$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1110934764212191253/0/3231392e3233322e3131322e302f32342d3234203d3e2034383437.roa File: 3231392e3233322e3131322e302f32342d3234203d3e2034383437.roa (raw, json) Hash identifier: Jp1MXYQSoxZLKxbSRSiNVvTuPRq8VuF7qKjxwYtl1Ko= Subject key identifier: 6E:F9:C7:D0:35:BA:B7:FE:09:7C:AF:23:81:22:95:0F:E3:65:9C:86 Certificate issuer: /CN=AE053C2402CB47FCF6E875C30756E16C9742BFE3 Certificate serial: 2E5013411B6ED84DE868E3CE8D083ECCA63A4DE5 Authority key identifier: AE:05:3C:24:02:CB:47:FC:F6:E8:75:C3:07:56:E1:6C:97:42:BF:E3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/3231392e3233322e3131322e302f32342d3234203d3e2034383437.roa Signing time: Sun 24 May 2026 14:43:23 +0000 ROA not before: Sun 24 May 2026 14:38:23 +0000 ROA not after: Sun 23 May 2027 14:43:23 +0000 asID: 4847 IP address blocks: 219.232.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 05:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:50:13:41:1b:6e:d8:4d:e8:68:e3:ce:8d:08:3e:cc:a6:3a:4d:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE053C2402CB47FCF6E875C30756E16C9742BFE3 Validity Not Before: May 24 14:38:23 2026 GMT Not After : May 23 14:43:23 2027 GMT Subject: CN=6EF9C7D035BAB7FE097CAF238122950FE3659C86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3a:db:fc:b4:f7:16:e8:1c:48:fc:59:80:a9: 10:45:f9:12:9d:74:c4:85:4f:eb:6a:50:16:bd:ac: 84:b7:30:48:b0:58:ef:2e:44:c0:2f:4e:52:29:3b: 63:a0:fb:3b:3c:a7:e1:2c:9d:c9:e7:ef:09:89:90: 5c:a7:22:04:35:64:8c:53:09:af:01:f9:33:32:2a: 16:6f:2c:0c:a5:8e:c4:54:46:ff:2b:ec:26:67:98: e2:d2:1e:6e:69:9d:4f:31:76:16:bd:39:25:37:c5: 86:19:9e:03:79:db:7b:75:2d:3a:6c:ec:f7:2a:d0: 8a:5c:6a:71:e8:fc:7f:eb:ae:8a:a9:50:a8:9c:df: a5:90:d9:be:30:b1:43:22:49:1a:f3:16:76:d4:7a: f9:46:9b:c9:d3:be:5e:1d:98:26:aa:f3:62:a1:29: 70:c6:bf:5c:39:6e:f6:ed:62:8a:37:40:5f:f6:8a: 9d:24:9a:14:db:72:9e:a9:a7:bf:48:8a:e6:a8:6d: 9c:8d:95:c3:1a:4f:5e:04:6f:dc:08:fc:35:3d:85: 1e:c5:8b:00:b0:1a:22:b6:c6:1c:b1:37:8a:cc:2a: 32:e8:e8:f0:1a:ac:99:ec:35:db:57:40:77:fb:85: 5a:d2:9a:80:04:0f:a1:43:7d:32:cf:89:18:07:11: 86:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F9:C7:D0:35:BA:B7:FE:09:7C:AF:23:81:22:95:0F:E3:65:9C:86 X509v3 Authority Key Identifier: keyid:AE:05:3C:24:02:CB:47:FC:F6:E8:75:C3:07:56:E1:6C:97:42:BF:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/3231392e3233322e3131322e302f32342d3234203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.232.112.0/24 Signature Algorithm: