$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3232312e3133332e3232362e302f32342d3234203d3e2034383132.roa File: 3232312e3133332e3232362e302f32342d3234203d3e2034383132.roa (raw, json) Hash identifier: fZP84wU8PI7wcGhsSPIodw7AFzy8mHQUVVGTGntl5c4= Subject key identifier: 39:69:AA:DD:64:D8:51:03:06:E0:97:CE:64:51:FB:E1:53:9E:60:CF Certificate issuer: /CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A Certificate serial: 79BF1E032E131CA662D63507911E81B3177201F2 Authority key identifier: AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3232312e3133332e3232362e302f32342d3234203d3e2034383132.roa Signing time: Wed 22 Apr 2026 07:51:42 +0000 ROA not before: Wed 22 Apr 2026 07:46:42 +0000 ROA not after: Wed 21 Apr 2027 07:51:42 +0000 asID: 4812 IP address blocks: 221.133.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 23:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:bf:1e:03:2e:13:1c:a6:62:d6:35:07:91:1e:81:b3:17:72:01:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A Validity Not Before: Apr 22 07:46:42 2026 GMT Not After : Apr 21 07:51:42 2027 GMT Subject: CN=3969AADD64D8510306E097CE6451FBE1539E60CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bd:3d:d8:20:6a:78:62:d6:04:66:24:9a:26: 08:10:fd:18:f9:ab:a5:74:42:74:ea:a4:10:e4:62: c6:a7:c2:2d:39:1e:6a:0d:29:1e:2d:80:77:98:dc: e4:16:e9:83:a6:4e:47:59:0a:a2:56:a1:ee:bb:ae: fe:6d:5b:4e:07:de:25:53:45:a3:30:d3:f5:c4:30: 57:b9:a8:90:25:a3:76:38:a5:4a:5c:f4:1a:99:ed: f7:50:fd:f6:04:06:6b:2b:5b:54:29:56:8b:9c:dd: a1:d9:73:f0:09:f9:f4:38:a7:13:02:ac:bb:a2:f5: 92:c6:6b:fe:85:76:31:d0:f3:0d:27:b7:95:0b:a0: 3f:ca:f0:25:91:10:ee:47:79:5b:25:30:fb:8e:c4: 5c:ae:40:db:d1:6e:f8:1b:ee:4d:87:df:fa:b2:c0: 78:a9:e2:ed:aa:f5:93:7f:e8:3d:f0:21:5a:c2:19: 76:5e:0d:99:04:01:21:09:b8:e7:84:b7:d8:aa:bf: cf:09:76:67:8f:dc:b6:9b:22:2e:38:f0:b7:bc:0e: 94:55:50:59:e8:d9:dd:7f:e0:2c:cc:53:fd:74:7a: dc:33:2b:b2:a8:9b:50:c8:5a:d3:67:fa:d5:87:21: e7:2e:27:84:67:91:4a:95:2d:c6:da:e9:aa:98:2e: db:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:69:AA:DD:64:D8:51:03:06:E0:97:CE:64:51:FB:E1:53:9E:60:CF X509v3 Authority Key Identifier: keyid:AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3232312e3133332e3232362e302f32342d3234203d3e2034383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 221.133.226.0/24 Signature Algorithm: sha256WithRSAEncryption 09:bf:26:75:c6:cc:b0:ff:cf:78:41:13:b9:65:38:b5:0c:77: ea:b1:1c:8f:b9:ed:95:ac:10:a8:76:a3:cb:fd:de:94:66:80: 