$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e302e302f31362d3136203d3e203234313338.roa File: 3131312e3133322e302e302f31362d3136203d3e203234313338.roa (raw, json) Hash identifier: HCIylBNYa9Vf8y+PgUja2hYsUk8ccmeWXOEyzNnbd88= Subject key identifier: 84:E3:F5:EA:24:B9:89:C1:11:02:3B:F8:07:D3:9E:58:01:10:08:DD Certificate issuer: /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720 Certificate serial: 32E601280903B0E972F4EC793256F916D55F150F Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e302e302f31362d3136203d3e203234313338.roa Signing time: Thu 21 May 2026 08:33:20 +0000 ROA not before: Thu 21 May 2026 08:28:20 +0000 ROA not after: Thu 20 May 2027 08:33:20 +0000 asID: 24138 IP address blocks: 111.132.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 22:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:e6:01:28:09:03:b0:e9:72:f4:ec:79:32:56:f9:16:d5:5f:15:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720 Validity Not Before: May 21 08:28:20 2026 GMT Not After : May 20 08:33:20 2027 GMT Subject: CN=84E3F5EA24B989C111023BF807D39E58011008DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a7:b0:24:9a:56:5e:ab:65:c8:8e:c5:77:66: 15:0a:64:9f:53:58:f8:b0:d6:9c:87:2a:cc:7c:f3: ef:52:4b:cc:b3:64:55:5d:5e:0b:18:a8:48:e3:81: e5:a7:96:89:fd:23:73:09:ca:a6:dc:67:04:a7:4e: d4:52:5a:0a:b2:15:f7:6e:cb:ce:8b:bc:66:eb:96: 10:0e:f3:22:45:9e:64:3c:a8:89:06:da:d2:a6:cc: b2:bb:22:25:d6:49:ba:b3:15:64:ac:38:ff:cc:89: 78:df:c2:cd:22:95:71:5d:8a:52:16:6a:5d:eb:ec: a9:fc:89:35:e9:df:15:e2:83:7c:1c:24:13:bd:11: 17:87:13:3d:4a:fd:bb:41:75:40:ba:ee:d3:aa:91: e2:ef:8c:2e:5c:53:6f:6f:d6:79:3e:9b:be:e1:96: a3:00:8e:c4:0b:02:f2:d5:07:9d:ca:29:fc:c9:bf: 99:f5:9f:e7:b0:d5:5d:aa:3b:2a:1b:50:79:88:9f: d0:02:bf:0c:d7:90:ec:d4:b8:1e:7e:bb:64:30:d7: 16:aa:f0:e4:75:bf:e2:a7:47:26:60:90:b1:cd:11: 19:9c:98:57:5b:d6:11:98:c4:74:09:8e:44:ec:3e: ff:31:c6:57:38:83:2f:88:78:6a:a0:c5:93:28:82: 9f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E3:F5:EA:24:B9:89:C1:11:02:3B:F8:07:D3:9E:58:01:10:08:DD X509v3 Authority Key Identifier: keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e302e302f31362d3136203d3e203234313338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 111.132.0.0/16 Signature Algorithm: sha256WithRSAEncryption 85:b7:ac:0e:ca:8e:46:23:1e:dc:53:74:f5:59:a6:c8:f7:8d: 03:e9:ca:b2:7e:fb:31:d7:ea:4c:4e:15:09:ce:8a:81:45:25: e6:49:4a:00:98:47:da:26:83:4e:8b:32:5c:66:e6:e7:ae:8d: 