$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114861900895617051/0/312e3131392e3132342e302f32322d3232203d3e203538383531.roa File: 312e3131392e3132342e302f32322d3232203d3e203538383531.roa (raw, json) Hash identifier: cZFuiOH6cyFkDGUgid52B5+rCCUk1Je7maMmKWVlJrI= Subject key identifier: 06:FB:AE:F8:23:32:81:8F:4A:15:AB:76:08:AD:82:9B:C0:C2:7C:5C Certificate issuer: /CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2 Certificate serial: 650B07B5EB6D194979D64D77775393F81965C7E0 Authority key identifier: 2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/312e3131392e3132342e302f32322d3232203d3e203538383531.roa Signing time: Thu 04 Jun 2026 10:26:11 +0000 ROA not before: Thu 04 Jun 2026 10:21:11 +0000 ROA not after: Thu 03 Jun 2027 10:26:11 +0000 asID: 58851 IP address blocks: 1.119.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 04:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:0b:07:b5:eb:6d:19:49:79:d6:4d:77:77:53:93:f8:19:65:c7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2 Validity Not Before: Jun 4 10:21:11 2026 GMT Not After : Jun 3 10:26:11 2027 GMT Subject: CN=06FBAEF82332818F4A15AB7608AD829BC0C27C5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:63:f5:73:09:37:55:10:ab:6b:55:0b:f2:ea: 7d:64:07:63:cf:db:22:af:de:60:13:56:4a:94:9c: 09:ec:d1:22:11:2e:49:34:52:d4:ce:5b:f2:90:9f: 61:6d:0f:03:bd:a2:9a:84:ee:78:b9:1e:1f:51:c7: 88:49:1d:6f:87:63:14:94:c2:26:76:72:9f:b8:a3: 11:21:a4:3b:a2:fb:99:b1:18:23:69:76:6e:8a:1f: 00:85:b7:6f:61:8b:8c:36:4a:8d:f6:1d:3b:70:01: 42:b7:3f:7f:de:7d:7b:12:61:cd:df:32:8d:1b:b9: 3d:41:af:40:22:a3:83:01:5d:ee:81:14:6f:86:e4: 55:20:b8:1c:2f:96:62:84:d1:59:26:f2:ba:12:55: 33:ae:a4:25:c6:ba:d3:e6:e5:12:dc:96:6b:e1:2b: d7:db:5a:f7:4d:fc:3c:e0:f1:90:c1:08:4b:ff:f9: 24:0e:42:eb:cd:b9:80:36:d8:f9:c8:e9:86:00:85: ca:e9:a0:ce:34:ac:10:a0:d3:b3:83:65:66:09:67: 8d:5b:e5:8f:84:be:05:5b:0e:c4:a5:75:39:18:22: a5:5f:a8:32:17:03:d3:48:cf:89:4b:4b:34:61:23: e1:be:14:12:e3:7e:fa:dc:0b:f2:3e:99:05:b7:e2: 58:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:FB:AE:F8:23:32:81:8F:4A:15:AB:76:08:AD:82:9B:C0:C2:7C:5C X509v3 Authority Key Identifier: keyid:2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/312e3131392e3132342e302f32322d3232203d3e203538383531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.119.124.0/22 Signature Algorithm: sha256WithRSAEncryption 16:f9:f2:02:a4:24:98:7a:f5:83:96:65:7b:c8:9d:60:40:5a: 65:81:55:b5:c5:c8:5d:2a:fa:11:e8:49:e0:ad:3e:54:e3:fe: b9:52:1e:1d:63:da:26:10:3c:08:89:d2:d7:f1:58:c5:78:42: fb:af:77:af:e2:f1:42:0c:16:cb:02:e8:e2:6f:70:c4:12:4a: e0:24:17:2e:9a:44:23:ce:f8:33:63:e3:1c:fb:6f:22:c0:bd: 45:85:de:3a:ce:8e:4d:7b:4a:18:47:d8:9e:20:fa:06:8f:a5: 11:84:e7:0b:c2:f4:6c:96:00:09:fd:ed:c9:db:15:1e:ff:ff: d3:0c:6b:d5:b8:d7:2a:94:af:a6:95:eb:5a:f2:fb:e6:c8:9c: 47:b8:d4:de:a5:ae:6d:b0:e0:c7:96:5a:41:60:71:cd:ac:14: d4:36:a8:31:ef:f1:12:e3:b6:1e:90:f8:1f:f0:42:87:fa:8c: 86:ff:5b:91:13:06:13:4e:87:ce:c2:be:25:7f:58:d7:d5:44: d4:83:0d:9c:34:0a:9f:f0:df:91:ad:18:4c:fd:92:5f:e5:71: 0c:aa:3f:b8:19:dd:bf:ca:59:23:bf:e4:b0:5a:9a:9c:3c:9d: 46:01:6c:2c:08:c4:dd:fb:af:2e:89:30:48:f3:48:91:60:95: cd:f8:aa:c3 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUZQsHtettGUl51k13d1OT+Bllx+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5 MDRDNUVDMjAeFw0yNjA2MDQxMDIxMTFaFw0yNzA2MDMxMDI2MTFaMDMxMTAvBgNV BAMTKDA2RkJBRUY4MjMzMjgxOEY0QTE1QUI3NjA4QUQ4MjlCQzBDMjdDNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEY/VzCTdVEKtrVQvy6n1kB2PP 2yKv3mATVkqUnAns0SIRLkk0UtTOW/KQn2FtDwO9opqE7ni5Hh9Rx4hJHW+HYxSU wiZ2cp+4oxEhpDui+5mxGCNpdm6KHwCFt29hi4w2So32HTtwAUK3P3/efXsSYc3f Mo0buT1Br0Aio4MBXe6BFG+G5FUguBwvlmKE0Vkm8roSVTOupCXGutPm5RLclmvh K9fbWvdN/Dzg8ZDBCEv/+SQOQuvNuYA22PnI6YYAhcrpoM40rBCg07ODZWYJZ41b 5Y+EvgVbDsSldTkYIqVfqDIXA9NIz4lLSzRhI+G+FBLjfvrcC/I+mQW34lhBAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUBvuu+CMygY9KFat2CK2Cm8DCfFwwHwYDVR0j BBgwFoAULeeMlF4rUzdLhsCnveWt5pBMXsIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg2MTkwMDg5NTYxNzA1MS8wLzJERTc4Qzk0NUUyQjUzMzc0Qjg2QzBBN0JERTVB REU2OTA0QzVFQzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5MDRDNUVDMi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTE0ODYxOTAwODk1NjE3MDUxLzAvMzEyZTMxMzEzOTJl MzEzMjM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzODM4MzUzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAgF3fDANBgkqhkiG9w0BAQsFAAOCAQEAFvnyAqQkmHr1g5Zle8idYEBaZYFV tcXIXSr6EehJ4K0+VOP+uVIeHWPaJhA8CInS1/FYxXhC+693r+LxQgwWywLo4m9w xBJK4CQXLppEI874M2PjHPtvIsC9RYXeOs6OTXtKGEfYniD6Bo+lEYTnC8L0bJYA Cf3tydsVHv//0wxr1bjXKpSvppXrWvL75sicR7jU3qWubbDgx5ZaQWBxzawU1Dao Me/xEuO2HpD4H/BCh/qMhv9bkRMGE06HzsK+JX9Y19VE1IMNnDQKn/Dfka0YTP2S X+VxDKo/uBndv8pZI7/ksFqanDydRgFsLAjE3fuvLokwSPNIkWCVzfiqww== -----END CERTIFICATE-----Generated at Fri Jun 12 06:42:39 2026 by rpki-client