$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3131322e302f32342d3234203d3e20313334353433.roa File: 3231312e39392e3131322e302f32342d3234203d3e20313334353433.roa (raw, json) Hash identifier: I5hWhrD8yY0G+4O/ougalM2mZwQU54zpSWyWe7k4efQ= Subject key identifier: FA:F2:61:1C:6F:80:6B:2F:8A:97:0B:12:7D:81:3C:3C:B8:EA:B1:FD Certificate issuer: /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA Certificate serial: 160BA6254AB94946886FF8766C47F29566765D46 Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3131322e302f32342d3234203d3e20313334353433.roa Signing time: Wed 27 May 2026 07:42:43 +0000 ROA not before: Wed 27 May 2026 07:37:43 +0000 ROA not after: Wed 26 May 2027 07:42:43 +0000 asID: 134543 IP address blocks: 211.99.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:0b:a6:25:4a:b9:49:46:88:6f:f8:76:6c:47:f2:95:66:76:5d:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA Validity Not Before: May 27 07:37:43 2026 GMT Not After : May 26 07:42:43 2027 GMT Subject: CN=FAF2611C6F806B2F8A970B127D813C3CB8EAB1FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d0:21:b6:79:d6:99:df:29:96:de:51:f8:99: 56:d3:eb:a3:d5:2d:6d:58:b5:39:15:f8:87:3a:47: c3:d4:bb:c4:55:99:85:28:e2:c5:5a:99:4e:13:c1: a6:58:7f:1f:a7:52:bf:76:0d:b5:07:8a:ec:1e:ac: 27:79:91:14:57:de:59:af:ac:f5:77:71:7c:d1:35: 72:bd:31:3e:ae:19:40:05:99:a0:3e:ee:d6:f3:05: 0b:95:a4:a1:ae:a7:05:ec:99:cf:bc:1f:cc:5e:b0: 66:3c:83:07:80:7a:56:b7:9d:2c:5b:25:e0:a9:d1: d1:0c:f1:9e:c7:7d:53:00:bb:fb:9a:a0:ca:e0:25: af:a5:d4:e2:4c:2f:ab:35:da:c6:41:b6:4a:21:ec: a3:19:c6:90:7b:47:d3:5a:ae:e7:df:9f:11:f3:9b: 52:e7:1d:ae:7b:ec:df:75:e2:74:6d:a8:af:64:2e: 1b:e5:08:77:f7:8d:a4:bd:87:57:89:f5:84:f9:a6: de:f7:5f:aa:47:a2:3a:0c:d4:bf:6e:11:af:f7:bc: 4c:2d:60:9c:70:8c:e4:2e:31:a0:90:3f:9f:9b:e7: 4e:de:23:f2:db:66:13:79:9e:0f:97:50:fd:d3:fc: 06:04:5a:c2:22:12:12:f9:5b:91:37:a5:88:ec:77: 09:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F2:61:1C:6F:80:6B:2F:8A:97:0B:12:7D:81:3C:3C:B8:EA:B1:FD X509v3 Authority Key Identifier: keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3131322e302f32342d3234203d3e20313334353433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.99.112.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:63:99:a6:b2:c6:ee:16:54:0f:27:eb:3f:f7:7c:b2:48:4e: 45:43:11:bd:f0:03:02:b6:6a:10:de:0e:2d:54:ce:ea:25:8a: 0e:84:db:6c:04:dc:9c:17:2b:a6:17:d9:e7:5e:bf:b8:b4:5c: 0c:44:37:6b:04:77:48:5c:e6:a0:24:ae:53:80:de:75:9e:d5: af:19:55:26:81:d7:a4:d3:13:dc:6d:f6:27:6b:80:1b:2e:ef: cd:9d:18:45:dd:e9:96:81:f8:02:f8:24:90:ba:fb:d2:ca:8e: 24:a6:1e:de:54:47:b0:a2:16:87:b6:70:2a:9c:04:03:d9:b9: 94:f7:59:8c:3b:51:82:53:37:93:28:2e:a7:e9:1d:b6:4e:61: 08:47:d9:2f:f5:a4:90:ff:ed:85:f8:a0:92:c8:fd:b1:ba:12: fa:07:78:58:c9:8c:65:9f:e8:2d:08:43:1e:bc:f8:fd:43:80: 6f:a0:6b:a6:ca:86:b7:fd:a6:66:d8:9d:d8:f1:08:d5:3f:a5: 5a:2e:9e:63:21:88:f1:87:8f:23:18:27:ac:8c:33:7f:1f:07: 00:64:27:a1:69:e1:e1:ee:48:e2:9f:41:0d:bb:0c:af:fb:39: e2:3c:fc:10:1c:7e:f2:8f:af:72:7d:e0:de:3d:83:aa:4f:25: ac:99:67:7c -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUFgumJUq5SUaIb/h2bEfylWZ2XUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5 NUJFMDBBQTAeFw0yNjA1MjcwNzM3NDNaFw0yNzA1MjYwNzQyNDNaMDMxMTAvBgNV BAMTKEZBRjI2MTFDNkY4MDZCMkY4QTk3MEIxMjdEODEzQzNDQjhFQUIxRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG0CG2edaZ3ymW3lH4mVbT66PV LW1YtTkV+Ic6R8PUu8RVmYUo4sVamU4TwaZYfx+nUr92DbUHiuwerCd5kRRX3lmv rPV3cXzRNXK9MT6uGUAFmaA+7tbzBQuVpKGupwXsmc+8H8xesGY8gweAela3nSxb JeCp0dEM8Z7HfVMAu/uaoMrgJa+l1OJML6s12sZBtkoh7KMZxpB7R9NaruffnxHz m1LnHa577N914nRtqK9kLhvlCHf3jaS9h1eJ9YT5pt73X6pHojoM1L9uEa/3vEwt YJxwjOQuMaCQP5+b507eI/LbZhN5ng+XUP3T/AYEWsIiEhL5W5E3pYjsdwn1AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU+vJhHG+Aay+KlwsSfYE8PLjqsf0wHwYDVR0j BBgwFoAUU4FOLN+VzJdH2R47WgFHhpW+AKowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTkwOTMzNDMxNDM4NTQyNy8wLzUzODE0RTJDREY5NUNDOTc0N0Q5MUUzQjVBMDE0 Nzg2OTVCRTAwQUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5NUJFMDBBQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMTE5MDkzMzQzMTQzODU0MjcvMC8zMjMxMzEyZTM5 MzkyZTMxMzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM1MzQzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEANNjcDANBgkqhkiG9w0BAQsFAAOCAQEAb2OZprLG7hZUDyfrP/d8 skhORUMRvfADArZqEN4OLVTO6iWKDoTbbATcnBcrphfZ516/uLRcDEQ3awR3SFzm oCSuU4DedZ7VrxlVJoHXpNMT3G32J2uAGy7vzZ0YRd3ploH4AvgkkLr70sqOJKYe 3lRHsKIWh7ZwKpwEA9m5lPdZjDtRglM3kygup+kdtk5hCEfZL/WkkP/thfigksj9 sboS+gd4WMmMZZ/oLQhDHrz4/UOAb6BrpsqGt/2mZtid2PEI1T+lWi6eYyGI8YeP IxgnrIwzfx8HAGQnoWnh4e5I4p9BDbsMr/s54jz8EBx+8o+vcn3g3j2Dqk8lrJln fA== -----END CERTIFICATE-----Generated at Fri May 29 22:57:12 2026 by rpki-client