$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3232312e3133332e3234302e302f32312d3231203d3e2030.roa File: 3232312e3133332e3234302e302f32312d3231203d3e2030.roa (raw, json) Hash identifier: wa6+lFTaePy6KwEnyhKCGrbQLm0Z3dbhjkj2JdaOPuM= Subject key identifier: B9:66:1E:10:5B:E8:0F:CD:19:0B:13:1D:98:C0:4F:BB:B6:4B:DD:6B Certificate issuer: /CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A Certificate serial: 0DD9F8DF5CDEAB1CCD2DAD1499A616FB123882B1 Authority key identifier: AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3232312e3133332e3234302e302f32312d3231203d3e2030.roa Signing time: Wed 22 Apr 2026 07:51:42 +0000 ROA not before: Wed 22 Apr 2026 07:46:42 +0000 ROA not after: Wed 21 Apr 2027 07:51:42 +0000 asID: 0 IP address blocks: 221.133.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 23:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:d9:f8:df:5c:de:ab:1c:cd:2d:ad:14:99:a6:16:fb:12:38:82:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A Validity Not Before: Apr 22 07:46:42 2026 GMT Not After : Apr 21 07:51:42 2027 GMT Subject: CN=B9661E105BE80FCD190B131D98C04FBBB64BDD6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:43:9a:36:09:1f:a8:cc:d4:72:8f:31:f2:31: fb:f8:36:af:3d:23:26:e9:b5:c6:7c:d4:17:d8:bd: fa:02:27:8d:18:a3:f5:f3:7e:cd:34:6f:dd:94:b3: eb:cb:a5:01:20:dd:66:41:6b:22:11:c0:55:92:98: 49:89:29:70:1e:cc:46:23:ec:ab:9a:86:bd:41:4e: aa:f7:d5:f9:dd:7e:76:a3:15:9b:13:45:cb:3f:86: 28:d0:dd:02:56:5c:25:7d:f1:dd:ef:ff:97:af:d4: 6b:5b:f6:da:59:9d:46:b7:b6:ca:b3:9d:fb:81:67: 23:77:57:bc:8a:27:ca:a1:f4:03:ad:f3:a8:69:2a: b5:30:1a:85:d8:04:ec:fd:53:78:1c:08:20:43:8d: c6:b9:2c:c6:55:9d:bd:7b:d1:76:ae:1a:1c:e4:f6: 79:d1:0f:31:e4:22:7b:56:97:81:87:68:3a:b2:e5: 6e:a9:77:f6:f5:be:2c:4c:34:cf:a9:32:42:ff:c9: 41:b6:a1:d8:78:c9:6a:73:0a:f1:26:0b:a6:80:a2: 47:2d:6e:70:cf:6d:af:e8:09:b0:5f:d3:a5:b4:f5: 52:c9:34:ae:4f:95:83:67:e7:5a:22:20:cb:97:41: 98:51:3a:99:af:d5:a4:f2:ae:48:dc:6d:5e:ec:6a: f4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:66:1E:10:5B:E8:0F:CD:19:0B:13:1D:98:C0:4F:BB:B6:4B:DD:6B X509v3 Authority Key Identifier: keyid:AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3232312e3133332e3234302e302f32312d3231203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 221.133.240.0/21 Signature Algorithm: sha256WithRSAEncryption 77:b0:7d:53:6c:2c:ff:cb:ab:a9:e0:71:74:55:1d:9f:6b:05: 