2f:70:56:72:04:5b:92:eb:fe:01:5e:3f:d3:1d:b4:f8:97:10: 3a:ae:4e:a0:2f:2b:0e:d5:8d:f0:6d:92:a5:74:ce:85:4c:6e: 0f:e3:22:ba:59:6f:55:fd:8c:4b:af:87:3a:46:50:b7:39:03: 4d:98:18:b8:9e:8c:b0:0e:fd:e3:17:29:3e:1f:62:71:75:fa: 4f:0a:e4:64:ea:e0:b5:04:b7:79:bf:0e:03:b4:0a:a1:ae:ae: f8:9c:18:3d:a3:7a:43:54:35:42:c6:67:ac:dd:b7:65:6c:a4: c8:f1:58:8f:36:60:d0:05:bf:c5:d9:01:3a:ba:75:16:be:9b: 33:ab:b0:24:3a:43:b4:f7:6d:e1:6e:33:ba:0d:0f:4e:e6:f2: 16:8f:0d:0a:2c:fa:1b:22:4f:e3:ce:ec:ce:e6:37:16:79:d1: 16:5d:9e:35:d7:61:6b:29:4d:16:c2:50:d7:4e:71:ed:9b:4b: ee:b0:7a:18:49:b5:e3:d2:a6:d0:1c:91:d4:58:fb:56:78:a8: 7f:21:ad:b3:2c:2e:ef:2f:f0:07:a9:94:88:5e:1e:ec:7f:e7: 76:52:57:b8 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUeb8eAy4THKZi1jUHkR6BsxdyAfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCNjE0QzI0RkZDMkE2QkUwRTJEQjFDN0EzRTBBQUY2 NDFFNkE4QTAeFw0yNjA0MjIwNzQ2NDJaFw0yNzA0MjEwNzUxNDJaMDMxMTAvBgNV BAMTKDM5NjlBQURENjREODUxMDMwNkUwOTdDRTY0NTFGQkUxNTM5RTYwQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQvT3YIGp4YtYEZiSaJggQ/Rj5 q6V0QnTqpBDkYsanwi05HmoNKR4tgHeY3OQW6YOmTkdZCqJWoe67rv5tW04H3iVT RaMw0/XEMFe5qJAlo3Y4pUpc9BqZ7fdQ/fYEBmsrW1QpVouc3aHZc/AJ+fQ4pxMC rLui9ZLGa/6FdjHQ8w0nt5ULoD/K8CWREO5HeVslMPuOxFyuQNvRbvgb7k2H3/qy wHip4u2q9ZN/6D3wIVrCGXZeDZkEASEJuOeEt9iqv88JdmeP3LabIi448Le8DpRV UFno2d1/4CzMU/10etwzK7Kom1DIWtNn+tWHIecuJ4RnkUqVLcba6aqYLttzAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUOWmq3WTYUQMG4JfOZFH74VOeYM8wHwYDVR0j BBgwFoAUrrYUwk/8Kmvg4tscej4Kr2QeaoowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTE5MjU1MjM5NDg1MDMwNy8wL0FFQjYxNEMyNEZGQzJBNkJFMEUyREIxQzdBM0Uw QUFGNjQxRTZBOEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUVCNjE0QzI0RkZDMkE2QkUwRTJEQjFDN0EzRTBBQUY2NDFFNkE4QS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5OTE5MjU1MjM5NDg1MDMwNy8wLzMyMzIzMTJlMzEz MzMzMmUzMjMyMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzEzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAN2F4jANBgkqhkiG9w0BAQsFAAOCAQEACb8mdcbMsP/PeEETuWU4tQx3 6rEcj7ntlawQqHajy/3elGaAL3BWcgRbkuv+AV4/0x20+JcQOq5OoC8rDtWN8G2S pXTOhUxuD+MiullvVf2MS6+HOkZQtzkDTZgYuJ6MsA794xcpPh9icXX6TwrkZOrg tQS3eb8OA7QKoa6u+JwYPaN6Q1Q1QsZnrN23ZWykyPFYjzZg0AW/xdkBOrp1Fr6b M6uwJDpDtPdt4W4zug0PTubyFo8NCiz6GyJP487szuY3FnnRFl2eNddhaylNFsJQ 105x7ZtL7rB6GEm149Km0ByR1Fj7VniofyGtsywu7y/wB6mUiF4e7H/ndlJXuA== -----END CERTIFICATE-----Generated at Mon Apr 27 08:25:07 2026 by rpki-client