$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114861900895617051/0/312e3131392e302e302f31372d3137203d3e203538383531.roa File: 312e3131392e302e302f31372d3137203d3e203538383531.roa (raw, json) Hash identifier: JS3bNo89jFxRPcoUjJ2KW3+dlS5F8ZfPoJOwJABerhE= Subject key identifier: DB:8B:A7:9E:D5:61:A1:F9:23:6D:A6:D0:95:16:84:EB:B9:96:6C:9A Certificate issuer: /CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2 Certificate serial: 5167A2C159C5722CCA8F624EE1006A6EACE61DEF Authority key identifier: 2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/312e3131392e302e302f31372d3137203d3e203538383531.roa Signing time: Thu 04 Jun 2026 10:26:25 +0000 ROA not before: Thu 04 Jun 2026 10:21:25 +0000 ROA not after: Thu 03 Jun 2027 10:26:25 +0000 asID: 58851 IP address blocks: 1.119.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 04:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:67:a2:c1:59:c5:72:2c:ca:8f:62:4e:e1:00:6a:6e:ac:e6:1d:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2 Validity Not Before: Jun 4 10:21:25 2026 GMT Not After : Jun 3 10:26:25 2027 GMT Subject: CN=DB8BA79ED561A1F9236DA6D0951684EBB9966C9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:73:79:ad:c5:27:bb:2b:66:7e:62:91:1a:f7: cc:9a:8c:c2:7e:03:65:ba:51:2c:95:bf:b9:d8:6b: 2d:9c:f3:dc:02:3f:95:b8:a2:88:59:e1:3b:18:de: 69:05:96:34:d0:27:d9:68:9d:c3:76:5a:b9:8e:a0: 7e:33:e8:35:4b:c3:0d:33:d0:35:10:bd:9b:8e:81: 00:13:09:f6:ba:a1:2f:a5:6b:f3:0f:06:32:36:38: 8e:dc:fe:f0:e0:da:98:db:31:78:62:c0:16:ae:72: 8f:83:fd:84:4a:e3:90:b1:c6:33:00:46:35:59:91: 23:d9:ce:53:0f:2f:50:a0:d0:cb:60:1a:09:47:34: 71:b4:3c:a3:5e:18:fa:1d:ab:0a:83:1d:08:a2:37: 83:28:f5:6d:24:8b:34:8d:86:bc:c2:c1:6a:a1:9d: 7b:fc:7d:da:1c:d1:3c:5a:71:e7:6b:e8:61:50:7d: d0:ef:79:a5:76:7e:98:af:5b:ed:ea:91:2e:9a:b8: 59:e8:1a:c9:ab:0f:31:b0:12:a7:fc:f0:1f:ef:4e: 94:7d:c3:59:ed:b0:a1:dd:65:2b:cb:c5:ca:60:29: 63:c6:4e:1d:44:f6:82:ac:bc:9e:a6:c6:dd:c2:33: 64:7b:09:a2:5d:81:5b:92:d0:e4:7c:c7:a5:f8:a9: c5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8B:A7:9E:D5:61:A1:F9:23:6D:A6:D0:95:16:84:EB:B9:96:6C:9A X509v3 Authority Key Identifier: keyid:2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/312e3131392e302e302f31372d3137203d3e203538383531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.119.0.0/17 Signature Algorithm: sha256WithRSAEncryption 