$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3130382e302f32342d3234203d3e203538343636.roa File: 3133392e3139382e3130382e302f32342d3234203d3e203538343636.roa (raw, json) Hash identifier: oLFoniRpGF9wRQ3BpyGasxhAxtsWOyl7y9Olq1J31qE= Subject key identifier: 10:A9:20:F8:DA:E1:D1:58:F1:F7:0E:93:B9:3C:96:E3:FC:26:73:07 Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Certificate serial: 631E7FAB80B1CE74FC1D7845DBBAF25EB59ABFCA Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3130382e302f32342d3234203d3e203538343636.roa Signing time: Wed 15 Apr 2026 07:47:04 +0000 ROA not before: Wed 15 Apr 2026 07:42:04 +0000 ROA not after: Wed 14 Apr 2027 07:47:04 +0000 asID: 58466 IP address blocks: 139.198.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:1e:7f:ab:80:b1:ce:74:fc:1d:78:45:db:ba:f2:5e:b5:9a:bf:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Validity Not Before: Apr 15 07:42:04 2026 GMT Not After : Apr 14 07:47:04 2027 GMT Subject: CN=10A920F8DAE1D158F1F70E93B93C96E3FC267307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a0:7b:2f:da:21:96:b8:bb:19:25:89:9a:0e: 10:24:d9:9c:e2:7f:06:04:93:c7:9a:96:24:68:ae: 11:58:54:d9:fc:b6:b6:85:08:31:26:e8:0c:ad:dc: 8c:d3:74:06:81:fb:dc:ca:62:71:35:8f:46:b5:a0: 11:12:21:a8:11:8e:9b:70:a7:fb:ab:f9:39:94:24: 46:a8:95:2f:2e:3b:bc:b7:ea:1a:d0:e4:9d:60:08: d1:fc:18:d6:4d:99:36:7e:ce:95:a9:69:6e:52:f3: f6:f7:d7:bd:c2:2a:e2:f7:d2:e1:4a:58:18:e6:d0: 48:c3:b2:d3:6c:4f:e0:69:a0:de:eb:00:fc:31:f4: c8:e0:40:3e:f4:65:0f:c2:3e:15:cb:c7:a3:dc:d9: 1b:fd:f8:f5:e7:5b:27:d3:c9:a9:ab:c0:7e:42:44: 59:34:41:4a:a1:a3:d2:d4:c2:f9:b5:21:23:d7:b0: 10:7e:ad:b7:a3:2f:e8:1f:cf:c6:9e:50:f7:98:c6: bd:42:52:77:2f:dd:f0:f4:c2:ac:b4:ea:f2:b1:93: b6:b5:6b:c0:7a:8c:14:cb:0f:8f:8c:9f:3c:fa:3b: b5:bc:7d:b7:70:a9:48:f5:96:c9:d4:e9:23:e1:ef: 35:67:c4:ee:32:65:84:07:bc:59:90:90:13:92:ba: df:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A9:20:F8:DA:E1:D1:58:F1:F7:0E:93:B9:3C:96:E3:FC:26:73:07 X509v3 Authority Key Identifier: keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3130382e302f32342d3234203d3e203538343636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.198.108.0/24 Signature Algorithm: sha256WithRSAEncryption 79:e3:91:e8:63:ee:89:58:e5:cd:7c:cb:37:2f:a3:24:96:39: be:68:2d:ac:e8:48:a5:3a:84:08:e8:b3:95:53:cc:39:d0:17: 22:09:83:b6:bc:5c:bd:fc:90:12:15:23:b5:88:85:f1:21:6c: f0:89:99:2a:c5:81:15:d4:4a:32:84:26:d3:c4:ba:5d:cc:20: 8d:af:74:ad:a0:f1:d7:c8:c7:e0:b5:cc:20:ac:e9:65:b6:17: 97:dc:db:86:37:8f:2a:44:8e:9c:c3:5f:06:f8:91:98:06:89: 5b:69:83:35:6c:31:4d:6d:2b:76:12:18:25:c4:7c:b6:cb:74: 81:1d:e9:8c:e2:71:da:7f:74:3f:e2:9d:e9:59:c1:5c:0b:b4: 11:80:b8:bf:dc:11:8e:75:35:45:81:85:43:4e:d2:00:bb:71: 5b:b7:13:6a:d0:04:b2:a6:c8:5e:4a:1f:87:e9:5d:fa:79:16: 87:19:c9:7e:1c:95:76:9c:e7:12:6f:3b:bc:79:ac:0a:16:9e: 11:0c:1d:de:c2:f8:cc:b9:c0:d4:4b:7b:db:bd:b0:f3:6e:c6: c5:1c:c2:cd:1e:5a:e0:ab:7a:f8:d7:84:cc:e7:cd:0d:7c:9b: 84:ef:dc:5b:b6:20:83:9f:6b:ec:f8:f1:ff:41:72:28:85:f2: d1:0a:d0:fe -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUYx5/q4CxznT8HXhF27ryXrWav8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz RUJEMTBDQTAeFw0yNjA0MTUwNzQyMDRaFw0yNzA0MTQwNzQ3MDRaMDMxMTAvBgNV BAMTKDEwQTkyMEY4REFFMUQxNThGMUY3MEU5M0I5M0M5NkUzRkMyNjczMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwoHsv2iGWuLsZJYmaDhAk2Zzi fwYEk8ealiRorhFYVNn8traFCDEm6Ayt3IzTdAaB+9zKYnE1j0a1oBESIagRjptw p/ur+TmUJEaolS8uO7y36hrQ5J1gCNH8GNZNmTZ+zpWpaW5S8/b3173CKuL30uFK WBjm0EjDstNsT+BpoN7rAPwx9MjgQD70ZQ/CPhXLx6Pc2Rv9+PXnWyfTyamrwH5C RFk0QUqho9LUwvm1ISPXsBB+rbejL+gfz8aeUPeYxr1CUncv3fD0wqy06vKxk7a1 a8B6jBTLD4+Mnzz6O7W8fbdwqUj1lsnU6SPh7zVnxO4yZYQHvFmQkBOSut/NAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUEKkg+Nrh0Vjx9w6TuTyW4/wmcwcwHwYDVR0j BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMS8zMTMzMzkyZTMx MzkzODJlMzEzMDM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzODM0MzYzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIvGbDANBgkqhkiG9w0BAQsFAAOCAQEAeeOR6GPuiVjlzXzLNy+j JJY5vmgtrOhIpTqECOizlVPMOdAXIgmDtrxcvfyQEhUjtYiF8SFs8ImZKsWBFdRK MoQm08S6Xcwgja90raDx18jH4LXMIKzpZbYXl9zbhjePKkSOnMNfBviRmAaJW2mD NWwxTW0rdhIYJcR8tst0gR3pjOJx2n90P+Kd6VnBXAu0EYC4v9wRjnU1RYGFQ07S ALtxW7cTatAEsqbIXkofh+ld+nkWhxnJfhyVdpznEm87vHmsChaeEQwd3sL4zLnA 1Et7272w827GxRzCzR5a4Kt6+NeEzOfNDXybhO/cW7Ygg59r7Pjx/0FyKIXy0QrQ /g== -----END CERTIFICATE-----Generated at Fri Apr 17 21:21:53 2026 by rpki-client