45:06:33:68:b8:79:72:e9:75:99:33:64:b0:00:5a:cf:6c:dd: de:d6:3a:9e:45:89:d3:c9:0c:38:16:a4:dc:3d:17:7f:9a:80: 26:dd:a7:1f:d2:9a:f7:42:b2:12:78:07:3c:87:2d:db:17:f0: bf:80:24:89:05:a7:23:95:4d:5e:b9:26:83:da:c3:5b:d3:c1: 10:c3:f0:8d:64:9f:62:ae:60:c3:a8:bb:f4:41:8c:3d:29:be: 53:ff:f6:84:1a:7e:da:a3:42:38:f2:1b:2b:9c:a5:01:07:fb: 5e:e6:87:bc:ed:d5:e7:f9:c8:62:44:40:c5:c8:c8:e4:fc:96: 43:3b:9e:c1:fe:a2:ab:92:fa:ed:27:a9:2d:3e:33:f4:b5:f0: bc:10:95:f6:b6:4c:60:e5:a0:a7:f2:95:9b:d9:8a:54:23:ff: d7:00:c3:db:c4:26:27:97:9e:37:80:5b:96:9c:eb:5c:88:32: a2:64:1b:99:d5:91:cc:57:12:b9:2c:59:48:a4:57:87:a4:fe: 2f:64:94:91 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgIUMuYBKAkDsOly9Ox5Mlb5FtVfFQ8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODVCRjAwMDAwMTEwLwYDVQQFEyg1RjNENjREQ0Yx MzE5NEZCMEQ3MUYyOUZCMzdDMkQ5M0Y4RDQ4NzIwMB4XDTI2MDUyMTA4MjgyMFoX DTI3MDUyMDA4MzMyMFowMzExMC8GA1UEAxMoODRFM0Y1RUEyNEI5ODlDMTExMDIz QkY4MDdEMzlFNTgwMTEwMDhERDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJqnsCSaVl6rZciOxXdmFQpkn1NY+LDWnIcqzHzz71JLzLNkVV1eCxioSOOB 5aeWif0jcwnKptxnBKdO1FJaCrIV927Lzou8ZuuWEA7zIkWeZDyoiQba0qbMsrsi JdZJurMVZKw4/8yJeN/CzSKVcV2KUhZqXevsqfyJNenfFeKDfBwkE70RF4cTPUr9 u0F1QLru06qR4u+MLlxTb2/WeT6bvuGWowCOxAsC8tUHncop/Mm/mfWf57DVXao7 KhtQeYif0AK/DNeQ7NS4Hn67ZDDXFqrw5HW/4qdHJmCQsc0RGZyYV1vWEZjEdAmO ROw+/zHGVziDL4h4aqDFkyiCn5sCAwEAAaOCAhAwggIMMB0GA1UdDgQWBBSE4/Xq JLmJwRECO/gH055YARAI3TAfBgNVHSMEGDAWgBRfPWTc8TGU+w1x8p+zfC2T+NSH IDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA5NzQ2MzA3NDE4ODE2NTMzLzAvNUYzRDY0 RENGMTMxOTRGQjBENzFGMjlGQjM3QzJEOTNGOEQ0ODcyMC5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvWHoxazNQRXhs UHNOY2ZLZnMzd3RrX2pVaHlBLmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUF BzALhm5yc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTExMDk3NDYzMDc0 MTg4MTY1MzMvMC8zMTMxMzEyZTMxMzMzMjJlMzAyZTMwMmYzMTM2MmQzMTM2MjAz ZDNlMjAzMjM0MzEzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4G CCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAb4QwDQYJKoZIhvcNAQELBQADggEB AIW3rA7KjkYjHtxTdPVZpsj3jQPpyrJ++zHX6kxOFQnOioFFJeZJSgCYR9omg06L Mlxm5ueujUUGM2i4eXLpdZkzZLAAWs9s3d7WOp5FidPJDDgWpNw9F3+agCbdpx/S mvdCshJ4BzyHLdsX8L+AJIkFpyOVTV65JoPaw1vTwRDD8I1kn2KuYMOou/RBjD0p vlP/9oQaftqjQjjyGyucpQEH+17mh7zt1ef5yGJEQMXIyOT8lkM7nsH+oquS+u0n qS0+M/S18LwQlfa2TGDloKfylZvZilQj/9cAw9vEJieXnjeAW5ac61yIMqJkG5nV kcxXErksWUikV4ek/i9klJE= -----END CERTIFICATE-----Generated at Sat May 23 06:24:40 2026 by rpki-client