$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117258337625309211/0/3231312e3130312e3139322e302f32312d3231203d3e2034383337.roa File: 3231312e3130312e3139322e302f32312d3231203d3e2034383337.roa (raw, json) Hash identifier: lIgnJypHCUc9AnMOj72UTe6iBajW3ZDvSTG8zwvjqmY= Subject key identifier: 1F:55:0C:4B:51:53:08:C0:3F:9F:BA:31:B8:74:49:15:9A:63:EE:50 Certificate issuer: /CN=EA2406E0911F05011EB27CB1D3EDB0235FAB448E Certificate serial: 4E57D10F04CB9AFC211FBBB832E6674D02AB134C Authority key identifier: EA:24:06:E0:91:1F:05:01:1E:B2:7C:B1:D3:ED:B0:23:5F:AB:44:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/3231312e3130312e3139322e302f32312d3231203d3e2034383337.roa Signing time: Thu 11 Jun 2026 01:44:02 +0000 ROA not before: Thu 11 Jun 2026 01:39:02 +0000 ROA not after: Thu 10 Jun 2027 01:44:02 +0000 asID: 4837 IP address blocks: 211.101.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 23:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:57:d1:0f:04:cb:9a:fc:21:1f:bb:b8:32:e6:67:4d:02:ab:13:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA2406E0911F05011EB27CB1D3EDB0235FAB448E Validity Not Before: Jun 11 01:39:02 2026 GMT Not After : Jun 10 01:44:02 2027 GMT Subject: CN=1F550C4B515308C03F9FBA31B87449159A63EE50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a0:f0:83:8b:d4:87:9d:93:53:71:fa:c2:0e: 4f:8e:2e:c6:2f:da:d9:10:e2:74:b2:04:2c:8d:3a: 87:9a:cb:81:e8:6e:43:e4:41:2d:6f:75:d4:09:3f: e9:a5:91:0c:8c:e6:7e:e7:82:23:6b:b8:e4:91:39: 9a:d6:d2:f8:6c:62:f5:18:e6:64:3a:78:40:7c:c8: 76:07:f6:96:18:0e:67:80:07:82:98:20:ba:f5:2c: 4d:b4:29:8d:06:32:b0:ce:40:ef:54:f5:88:f0:3c: 02:2e:b3:53:69:20:96:ef:6a:1f:e3:9e:5f:b3:06: f4:b0:49:df:ed:46:7b:52:bf:f7:ee:18:ea:d7:6d: e7:59:d4:8b:af:81:1f:c5:ec:58:c1:c3:23:af:c3: ab:e4:a9:f0:8c:89:c2:a9:99:18:55:74:ab:17:5a: 2a:19:fd:9f:e3:73:0d:f4:b0:af:46:8b:d1:47:82: 9b:21:a5:ef:eb:9f:b3:8b:9b:52:2d:77:4f:47:a8: 8a:23:88:4e:57:31:7f:a7:f4:bd:36:da:60:aa:58: 19:db:6f:a3:4b:e0:5a:60:77:1e:1c:f3:d8:16:42: dc:32:09:16:9c:dc:b5:dc:a0:da:ac:96:4a:52:49: 1a:1f:e1:74:37:03:bd:14:44:4b:b4:f0:0f:58:a1: ac:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:55:0C:4B:51:53:08:C0:3F:9F:BA:31:B8:74:49:15:9A:63:EE:50 X509v3 Authority Key Identifier: keyid:EA:24:06:E0:91:1F:05:01:1E:B2:7C:B1:D3:ED:B0:23:5F:AB:44:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/3231312e3130312e3139322e302f32312d3231203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.101.192.0/21 Signature Algorithm: sha256WithRSAEncryption 