$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114852675259727895/0/312e3131392e3232342e302f31392d3139203d3e2030.roa File: 312e3131392e3232342e302f31392d3139203d3e2030.roa (raw, json) Hash identifier: X68ruCb/zx9ahPmcBocKLSDV43P/iv5lanXlT9cxWHU= Subject key identifier: F8:86:8B:F9:13:F3:1F:19:B7:0B:09:88:78:C5:32:3E:A9:E5:68:A0 Certificate issuer: /CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23 Certificate serial: 35041ED2F1828CD3BF0966C9500EA89987CDB6C6 Authority key identifier: D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/312e3131392e3232342e302f31392d3139203d3e2030.roa Signing time: Thu 04 Jun 2026 10:07:16 +0000 ROA not before: Thu 04 Jun 2026 10:02:16 +0000 ROA not after: Thu 03 Jun 2027 10:07:16 +0000 asID: 0 IP address blocks: 1.119.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 22:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:04:1e:d2:f1:82:8c:d3:bf:09:66:c9:50:0e:a8:99:87:cd:b6:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23 Validity Not Before: Jun 4 10:02:16 2026 GMT Not After : Jun 3 10:07:16 2027 GMT Subject: CN=F8868BF913F31F19B70B098878C5323EA9E568A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0e:73:7d:94:e8:cb:b8:a5:56:53:d1:f8:4d: b4:67:94:90:a6:c6:38:3f:2c:29:0a:58:e9:e9:b7: ea:cf:a9:65:79:75:cc:2c:55:1b:e9:b5:4d:0f:15: b5:c6:1f:1a:6e:95:a5:ac:42:3d:a9:7d:f0:8d:f6: 6d:cb:3a:b9:6b:20:f5:4b:05:fd:03:1d:62:7d:8b: 05:3a:d3:24:27:9a:fb:09:bc:e0:37:13:9b:5c:fc: 29:3c:e7:58:01:1b:6d:8d:f9:13:99:a7:76:88:70: 2a:7e:2b:a0:17:35:2d:d7:77:e1:8b:f9:c3:d4:a4: 69:b4:ba:e1:8d:c6:63:52:e7:4d:e0:c8:78:fe:56: 41:ad:46:cc:3d:87:18:c1:93:24:8c:0a:c6:3c:a9: 23:ab:f5:23:ef:51:7f:1d:82:72:ee:a5:1c:33:a2: b3:88:5a:d0:3f:e8:6b:c3:f4:e5:46:14:08:33:64: 9d:ae:05:30:c6:0c:99:56:77:73:0a:ac:3e:59:5a: ad:82:03:c0:7a:5f:d5:bc:bf:1a:11:31:b0:1c:be: 1d:69:bf:a4:75:96:14:c6:f5:27:aa:ef:7e:78:95: 6d:8e:8f:a8:7d:56:82:cf:29:08:e2:4f:d4:08:13: 20:f5:ad:90:4d:70:0f:a2:5c:b8:ca:c8:d7:a0:64: 43:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:86:8B:F9:13:F3:1F:19:B7:0B:09:88:78:C5:32:3E:A9:E5:68:A0 X509v3 Authority Key Identifier: keyid:D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/312e3131392e3232342e302f31392d3139203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.119.224.0/19 Signature Algorithm: sha256WithRSAEncryption 07:34:8b:1a:c2:b0:06:ab:13:74:a4:46:fe:a9:45:cb:f2:cb: 