$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/1/3135382e3134302e3235322e302f32322d3234203d3e20313331323734.roa File: 3135382e3134302e3235322e302f32322d3234203d3e20313331323734.roa (raw, json) Hash identifier: DRk1iE9DVcrJ6axiNlUwsP1U7sQtnFQkLMY1NQ1OBGU= Subject key identifier: 3B:FC:B7:91:8B:3F:ED:84:21:3B:1B:85:12:D7:25:AC:E3:1B:4F:3C Certificate issuer: /CN=855381EC93CF009732540F616E4905D544D838C8 Certificate serial: 57064531763104C6E41BC2417F7CEF37A213CF6E Authority key identifier: 85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/3135382e3134302e3235322e302f32322d3234203d3e20313331323734.roa Signing time: Fri 17 Apr 2026 02:01:39 +0000 ROA not before: Fri 17 Apr 2026 01:56:39 +0000 ROA not after: Fri 16 Apr 2027 02:01:39 +0000 asID: 131274 IP address blocks: 158.140.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 04:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:06:45:31:76:31:04:c6:e4:1b:c2:41:7f:7c:ef:37:a2:13:cf:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855381EC93CF009732540F616E4905D544D838C8 Validity Not Before: Apr 17 01:56:39 2026 GMT Not After : Apr 16 02:01:39 2027 GMT Subject: CN=3BFCB7918B3FED84213B1B8512D725ACE31B4F3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f1:7c:2f:3e:0c:12:b3:3a:77:51:87:0e:01: ec:b1:da:0f:0d:a1:80:03:ef:00:11:ab:8b:cd:5a: 15:36:ab:cc:41:f2:c4:1d:54:3d:91:ea:a5:29:09: ea:bc:5f:3d:db:ec:0b:e5:2b:a2:e1:dd:fe:47:cd: 2a:1a:08:2d:33:b1:2f:a9:dc:1c:f3:a5:f1:82:c8: 65:b2:4d:7a:47:06:07:06:dd:33:e8:eb:29:cf:73: 86:b2:d2:0c:7e:8e:2b:52:95:b4:ba:c7:9d:e0:ff: 21:a0:4f:5b:b7:e3:40:c3:a5:ef:69:70:a2:c3:3b: 64:b4:57:e5:c3:11:d8:20:bb:5a:9e:7b:c9:cc:a2: c3:b4:66:b0:eb:ed:ef:de:e2:9e:7d:48:5f:2f:1e: 0c:95:d0:f1:b5:c6:f7:e0:de:ec:18:24:a7:c6:63: c3:0e:0e:2b:72:4f:b0:05:f6:50:1a:50:39:d7:8e: 55:ef:a5:4d:29:e0:8b:fd:60:32:a1:25:ef:47:c0: f3:5e:5f:32:8c:55:2a:74:9d:bc:cb:93:1d:bb:98: 42:e2:f1:f0:dd:88:1c:bd:ed:1e:74:e6:69:54:ec: 4c:5c:38:cb:cc:bf:05:28:0d:55:3e:87:30:ce:fe: 3f:d9:99:8b:cf:2d:02:86:22:6b:2c:f8:98:e7:66: b6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:FC:B7:91:8B:3F:ED:84:21:3B:1B:85:12:D7:25:AC:E3:1B:4F:3C X509v3 Authority Key Identifier: keyid:85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/3135382e3134302e3235322e302f32322d3234203d3e20313331323734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.252.