33:a4:ca:8b:58:ec:85:de:30:cd:07:26:9d:1d:17:62:02:f0: 89:04:03:d0:79:6f:23:ac:9f:90:d4:27:76:a8:e7:b2:34:c1: da:d9:26:f5:4e:b7:85:fc:3d:bd:88:b0:46:8c:1e:d9:02:34: 42:5d:48:c6:44:c6:5a:89:24:4f:79:ab:b3:d2:59:d2:73:5f: b9:e3:74:73:2f:4c:6e:97:0d:ee:1f:ec:69:cf:71:19:77:18: 04:58:b3:2c:93:8b:49:a5:a6:be:7f:7e:21:0f:0b:28:48:bf: 64:a8:fe:4d:0f:9b:15:a5:9a:b6:94:bb:cf:70:52:13:d2:bf: be:05:e4:77:22:a0:63:dd:b2:56:83:54:06:d2:2f:dc:8f:44: c6:10:bf:42:fd:bd:b1:42:80:47:49:be:0d:f4:ad:2d:d1:2c: 04:88:79:8f:3a:f3:7e:7a:7a:e6:4b:bb:64:48:f0:51:69:69: d3:9e:0e:99:bf:15:45:93:95:d8:4f:38:07:ff:67:3e:55:e9: 35:d2:9c:04:76:25:bc:0e:07:c1:f3:2e:52:3c:ae:a8:9b:52: 69:c8:c7:0b:13:57:41:bd:a2:46:42:7b:50:02:e4:0e:b6:b4: 12:91:07:4b:99:b0:86:fb:d2:65:2d:02:66:03:a0:bc:fa:2d: 95:fe:38:f6 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUTlfRDwTLmvwhH7u4MuZnTQKrE0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUEyNDA2RTA5MTFGMDUwMTFFQjI3Q0IxRDNFREIwMjM1 RkFCNDQ4RTAeFw0yNjA2MTEwMTM5MDJaFw0yNzA2MTAwMTQ0MDJaMDMxMTAvBgNV BAMTKDFGNTUwQzRCNTE1MzA4QzAzRjlGQkEzMUI4NzQ0OTE1OUE2M0VFNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCroPCDi9SHnZNTcfrCDk+OLsYv 2tkQ4nSyBCyNOoeay4HobkPkQS1vddQJP+mlkQyM5n7ngiNruOSROZrW0vhsYvUY 5mQ6eEB8yHYH9pYYDmeAB4KYILr1LE20KY0GMrDOQO9U9YjwPAIus1NpIJbvah/j nl+zBvSwSd/tRntSv/fuGOrXbedZ1IuvgR/F7FjBwyOvw6vkqfCMicKpmRhVdKsX WioZ/Z/jcw30sK9Gi9FHgpshpe/rn7OLm1Itd09HqIojiE5XMX+n9L022mCqWBnb b6NL4Fpgdx4c89gWQtwyCRac3LXcoNqslkpSSRof4XQ3A70UREu08A9YoawhAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUH1UMS1FTCMA/n7oxuHRJFZpj7lAwHwYDVR0j BBgwFoAU6iQG4JEfBQEesnyx0+2wI1+rRI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzI1ODMzNzYyNTMwOTIxMS8wL0VBMjQwNkUwOTExRjA1MDExRUIyN0NCMUQzRURC MDIzNUZBQjQ0OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUEyNDA2RTA5MTFGMDUwMTFFQjI3Q0IxRDNFREIwMjM1RkFCNDQ4RS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTExNzI1ODMzNzYyNTMwOTIxMS8wLzMyMzEzMTJlMzEz MDMxMmUzMTM5MzIyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDM4MzMzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA9NlwDANBgkqhkiG9w0BAQsFAAOCAQEAM6TKi1jshd4wzQcmnR0XYgLw iQQD0HlvI6yfkNQndqjnsjTB2tkm9U63hfw9vYiwRowe2QI0Ql1IxkTGWokkT3mr s9JZ0nNfueN0cy9MbpcN7h/sac9xGXcYBFizLJOLSaWmvn9+IQ8LKEi/ZKj+TQ+b FaWatpS7z3BSE9K/vgXkdyKgY92yVoNUBtIv3I9ExhC/Qv29sUKAR0m+DfStLdEs BIh5jzrzfnp65ku7ZEjwUWlp054Omb8VRZOV2E84B/9nPlXpNdKcBHYlvA4HwfMu UjyuqJtSacjHCxNXQb2iRkJ7UALkDra0EpEHS5mwhvvSZS0CZgOgvPotlf449g== -----END CERTIFICATE-----Generated at Fri Jun 12 06:44:51 2026 by rpki-client