QS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5OTE5MjU1MjM5NDg1MDMwNy8wLzMyMzIzMTJlMzEz MzMzMmUzMjMyMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzEzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAN2F4TANBgkqhkiG9w0BAQsFAAOCAQEAPgOwKRBtMec23h0MOiwvnOvw 1WWiwRj3R+IWJMtv4YNWQyrKFX5GMhb32PBvLb+M5PqRHbb1Z+hOeqd+po5KYejd YdAncHdm7ttD/977cZOwtucYBDlKyEHXmQ0ITviRvUq5kX7uZgUD9p5wX4qoRmIO lTBJga6fCYfLLzAp9saSNq72IBgTwTWAUc8+Ycha0uhMLw+xMd01rD8cLKYsEoHX 4na7cpIZrqxPUJUtMagVMaCmkU/5VM7+mr0LvdcNZYjGjlA6NuhdabFMVoL9sdE9 liOqpJrKuaHJ3kO2dz+iK/1FH09qxV1TTqM41ipirzMxYtmZXcQrAuyVIOI/TA== -----END CERTIFICATE-----Generated at Mon Apr 27 08:25:07 2026 by rpki-client