$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e34382e302f32312d3231203d3e2030.roa File: 3131392e38302e34382e302f32312d3231203d3e2030.roa (raw, json) Hash identifier: OGiAs6ybQW5wp7sSm+Um1t8e/jZwZaNAF3aCVlrneVo= Subject key identifier: 41:46:7A:73:1A:CC:8E:C8:88:3C:BE:13:5C:D2:8F:2E:F0:43:A7:F7 Certificate issuer: /CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49 Certificate serial: 0EEFEE5E1E1155D6FF042FC1B4D20EAFC1C2ACA8 Authority key identifier: C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e34382e302f32312d3231203d3e2030.roa Signing time: Wed 20 May 2026 04:19:17 +0000 ROA not before: Wed 20 May 2026 04:14:17 +0000 ROA not after: Wed 19 May 2027 04:19:17 +0000 asID: 0 IP address blocks: 119.80.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 May 2026 02:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ef:ee:5e:1e:11:55:d6:ff:04:2f:c1:b4:d2:0e:af:c1:c2:ac:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49 Validity Not Before: May 20 04:14:17 2026 GMT Not After : May 19 04:19:17 2027 GMT Subject: CN=41467A731ACC8EC8883CBE135CD28F2EF043A7F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:60:d0:3a:8f:75:36:0f:f0:91:20:cf:63:bd: 64:4e:ac:19:cc:6e:d9:de:49:d2:b7:28:74:38:c5: 22:58:f2:03:8e:f8:4c:0f:9f:b1:13:15:c9:93:f2: 89:56:fd:9c:db:47:07:94:7a:24:ae:61:c5:47:7b: 2d:20:1c:46:ef:20:cf:42:65:9e:78:19:83:e1:d4: 45:b0:5b:17:6f:4e:3a:d7:b4:7c:cf:b2:47:df:e5: 91:a6:55:c6:c6:83:39:80:2f:c4:7c:ce:8d:41:14: 19:f4:dd:aa:d7:e6:42:ba:09:df:50:39:0f:4e:f9: 70:90:96:97:0b:4f:04:47:28:d0:f0:88:0b:60:24: dd:8b:d7:80:6a:32:bb:87:36:28:22:b1:ba:30:7a: 8e:a6:46:2c:66:84:e6:0c:6a:98:5c:42:41:48:0b: 71:b9:0b:2a:b2:46:f5:82:7a:55:77:6e:35:2a:f3: 79:26:7b:6d:05:63:be:a5:f9:de:db:f2:45:8e:b2: f9:61:13:df:46:30:5b:35:47:29:f9:f7:c3:50:de: 4f:ed:2a:8d:7a:bc:4c:f4:7f:e5:6f:48:86:39:72: 1e:c6:38:e9:5e:c3:19:46:2d:69:55:01:16:43:19: 2e:a4:fc:d0:66:80:56:8b:75:a6:4a:e0:82:e3:53: 1e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:46:7A:73:1A:CC:8E:C8:88:3C:BE:13:5C:D2:8F:2E:F0:43:A7:F7 X509v3 Authority Key Identifier: keyid:C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e34382e302f32312d3231203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.80.48.0/21 Signature Algorithm: sha256WithRSAEncryption 85:67:43:e6:80:8c:37:72:86:fb:20:79:83:47:9f:3c:17:49: 28:79:05:c7:86:b8:2a:e3:6d:69:21:46:ec:fc:a0:4d:8f:c4: