$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3130392e302f32342d3234203d3e203539303738.roa File: 3133392e3139382e3130392e302f32342d3234203d3e203539303738.roa (raw, json) Hash identifier: BDgxYnnC4TUYIv2C8qRA0aDAZPIiMs2uJEbFda1RsNI= Subject key identifier: 0A:31:43:51:78:A4:87:27:EB:9B:1A:12:CE:93:6C:66:F1:AB:96:68 Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Certificate serial: 68BD5BFC8F84E1739D4A55AAE34AD6B34FAF8F06 Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3130392e302f32342d3234203d3e203539303738.roa Signing time: Wed 15 Apr 2026 07:27:30 +0000 ROA not before: Wed 15 Apr 2026 07:22:30 +0000 ROA not after: Wed 14 Apr 2027 07:27:30 +0000 asID: 59078 IP address blocks: 139.198.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:bd:5b:fc:8f:84:e1:73:9d:4a:55:aa:e3:4a:d6:b3:4f:af:8f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Validity Not Before: Apr 15 07:22:30 2026 GMT Not After : Apr 14 07:27:30 2027 GMT Subject: CN=0A31435178A48727EB9B1A12CE936C66F1AB9668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e8:c8:58:e5:5d:c8:7d:bd:7e:35:a2:bc:c3: 31:06:80:18:58:5a:65:bd:63:51:e9:0c:aa:bc:a3: 1d:e4:9d:14:19:fa:37:8b:99:d5:7b:f9:06:f3:8c: e7:86:8c:7c:09:e9:34:ab:2c:08:42:82:20:e9:21: 6f:12:88:ca:2e:7c:b2:4c:1c:e1:19:e0:43:7f:e3: 61:3c:b5:65:4d:72:8e:a0:f7:c1:02:c1:83:df:61: 3c:f8:74:77:f3:71:81:72:b4:ec:f4:22:e7:b8:17: d9:5a:4c:4c:ea:95:e9:81:11:65:3e:5b:75:ce:4c: 3e:6d:21:7b:fc:47:2d:15:5e:96:0c:ef:55:2b:f3: e5:04:28:3e:23:dc:b7:25:69:ba:4f:14:af:d8:ca: 72:4c:27:87:25:fd:ea:3a:a4:2a:dc:ff:6a:05:4b: d1:e9:b8:99:56:1e:a4:f5:ed:8f:bd:fa:6f:4a:67: 93:b5:f9:1b:68:5c:d3:ef:fc:9b:df:93:66:44:db: 14:7e:dc:af:de:51:23:d1:f7:bc:2c:08:46:e8:8e: 0d:87:e4:bb:99:42:ba:a6:72:2b:cc:a6:91:a7:0c: b1:a6:d6:b2:b1:30:29:ad:35:72:4c:1e:8e:2b:cf: b4:e2:d7:7d:98:0e:98:39:6d:90:c8:24:48:1e:b0: 07:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:31:43:51:78:A4:87:27:EB:9B:1A:12:CE:93:6C:66:F1:AB:96:68 X509v3 Authority Key Identifier: keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3130392e302f32342d3234203d3e203539303738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.198.109.0/24 Signature Algorithm: sha256WithRSAEncryption 93:bc:40:39:5d:25:c4:a3:60:a0:2a:a5:c2:a4:5f:43:be:d4: dc:ec:ea:60:38:a2:7d:74:ac:ff:10:13:18:bb:01:c8:c1:2f: b9:0d:a2:3e:26:e5:93:1d:8a:b9:af:39:6e:99:8d:b2:d7:39: ab:81:5f:20:23:3c:29:b4:66:72:bc:83:67:0d:0f:cc:69:2e: dc:c6:30:50:40:21:c0:cc:57:55:2a:06:e3:64:bf:d2:a8:3d: 1a:6a:be:20:1d:c2:c9:c0:13:2b:c1:9c:a3:b1:d5:d2:6a:ca: 93:55:eb:6c:8a:fd:f8:d0:28:4c:1d:32:e0:03:33:98:3d:4c: ab:2d:8e:65:e6:15:2b:af:c4:68:c4:00:97:6e:cc:df:32:fb: 25:bb:03:a6:77:a0:10:27:cc:6f:75:57:e5:81:36:4f:fb:2f: a1:0c:68:ab:59:04:4d:ce:58:57:ed:46:01:ce:cb:f4:97:11: 16:52:1f:e0:10:84:70:8c:58:b4:9f:05:a2:e8:9b:d5:ee:64: 1c:37:d9:7b:2c:be:1e:8e:ed:c3:ad:3a:1a:18:34:1a:76:8b: 59:b6:87:4f:b2:db:32:4f:3e:01:9a:35:71:7b:7a:83:70:21: 30:59:47:b7:db:14:90:d3:79:08:bc:db:c2:0a:c8:ed:b9:d6: f4:5f:13:c2 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUaL1b/I+E4XOdSlWq40rWs0+vjwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz RUJEMTBDQTAeFw0yNjA0MTUwNzIyMzBaFw0yNzA0MTQwNzI3MzBaMDMxMTAvBgNV BAMTKDBBMzE0MzUxNzhBNDg3MjdFQjlCMUExMkNFOTM2QzY2RjFBQjk2NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi6MhY5V3Ifb1+NaK8wzEGgBhY WmW9Y1HpDKq8ox3knRQZ+jeLmdV7+QbzjOeGjHwJ6TSrLAhCgiDpIW8SiMoufLJM HOEZ4EN/42E8tWVNco6g98ECwYPfYTz4dHfzcYFytOz0Iue4F9laTEzqlemBEWU+ W3XOTD5tIXv8Ry0VXpYM71Ur8+UEKD4j3LclabpPFK/YynJMJ4cl/eo6pCrc/2oF S9HpuJlWHqT17Y+9+m9KZ5O1+RtoXNPv/Jvfk2ZE2xR+3K/eUSPR97wsCEbojg2H 5LuZQrqmcivMppGnDLGm1rKxMCmtNXJMHo4rz7Ti132YDpg5bZDIJEgesAfJAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUCjFDUXikhyfrmxoSzpNsZvGrlmgwHwYDVR0j BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMS8zMTMzMzkyZTMx MzkzODJlMzEzMDM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTMwMzczOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIvGbTANBgkqhkiG9w0BAQsFAAOCAQEAk7xAOV0lxKNgoCqlwqRf Q77U3OzqYDiifXSs/xATGLsByMEvuQ2iPiblkx2Kua85bpmNstc5q4FfICM8KbRm cryDZw0PzGku3MYwUEAhwMxXVSoG42S/0qg9Gmq+IB3CycATK8Gco7HV0mrKk1Xr bIr9+NAoTB0y4AMzmD1Mqy2OZeYVK6/EaMQAl27M3zL7JbsDpnegECfMb3VX5YE2 T/svoQxoq1kETc5YV+1GAc7L9JcRFlIf4BCEcIxYtJ8Fouib1e5kHDfZeyy+Ho7t w606Ghg0GnaLWbaHT7LbMk8+AZo1cXt6g3AhMFlHt9sUkNN5CLzbwgrI7bnW9F8T wg== -----END CERTIFICATE-----Generated at Fri Apr 17 23:30:13 2026 by rpki-client