$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114852675259727895/0/312e3131392e3139322e302f32312d3231203d3e2034383437.roa File: 312e3131392e3139322e302f32312d3231203d3e2034383437.roa (raw, json) Hash identifier: XNtjIRUgY4fS8N3i0nW4IwHop43Mi2F8n9L+lEuBp6g= Subject key identifier: 34:51:8B:76:1C:0B:3E:C9:00:57:91:7D:9E:EC:91:E5:08:F0:FF:75 Certificate issuer: /CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23 Certificate serial: 4AB8A1DE5C93F7305BB7FD0B6B58547A393CBF95 Authority key identifier: D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/312e3131392e3139322e302f32312d3231203d3e2034383437.roa Signing time: Thu 04 Jun 2026 10:03:10 +0000 ROA not before: Thu 04 Jun 2026 09:58:10 +0000 ROA not after: Thu 03 Jun 2027 10:03:10 +0000 asID: 4847 IP address blocks: 1.119.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:b8:a1:de:5c:93:f7:30:5b:b7:fd:0b:6b:58:54:7a:39:3c:bf:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23 Validity Not Before: Jun 4 09:58:10 2026 GMT Not After : Jun 3 10:03:10 2027 GMT Subject: CN=34518B761C0B3EC90057917D9EEC91E508F0FF75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:26:e8:39:a8:35:eb:1c:83:b2:17:ca:95:6a: ff:bf:55:b6:ad:ea:9a:b6:de:6b:f8:9f:a6:56:dd: 69:54:d3:c5:4c:a4:87:0a:4a:11:7c:dc:79:d2:05: 37:a4:3f:43:73:39:14:78:7e:ce:15:66:bc:37:0f: ad:48:34:4d:73:6b:d0:db:af:b2:0e:bf:4c:6b:e2: f6:d7:d3:02:ca:c2:2e:69:4a:11:c8:45:7c:19:ba: 61:e7:f6:3b:15:63:52:28:9a:63:46:d5:56:76:7d: 83:63:b0:7b:18:2f:44:50:20:e9:f1:e2:2b:25:e9: 58:62:f1:3f:77:11:b9:4d:28:51:90:ac:28:73:f0: 04:80:03:23:e9:08:32:bc:2b:ff:2b:2b:f4:48:5a: 96:59:60:7f:68:2f:76:76:37:bc:e0:f9:21:92:48: 56:17:d5:30:23:93:45:77:a9:60:2c:26:67:9e:4a: b8:ce:42:33:50:24:60:df:93:bf:32:1b:39:73:25: a5:c9:e5:00:aa:4f:aa:df:dd:dc:da:5c:8b:19:3e: 75:e7:0d:16:76:c0:d9:1d:9a:1c:04:7e:93:97:22: 61:2e:43:17:5c:39:8b:47:07:f4:f9:c1:d9:36:6e: 73:9b:a5:89:b8:2c:71:fc:5c:4c:6b:79:65:53:33: cc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:51:8B:76:1C:0B:3E:C9:00:57:91:7D:9E:EC:91:E5:08:F0:FF:75 X509v3 Authority Key Identifier: keyid:D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/312e3131392e3139322e302f32312d3231203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.119.192.0/21 Signature Algorithm: sha256WithRSAEncryption 5a:84:25:2f:61:3f:2d:23:3d:8e:42:b4:69:9e:4d:58:7d:82: 24:b1:38:d0:94:af:f0:0f:7e:7c:2f:46:2b:f8:ce:9d:c4:f2: 