$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e36342e302f31382d3138203d3e2030.roa File: 3131392e38302e36342e302f31382d3138203d3e2030.roa (raw, json) Hash identifier: fSBLf7FDlepVCE3k6F2XDY92g0WMbrgw0ZXZlfHqZ5I= Subject key identifier: AF:EA:01:26:23:C7:7D:A4:AE:AA:D2:41:2B:CF:5E:F8:92:CD:48:44 Certificate issuer: /CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49 Certificate serial: 549487FBFED93A54FBE9C75B7821CF313E4B24FA Authority key identifier: C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e36342e302f31382d3138203d3e2030.roa Signing time: Wed 20 May 2026 04:19:17 +0000 ROA not before: Wed 20 May 2026 04:14:17 +0000 ROA not after: Wed 19 May 2027 04:19:17 +0000 asID: 0 IP address blocks: 119.80.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 May 2026 02:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:94:87:fb:fe:d9:3a:54:fb:e9:c7:5b:78:21:cf:31:3e:4b:24:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49 Validity Not Before: May 20 04:14:17 2026 GMT Not After : May 19 04:19:17 2027 GMT Subject: CN=AFEA012623C77DA4AEAAD2412BCF5EF892CD4844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b1:5e:4a:3b:1e:e9:31:60:b4:a5:8e:7b:f6: a5:65:53:a8:2e:f9:a8:bb:b5:89:0f:ef:67:3c:68: 76:92:a0:33:44:b4:70:32:2e:d2:d2:09:55:7c:64: 33:0b:0d:77:8f:0d:4f:30:19:a4:51:77:bb:93:24: c7:76:e8:36:40:52:96:a8:17:07:99:9e:a0:fe:5c: 60:71:05:87:aa:8e:62:26:29:8d:56:97:e7:26:4b: 99:ea:1e:63:3f:c8:a7:c9:3a:8f:c6:4a:d4:f0:33: f2:f5:d0:04:20:e9:57:dd:6f:94:fc:00:df:69:38: d8:77:91:de:bd:b7:fd:3d:3d:bd:4e:d2:5b:f4:fa: f1:a3:0d:58:5a:90:26:89:80:a1:eb:42:21:0c:ed: a1:b7:ed:47:b9:96:02:81:50:21:58:13:39:19:72: 5e:d9:68:19:dd:dd:a7:33:a5:b9:ad:01:6d:ce:b8: 79:bc:b1:63:3f:a6:53:c2:62:03:cb:8b:f4:9b:5b: 57:f4:33:ac:17:85:4f:b5:67:76:af:e1:68:4c:ad: 73:23:3c:c2:0e:0e:26:77:33:db:ea:28:79:16:b7: 39:32:a8:56:dd:97:77:8a:2d:db:c8:38:d8:c2:6d: d7:c2:7f:8c:b9:6d:df:b5:d6:fa:b7:c6:e3:85:3b: 44:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:EA:01:26:23:C7:7D:A4:AE:AA:D2:41:2B:CF:5E:F8:92:CD:48:44 X509v3 Authority Key Identifier: keyid:C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e36342e302f31382d3138203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.80.64.0/18 Signature Algorithm: sha256WithRSAEncryption 35:be:8d:85:82:9d:58:32:2e:23:ae:c4:89:d0:d9:5c:4c:6b: 92:9b:c0:67:07:54:c4:cb:ea:44:e0:10:d1:2c:99:b7:9d:4b: 