$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e31362e302f32312d3231203d3e203234313338.roa File: 3131312e3133322e31362e302f32312d3231203d3e203234313338.roa (raw, json) Hash identifier: lcJVlqoEz+cTizzH7WJL3wDHDAIZw0lPgL3X49BQL/E= Subject key identifier: 69:25:F1:DF:F0:93:66:25:56:AD:FC:74:2A:2E:BC:EF:2C:D1:75:93 Certificate issuer: /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720 Certificate serial: 530ADB71F9CC6E3107B57B8237D5F8CA59DCC01B Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e31362e302f32312d3231203d3e203234313338.roa Signing time: Thu 21 May 2026 08:33:20 +0000 ROA not before: Thu 21 May 2026 08:28:20 +0000 ROA not after: Thu 20 May 2027 08:33:20 +0000 asID: 24138 IP address blocks: 111.132.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 22:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:0a:db:71:f9:cc:6e:31:07:b5:7b:82:37:d5:f8:ca:59:dc:c0:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720 Validity Not Before: May 21 08:28:20 2026 GMT Not After : May 20 08:33:20 2027 GMT Subject: CN=6925F1DFF093662556ADFC742A2EBCEF2CD17593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fc:32:31:0d:84:b3:fe:ee:fb:14:88:3f:7a: 25:0c:e6:0f:4b:8c:eb:e9:68:56:22:3c:75:09:15: fa:e5:53:1e:4a:f4:d8:53:06:10:10:db:05:71:cf: 7e:92:db:b5:f5:1d:d5:61:d6:50:5c:ca:66:b3:0d: 34:bd:96:20:db:1b:cc:ae:22:06:1a:5c:ed:6c:de: 15:f9:2a:46:de:dd:4a:cb:db:8d:b3:5f:3f:02:e0: 64:2a:7f:3f:cd:c2:7a:6c:94:40:0f:e9:a3:35:84: d9:6d:e9:9e:e2:fd:28:60:ba:d7:31:3d:49:16:25: fd:fb:f5:d1:7d:26:a0:28:85:1b:5b:55:cb:8f:64: bb:43:a6:52:99:4b:88:8e:ea:e2:d8:c7:4f:65:0a: 33:cc:98:c6:3c:7b:7a:15:6d:fb:6e:49:de:cc:69: 37:19:d1:55:42:38:e9:05:24:4d:02:4e:63:90:e9: 0a:be:6c:a7:1f:40:ff:94:4a:48:89:2f:6a:3f:a2: b9:73:20:1c:19:9a:40:60:62:de:ee:ac:f7:54:dd: bd:d5:dd:ea:74:28:e1:14:68:56:82:f2:c0:fd:f6: 57:d0:c4:d4:36:77:2b:67:b6:0f:de:30:66:27:b7: 3e:1e:21:d2:87:14:f9:12:7e:b9:f4:63:49:f8:27: a3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:25:F1:DF:F0:93:66:25:56:AD:FC:74:2A:2E:BC:EF:2C:D1:75:93 X509v3 Authority Key Identifier: keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131312e3133322e31362e302f32312d3231203d3e203234313338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 111.132.16.0/21 Signature Algorithm: sha256WithRSAEncryption cd:79:4c:fd:5b:fa:5a:4f:cb:8c:3a:75:fb:70:a9:3f:9c:a7: b0:16:6b:8f:7f:c4:f8:d7:44:71:2b:59:dc:c4:55:93:54:66: 