$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117258337625309211/0/3231312e3130312e3139392e302f32342d3234203d3e2039383038.roa File: 3231312e3130312e3139392e302f32342d3234203d3e2039383038.roa (raw, json) Hash identifier: cQY1URll/8UZ/c14EdCWrPX/Wg9vQnf1toLmahOEpL0= Subject key identifier: 25:41:18:19:D1:3A:44:DD:31:7F:A3:3A:A3:75:35:14:60:AD:D1:BA Certificate issuer: /CN=EA2406E0911F05011EB27CB1D3EDB0235FAB448E Certificate serial: 43EE642AD8A171BD11B9AB18BC2C32909F63E037 Authority key identifier: EA:24:06:E0:91:1F:05:01:1E:B2:7C:B1:D3:ED:B0:23:5F:AB:44:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/3231312e3130312e3139392e302f32342d3234203d3e2039383038.roa Signing time: Thu 11 Jun 2026 01:44:02 +0000 ROA not before: Thu 11 Jun 2026 01:39:02 +0000 ROA not after: Thu 10 Jun 2027 01:44:02 +0000 asID: 9808 IP address blocks: 211.101.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 23:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ee:64:2a:d8:a1:71:bd:11:b9:ab:18:bc:2c:32:90:9f:63:e0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA2406E0911F05011EB27CB1D3EDB0235FAB448E Validity Not Before: Jun 11 01:39:02 2026 GMT Not After : Jun 10 01:44:02 2027 GMT Subject: CN=25411819D13A44DD317FA33AA375351460ADD1BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7f:2f:a6:1a:59:ef:66:0c:0a:12:67:30:ac: 40:50:cc:2a:c2:3e:45:19:6b:9e:f9:f2:b8:80:d7: 84:1c:03:00:db:85:9b:91:4d:b2:99:2c:ce:c7:32: 44:4c:74:52:a9:da:45:88:ee:74:32:36:88:62:5a: 7c:f2:4d:1a:d4:50:3e:43:5a:8d:99:28:dc:a8:fa: e3:d2:98:2f:f6:ef:45:d0:20:9a:d0:6e:65:be:98: 2f:c9:ad:41:5e:47:55:9b:84:8a:1a:2a:ea:27:32: 6c:2d:2a:af:06:d9:b3:fb:dc:1a:af:f1:15:41:e7: c1:2a:02:a4:25:db:2b:de:ed:de:a4:fd:8d:bc:47: 70:1b:91:d0:3b:7c:d3:c8:1e:0f:77:a7:d5:1a:48: b6:88:63:23:93:9f:08:e4:87:a1:13:eb:d5:fc:31: 81:66:cc:9f:87:a9:e8:fa:c1:00:61:87:17:ec:25: f0:95:77:0a:57:cd:d5:87:dd:53:f2:ed:36:dd:c6: 66:5f:ed:0b:f1:08:36:5c:22:af:a8:75:aa:3f:be: 22:8c:92:ba:70:da:34:36:24:65:27:a2:d5:eb:34: 1c:61:7e:86:7f:1a:bd:d9:4f:1f:b1:01:0c:3a:0c: 8a:02:1b:3c:60:98:2f:f1:60:9c:0e:7a:1e:f1:a0: bf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:41:18:19:D1:3A:44:DD:31:7F:A3:3A:A3:75:35:14:60:AD:D1:BA X509v3 Authority Key Identifier: keyid:EA:24:06:E0:91:1F:05:01:1E:B2:7C:B1:D3:ED:B0:23:5F:AB:44:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/3231312e3130312e3139392e302f32342d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.101.199.0/24 Signature Algorithm: sha256WithRSAEncryption 