26:a2:af:5e:48:55:24:5f:f1:2b:90:60:d3:02:89:cb:b0:3b: d3:99:19:8b:85:6e:27:19:a6:f1:34:37:38:b3:0d:79:e1:d3: 3d:bf:73:7a:20:b6:e4:7f:22:49:f5:90:41:da:49:01:21:af: 50:86:85:c6:e2:5e:c9:9a:7d:1b:0f:cd:20:ce:f7:2c:c2:36: 54:d7:89:c8:e3:6a:d5:45:84:5a:13:e0:e3:e3:36:8d:b7:33: 30:17:6b:bb:78:64:78:9b:f6:96:4e:ef:45:b1:07:05:60:c1: f6:77:7b:9a:05:2d:41:ea:0a:3f:39:1c:ba:57:9f:bc:42:74: 38:bc:8d:d2:81:1a:01:ae:c3:db:e3:db:75:f4:a4:56:c6:b4: 1c:0f:af:0b:45:66:e4:8f:10:e2:36:38:15:0a:8b:5a:18:3f: 93:3e:cc:b4:9f:d2:aa:7a:81:0c:37:ed:20:c5:af:e6:d7:79: 09:7d:b5:53:52:c0:13:71:26:f3:c7:74:70:95:24:86:88:aa: cf:50:16:2f:da:b2:a8:e1:db:d4:46:54:e3:e0:ed:0c:58:7b: d8:60:97:2c -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUVJSH+/7ZOlT76cdbeCHPMT5LJPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5OTk2N0I5NUUzMkUzN0NDRUFBMTFDRjE0NkZCNTdC NTFBN0M0OTAeFw0yNjA1MjAwNDE0MTdaFw0yNzA1MTkwNDE5MTdaMDMxMTAvBgNV BAMTKEFGRUEwMTI2MjNDNzdEQTRBRUFBRDI0MTJCQ0Y1RUY4OTJDRDQ4NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCksV5KOx7pMWC0pY579qVlU6gu +ai7tYkP72c8aHaSoDNEtHAyLtLSCVV8ZDMLDXePDU8wGaRRd7uTJMd26DZAUpao FweZnqD+XGBxBYeqjmImKY1Wl+cmS5nqHmM/yKfJOo/GStTwM/L10AQg6Vfdb5T8 AN9pONh3kd69t/09Pb1O0lv0+vGjDVhakCaJgKHrQiEM7aG37Ue5lgKBUCFYEzkZ cl7ZaBnd3aczpbmtAW3OuHm8sWM/plPCYgPLi/SbW1f0M6wXhU+1Z3av4WhMrXMj PMIODiZ3M9vqKHkWtzkyqFbdl3eKLdvIONjCbdfCf4y5bd+11vq3xuOFO0SlAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUr+oBJiPHfaSuqtJBK89e+JLNSEQwHwYDVR0j BBgwFoAUyJmWe5XjLjfM6qEc8Ub7V7UafEkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTMxNDA3Mzk2ODkwMjE2My8wL0M4OTk5NjdCOTVFMzJFMzdDQ0VBQTExQ0YxNDZG QjU3QjUxQTdDNDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzg5OTk2N0I5NUUzMkUzN0NDRUFBMTFDRjE0NkZCNTdCNTFBN0M0OS5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA5MzE0MDczOTY4OTAyMTYzLzAvMzEzMTM5MmUzODMw MmUzNjM0MmUzMDJmMzEzODJkMzEzODIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ3UEAw DQYJKoZIhvcNAQELBQADggEBADW+jYWCnVgyLiOuxInQ2VxMa5KbwGcHVMTL6kTg ENEsmbedSyair15IVSRf8SuQYNMCicuwO9OZGYuFbicZpvE0NzizDXnh0z2/c3og tuR/Ikn1kEHaSQEhr1CGhcbiXsmafRsPzSDO9yzCNlTXicjjatVFhFoT4OPjNo23 MzAXa7t4ZHib9pZO70WxBwVgwfZ3e5oFLUHqCj85HLpXn7xCdDi8jdKBGgGuw9vj 23X0pFbGtBwPrwtFZuSPEOI2OBUKi1oYP5M+zLSf0qp6gQw37SDFr+bXeQl9tVNS wBNxJvPHdHCVJIaIqs9QFi/asqjh29RGVOPg7QxYe9hglyw= -----END CERTIFICATE-----Generated at Sat May 23 03:03:27 2026 by rpki-client