$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3132322e302f32342d3234203d3e20313334353433.roa File: 3231312e39392e3132322e302f32342d3234203d3e20313334353433.roa (raw, json) Hash identifier: 77oO1zO1pMqBewhABseQq1/y60XN/ndzH2YeRUE1InU= Subject key identifier: 82:3E:FD:D5:FB:8F:F0:CE:E5:BD:E4:D3:4A:72:C1:0E:B8:32:77:F7 Certificate issuer: /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA Certificate serial: 32B2D402E03E577C2BBFEB74AF28E78FB99F78E3 Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3132322e302f32342d3234203d3e20313334353433.roa Signing time: Wed 27 May 2026 07:43:05 +0000 ROA not before: Wed 27 May 2026 07:38:05 +0000 ROA not after: Wed 26 May 2027 07:43:05 +0000 asID: 134543 IP address blocks: 211.99.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:b2:d4:02:e0:3e:57:7c:2b:bf:eb:74:af:28:e7:8f:b9:9f:78:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA Validity Not Before: May 27 07:38:05 2026 GMT Not After : May 26 07:43:05 2027 GMT Subject: CN=823EFDD5FB8FF0CEE5BDE4D34A72C10EB83277F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4c:8d:d4:8c:85:ca:82:18:30:fd:35:91:d0: 6b:34:3e:c3:d8:23:ad:29:2d:d7:7f:84:3c:16:d0: 42:a5:fc:03:12:ca:e1:ea:5c:95:26:b5:a6:15:fe: 5f:ba:07:c2:9b:c7:fc:f3:78:b3:f2:1c:e1:48:fd: 9f:8a:61:f5:77:7c:ff:0f:2f:04:05:93:95:e5:3e: c0:ad:29:9a:4c:81:9f:1c:93:ee:7f:5d:82:c4:67: 98:81:ba:14:b9:9d:23:21:32:23:5c:06:fa:83:e1: fc:94:23:c5:9c:5a:94:67:11:3f:e3:ba:7e:67:cc: a5:6f:8e:b4:e0:71:b5:99:41:06:49:ef:f9:5f:3a: 5a:09:88:a4:cc:4b:94:48:16:af:8a:9a:b7:ed:84: 25:8b:67:46:cf:48:d1:b8:e7:a9:57:e0:96:56:49: 5d:8d:ec:fc:ed:1e:c9:52:c7:d6:7d:5c:ef:3e:a5: ab:73:3a:5d:fe:eb:c1:70:9a:90:3a:15:40:05:d7: ad:21:ef:b6:12:0d:72:2d:44:e6:5d:32:cc:1a:c3: 78:cc:91:d7:1a:c2:04:c8:5c:ad:bb:a3:5c:da:86: 05:e3:9f:b5:1d:a3:df:e5:a5:5f:56:cb:6e:e8:6f: 34:60:e8:44:83:56:f8:01:a5:7b:3e:36:2a:f5:c2: 96:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3E:FD:D5:FB:8F:F0:CE:E5:BD:E4:D3:4A:72:C1:0E:B8:32:77:F7 X509v3 Authority Key Identifier: keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3132322e302f32342d3234203d3e20313334353433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.99.122.0/24 Signature Algorithm: sha256WithRSAEncryption 43:61:03:0e:ff:41:22:48:be:62:0a:bb:dc:b4:f1:ed:a5:6c: 49:19:0c:9e:2a:cc:47:65:35:bc:2e:72:ea:10:3c:2f:85:bb: 