$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3130332e302f32342d3234203d3e20313334353433.roa File: 3231312e39392e3130332e302f32342d3234203d3e20313334353433.roa (raw, json) Hash identifier: 5xH+InlwvodA98YnzFatvi0IvwFQLw6bAWrZvWNh4FA= Subject key identifier: F9:31:D3:A2:E3:9C:31:5E:A7:7B:65:5F:34:CF:80:98:A3:01:C0:BE Certificate issuer: /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA Certificate serial: 0F2D4A3EAEE839B8C579CB51D0DC6311B4FCFD5F Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3130332e302f32342d3234203d3e20313334353433.roa Signing time: Wed 27 May 2026 07:41:39 +0000 ROA not before: Wed 27 May 2026 07:36:39 +0000 ROA not after: Wed 26 May 2027 07:41:39 +0000 asID: 134543 IP address blocks: 211.99.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:2d:4a:3e:ae:e8:39:b8:c5:79:cb:51:d0:dc:63:11:b4:fc:fd:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA Validity Not Before: May 27 07:36:39 2026 GMT Not After : May 26 07:41:39 2027 GMT Subject: CN=F931D3A2E39C315EA77B655F34CF8098A301C0BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:80:f5:bf:3c:30:26:5b:b2:d7:e9:4c:67:f2: 23:8d:a3:e0:33:5d:a3:92:3d:b9:da:83:49:bf:74: 50:e3:20:da:d1:a4:19:40:52:17:61:cb:d6:00:7e: a4:dd:7d:c7:da:45:f2:b4:80:7b:61:d4:c8:8b:b6: ca:39:4b:ea:b6:d5:ae:c2:0e:68:09:96:a8:53:bd: ea:8b:f4:d9:17:a5:55:2d:3a:86:a5:b9:02:79:0b: 86:68:6a:a3:49:09:fa:1e:8d:22:70:37:bc:be:3a: 6e:c2:4d:f4:fb:51:b3:8c:39:e2:e4:bb:c5:12:68: 01:db:b9:4b:50:60:49:11:d1:9a:d7:42:c4:70:49: da:3d:a3:06:44:e2:4e:af:b7:6b:a9:30:b2:e3:18: 0c:16:65:ab:7c:aa:c8:e0:bd:6d:66:18:51:86:c9: ca:b2:1e:b3:aa:7b:d2:0a:ab:6c:51:74:ca:b9:f6: 7b:92:a8:0c:73:ca:a6:24:0b:b7:6d:e5:ce:6b:ca: cb:1b:67:0e:83:61:20:06:df:1d:3a:99:a4:1b:08: 92:2b:59:9a:9a:c1:32:cd:00:14:c6:2b:43:ba:ba: 1f:39:ef:a3:f9:53:59:ec:7d:52:43:ce:d3:8d:30: f1:84:95:f3:04:ad:e7:64:6f:7a:b3:3f:a8:66:c7: f2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:31:D3:A2:E3:9C:31:5E:A7:7B:65:5F:34:CF:80:98:A3:01:C0:BE X509v3 Authority Key Identifier: keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3130332e302f32342d3234203d3e20313334353433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.99.103.0/24 Signature Algorithm: sha256WithRSAEncryption 20:57:9d:cd:d1:bf:55:86:e9:b6:51:be:7c:5b:cf:14:46:79: 34:a5:39:68:e7:d8:73:ef:9c:3f:8c:eb:f2:ac:7a:df:2a:bf: 49:2c:ca:5c:d6:33:87:71:ae:e4:43:7d:b0:f6:12:23:09:7c: 82:4d:62:1f:d6:4f:b2:4e:bb:57:ba:74:63:68:c9:4a:37:5f: 37:07:4b:e7:06:60:fd:f5:bc:50:5e:62:29:d5:91:10:8d:97: 39:25:29:cd:e0:d5:eb:4e:c5:08:1e:f0:d6:8f:c7:8a:2d:bd: f5:be:6e:f5:91:0c:70:a6:2b:ce:64:4d:1c:b6:fe:fd:d6:8c: 67:c4:7d:f8:10:a5:88:39:52:1a:37:36:c4:14:a7:58:00:f0: ac:c1:b4:44:bc:cf:67:c9:f2:f6:c1:49:05:6c:dd:b5:ae:bd: be:91:81:fb:f5:a4:f6:65:59:ae:50:52:87:57:aa:55:39:a0: 69:e8:89:2f:6b:38:88:33:ec:1a:8d:0b:85:5a:d0:b6:0b:dc: d1:1b:d3:72:1e:54:0e:78:df:6b:c5:da:52:9c:c7:95:21:01: fe:71:a1:44:8a:6f:bc:da:8a:82:30:93:34:79:00:d5:b1:0e: 61:c5:60:cb:fb:7c:77:61:c2:e0:40:36:3a:0c:9a:24:11:f4: 52:c2:45:03 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUDy1KPq7oObjFectR0NxjEbT8/V8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5 NUJFMDBBQTAeFw0yNjA1MjcwNzM2MzlaFw0yNzA1MjYwNzQxMzlaMDMxMTAvBgNV BAMTKEY5MzFEM0EyRTM5QzMxNUVBNzdCNjU1RjM0Q0Y4MDk4QTMwMUMwQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtgPW/PDAmW7LX6Uxn8iONo+Az XaOSPbnag0m/dFDjINrRpBlAUhdhy9YAfqTdfcfaRfK0gHth1MiLtso5S+q21a7C DmgJlqhTveqL9NkXpVUtOoaluQJ5C4ZoaqNJCfoejSJwN7y+Om7CTfT7UbOMOeLk u8USaAHbuUtQYEkR0ZrXQsRwSdo9owZE4k6vt2upMLLjGAwWZat8qsjgvW1mGFGG ycqyHrOqe9IKq2xRdMq59nuSqAxzyqYkC7dt5c5ryssbZw6DYSAG3x06maQbCJIr WZqawTLNABTGK0O6uh8576P5U1nsfVJDztONMPGElfMEredkb3qzP6hmx/JtAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU+THTouOcMV6ne2VfNM+AmKMBwL4wHwYDVR0j BBgwFoAUU4FOLN+VzJdH2R47WgFHhpW+AKowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTkwOTMzNDMxNDM4NTQyNy8wLzUzODE0RTJDREY5NUNDOTc0N0Q5MUUzQjVBMDE0 Nzg2OTVCRTAwQUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5NUJFMDBBQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMTE5MDkzMzQzMTQzODU0MjcvMC8zMjMxMzEyZTM5 MzkyZTMxMzAzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM1MzQzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEANNjZzANBgkqhkiG9w0BAQsFAAOCAQEAIFedzdG/VYbptlG+fFvP FEZ5NKU5aOfYc++cP4zr8qx63yq/SSzKXNYzh3Gu5EN9sPYSIwl8gk1iH9ZPsk67 V7p0Y2jJSjdfNwdL5wZg/fW8UF5iKdWREI2XOSUpzeDV607FCB7w1o/Hii299b5u 9ZEMcKYrzmRNHLb+/daMZ8R9+BCliDlSGjc2xBSnWADwrMG0RLzPZ8ny9sFJBWzd ta69vpGB+/Wk9mVZrlBSh1eqVTmgaeiJL2s4iDPsGo0LhVrQtgvc0RvTch5UDnjf a8XaUpzHlSEB/nGhRIpvvNqKgjCTNHkA1bEOYcVgy/t8d2HC4EA2OgyaJBH0UsJF Aw== -----END CERTIFICATE-----Generated at Fri May 29 23:53:31 2026 by rpki-client