88:43:98:16:b9:f7:f5:01:f5:57:23:1a:90:03:bc:38:2a:e8: 87:a5:5b:f1:d4:20:4d:60:19:09:17:e0:75:4a:c0:ee:d1:a3: 35:2f:2e:48:88:3f:e8:cc:48:89:73:74:92:df:44:ce:b7:7b: a8:88:1a:f0:81:84:10:0b:e4:76:79:7b:b1:44:68:9f:bc:69: c3:8d:d7:af:e6:c4:e6:21:34:9d:3a:80:9b:cc:fc:70:ab:dd: c1:f2:f2:4e:7c:7b:f0:1e:9b:67:32:4f:cb:79:e5:1e:ad:59: f2:54:81:9f:15:de:fb:18:9c:3e:54:41:3b:22:80:f1:70:f6: f6:55:6c:c4:57:ab:9d:e4:44:a1:55:74:40:c3:ae:d6:e1:0d: 86:b2:1c:71:f9:95:a6:f0:2a:e4:06:dc:73:16:71:34:06:51: 71:02:4c:22:b5:f1:f5:cc:a1:ad:e9:93:16:5c:47:a2:f3:9d: 06:c8:da:5c:ee:31:e5:db:db:9d:87:2f:e6:9f:40:29:0d:1d: e5:56:09:fa:d3:5a:dc:04:7e:42:2a:0d:d7:29:4b:cf:fd:20: 9c:19:3b:4a:bd:cc:ef:ac:22:db:05:60:2b:06:f2:58:61:dd: 41:4a:43:c0 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUNQQe0vGCjNO/CWbJUA6omYfNtsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQzREZDNDEzQkM4NEZBMThCRDFCOEUwN0EyMzQ2MkMw NDNBQ0IyMzAeFw0yNjA2MDQxMDAyMTZaFw0yNzA2MDMxMDA3MTZaMDMxMTAvBgNV BAMTKEY4ODY4QkY5MTNGMzFGMTlCNzBCMDk4ODc4QzUzMjNFQTlFNTY4QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcDnN9lOjLuKVWU9H4TbRnlJCm xjg/LCkKWOnpt+rPqWV5dcwsVRvptU0PFbXGHxpulaWsQj2pffCN9m3LOrlrIPVL Bf0DHWJ9iwU60yQnmvsJvOA3E5tc/Ck851gBG22N+ROZp3aIcCp+K6AXNS3Xd+GL +cPUpGm0uuGNxmNS503gyHj+VkGtRsw9hxjBkySMCsY8qSOr9SPvUX8dgnLupRwz orOIWtA/6GvD9OVGFAgzZJ2uBTDGDJlWd3MKrD5ZWq2CA8B6X9W8vxoRMbAcvh1p v6R1lhTG9Seq7354lW2Oj6h9VoLPKQjiT9QIEyD1rZBNcA+iXLjKyNegZEPRAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQU+IaL+RPzHxm3CwmIeMUyPqnlaKAwHwYDVR0j BBgwFoAU1D38QTvIT6GL0bjgeiNGLAQ6yyMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg1MjY3NTI1OTcyNzg5NS8wL0Q0M0RGQzQxM0JDODRGQTE4QkQxQjhFMDdBMjM0 NjJDMDQzQUNCMjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDQzREZDNDEzQkM4NEZBMThCRDFCOEUwN0EyMzQ2MkMwNDNBQ0IyMy5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTE0ODUyNjc1MjU5NzI3ODk1LzAvMzEyZTMxMzEzOTJl MzIzMjM0MmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUBd+Aw DQYJKoZIhvcNAQELBQADggEBAAc0ixrCsAarE3SkRv6pRcvyy4hDmBa59/UB9Vcj GpADvDgq6IelW/HUIE1gGQkX4HVKwO7RozUvLkiIP+jMSIlzdJLfRM63e6iIGvCB hBAL5HZ5e7FEaJ+8acON16/mxOYhNJ06gJvM/HCr3cHy8k58e/Aem2cyT8t55R6t WfJUgZ8V3vsYnD5UQTsigPFw9vZVbMRXq53kRKFVdEDDrtbhDYayHHH5labwKuQG 3HMWcTQGUXECTCK18fXMoa3pkxZcR6LznQbI2lzuMeXb252HL+afQCkNHeVWCfrT WtwEfkIqDdcpS8/9IJwZO0q9zO+sItsFYCsG8lhh3UFKQ8A= -----END CERTIFICATE-----Generated at Fri Jun 12 04:32:37 2026 by rpki-client