$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e32302e302f32342d3234203d3e2034383038.roa File: 3231312e3134342e32302e302f32342d3234203d3e2034383038.roa (raw, json) Hash identifier: HIe7CAcbmZvQqyqC9eeAlr6oAgcKSwGyO8eRT6aETVM= Subject key identifier: 58:1B:20:9E:90:0C:CE:DF:70:F1:CE:84:56:6E:5F:7A:79:D4:DA:98 Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8 Certificate serial: 74D0AE628120E488968F864CCE345AF52F542871 Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e32302e302f32342d3234203d3e2034383038.roa Signing time: Thu 04 Jun 2026 11:31:24 +0000 ROA not before: Thu 04 Jun 2026 11:26:24 +0000 ROA not after: Thu 03 Jun 2027 11:31:24 +0000 asID: 4808 IP address blocks: 211.144.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d0:ae:62:81:20:e4:88:96:8f:86:4c:ce:34:5a:f5:2f:54:28:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8 Validity Not Before: Jun 4 11:26:24 2026 GMT Not After : Jun 3 11:31:24 2027 GMT Subject: CN=581B209E900CCEDF70F1CE84566E5F7A79D4DA98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6a:88:e0:d0:29:61:3c:9a:3d:23:d9:f4:0e: 11:4c:01:7a:c5:c7:cd:63:1b:95:ee:61:7f:f5:03: 60:e5:ab:de:5b:82:f0:48:53:67:07:25:e1:75:1e: ca:17:00:f4:68:16:dc:df:a4:7e:26:ac:0f:5d:75: e3:de:78:cf:5e:8b:b3:ad:32:ed:29:ec:0b:f6:e7: d4:c2:50:cc:8a:c4:46:07:c6:bb:c1:da:7e:b7:e4: 73:93:a5:ff:ca:e9:4e:8b:ac:68:24:42:10:29:d2: 9e:35:2a:c5:10:29:82:ce:41:40:b0:28:01:c3:60: 51:3c:3f:54:7e:ad:01:5d:71:9b:f1:e6:41:d8:8c: 9a:f7:dd:3f:8c:46:ca:e3:99:e5:ae:16:f7:4b:13: dd:e2:5f:05:5d:04:53:2a:2b:09:07:62:4f:05:55: 24:2f:b0:9c:9d:aa:ca:bc:64:f1:57:61:3f:35:4b: 9c:03:a8:15:16:7b:77:44:3e:aa:66:92:1a:6a:1f: 80:c4:2d:76:8f:eb:07:47:3e:7b:91:74:b2:dc:39: 7e:41:c2:da:8f:fe:04:e2:4d:8f:1b:ba:db:f4:f9: 50:1d:22:51:99:48:01:2b:d2:08:5e:70:cd:34:ca: d5:1b:39:55:4e:17:ac:9f:f6:28:13:03:ee:60:66: 3d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1B:20:9E:90:0C:CE:DF:70:F1:CE:84:56:6E:5F:7A:79:D4:DA:98 X509v3 Authority Key Identifier: keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e32302e302f32342d3234203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.144.20.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:a2:ec:bc:27:1d:ba:01:89:3b:bf:11:b6:e0:95:05:0d:67: c3:20:b2:8f:82:4a:31:db:bc:74:69:30:c6:f6:01:23:e2:68: 71:74:a0:11:47:8d:65:a3:b1:b4:9a:05:18:f3:df:77:81:90: 6b:a8:37:34:7d:a8:3d:32:85:b1:62:85:56:a3:c0:4b:3a:9b: c1:c5:47:79:81:4c:d3:7b:83:bf:51:3d:9a:49:15:14:d8:ab: c6:09:90:e4:9f:06:54:79:04:14:ee:f2:c7:08:9c:8b:0f:8b: 97:b9:7d:cb:4e:ed:4a:50:11:ac:6a:18:a2:0d:f9:ab:4b:71: 7c:fb:61:c5:1f:9e:fa:ef:1c:42:9a:e9:35:60:33:de:09:b6: a2:4c:7f:fd:a4:5e:8a:bd:7d:9a:c1:f0:75:9c:7e:e4:35:c4: da:ba:38:6a:7d:9b:74:44:4d:a9:7a:b3:9d:63:f8:fe:0f:76: 0a:1b:ef:bf:13:c2:5a:70:4f:65:a9:ef:d4:3b:9e:e4:59:4d: cf:2d:9c:c6:3c:fa:23:8b:98:ef:76:9a:54:75:b2:87:37:61: 2c:d0:1c:26:17:92:de:f6:4f:3d:9f:e0:02:f3:65:b5:9c:ac: 58:ac:22:02:11:3a:5e:f4:02:59:73:5f:e1:2e:37:b0:dc:a9: 4d:1a:f6:d0 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUdNCuYoEg5IiWj4ZMzjRa9S9UKHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5 RjkzRjZGODAeFw0yNjA2MDQxMTI2MjRaFw0yNzA2MDMxMTMxMjRaMDMxMTAvBgNV BAMTKDU4MUIyMDlFOTAwQ0NFREY3MEYxQ0U4NDU2NkU1RjdBNzlENERBOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdaojg0ClhPJo9I9n0DhFMAXrF x81jG5XuYX/1A2Dlq95bgvBIU2cHJeF1HsoXAPRoFtzfpH4mrA9ddePeeM9ei7Ot Mu0p7Av259TCUMyKxEYHxrvB2n635HOTpf/K6U6LrGgkQhAp0p41KsUQKYLOQUCw KAHDYFE8P1R+rQFdcZvx5kHYjJr33T+MRsrjmeWuFvdLE93iXwVdBFMqKwkHYk8F VSQvsJydqsq8ZPFXYT81S5wDqBUWe3dEPqpmkhpqH4DELXaP6wdHPnuRdLLcOX5B wtqP/gTiTY8butv0+VAdIlGZSAEr0ghecM00ytUbOVVOF6yf9igTA+5gZj3xAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUWBsgnpAMzt9w8c6EVm5fennU2pgwHwYDVR0j BBgwFoAUpgmQqcpYkWQFBDK9BUc9z5+T9vgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NzU3NTQzNzUzMTI4MzQ3Ny8wL0E2MDk5MEE5Q0E1ODkxNjQwNTA0MzJCRDA1NDcz RENGOUY5M0Y2RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5RjkzRjZGOC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA3NTc1NDM3NTMxMjgzNDc3LzAvMzIzMTMxMmUzMTM0 MzQyZTMyMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANOQFDANBgkqhkiG9w0BAQsFAAOCAQEAHKLsvCcdugGJO78RtuCVBQ1nwyCy j4JKMdu8dGkwxvYBI+JocXSgEUeNZaOxtJoFGPPfd4GQa6g3NH2oPTKFsWKFVqPA SzqbwcVHeYFM03uDv1E9mkkVFNirxgmQ5J8GVHkEFO7yxwiciw+Ll7l9y07tSlAR rGoYog35q0txfPthxR+e+u8cQprpNWAz3gm2okx//aReir19msHwdZx+5DXE2ro4 an2bdERNqXqznWP4/g92ChvvvxPCWnBPZanv1Due5FlNzy2cxjz6I4uY73aaVHWy hzdhLNAcJheS3vZPPZ/gAvNltZysWKwiAhE6XvQCWXNf4S43sNypTRr20A== -----END CERTIFICATE-----Generated at Fri Jun 12 02:24:53 2026 by rpki-client