$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/1/3135382e3134302e3235322e302f32332d3234203d3e2034383136.roa File: 3135382e3134302e3235322e302f32332d3234203d3e2034383136.roa (raw, json) Hash identifier: gSJCLKyb9LLIjcjQ7RVxdKp1qcZZehGn9jgs05yrhkM= Subject key identifier: BE:B0:0B:90:01:B3:7D:10:50:8A:05:78:53:38:FB:A9:F7:E5:2E:7C Certificate issuer: /CN=855381EC93CF009732540F616E4905D544D838C8 Certificate serial: 7C72AB4037B8B006C1BBBDACF0D4DDAA948E6706 Authority key identifier: 85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/3135382e3134302e3235322e302f32332d3234203d3e2034383136.roa Signing time: Fri 17 Apr 2026 02:01:39 +0000 ROA not before: Fri 17 Apr 2026 01:56:39 +0000 ROA not after: Fri 16 Apr 2027 02:01:39 +0000 asID: 4816 IP address blocks: 158.140.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 04:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:72:ab:40:37:b8:b0:06:c1:bb:bd:ac:f0:d4:dd:aa:94:8e:67:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855381EC93CF009732540F616E4905D544D838C8 Validity Not Before: Apr 17 01:56:39 2026 GMT Not After : Apr 16 02:01:39 2027 GMT Subject: CN=BEB00B9001B37D10508A05785338FBA9F7E52E7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:13:8a:0d:54:5a:de:d1:2f:4a:cc:70:04:48: 93:91:ed:e8:f5:eb:1e:4a:9f:41:3b:66:81:bf:1a: ec:c6:0e:21:88:60:4a:50:95:bc:1e:77:fe:01:de: ee:d9:42:81:c6:b9:a1:a6:b4:be:43:75:aa:ef:c7: 5a:40:cc:8a:ef:88:16:cc:dd:d9:08:ad:34:74:20: c4:ff:eb:58:a5:0d:5a:3b:41:26:36:e0:d9:73:c3: 45:42:12:a4:d4:cd:89:a4:42:29:27:4a:67:a8:60: 14:8c:97:8d:3d:6f:a8:d4:35:4a:30:e4:25:20:45: c7:95:3a:1a:9a:36:e4:5f:a0:d8:50:39:48:be:b9: 60:e3:55:cd:66:e2:dd:42:d2:1d:b1:6b:e5:c7:79: ca:7a:85:1c:be:87:20:43:79:2d:d4:b4:55:61:86: cc:56:c2:5d:b2:1d:58:a6:96:7e:26:11:51:72:d0: 56:81:d9:34:54:87:c3:5c:de:e5:ed:10:33:82:97: 91:1f:8b:20:05:4e:d0:2b:25:71:43:65:74:af:59: 21:c4:95:0f:fb:9a:7a:c6:d8:c6:0c:12:79:de:a2: 1c:3a:62:4e:6b:cb:f4:4d:87:80:6d:a3:43:bc:b1: a5:2f:a3:bb:d5:f9:57:c4:21:78:66:ea:b5:90:36: 20:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B0:0B:90:01:B3:7D:10:50:8A:05:78:53:38:FB:A9:F7:E5:2E:7C X509v3 Authority Key Identifier: keyid:85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/3135382e3134302e3235322e302f32332d3234203d3e2034383136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.252.0/23 Signature Algorithm: sha256WithRSAEncryption 