$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e302e302f32312d3231203d3e2034383038.roa File: 3131392e38302e302e302f32312d3231203d3e2034383038.roa (raw, json) Hash identifier: kz6VvEWmHlmuYkpHk1spnIMXYN9OBLP2wWo126znQG8= Subject key identifier: AF:A5:85:DB:D1:9F:4C:CA:FD:02:CA:F2:F1:E9:B6:F7:88:CD:EC:41 Certificate issuer: /CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49 Certificate serial: 0736FDBA417F324D97B6D9EAC4514471C8D9B822 Authority key identifier: C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e302e302f32312d3231203d3e2034383038.roa Signing time: Mon 25 May 2026 01:02:19 +0000 ROA not before: Mon 25 May 2026 00:57:19 +0000 ROA not after: Mon 24 May 2027 01:02:19 +0000 asID: 4808 IP address blocks: 119.80.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 12:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:36:fd:ba:41:7f:32:4d:97:b6:d9:ea:c4:51:44:71:c8:d9:b8:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49 Validity Not Before: May 25 00:57:19 2026 GMT Not After : May 24 01:02:19 2027 GMT Subject: CN=AFA585DBD19F4CCAFD02CAF2F1E9B6F788CDEC41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:96:79:76:09:cd:aa:2f:05:b3:0d:d3:8e:08: 35:3b:63:78:e2:77:85:c1:0e:30:88:b7:54:0b:b9: 40:93:b3:44:d8:b7:6a:e3:b2:91:b0:b1:29:11:02: cb:d4:07:eb:1d:1e:c8:48:9a:60:54:0b:6b:c8:24: c3:3f:2a:a0:92:25:94:91:5f:85:16:81:2a:11:28: fc:f3:85:02:e4:fe:89:c0:9c:f3:05:52:6e:f3:f9: 48:90:fa:05:06:c2:ab:6c:0c:d2:2c:14:dc:92:b8: 68:0d:6f:ea:04:d5:1c:71:8a:3b:9c:28:f0:04:5b: 7b:fa:92:af:d6:81:50:82:9b:31:e1:8b:e2:b3:72: 34:a8:05:c5:4b:27:af:de:27:57:0b:c9:6c:2b:ba: d7:49:0f:aa:0b:cf:83:0b:45:7f:2b:df:c0:c3:9f: 89:69:c7:50:a1:4d:ae:c7:4d:65:1d:35:dd:fb:81: 40:02:86:5f:f8:91:66:8f:af:82:ea:a3:fb:b7:f7: 1a:a5:1b:64:9e:3d:5f:d3:a2:82:73:a2:5d:04:f2: 06:90:40:2b:6c:31:c4:99:8d:c7:fd:44:96:29:34: 89:78:35:ea:e6:8e:2f:45:46:74:6e:a7:2f:e5:de: ee:10:0c:94:9d:aa:d0:3b:07:12:34:fd:86:5d:88: bd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A5:85:DB:D1:9F:4C:CA:FD:02:CA:F2:F1:E9:B6:F7:88:CD:EC:41 X509v3 Authority Key Identifier: keyid:C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e302e302f32312d3231203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.80.0.0/21 Signature Algorithm: sha256WithRSAEncryption 71:b1:6b:88:87:71:15:8a:f2:fc:74:7b:ca:73:64:b5:89:26: 60:4a:32:14:1b:d5:2c:bd:4f:f2:1a:2b:86:e0:0b:19:df:c7: 