7a:d7:26:2c:05:59:b8:14:8d:54:1d:86:21:ca:58:53:2f:d0: d1:1d:7d:b4:6b:64:e9:36:72:6c:f1:96:b4:e8:0b:63:b1:f3: 9e:7f:d5:1d:ac:f3:2f:12:d2:f3:cf:b9:6a:c8:09:23:06:a1: da:f4:30:2a:49:ce:ae:f9:aa:6b:27:e1:48:b4:5b:36:3c:91: 42:2e:1b:dc:f9:15:8f:fa:3f:b0:67:e7:bb:b4:df:e4:3d:ea: 65:f0:ad:b3:70:62:99:30:72:8b:0a:a0:c4:fe:5b:12:89:a5: 30:ca:93:93:1f:b8:36:82:a4:aa:ff:74:1e:b1:7b:75:fc:c6: 5b:bc:0d:fa:46:bd:2d:f8:53:d0:62:97:00:00:19:b2:15:61: 86:d1:9d:bd:5d:00:1f:ff:10:be:33:b0:52:a6:c0:aa:41:e1: 8a:60:50:6f:20:d2:6a:f4:fc:77:5e:3f:d5:c0:74:c0:9b:13: 21:67:2e:bb:66:24:55:f2:c2:36:97:1b:d9:1d:e5:4b:ac:c0: 37:d7:b5:f9:a9:40:68:73:ac:68:97:bc:84:5a:b5:3e:bb:12: cd:c3:f4:59 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgIUUwrbcfnMbjEHtXuCN9X4ylncwBswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODVCRjAwMDAwMTEwLwYDVQQFEyg1RjNENjREQ0Yx MzE5NEZCMEQ3MUYyOUZCMzdDMkQ5M0Y4RDQ4NzIwMB4XDTI2MDUyMTA4MjgyMFoX DTI3MDUyMDA4MzMyMFowMzExMC8GA1UEAxMoNjkyNUYxREZGMDkzNjYyNTU2QURG Qzc0MkEyRUJDRUYyQ0QxNzU5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALD8MjENhLP+7vsUiD96JQzmD0uM6+loViI8dQkV+uVTHkr02FMGEBDbBXHP fpLbtfUd1WHWUFzKZrMNNL2WINsbzK4iBhpc7WzeFfkqRt7dSsvbjbNfPwLgZCp/ P83CemyUQA/pozWE2W3pnuL9KGC61zE9SRYl/fv10X0moCiFG1tVy49ku0OmUplL iI7q4tjHT2UKM8yYxjx7ehVt+25J3sxpNxnRVUI46QUkTQJOY5DpCr5spx9A/5RK SIkvaj+iuXMgHBmaQGBi3u6s91TdvdXd6nQo4RRoVoLywP32V9DE1DZ3K2e2D94w Zie3Ph4h0ocU+RJ+ufRjSfgnoxUCAwEAAaOCAhQwggIQMB0GA1UdDgQWBBRpJfHf 8JNmJVat/HQqLrzvLNF1kzAfBgNVHSMEGDAWgBRfPWTc8TGU+w1x8p+zfC2T+NSH IDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA5NzQ2MzA3NDE4ODE2NTMzLzAvNUYzRDY0 RENGMTMxOTRGQjBENzFGMjlGQjM3QzJEOTNGOEQ0ODcyMC5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvWHoxazNQRXhs UHNOY2ZLZnMzd3RrX2pVaHlBLmNlcjCBjQYIKwYBBQUHAQsEgYAwfjB8BggrBgEF BQcwC4ZwcnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA5NzQ2MzA3 NDE4ODE2NTMzLzAvMzEzMTMxMmUzMTMzMzIyZTMxMzYyZTMwMmYzMjMxMmQzMjMx MjAzZDNlMjAzMjM0MzEzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDb4QQMA0GCSqGSIb3DQEBCwUA A4IBAQDNeUz9W/paT8uMOnX7cKk/nKewFmuPf8T410RxK1ncxFWTVGZ61yYsBVm4 FI1UHYYhylhTL9DRHX20a2TpNnJs8Za06AtjsfOef9UdrPMvEtLzz7lqyAkjBqHa 9DAqSc6u+aprJ+FItFs2PJFCLhvc+RWP+j+wZ+e7tN/kPepl8K2zcGKZMHKLCqDE /lsSiaUwypOTH7g2gqSq/3QesXt1/MZbvA36Rr0t+FPQYpcAABmyFWGG0Z29XQAf /xC+M7BSpsCqQeGKYFBvINJq9Px3Xj/VwHTAmxMhZy67ZiRV8sI2lxvZHeVLrMA3 17X5qUBoc6xol7yEWrU+uxLNw/RZ -----END CERTIFICATE-----Generated at Sat May 23 06:24:38 2026 by rpki-client