$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e31302e302f32342d3234203d3e20313334333636.roa File: 3133392e3139382e31302e302f32342d3234203d3e20313334333636.roa (raw, json) Hash identifier: DIFf0nQUXkMmOM0cLrsyrJF5mwMEPVxpA93+3Q5PNjU= Subject key identifier: 2D:58:7C:25:83:E2:AF:E7:6A:88:D7:69:96:76:EC:0E:59:1A:4A:05 Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Certificate serial: 14AFC024C8AE6C5C619AC94A1487348E3B647A11 Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e31302e302f32342d3234203d3e20313334333636.roa Signing time: Wed 15 Apr 2026 06:58:00 +0000 ROA not before: Wed 15 Apr 2026 06:53:00 +0000 ROA not after: Wed 14 Apr 2027 06:58:00 +0000 asID: 134366 IP address blocks: 139.198.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:af:c0:24:c8:ae:6c:5c:61:9a:c9:4a:14:87:34:8e:3b:64:7a:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Validity Not Before: Apr 15 06:53:00 2026 GMT Not After : Apr 14 06:58:00 2027 GMT Subject: CN=2D587C2583E2AFE76A88D7699676EC0E591A4A05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3d:2c:21:65:67:c2:9f:e8:8b:e2:bc:87:dd: ff:c6:4e:dd:f1:47:a8:9b:a5:96:c3:54:a7:26:ef: 4e:9f:4f:93:3b:9a:f1:4f:59:02:a6:76:09:ed:7f: 4a:39:4e:7a:30:d4:7a:0b:5f:d9:27:05:17:f5:c4: 12:07:af:a1:44:4d:75:61:0d:80:fc:41:12:bd:00: da:48:a1:f7:2a:a7:ed:81:7b:9d:80:e0:38:f6:cb: e2:f2:91:83:df:40:6f:48:3c:b6:43:b8:47:cf:68: 83:dd:bd:bc:62:ba:48:31:b3:84:60:5c:fe:83:5a: 4c:27:4b:34:81:b3:5b:99:f2:74:2f:6c:07:f5:60: 42:6c:66:c7:24:9d:c6:d9:a5:a9:39:d0:d5:c4:1a: 60:d0:98:bd:30:67:bc:8d:4b:46:55:07:76:43:39: c2:ed:15:07:d2:ee:50:a6:76:a4:91:5f:90:ec:1c: 7d:79:51:18:51:2b:35:3b:77:a6:0b:ad:30:e5:ee: e3:3d:39:71:03:7f:1e:72:b7:c6:fa:52:8f:74:35: 8b:78:e5:9f:e4:e6:53:f5:57:db:f7:97:ba:37:23: 14:f5:7f:0d:59:ca:ed:a0:15:ac:7b:ed:64:dd:ca: 16:1a:73:f9:8e:d8:f0:71:d2:4d:82:39:7e:0b:9d: 26:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:58:7C:25:83:E2:AF:E7:6A:88:D7:69:96:76:EC:0E:59:1A:4A:05 X509v3 Authority Key Identifier: keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e31302e302f32342d3234203d3e20313334333636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.198.10.0/24 Signature Algorithm: sha256WithRSAEncryption 73:22:40:ee:a1:12:7a:9c:77:a0:c7:18:7c:9f:bc:14:c7:d5: c9:85:b7:70:b8:fe:21:f0:8b:2d:e3:da:ea:d1:ee:af:c1:d5: 7d:98:04:0c:f6:c1:1e:69:f8:fd:b0:12:c9:c2:9a:6a:8c:a4: fd:76:1a:88:7e:44:4c:02:53:f4:85:a3:b6:c5:8e:c2:b7:7e: 52:c9:bf:5f:5e:51:c9:99:25:0d:82:36:8e:18:77:86:78:87: 18:ac:59:c8:e4:86:6b:ad:9b:bd:aa:0f:48:45:62:70:1e:20: 69:1d:99:f9:cd:a5:ac:7d:94:ec:a4:06:8c:44:e8:ab:17:06: 1d:4f:68:79:75:bf:2a:bb:c7:98:a4:93:d8:84:20:4b:01:59: 0b:a9:7e:8b:54:ec:60:a5:ff:9b:78:44:88:6b:a6:6e:73:cc: 9f:11:0a:74:0b:1d:9d:1d:ad:e2:d2:f5:58:ab:b3:7f:fd:cc: cf:d2:3f:07:8b:5d:99:88:06:65:fb:47:f2:94:be:91:52:cf: db:46:c2:c7:64:a5:59:d1:aa:ed:7b:f0:21:67:8c:64:43:96: 6e:5d:48:af:9e:c1:92:a0:ca:d1:60:13:bf:e9:cb:26:e1:7f: af:89:e0:b3:c8:6b:6c:b8:73:c7:1a:03:93:74:92:e7:5c:c1: 9b:81:f6:b2 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUFK/AJMiubFxhmslKFIc0jjtkehEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz RUJEMTBDQTAeFw0yNjA0MTUwNjUzMDBaFw0yNzA0MTQwNjU4MDBaMDMxMTAvBgNV BAMTKDJENTg3QzI1ODNFMkFGRTc2QTg4RDc2OTk2NzZFQzBFNTkxQTRBMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClPSwhZWfCn+iL4ryH3f/GTt3x R6ibpZbDVKcm706fT5M7mvFPWQKmdgntf0o5Tnow1HoLX9knBRf1xBIHr6FETXVh DYD8QRK9ANpIofcqp+2Be52A4Dj2y+LykYPfQG9IPLZDuEfPaIPdvbxiukgxs4Rg XP6DWkwnSzSBs1uZ8nQvbAf1YEJsZsckncbZpak50NXEGmDQmL0wZ7yNS0ZVB3ZD OcLtFQfS7lCmdqSRX5DsHH15URhRKzU7d6YLrTDl7uM9OXEDfx5yt8b6Uo90NYt4 5Z/k5lP1V9v3l7o3IxT1fw1Zyu2gFax77WTdyhYac/mO2PBx0k2COX4LnSbtAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQULVh8JYPir+dqiNdplnbsDlkaSgUwHwYDVR0j BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMS8zMTMzMzkyZTMx MzkzODJlMzEzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDMzMzYzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIvGCjANBgkqhkiG9w0BAQsFAAOCAQEAcyJA7qESepx3oMcYfJ+8 FMfVyYW3cLj+IfCLLePa6tHur8HVfZgEDPbBHmn4/bASycKaaoyk/XYaiH5ETAJT 9IWjtsWOwrd+Usm/X15RyZklDYI2jhh3hniHGKxZyOSGa62bvaoPSEVicB4gaR2Z +c2lrH2U7KQGjEToqxcGHU9oeXW/KrvHmKST2IQgSwFZC6l+i1TsYKX/m3hEiGum bnPMnxEKdAsdnR2t4tL1WKuzf/3Mz9I/B4tdmYgGZftH8pS+kVLP20bCx2SlWdGq 7XvwIWeMZEOWbl1Ir57BkqDK0WATv+nLJuF/r4ngs8hrbLhzxxoDk3SS51zBm4H2 sg== -----END CERTIFICATE-----Generated at Sat Apr 18 06:06:23 2026 by rpki-client