29:9e:f9:62:f5:98:a2:97:0a:c6:ef:06:f8:e4:36:68:70:dd: 46:62:1c:29:06:5f:e1:40:92:db:5e:34:33:96:7f:20:37:59: f1:0f:7a:af:d8:a7:f8:ad:3a:8a:15:fc:13:fa:33:59:2d:fa: 70:2a:76:e3:c3:1d:ce:bb:e3:d3:ff:96:41:35:00:ca:f4:3f: 43:9c:ef:53:08:36:29:20:f4:21:dc:c7:5b:c1:3c:c9:c0:60: dc:3f:e7:51:c3:3c:e1:bb:9e:10:88:17:d5:5d:fb:0d:da:f8: 42:84:b3:35:cf:f8:12:09:f0:bb:2b:bc:18:d4:19:be:cc:62: 87:95:19:f0:8c:08:a3:94:5e:b2:d6:59:7b:bc:8f:2c:b0:c6: 2f:6c:9e:f2:51:9a:36:c0:aa:ca:9b:78:4e:ce:c3:ed:58:c1: 75:34:11:be:2b:d8:9a:af:79:f5:46:28:fb:2f:dd:00:0f:01: 45:85:91:45:1e:c6:4c:08:ef:cf:eb:2e:82:0c:c8:85:ed:d6: 2e:80:20:ca:54:ba:ec:48:bb:e9:b1:9c:e7:3b:85:76:44:63: a1:fe:c1:03 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUBzb9ukF/Mk2XttnqxFFEccjZuCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5OTk2N0I5NUUzMkUzN0NDRUFBMTFDRjE0NkZCNTdC NTFBN0M0OTAeFw0yNjA1MjUwMDU3MTlaFw0yNzA1MjQwMTAyMTlaMDMxMTAvBgNV BAMTKEFGQTU4NURCRDE5RjRDQ0FGRDAyQ0FGMkYxRTlCNkY3ODhDREVDNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPlnl2Cc2qLwWzDdOOCDU7Y3ji d4XBDjCIt1QLuUCTs0TYt2rjspGwsSkRAsvUB+sdHshImmBUC2vIJMM/KqCSJZSR X4UWgSoRKPzzhQLk/onAnPMFUm7z+UiQ+gUGwqtsDNIsFNySuGgNb+oE1Rxxijuc KPAEW3v6kq/WgVCCmzHhi+KzcjSoBcVLJ6/eJ1cLyWwrutdJD6oLz4MLRX8r38DD n4lpx1ChTa7HTWUdNd37gUAChl/4kWaPr4Lqo/u39xqlG2SePV/TooJzol0E8gaQ QCtsMcSZjcf9RJYpNIl4Nermji9FRnRupy/l3u4QDJSdqtA7BxI0/YZdiL0VAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUr6WF29GfTMr9Asry8em294jN7EEwHwYDVR0j BBgwFoAUyJmWe5XjLjfM6qEc8Ub7V7UafEkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTMxNDA3Mzk2ODkwMjE2My8wL0M4OTk5NjdCOTVFMzJFMzdDQ0VBQTExQ0YxNDZG QjU3QjUxQTdDNDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzg5OTk2N0I5NUUzMkUzN0NDRUFBMTFDRjE0NkZCNTdCNTFBN0M0OS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA5MzE0MDczOTY4OTAyMTYzLzAvMzEzMTM5MmUzODMw MmUzMDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDM0MzgzMDM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD d1AAMA0GCSqGSIb3DQEBCwUAA4IBAQBxsWuIh3EVivL8dHvKc2S1iSZgSjIUG9Us vU/yGiuG4AsZ38cpnvli9ZiilwrG7wb45DZocN1GYhwpBl/hQJLbXjQzln8gN1nx D3qv2Kf4rTqKFfwT+jNZLfpwKnbjwx3Ou+PT/5ZBNQDK9D9DnO9TCDYpIPQh3Mdb wTzJwGDcP+dRwzzhu54QiBfVXfsN2vhChLM1z/gSCfC7K7wY1Bm+zGKHlRnwjAij lF6y1ll7vI8ssMYvbJ7yUZo2wKrKm3hOzsPtWMF1NBG+K9iar3n1Rij7L90ADwFF hZFFHsZMCO/P6y6CDMiF7dYugCDKVLrsSLvpsZznO4V2RGOh/sED -----END CERTIFICATE-----Generated at Fri Jun 12 02:23:48 2026 by rpki-client