sha256WithRSAEncryption 61:dd:5b:58:f6:05:bb:d2:ec:60:18:b1:15:e3:78:a9:1f:00: cf:69:d6:55:cd:40:7b:cb:f4:ba:8a:23:9a:a9:ed:ba:37:8e: 06:c2:62:4e:a8:93:5f:a1:4a:35:37:06:be:42:54:96:a3:18: 5c:3f:8f:7d:da:a6:09:1f:84:fe:dd:3e:c2:1c:df:86:4a:20: ae:ad:a0:1e:83:00:2c:20:49:59:09:8e:cf:5b:e9:ae:0e:11: 59:e2:e4:7c:9d:32:51:57:8d:87:c0:5b:51:51:19:1f:c1:a7: f1:40:19:9b:18:42:72:0a:a7:5a:07:f9:f0:2b:14:0a:82:74: e7:75:d2:84:33:1b:6f:61:d7:24:bb:b1:2d:23:a1:71:a3:8c: 6b:bc:a2:2b:6b:01:10:9e:27:b7:b8:c5:b7:32:ff:fd:ac:d1: 5e:50:a9:7e:21:70:82:27:0f:79:59:60:b7:e1:58:cc:4f:4d: 22:df:78:53:db:5a:84:ab:e2:bf:6d:d2:89:36:bc:ce:77:55: 9e:27:cd:58:de:0d:d1:38:8e:d5:80:4d:77:6b:52:ea:a8:87: b4:2b:06:bb:83:3d:f4:b3:9d:c7:7c:6e:58:7f:3b:b1:1a:e0: 0b:7d:b3:12:1c:2a:21:e5:0e:91:aa:71:b0:b9:d3:c9:81:90: 63:1f:4b:bf -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIULlATQRtu2E3oaOPOjQg+zKY6TeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwNTNDMjQwMkNCNDdGQ0Y2RTg3NUMzMDc1NkUxNkM5 NzQyQkZFMzAeFw0yNjA1MjQxNDM4MjNaFw0yNzA1MjMxNDQzMjNaMDMxMTAvBgNV BAMTKDZFRjlDN0QwMzVCQUI3RkUwOTdDQUYyMzgxMjI5NTBGRTM2NTlDODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Otv8tPcW6BxI/FmAqRBF+RKd dMSFT+tqUBa9rIS3MEiwWO8uRMAvTlIpO2Og+zs8p+Esncnn7wmJkFynIgQ1ZIxT Ca8B+TMyKhZvLAyljsRURv8r7CZnmOLSHm5pnU8xdha9OSU3xYYZngN523t1LTps 7Pcq0IpcanHo/H/rroqpUKic36WQ2b4wsUMiSRrzFnbUevlGm8nTvl4dmCaq82Kh KXDGv1w5bvbtYoo3QF/2ip0kmhTbcp6pp79IiuaobZyNlcMaT14Eb9wI/DU9hR7F iwCwGiK2xhyxN4rMKjLo6PAarJnsNdtXQHf7hVrSmoAED6FDfTLPiRgHEYYrAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUbvnH0DW6t/4JfK8jgSKVD+NlnIYwHwYDVR0j BBgwFoAUrgU8JALLR/z26HXDB1bhbJdCv+MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MDkzNDc2NDIxMjE5MTI1My8wL0FFMDUzQzI0MDJDQjQ3RkNGNkU4NzVDMzA3NTZF MTZDOTc0MkJGRTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUUwNTNDMjQwMkNCNDdGQ0Y2RTg3NUMzMDc1NkUxNkM5NzQyQkZFMy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTExMDkzNDc2NDIxMjE5MTI1My8wLzMyMzEzOTJlMzIz MzMyMmUzMTMxMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEANvocDANBgkqhkiG9w0BAQsFAAOCAQEAYd1bWPYFu9LsYBixFeN4qR8A z2nWVc1Ae8v0uoojmqntujeOBsJiTqiTX6FKNTcGvkJUlqMYXD+PfdqmCR+E/t0+ whzfhkogrq2gHoMALCBJWQmOz1vprg4RWeLkfJ0yUVeNh8BbUVEZH8Gn8UAZmxhC cgqnWgf58CsUCoJ053XShDMbb2HXJLuxLSOhcaOMa7yiK2sBEJ4nt7jFtzL//azR XlCpfiFwgicPeVlgt+FYzE9NIt94U9tahKviv23SiTa8zndVnifNWN4N0TiO1YBN d2tS6qiHtCsGu4M99LOdx3xuWH87sRrgC32zEhwqIeUOkapxsLnTyYGQYx9Lvw== -----END CERTIFICATE-----Generated at Fri May 29 22:57:13 2026 by rpki-client