80:2a:90:85:21:94:f1:85:c3:c6:3e:30:4c:34:c9:39:2d:94: 42:3e:98:3a:82:ff:7e:99:7d:d1:1d:e7:88:48:1a:43:39:b0: 14:0d:c8:a9:01:c6:b6:10:5f:90:c6:be:56:76:39:b4:5c:7f: 77:8b:67:00:f8:52:42:1a:eb:52:0b:ca:76:87:8e:6e:89:07: f4:bb:87:7f:9f:51:8c:51:a7:3b:1c:59:67:3f:84:52:57:b7: cb:c9:2b:16:44:3f:8c:42:50:2d:89:9a:ed:23:1d:f3:2b:c2: d7:4c:a3:6a:8c:84:f0:15:e1:d9:90:13:a6:79:00:6a:d6:3c: f6:04:bb:22:e0:ac:85:37:af:18:4b:84:a9:05:f2:da:ca:74: 2c:d3:fd:30:6e:d4:b3:91:1f:89:1a:5e:70:59:f4:1d:cf:39: e7:b9:37:bd:7c:81:d0:7e:f3:52:3a:c9:e3:2f:00:8f:e7:cb: 69:ae:22:af:cf:ef:cd:b0:5b:07:a0:53:c9:87:04:c3:0a:1e: ce:e3:d9:57:51:86:fb:1a:40:8f:de:14:bf:71:7d:46:9d:cd: cb:9c:92:8f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUSrih3lyT9zBbt/0La1hUejk8v5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQzREZDNDEzQkM4NEZBMThCRDFCOEUwN0EyMzQ2MkMw NDNBQ0IyMzAeFw0yNjA2MDQwOTU4MTBaFw0yNzA2MDMxMDAzMTBaMDMxMTAvBgNV BAMTKDM0NTE4Qjc2MUMwQjNFQzkwMDU3OTE3RDlFRUM5MUU1MDhGMEZGNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwJug5qDXrHIOyF8qVav+/Vbat 6pq23mv4n6ZW3WlU08VMpIcKShF83HnSBTekP0NzORR4fs4VZrw3D61INE1za9Db r7IOv0xr4vbX0wLKwi5pShHIRXwZumHn9jsVY1IommNG1VZ2fYNjsHsYL0RQIOnx 4isl6Vhi8T93EblNKFGQrChz8ASAAyPpCDK8K/8rK/RIWpZZYH9oL3Z2N7zg+SGS SFYX1TAjk0V3qWAsJmeeSrjOQjNQJGDfk78yGzlzJaXJ5QCqT6rf3dzaXIsZPnXn DRZ2wNkdmhwEfpOXImEuQxdcOYtHB/T5wdk2bnObpYm4LHH8XExreWVTM8xFAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUNFGLdhwLPskAV5F9nuyR5Qjw/3UwHwYDVR0j BBgwFoAU1D38QTvIT6GL0bjgeiNGLAQ6yyMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg1MjY3NTI1OTcyNzg5NS8wL0Q0M0RGQzQxM0JDODRGQTE4QkQxQjhFMDdBMjM0 NjJDMDQzQUNCMjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDQzREZDNDEzQkM4NEZBMThCRDFCOEUwN0EyMzQ2MkMwNDNBQ0IyMy5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTE0ODUyNjc1MjU5NzI3ODk1LzAvMzEyZTMxMzEzOTJl MzEzOTMyMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzQzODM0Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAMBd8AwDQYJKoZIhvcNAQELBQADggEBAFqEJS9hPy0jPY5CtGmeTVh9giSxONCU r/APfnwvRiv4zp3E8oAqkIUhlPGFw8Y+MEw0yTktlEI+mDqC/36ZfdEd54hIGkM5 sBQNyKkBxrYQX5DGvlZ2ObRcf3eLZwD4UkIa61ILynaHjm6JB/S7h3+fUYxRpzsc WWc/hFJXt8vJKxZEP4xCUC2Jmu0jHfMrwtdMo2qMhPAV4dmQE6Z5AGrWPPYEuyLg rIU3rxhLhKkF8trKdCzT/TBu1LORH4kaXnBZ9B3POee5N718gdB+81I6yeMvAI/n y2muIq/P782wWwegU8mHBMMKHs7j2VdRhvsaQI/eFL9xfUadzcucko8= -----END CERTIFICATE-----Generated at Fri Jun 12 02:24:11 2026 by rpki-client