57:86:4f:28:c0:73:1b:f9:a8:ba:01:50:9e:54:54:91:2b:5b: fb:80:19:13:10:53:ac:0f:51:ec:36:ed:fa:48:6a:a0:1f:29: 15:9f:62:ef:0d:9b:a4:73:04:2a:68:3a:e0:88:ee:a0:1f:e0: 5a:50:29:f1:99:db:1f:48:9c:f4:92:fe:bc:e3:2d:55:6a:85: c8:a3:97:c3:99:7e:c9:9c:07:0a:51:0a:8e:a4:c9:b1:d9:d9: cc:ba:00:4a:d4:8a:1f:fb:61:00:60:c2:21:81:cc:8c:7f:24: 07:a1:3e:ea:71:a0:03:53:04:38:a4:60:07:22:14:32:0c:01: 46:22:06:05:fc:5f:f3:21:d8:d4:c2:7d:66:f7:d2:84:9c:1f: 94:ea:c8:2b:df:b8:47:66:f6:24:65:38:f6:52:03:7e:28:99: 7d:a1:8b:39:7e:62:4c:f7:d6:87:e6:6b:42:cd:c8:a9:8a:29: 3e:80:18:88:bb:75:ed:26:64:93:ad:5a:b4:02:d5:f5:80:47: 63:1a:18:98:43:5c:ba:87:90:b1:2c:69:3f:f6:8f:ca:31:17: 80:0e:d4:39:a9:87:94:5a:c8:27:d5:2b:57:b3:81:94:e7:89: 98:bd:97:f7:35:ed:a4:e1:c1:ec:d9:e1:e6:14:76:77:ab:0d: 80:53:0b:b2 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUfHKrQDe4sAbBu72s8NTdqpSOZwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0 NEQ4MzhDODAeFw0yNjA0MTcwMTU2MzlaFw0yNzA0MTYwMjAxMzlaMDMxMTAvBgNV BAMTKEJFQjAwQjkwMDFCMzdEMTA1MDhBMDU3ODUzMzhGQkE5RjdFNTJFN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoE4oNVFre0S9KzHAESJOR7ej1 6x5Kn0E7ZoG/GuzGDiGIYEpQlbwed/4B3u7ZQoHGuaGmtL5Ddarvx1pAzIrviBbM 3dkIrTR0IMT/61ilDVo7QSY24Nlzw0VCEqTUzYmkQiknSmeoYBSMl409b6jUNUow 5CUgRceVOhqaNuRfoNhQOUi+uWDjVc1m4t1C0h2xa+XHecp6hRy+hyBDeS3UtFVh hsxWwl2yHVimln4mEVFy0FaB2TRUh8Nc3uXtEDOCl5EfiyAFTtArJXFDZXSvWSHE lQ/7mnrG2MYMEnneohw6Yk5ry/RNh4Bto0O8saUvo7vV+VfEIXhm6rWQNiAPAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUvrALkAGzfRBQigV4Uzj7qfflLnwwHwYDVR0j BBgwFoAUhVOB7JPPAJcyVA9hbkkF1UTYOMgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8xLzg1NTM4MUVDOTNDRjAwOTczMjU0MEY2MTZFNDkw NUQ1NDREODM4QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0NEQ4MzhDOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzYwMjk0NS8xLzMxMzUzODJlMzEz NDMwMmUzMjM1MzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM4MzEzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAZ6M/DANBgkqhkiG9w0BAQsFAAOCAQEAV4ZPKMBzG/mougFQnlRUkStb +4AZExBTrA9R7Dbt+khqoB8pFZ9i7w2bpHMEKmg64IjuoB/gWlAp8ZnbH0ic9JL+ vOMtVWqFyKOXw5l+yZwHClEKjqTJsdnZzLoAStSKH/thAGDCIYHMjH8kB6E+6nGg A1MEOKRgByIUMgwBRiIGBfxf8yHY1MJ9ZvfShJwflOrIK9+4R2b2JGU49lIDfiiZ faGLOX5iTPfWh+ZrQs3IqYopPoAYiLt17SZkk61atALV9YBHYxoYmENcuoeQsSxp P/aPyjEXgA7UOamHlFrIJ9UrV7OBlOeJmL2X9zXtpOHB7Nnh5hR2d6sNgFMLsg== -----END CERTIFICATE-----Generated at Fri Apr 17 18:07:07 2026 by rpki-client