bf:18:86:30:58:7f:46:33:9f:c2:4a:eb:50:b0:15:de:c0:06: b0:09:44:b7:74:af:4d:90:a7:82:af:08:71:60:00:31:d9:fe: cf:83:c9:dc:72:d0:f8:60:0f:4e:d4:ae:9b:06:26:61:6d:70: a1:e6:8c:a2:7c:f3:66:26:21:4a:f8:47:0a:ba:1d:d4:ae:8f: 11:a7:7a:a4:59:9f:ac:44:05:88:ce:e6:07:8c:f6:89:a9:51: 97:7e:51:d9:7c:72:28:29:9d:0b:89:a6:bf:4d:03:35:53:ed: 0b:72:44:45:5f:41:75:0d:54:7d:00:e7:67:0c:19:3f:76:60: bd:90:9d:5a:b9:c0:ff:94:3b:c7:f3:dd:a1:98:5f:38:cc:30: 95:9d:d3:73:6b:40:58:16:32:81:1a:75:21:6d:54:4a:3e:41: 0b:f0:5e:a3:dd:f3:19:c5:4f:d8:7c:ee:79:53:32:a2:a3:2f: 99:80:bd:a7:d6:20:aa:ee:11:9d:0d:a0:a9:d7:63:03:8b:d5: 3f:b0:7b:d8:cf:48:74:66:cb:f9:c5:c0:03:6d:27:8c:f7:59: 00:91:28:de -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUDu/uXh4RVdb/BC/BtNIOr8HCrKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5OTk2N0I5NUUzMkUzN0NDRUFBMTFDRjE0NkZCNTdC NTFBN0M0OTAeFw0yNjA1MjAwNDE0MTdaFw0yNzA1MTkwNDE5MTdaMDMxMTAvBgNV BAMTKDQxNDY3QTczMUFDQzhFQzg4ODNDQkUxMzVDRDI4RjJFRjA0M0E3RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDYNA6j3U2D/CRIM9jvWROrBnM btneSdK3KHQ4xSJY8gOO+EwPn7ETFcmT8olW/ZzbRweUeiSuYcVHey0gHEbvIM9C ZZ54GYPh1EWwWxdvTjrXtHzPskff5ZGmVcbGgzmAL8R8zo1BFBn03arX5kK6Cd9Q OQ9O+XCQlpcLTwRHKNDwiAtgJN2L14BqMruHNigisboweo6mRixmhOYMaphcQkFI C3G5CyqyRvWCelV3bjUq83kme20FY76l+d7b8kWOsvlhE99GMFs1Ryn598NQ3k/t Ko16vEz0f+VvSIY5ch7GOOlewxlGLWlVARZDGS6k/NBmgFaLdaZK4ILjUx6BAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUQUZ6cxrMjsiIPL4TXNKPLvBDp/cwHwYDVR0j BBgwFoAUyJmWe5XjLjfM6qEc8Ub7V7UafEkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTMxNDA3Mzk2ODkwMjE2My8wL0M4OTk5NjdCOTVFMzJFMzdDQ0VBQTExQ0YxNDZG QjU3QjUxQTdDNDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzg5OTk2N0I5NUUzMkUzN0NDRUFBMTFDRjE0NkZCNTdCNTFBN0M0OS5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA5MzE0MDczOTY4OTAyMTYzLzAvMzEzMTM5MmUzODMw MmUzNDM4MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN3UDAw DQYJKoZIhvcNAQELBQADggEBAIVnQ+aAjDdyhvsgeYNHnzwXSSh5BceGuCrjbWkh Ruz8oE2PxL8YhjBYf0Yzn8JK61CwFd7ABrAJRLd0r02Qp4KvCHFgADHZ/s+Dydxy 0PhgD07UrpsGJmFtcKHmjKJ882YmIUr4Rwq6HdSujxGneqRZn6xEBYjO5geM9omp UZd+Udl8cigpnQuJpr9NAzVT7QtyREVfQXUNVH0A52cMGT92YL2QnVq5wP+UO8fz 3aGYXzjMMJWd03NrQFgWMoEadSFtVEo+QQvwXqPd8xnFT9h87nlTMqKjL5mAvafW IKruEZ0NoKnXYwOL1T+we9jPSHRmy/nFwANtJ4z3WQCRKN4= -----END CERTIFICATE-----Generated at Sat May 23 03:04:21 2026 by rpki-client