57:1a:44:4a:ed:26:24:c6:38:64:64:fb:7d:a4:c4:63:b0:c2: a4:eb:37:38:7d:88:ab:78:8d:cf:90:55:a7:dc:09:db:2c:de: a7:6e:7d:2a:f8:bf:6e:d0:6e:3d:67:49:55:cd:79:58:1e:32: a6:8f:df:9b:f2:3d:9a:f7:75:1b:ff:05:ac:34:9a:af:c9:7c: 56:04:0f:88:89:f2:b9:24:84:2a:7e:11:b0:64:65:0e:0a:e5: 27:04:10:8f:94:12:64:64:fa:29:d1:88:c2:ec:2e:3b:a5:b0: 0b:9a:06:dc:c0:8c:3e:41:45:69:63:2f:5a:c5:ea:bc:e9:02: 8f:67:c5:21:95:14:c8:8a:60:91:eb:6c:44:1e:32:84:d5:1d: ef:7e:74:3a:7a:e4:26:a0:75:3c:8c:ba:94:36:c1:e1:4a:b4: 2a:30:51:5a:7f:65:47:18:bd:dd:8c:7e:10:06:bf:00:5a:7f: 92:6d:d5:67:dd:99:bb:53:80:24:02:28:90:f4:16:3a:e2:6a: 39:33:6d:90:ae:eb:6f:3e:c8:4f:ae:c2:e3:97:f8:dc:3b:d0: 2c:23:77:53:26:de:fd:68:6f:64:a6:05:59:6e:29:1a:83:ad: e1:f2:b3:4b:37:af:fb:c5:0b:2d:5a:e3:17:91:af:2f:62:f3: 86:03:2d:24 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUQ+5kKtihcb0RuasYvCwykJ9j4DcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUEyNDA2RTA5MTFGMDUwMTFFQjI3Q0IxRDNFREIwMjM1 RkFCNDQ4RTAeFw0yNjA2MTEwMTM5MDJaFw0yNzA2MTAwMTQ0MDJaMDMxMTAvBgNV BAMTKDI1NDExODE5RDEzQTQ0REQzMTdGQTMzQUEzNzUzNTE0NjBBREQxQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCafy+mGlnvZgwKEmcwrEBQzCrC PkUZa5758riA14QcAwDbhZuRTbKZLM7HMkRMdFKp2kWI7nQyNohiWnzyTRrUUD5D Wo2ZKNyo+uPSmC/270XQIJrQbmW+mC/JrUFeR1WbhIoaKuonMmwtKq8G2bP73Bqv 8RVB58EqAqQl2yve7d6k/Y28R3AbkdA7fNPIHg93p9UaSLaIYyOTnwjkh6ET69X8 MYFmzJ+Hqej6wQBhhxfsJfCVdwpXzdWH3VPy7TbdxmZf7QvxCDZcIq+odao/viKM krpw2jQ2JGUnotXrNBxhfoZ/Gr3ZTx+xAQw6DIoCGzxgmC/xYJwOeh7xoL/pAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUJUEYGdE6RN0xf6M6o3U1FGCt0bowHwYDVR0j BBgwFoAU6iQG4JEfBQEesnyx0+2wI1+rRI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzI1ODMzNzYyNTMwOTIxMS8wL0VBMjQwNkUwOTExRjA1MDExRUIyN0NCMUQzRURC MDIzNUZBQjQ0OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUEyNDA2RTA5MTFGMDUwMTFFQjI3Q0IxRDNFREIwMjM1RkFCNDQ4RS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTExNzI1ODMzNzYyNTMwOTIxMS8wLzMyMzEzMTJlMzEz MDMxMmUzMTM5MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEANNlxzANBgkqhkiG9w0BAQsFAAOCAQEAVxpESu0mJMY4ZGT7faTEY7DC pOs3OH2Iq3iNz5BVp9wJ2yzep259Kvi/btBuPWdJVc15WB4ypo/fm/I9mvd1G/8F rDSar8l8VgQPiInyuSSEKn4RsGRlDgrlJwQQj5QSZGT6KdGIwuwuO6WwC5oG3MCM PkFFaWMvWsXqvOkCj2fFIZUUyIpgketsRB4yhNUd7350OnrkJqB1PIy6lDbB4Uq0 KjBRWn9lRxi93Yx+EAa/AFp/km3VZ92Zu1OAJAIokPQWOuJqOTNtkK7rbz7IT67C 45f43DvQLCN3Uybe/WhvZKYFWW4pGoOt4fKzSzev+8ULLVrjF5GvL2LzhgMtJA== -----END CERTIFICATE-----Generated at Fri Jun 12 08:44:43 2026 by rpki-client