06:4d:fd:2b:90:1f:46:4a:ee:cc:d4:8e:c2:f9:e4:92:2f:e1: a9:73:55:35:8f:49:c1:52:0b:b8:c5:90:fa:aa:41:47:88:87: dd:d8:b2:29:8e:71:36:97:77:5d:eb:c5:0f:13:67:1d:c7:dc: 1b:cc:1c:94:85:49:76:aa:7c:14:4f:cf:d9:f3:31:1a:af:62: 48:20:a6:54:c9:8d:db:ea:68:b5:5b:30:0c:48:ed:4d:ae:a3: 3f:b1:b3:a4:bd:16:d3:02:56:b2:11:18:77:67:b0:d9:a0:f2: 4e:e4:66:e0:82:ff:32:c9:18:ba:76:16:b5:3f:19:ef:60:65: 90:54:ff:fe:4f:a7:96:1e:71:39:9f:b1:79:22:4b:2a:f4:e6: c7:2e:ed:ad:70:f0:d5:1e:61:42:97:14:6c:8e:c0:02:bd:03: 2b:51:ef:4f:cc:bf:ca:3b:17:f3:98:60:a1:90:4e:b7:a1:5e: 8e:84:e5:47:48:f2:fe:9f:94:2b:6f:18:b3:0e:c9:01:20:2e: 96:a7:05:f4:b3:c9:4b:43:98:f4:a6:87:dc:e5:72:b5:0d:7a: 6a:39:17:6d:e8:2f:f4:07:f6:44:2a:c2:f3:b1:40:7f:ff:6a: 50:e6:7d:8c:95:e8:4a:25:9c:90:6c:03:08:c6:98:83:77:e2: 07:66:5b:df -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUUWeiwVnFcizKj2JO4QBqbqzmHe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5 MDRDNUVDMjAeFw0yNjA2MDQxMDIxMjVaFw0yNzA2MDMxMDI2MjVaMDMxMTAvBgNV BAMTKERCOEJBNzlFRDU2MUExRjkyMzZEQTZEMDk1MTY4NEVCQjk5NjZDOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSc3mtxSe7K2Z+YpEa98yajMJ+ A2W6USyVv7nYay2c89wCP5W4oohZ4TsY3mkFljTQJ9loncN2WrmOoH4z6DVLww0z 0DUQvZuOgQATCfa6oS+la/MPBjI2OI7c/vDg2pjbMXhiwBauco+D/YRK45CxxjMA RjVZkSPZzlMPL1Cg0MtgGglHNHG0PKNeGPodqwqDHQiiN4Mo9W0kizSNhrzCwWqh nXv8fdoc0Txacedr6GFQfdDveaV2fpivW+3qkS6auFnoGsmrDzGwEqf88B/vTpR9 w1ntsKHdZSvLxcpgKWPGTh1E9oKsvJ6mxt3CM2R7CaJdgVuS0OR8x6X4qcVFAgMB AAGjggINMIICCTAdBgNVHQ4EFgQU24unntVhofkjbabQlRaE67mWbJowHwYDVR0j BBgwFoAULeeMlF4rUzdLhsCnveWt5pBMXsIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg2MTkwMDg5NTYxNzA1MS8wLzJERTc4Qzk0NUUyQjUzMzc0Qjg2QzBBN0JERTVB REU2OTA0QzVFQzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5MDRDNUVDMi5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTE0ODYxOTAwODk1NjE3MDUxLzAvMzEyZTMxMzEzOTJl MzAyZTMwMmYzMTM3MmQzMTM3MjAzZDNlMjAzNTM4MzgzNTMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH AXcAMA0GCSqGSIb3DQEBCwUAA4IBAQAGTf0rkB9GSu7M1I7C+eSSL+Gpc1U1j0nB Ugu4xZD6qkFHiIfd2LIpjnE2l3dd68UPE2cdx9wbzByUhUl2qnwUT8/Z8zEar2JI IKZUyY3b6mi1WzAMSO1NrqM/sbOkvRbTAlayERh3Z7DZoPJO5Gbggv8yyRi6dha1 PxnvYGWQVP/+T6eWHnE5n7F5Iksq9ObHLu2tcPDVHmFClxRsjsACvQMrUe9PzL/K OxfzmGChkE63oV6OhOVHSPL+n5QrbxizDskBIC6WpwX0s8lLQ5j0pofc5XK1DXpq ORdt6C/0B/ZEKsLzsUB//2pQ5n2MlehKJZyQbAMIxpiDd+IHZlvf -----END CERTIFICATE-----Generated at Fri Jun 12 06:44:23 2026 by rpki-client