$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3130382e302f32322d3232203d3e203538343636.roa File: 3133392e3139382e3130382e302f32322d3232203d3e203538343636.roa (raw, json) Hash identifier: /xFvKAP1yxLIh7l7wVLol5RhP9UD7VFindjzBUOOakM= Subject key identifier: 02:08:F9:2B:F7:B0:40:5F:35:FD:F1:49:55:BE:83:DD:B8:72:FF:ED Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Certificate serial: 0614CFC8DE996CF29EAB8F47FAECC19B72678607 Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3130382e302f32322d3232203d3e203538343636.roa Signing time: Wed 15 Apr 2026 07:47:04 +0000 ROA not before: Wed 15 Apr 2026 07:42:04 +0000 ROA not after: Wed 14 Apr 2027 07:47:04 +0000 asID: 58466 IP address blocks: 139.198.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:14:cf:c8:de:99:6c:f2:9e:ab:8f:47:fa:ec:c1:9b:72:67:86:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Validity Not Before: Apr 15 07:42:04 2026 GMT Not After : Apr 14 07:47:04 2027 GMT Subject: CN=0208F92BF7B0405F35FDF14955BE83DDB872FFED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cc:76:62:cb:b9:6d:d9:b7:94:0c:3d:8a:68: a4:60:ce:ec:da:1f:20:2a:d1:4c:15:2f:de:6c:2f: c4:c2:53:56:84:71:06:92:90:7a:de:65:fc:93:c7: cc:02:71:dc:c8:af:60:c3:19:f5:83:7b:0d:a9:49: 3b:f6:05:9c:90:07:d6:a4:8d:1d:a3:10:52:3f:e6: c0:b0:50:3c:27:13:4f:79:0b:4a:52:6e:49:f8:59: ed:2b:51:81:94:b7:1f:0e:9b:71:ed:52:31:f7:d0: 9d:36:78:98:91:81:00:48:22:5d:bd:90:ec:e8:61: d8:6a:a7:72:aa:70:bb:17:bc:b6:2e:5d:39:12:d1: f2:63:7b:ab:d3:17:09:a1:1e:06:60:ee:92:f6:6a: 96:05:6c:8a:96:51:3f:3c:9a:f3:ec:eb:42:84:21: 01:a9:95:0d:ad:35:1c:93:d4:7f:01:58:56:d4:ea: bc:8d:54:9b:37:ea:f1:76:0f:68:bf:a9:d0:42:34: 60:5e:e6:c8:d7:cb:2b:d8:2d:68:0d:4f:64:e8:da: c7:b8:58:65:c1:ff:f0:ab:c5:52:c3:3a:92:a3:74: e3:80:2c:00:3d:81:b7:bf:92:e2:58:b0:72:4b:c9: b1:cc:3a:c1:bb:20:68:e4:ac:69:19:06:5e:d0:da: 82:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:08:F9:2B:F7:B0:40:5F:35:FD:F1:49:55:BE:83:DD:B8:72:FF:ED X509v3 Authority Key Identifier: keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3130382e302f32322d3232203d3e203538343636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.198.108.0/22 Signature Algorithm: sha256WithRSAEncryption b5:6d:11:81:cb:e2:13:9a:d0:24:63:33:1b:9c:27:b1:93:4a: 1c:63:3f:06:22:18:44:95:c9:1c:21:67:f2:9d:cf:b8:ef:e9: 47:de:ae:d7:a4:1a:38:47:07:15:8d:23:50:54:dd:34:86:28: d3:07:a1:3e:ee:d3:2a:00:73:3d:f1:16:f5:05:ad:ca:3f:09: a6:98:54:41:12:2b:01:1c:5c:6e:a4:68:bd:57:c9:03:25:54: bc:30:0e:95:28:93:6b:5d:08:b6:59:aa:3d:97:67:96:fd:c5: 94:df:76:b9:89:7b:be:3f:34:07:08:ff:84:e1:b9:65:61:e0: 53:07:4a:8a:e6:4c:8b:a1:3c:52:f0:68:e9:de:e1:0a:30:c4: 7d:34:6a:5b:8d:ea:29:20:f4:b3:0d:8b:5b:17:35:67:be:88: e9:5c:1b:d1:70:2c:ae:b0:e7:f5:fc:8b:22:23:00:d8:d8:bf: 65:7c:d3:0f:42:3a:16:51:b6:1c:57:92:0f:b6:cd:76:f9:37: 3f:10:6a:19:af:d7:2a:cc:50:aa:f8:f3:14:df:76:08:06:ef: e9:09:b2:21:59:65:91:af:2b:74:f0:94:12:d9:50:91:44:ad: f2:8b:1b:1c:66:5a:ae:19:d7:3a:65:01:c6:54:e9:e2:cb:89: f1:6a:00:04 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUBhTPyN6ZbPKeq49H+uzBm3JnhgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz RUJEMTBDQTAeFw0yNjA0MTUwNzQyMDRaFw0yNzA0MTQwNzQ3MDRaMDMxMTAvBgNV BAMTKDAyMDhGOTJCRjdCMDQwNUYzNUZERjE0OTU1QkU4M0REQjg3MkZGRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBzHZiy7lt2beUDD2KaKRgzuza HyAq0UwVL95sL8TCU1aEcQaSkHreZfyTx8wCcdzIr2DDGfWDew2pSTv2BZyQB9ak jR2jEFI/5sCwUDwnE095C0pSbkn4We0rUYGUtx8Om3HtUjH30J02eJiRgQBIIl29 kOzoYdhqp3KqcLsXvLYuXTkS0fJje6vTFwmhHgZg7pL2apYFbIqWUT88mvPs60KE IQGplQ2tNRyT1H8BWFbU6ryNVJs36vF2D2i/qdBCNGBe5sjXyyvYLWgNT2To2se4 WGXB//CrxVLDOpKjdOOALAA9gbe/kuJYsHJLybHMOsG7IGjkrGkZBl7Q2oIJAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUAgj5K/ewQF81/fFJVb6D3bhy/+0wHwYDVR0j BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMS8zMTMzMzkyZTMx MzkzODJlMzEzMDM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzODM0MzYzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAovGbDANBgkqhkiG9w0BAQsFAAOCAQEAtW0RgcviE5rQJGMzG5wn sZNKHGM/BiIYRJXJHCFn8p3PuO/pR96u16QaOEcHFY0jUFTdNIYo0wehPu7TKgBz PfEW9QWtyj8JpphUQRIrARxcbqRovVfJAyVUvDAOlSiTa10ItlmqPZdnlv3FlN92 uYl7vj80Bwj/hOG5ZWHgUwdKiuZMi6E8UvBo6d7hCjDEfTRqW43qKSD0sw2LWxc1 Z76I6Vwb0XAsrrDn9fyLIiMA2Ni/ZXzTD0I6FlG2HFeSD7bNdvk3PxBqGa/XKsxQ qvjzFN92CAbv6QmyIVllka8rdPCUEtlQkUSt8osbHGZarhnXOmUBxlTp4suJ8WoA BA== -----END CERTIFICATE-----Generated at Sat Apr 18 01:00:22 2026 by rpki-client