61:87:48:39:1e:e7:aa:ec:31:27:0a:6d:1b:06:5b:95:29:6a: 13:1c:84:40:f3:53:55:0c:96:ad:91:d1:10:46:86:06:ed:dc: 9f:2f:70:db:60:a3:42:2b:20:53:2a:e9:16:1f:00:31:6d:89: 36:9c:e9:1e:70:11:45:62:35:53:66:10:ee:19:8c:f6:ae:b6: 2c:2d:64:b0:d8:02:27:39:85:25:ed:29:eb:ed:db:8b:cf:da: d1:2f:e8:da:a5:3d:6f:f2:1e:8a:c7:2b:8b:73:39:c9:8c:7b: 6d:3f:cf:2b:4e:c4:63:92:38:1b:95:46:eb:64:08:93:c6:1c: c1:7b:71:84:30:97:60:52:9f:8f:5a:28:24:ff:35:62:26:8e: 89:52:b1:34:15:4e:06:3a:1f:b0:b0:5c:f3:a1:51:d1:a1:d8: a8:02:d4:6a:f3:b1:d6:f9:35:82:91:d3:7e:a0:02:20:a6:ae: 30:fd:bc:9e:03:fb:b4:e3:0d:35:1d:dd:36:c2:ac:26:3d:c9: f7:3b:11:6b:9c:4c:cc:fb:8e:5a:ff:05:29:bb:2f:e7:08:33: bf:d4:69:33:f8:31:21:55:d3:f5:a4:65:87:78:4e:cb:9d:01: b2:b9:d2:66 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUDdn431zeqxzNLa0UmaYW+xI4grEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCNjE0QzI0RkZDMkE2QkUwRTJEQjFDN0EzRTBBQUY2 NDFFNkE4QTAeFw0yNjA0MjIwNzQ2NDJaFw0yNzA0MjEwNzUxNDJaMDMxMTAvBgNV BAMTKEI5NjYxRTEwNUJFODBGQ0QxOTBCMTMxRDk4QzA0RkJCQjY0QkRENkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1Q5o2CR+ozNRyjzHyMfv4Nq89 IybptcZ81BfYvfoCJ40Yo/Xzfs00b92Us+vLpQEg3WZBayIRwFWSmEmJKXAezEYj 7Kuahr1BTqr31fndfnajFZsTRcs/hijQ3QJWXCV98d3v/5ev1Gtb9tpZnUa3tsqz nfuBZyN3V7yKJ8qh9AOt86hpKrUwGoXYBOz9U3gcCCBDjca5LMZVnb170XauGhzk 9nnRDzHkIntWl4GHaDqy5W6pd/b1vixMNM+pMkL/yUG2odh4yWpzCvEmC6aAokct bnDPba/oCbBf06W09VLJNK5PlYNn51oiIMuXQZhROpmv1aTyrkjcbV7savT3AgMB AAGjggINMIICCTAdBgNVHQ4EFgQUuWYeEFvoD80ZCxMdmMBPu7ZL3WswHwYDVR0j BBgwFoAUrrYUwk/8Kmvg4tscej4Kr2QeaoowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTE5MjU1MjM5NDg1MDMwNy8wL0FFQjYxNEMyNEZGQzJBNkJFMEUyREIxQzdBM0Uw QUFGNjQxRTZBOEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUVCNjE0QzI0RkZDMkE2QkUwRTJEQjFDN0EzRTBBQUY2NDFFNkE4QS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk5MTkyNTUyMzk0ODUwMzA3LzAvMzIzMjMxMmUzMTMz MzMyZTMyMzQzMDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD 3YXwMA0GCSqGSIb3DQEBCwUAA4IBAQB3sH1TbCz/y6up4HF0VR2fawVhh0g5Hueq 7DEnCm0bBluVKWoTHIRA81NVDJatkdEQRoYG7dyfL3DbYKNCKyBTKukWHwAxbYk2 nOkecBFFYjVTZhDuGYz2rrYsLWSw2AInOYUl7Snr7duLz9rRL+japT1v8h6KxyuL cznJjHttP88rTsRjkjgblUbrZAiTxhzBe3GEMJdgUp+PWigk/zViJo6JUrE0FU4G Oh+wsFzzoVHRodioAtRq87HW+TWCkdN+oAIgpq4w/byeA/u04w01Hd02wqwmPcn3 OxFrnEzM+45a/wUpuy/nCDO/1Gkz+DEhVdP1pGWHeE7LnQGyudJm -----END CERTIFICATE-----Generated at Mon Apr 27 11:00:49 2026 by rpki-client