$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e31302e302f32342d3234203d3e2034383038.roa File: 3231312e3134342e31302e302f32342d3234203d3e2034383038.roa (raw, json) Hash identifier: jCAWg2UdA2tAqhW5OpsXHtp0zvx4IByEzIhiGWTKVH0= Subject key identifier: 40:29:7B:8B:FA:D0:65:D4:09:97:E0:94:D9:7B:AB:6A:5B:9A:04:B5 Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8 Certificate serial: 7815CA1C5FEC7ECA9EC1B3FB98C7890EE19A0524 Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e31302e302f32342d3234203d3e2034383038.roa Signing time: Thu 04 Jun 2026 11:21:48 +0000 ROA not before: Thu 04 Jun 2026 11:16:48 +0000 ROA not after: Thu 03 Jun 2027 11:21:48 +0000 asID: 4808 IP address blocks: 211.144.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:15:ca:1c:5f:ec:7e:ca:9e:c1:b3:fb:98:c7:89:0e:e1:9a:05:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8 Validity Not Before: Jun 4 11:16:48 2026 GMT Not After : Jun 3 11:21:48 2027 GMT Subject: CN=40297B8BFAD065D40997E094D97BAB6A5B9A04B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ae:50:02:5f:4e:6f:fd:96:c2:5e:01:df:b6: fe:5a:3a:7e:4c:37:ee:99:7b:e4:6e:8a:46:70:db: d1:10:46:56:99:75:3b:18:94:38:bc:6d:fb:b5:48: ad:11:8f:5a:90:8e:4a:e4:46:9f:c3:ec:c3:01:5a: b0:5a:fb:7c:a5:b1:8a:79:49:0c:0f:8b:35:82:2b: 3c:75:41:6d:3b:2f:22:cb:d6:80:fa:7f:48:01:c1: 98:14:9f:72:97:9a:44:43:4f:46:03:d9:99:06:56: e6:3d:d6:00:e0:d3:b9:f7:c8:4c:7e:b9:08:55:99: 9c:33:46:7d:30:a3:e6:40:1a:6f:20:72:4c:60:5c: 13:93:86:86:52:ba:94:04:8b:1e:48:0d:e8:ca:2f: 66:19:9f:de:e3:2e:a1:ee:03:ed:42:d1:9f:d6:44: 17:7e:0b:05:d8:53:9b:c4:ed:24:8f:b3:20:e2:32: 4f:d5:5f:1a:13:15:46:65:a8:cc:25:b3:79:8e:0d: 65:e7:f4:0c:4c:f6:30:4e:90:75:27:16:44:b4:21: e6:f3:7c:2b:a4:f8:7c:4c:ac:da:0a:3f:54:2d:77: 9e:9e:ff:f2:72:4c:96:aa:51:6a:2a:a9:17:91:ae: 1b:f4:70:d4:2c:4b:62:6d:d2:14:6a:bc:52:71:e8: 91:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:29:7B:8B:FA:D0:65:D4:09:97:E0:94:D9:7B:AB:6A:5B:9A:04:B5 X509v3 Authority Key Identifier: keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e31302e302f32342d3234203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.144.10.0/24 Signature Algorithm: sha256WithRSAEncryption 81:e2:0c:5b:05:7d:96:c6:29:15:75:d9:43:27:ff:da:da:34: cb:17:2f:f6:43:1f:b4:4c:18:69:5c:e0:3f:29:24:f9:3e:41: 19:2f:39:31:75:4f:c2:e0:4c:d1:f8:a3:94:90:64:12:34:54: 24:a3:b1:7e:8c:0f:41:9b:96:30:f4:ed:3b:8b:61:73:53:9e: 33:96:29:d0:61:0c:05:79:68:2d:27:64:59:3e:2a:c1:f9:d4: 4b:be:6b:73:1f:68:aa:cd:6b:0c:50:ac:f2:14:75:7c:6e:d3: 8d:8d:be:ba:5e:21:c1:83:d3:1a:fa:1f:c9:bd:a3:d3:73:c0: 6c:86:9f:82:dd:33:8b:34:d2:d1:80:70:88:cd:63:04:80:b6: 77:40:2d:b5:6d:c1:19:f7:a0:b8:a6:0d:4c:9c:7d:95:d1:8f: 13:4a:80:25:8f:ed:a2:8f:6d:4c:e6:20:6c:7f:c0:92:ad:e9: 5c:8e:2a:a4:68:d1:de:a9:09:6c:42:4a:73:67:c3:e4:e8:50: e8:37:9d:62:83:6d:20:be:27:b6:1b:c2:4e:9a:87:f3:ab:29: 07:30:f3:50:78:02:59:c5:56:76:86:86:11:88:fd:56:5b:db: 4c:79:dc:4c:74:3f:3e:8e:7d:d3:03:67:2e:37:02:91:df:6e: 56:a4:2a:32 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUeBXKHF/sfsqewbP7mMeJDuGaBSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5 RjkzRjZGODAeFw0yNjA2MDQxMTE2NDhaFw0yNzA2MDMxMTIxNDhaMDMxMTAvBgNV BAMTKDQwMjk3QjhCRkFEMDY1RDQwOTk3RTA5NEQ5N0JBQjZBNUI5QTA0QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCorlACX05v/ZbCXgHftv5aOn5M N+6Ze+RuikZw29EQRlaZdTsYlDi8bfu1SK0Rj1qQjkrkRp/D7MMBWrBa+3ylsYp5 SQwPizWCKzx1QW07LyLL1oD6f0gBwZgUn3KXmkRDT0YD2ZkGVuY91gDg07n3yEx+ uQhVmZwzRn0wo+ZAGm8gckxgXBOThoZSupQEix5IDejKL2YZn97jLqHuA+1C0Z/W RBd+CwXYU5vE7SSPsyDiMk/VXxoTFUZlqMwls3mODWXn9AxM9jBOkHUnFkS0Iebz fCuk+HxMrNoKP1Qtd56e//JyTJaqUWoqqReRrhv0cNQsS2Jt0hRqvFJx6JGzAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUQCl7i/rQZdQJl+CU2XuraluaBLUwHwYDVR0j BBgwFoAUpgmQqcpYkWQFBDK9BUc9z5+T9vgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NzU3NTQzNzUzMTI4MzQ3Ny8wL0E2MDk5MEE5Q0E1ODkxNjQwNTA0MzJCRDA1NDcz RENGOUY5M0Y2RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5RjkzRjZGOC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA3NTc1NDM3NTMxMjgzNDc3LzAvMzIzMTMxMmUzMTM0 MzQyZTMxMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANOQCjANBgkqhkiG9w0BAQsFAAOCAQEAgeIMWwV9lsYpFXXZQyf/2to0yxcv 9kMftEwYaVzgPykk+T5BGS85MXVPwuBM0fijlJBkEjRUJKOxfowPQZuWMPTtO4th c1OeM5Yp0GEMBXloLSdkWT4qwfnUS75rcx9oqs1rDFCs8hR1fG7TjY2+ul4hwYPT Gvofyb2j03PAbIafgt0zizTS0YBwiM1jBIC2d0AttW3BGfeguKYNTJx9ldGPE0qA JY/too9tTOYgbH/Akq3pXI4qpGjR3qkJbEJKc2fD5OhQ6DedYoNtIL4nthvCTpqH 86spBzDzUHgCWcVWdoaGEYj9VlvbTHncTHQ/Po590wNnLjcCkd9uVqQqMg== -----END CERTIFICATE-----Generated at Fri Jun 12 02:24:49 2026 by rpki-client