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:8f:c9:3a:62:1b:56:22:2a:47:b5:44:e7:9e:a3:32:8d:77: 30:5b:4f:1e:a5:fe:7b:17:3f:27:22:97:20:0e:30:0d:b8:2d: 18:f7:09:58:7f:9b:f0:a3:92:29:da:81:ad:25:42:90:5f:c5: 4b:a2:c4:13:43:ef:7e:d6:d7:2f:b7:37:12:51:14:16:56:c1: f5:51:e7:65:40:75:de:a6:ef:fb:f1:70:a1:51:40:12:b5:5d: 33:14:88:9c:e3:dd:85:a4:1c:83:48:4e:0f:fb:fd:ac:ae:ca: f3:d1:50:aa:f8:5d:38:8e:9a:e7:c6:29:c8:02:0a:e7:0c:7b: 7a:62:04:c2:a2:b1:4d:09:39:4b:4c:11:14:4f:1c:4d:79:44: 70:27:1c:06:04:ca:66:71:91:25:34:d0:f0:5f:af:9b:f1:41: d9:92:7f:f6:4d:91:ff:b6:79:f6:53:71:cc:b2:ab:24:d0:22: 5d:5d:fc:ad:17:cc:1c:a4:2e:37:3d:5f:ea:45:79:bd:d8:ad: 60:0c:3e:37:29:cd:2f:b8:6e:e5:6b:da:9a:93:2d:d3:75:56: 13:c8:e9:9a:57:77:b5:99:d3:b7:c0:93:47:7f:60:20:9b:3c: c6:27:1d:be:f8:2b:2d:75:5b:57:0d:85:72:de:8c:f4:16:56: 53:65:90:a3 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUVwZFMXYxBMbkG8JBf3zvN6ITz24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0 NEQ4MzhDODAeFw0yNjA0MTcwMTU2MzlaFw0yNzA0MTYwMjAxMzlaMDMxMTAvBgNV BAMTKDNCRkNCNzkxOEIzRkVEODQyMTNCMUI4NTEyRDcyNUFDRTMxQjRGM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb8XwvPgwSszp3UYcOAeyx2g8N oYAD7wARq4vNWhU2q8xB8sQdVD2R6qUpCeq8Xz3b7AvlK6Lh3f5HzSoaCC0zsS+p 3BzzpfGCyGWyTXpHBgcG3TPo6ynPc4ay0gx+jitSlbS6x53g/yGgT1u340DDpe9p cKLDO2S0V+XDEdggu1qee8nMosO0ZrDr7e/e4p59SF8vHgyV0PG1xvfg3uwYJKfG Y8MODityT7AF9lAaUDnXjlXvpU0p4Iv9YDKhJe9HwPNeXzKMVSp0nbzLkx27mELi 8fDdiBy97R505mlU7ExcOMvMvwUoDVU+hzDO/j/ZmYvPLQKGImss+JjnZraPAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUO/y3kYs/7YQhOxuFEtclrOMbTzwwHwYDVR0j BBgwFoAUhVOB7JPPAJcyVA9hbkkF1UTYOMgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8xLzg1NTM4MUVDOTNDRjAwOTczMjU0MEY2MTZFNDkw NUQ1NDREODM4QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0NEQ4MzhDOC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjAyOTQ1LzEvMzEzNTM4MmUz MTM0MzAyZTMyMzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzMTMyMzcz NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAp6M/DANBgkqhkiG9w0BAQsFAAOCAQEAW4/JOmIbViIqR7VE 556jMo13MFtPHqX+exc/JyKXIA4wDbgtGPcJWH+b8KOSKdqBrSVCkF/FS6LEE0Pv ftbXL7c3ElEUFlbB9VHnZUB13qbv+/FwoVFAErVdMxSInOPdhaQcg0hOD/v9rK7K 89FQqvhdOI6a58YpyAIK5wx7emIEwqKxTQk5S0wRFE8cTXlEcCccBgTKZnGRJTTQ 8F+vm/FB2ZJ/9k2R/7Z59lNxzLKrJNAiXV38rRfMHKQuNz1f6kV5vditYAw+NynN L7hu5WvampMt03VWE8jpmld3tZnTt8CTR39gIJs8xicdvvgrLXVbVw2Fct6M9BZW U2WQow== -----END CERTIFICATE-----Generated at Fri Apr 17 19:25:42 2026 by rpki-client