0f:ec:6b:32:5b:fd:49:50:95:e4:a7:5c:ec:ea:9d:0a:5a:d8: 81:c3:26:2d:db:f3:f2:91:da:2d:e3:4d:39:4c:23:5d:05:3d: c3:ef:e7:bb:7d:5b:2f:f1:d9:33:37:6c:26:16:99:ce:06:0f: d5:1a:4f:f6:e1:94:53:04:14:95:e4:7b:ca:8d:d7:68:cf:bd: 2a:4f:12:68:f8:07:a5:ff:36:e4:ee:8c:1a:2d:f3:c7:a3:07: 3e:b5:83:9b:d8:64:5e:88:73:ff:31:39:9a:4f:7a:34:d8:e2: 15:9d:dd:3b:16:8e:cb:0a:c3:f7:ff:46:a2:2a:de:a1:5f:6c: b1:ad:8c:6e:42:30:4d:14:45:88:b6:9d:74:12:cd:fb:8d:9d: 9a:7d:4d:d6:c4:64:4a:82:09:d0:d2:cf:a2:10:fc:6f:8c:3c: 47:6d:75:1c:71:66:c9:e4:64:bb:dd:d9:7f:1f:22:d5:b4:8d: 3c:87:44:65:39:07:a8:5f:50:74:0d:d8:19:c0:5d:f2:eb:29: 8c:6a:3f:1b:52:79:ac:e5:54:7d:65:6a:0b:7d:76:fa:2c:0c: b8:53:c8:8a -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUMrLUAuA+V3wrv+t0ryjnj7mfeOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5 NUJFMDBBQTAeFw0yNjA1MjcwNzM4MDVaFw0yNzA1MjYwNzQzMDVaMDMxMTAvBgNV BAMTKDgyM0VGREQ1RkI4RkYwQ0VFNUJERTREMzRBNzJDMTBFQjgzMjc3RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+TI3UjIXKghgw/TWR0Gs0PsPY I60pLdd/hDwW0EKl/AMSyuHqXJUmtaYV/l+6B8Kbx/zzeLPyHOFI/Z+KYfV3fP8P LwQFk5XlPsCtKZpMgZ8ck+5/XYLEZ5iBuhS5nSMhMiNcBvqD4fyUI8WcWpRnET/j un5nzKVvjrTgcbWZQQZJ7/lfOloJiKTMS5RIFq+KmrfthCWLZ0bPSNG456lX4JZW SV2N7PztHslSx9Z9XO8+patzOl3+68FwmpA6FUAF160h77YSDXItROZdMswaw3jM kdcawgTIXK27o1zahgXjn7Udo9/lpV9Wy27obzRg6ESDVvgBpXs+Nir1wpbfAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUgj791fuP8M7lveTTSnLBDrgyd/cwHwYDVR0j BBgwFoAUU4FOLN+VzJdH2R47WgFHhpW+AKowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTkwOTMzNDMxNDM4NTQyNy8wLzUzODE0RTJDREY5NUNDOTc0N0Q5MUUzQjVBMDE0 Nzg2OTVCRTAwQUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5NUJFMDBBQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMTE5MDkzMzQzMTQzODU0MjcvMC8zMjMxMzEyZTM5 MzkyZTMxMzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM1MzQzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEANNjejANBgkqhkiG9w0BAQsFAAOCAQEAQ2EDDv9BIki+Ygq73LTx 7aVsSRkMnirMR2U1vC5y6hA8L4W7D+xrMlv9SVCV5Kdc7OqdClrYgcMmLdvz8pHa LeNNOUwjXQU9w+/nu31bL/HZMzdsJhaZzgYP1RpP9uGUUwQUleR7yo3XaM+9Kk8S aPgHpf825O6MGi3zx6MHPrWDm9hkXohz/zE5mk96NNjiFZ3dOxaOywrD9/9Goire oV9ssa2MbkIwTRRFiLaddBLN+42dmn1N1sRkSoIJ0NLPohD8b4w8R211HHFmyeRk u93Zfx8i1bSNPIdEZTkHqF9QdA3YGcBd8uspjGo/G1J5rOVUfWVqC312+iwMuFPI ig== -----END CERTIFICATE-----Generated at Fri May 29 22:57:15 2026 by rpki-client