$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e31312e302f32342d3234203d3e203539303738.roa File: 3133392e3139382e31312e302f32342d3234203d3e203539303738.roa (raw, json) Hash identifier: L7aFgnFSZyJ0sN84RodQnek6ld4N/X/z4dErm0fYwsk= Subject key identifier: AB:0A:B7:A8:53:CF:A6:EB:34:CB:5F:15:27:54:1E:97:81:E2:57:CF Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Certificate serial: 2B92E1C4DFCF504732912680AE2EE89DDCBFEF9D Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e31312e302f32342d3234203d3e203539303738.roa Signing time: Wed 15 Apr 2026 07:21:27 +0000 ROA not before: Wed 15 Apr 2026 07:16:27 +0000 ROA not after: Wed 14 Apr 2027 07:21:27 +0000 asID: 59078 IP address blocks: 139.198.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:92:e1:c4:df:cf:50:47:32:91:26:80:ae:2e:e8:9d:dc:bf:ef:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Validity Not Before: Apr 15 07:16:27 2026 GMT Not After : Apr 14 07:21:27 2027 GMT Subject: CN=AB0AB7A853CFA6EB34CB5F1527541E9781E257CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:73:d4:66:27:2c:ba:4a:43:61:05:f6:3a:5d: 10:1d:b6:d6:61:6d:08:62:57:d2:94:76:fe:e1:a4: d7:ed:d1:83:19:50:6c:7d:76:d0:92:ce:57:71:62: 20:44:d1:78:f8:ca:6c:9a:34:1a:3d:33:ea:9f:f1: fc:3c:11:dd:f1:fd:6e:93:0d:24:5d:0b:03:bf:7a: 4e:b9:1d:c9:b1:1e:fa:45:ed:b0:19:c7:8f:26:88: 66:10:aa:ad:24:d0:81:64:50:92:bc:7c:3a:1f:0c: 22:7e:3f:c3:e2:c9:29:39:b0:b9:9b:12:0f:6f:1d: 20:30:ec:ba:55:30:71:27:a0:37:f8:2a:36:4e:a0: fd:0b:a4:d5:f1:9e:43:7c:af:66:74:5f:21:b3:a9: 1a:e7:04:af:d0:31:ce:5d:45:06:67:45:7f:da:60: 03:4a:f8:f9:d4:76:f7:8f:36:5d:d3:d1:27:86:e3: 84:e5:33:51:c3:1f:98:96:f8:d5:7b:3f:51:6e:f1: 9d:94:e3:a7:87:e9:29:24:80:d8:57:66:70:b8:11: 6c:82:63:85:86:41:20:2c:19:f4:53:f7:80:66:77: 52:b3:d9:18:43:5d:69:85:ae:f3:82:fb:c8:a1:8e: dc:b1:6c:3e:6f:ab:77:bd:a8:65:c1:23:32:e9:68: c4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0A:B7:A8:53:CF:A6:EB:34:CB:5F:15:27:54:1E:97:81:E2:57:CF X509v3 Authority Key Identifier: keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e31312e302f32342d3234203d3e203539303738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.198.11.0/24 Signature Algorithm: sha256WithRSAEncryption ad:fa:8c:16:5e:ef:4e:b4:9a:3b:cc:68:b4:63:66:b7:85:25: c0:6f:1e:92:33:cf:8f:b1:e5:61:25:3b:ef:09:81:27:ed:68: 13:46:1c:0e:04:cc:6a:7a:3c:17:43:9e:1c:6a:6c:b8:b4:82: 4b:6b:bf:1f:e4:85:b5:15:ea:2f:38:ec:28:61:72:31:77:c4: e1:81:f2:34:ea:08:d1:01:f7:8c:b1:77:22:df:72:7b:ee:5d: fb:fb:27:34:b6:58:1e:d4:73:9b:c1:24:cd:80:0b:13:cf:23: 87:fa:f7:2d:c0:2c:d7:dc:92:72:70:4d:58:c5:b0:f5:a4:3f: 20:37:60:e2:3e:3a:c2:30:bb:e7:7b:68:af:77:b8:d0:46:59: 94:16:77:f1:7b:46:81:23:82:4a:0f:6c:b1:5e:24:89:db:d6: 16:d5:f6:7e:f0:65:ee:af:c2:3d:6e:c0:db:8a:2b:fe:7f:63: a5:05:2c:a6:93:5f:0d:d3:ea:c0:18:a6:66:1e:b9:1e:ed:41: 2a:b1:cb:13:50:35:f8:d7:d4:16:54:3c:61:7f:63:2a:5b:49: 94:be:38:56:32:47:db:ad:7a:11:4e:d3:36:fa:b8:e0:b0:85: e5:3b:f4:7a:81:5e:f4:bb:c9:59:31:00:fd:be:89:93:41:d3: 6b:71:de:4c -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUK5LhxN/PUEcykSaAri7ondy/750wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz RUJEMTBDQTAeFw0yNjA0MTUwNzE2MjdaFw0yNzA0MTQwNzIxMjdaMDMxMTAvBgNV BAMTKEFCMEFCN0E4NTNDRkE2RUIzNENCNUYxNTI3NTQxRTk3ODFFMjU3Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIc9RmJyy6SkNhBfY6XRAdttZh bQhiV9KUdv7hpNft0YMZUGx9dtCSzldxYiBE0Xj4ymyaNBo9M+qf8fw8Ed3x/W6T DSRdCwO/ek65HcmxHvpF7bAZx48miGYQqq0k0IFkUJK8fDofDCJ+P8PiySk5sLmb Eg9vHSAw7LpVMHEnoDf4KjZOoP0LpNXxnkN8r2Z0XyGzqRrnBK/QMc5dRQZnRX/a YANK+PnUdvePNl3T0SeG44TlM1HDH5iW+NV7P1Fu8Z2U46eH6SkkgNhXZnC4EWyC Y4WGQSAsGfRT94Bmd1Kz2RhDXWmFrvOC+8ihjtyxbD5vq3e9qGXBIzLpaMR5AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUqwq3qFPPpus0y18VJ1Qel4HiV88wHwYDVR0j BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDUyMzY1MS8xLzMxMzMzOTJlMzEz OTM4MmUzMTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTMwMzczOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAIvGCzANBgkqhkiG9w0BAQsFAAOCAQEArfqMFl7vTrSaO8xotGNmt4Ul wG8ekjPPj7HlYSU77wmBJ+1oE0YcDgTMano8F0OeHGpsuLSCS2u/H+SFtRXqLzjs KGFyMXfE4YHyNOoI0QH3jLF3It9ye+5d+/snNLZYHtRzm8EkzYALE88jh/r3LcAs 19yScnBNWMWw9aQ/IDdg4j46wjC753tor3e40EZZlBZ38XtGgSOCSg9ssV4kidvW FtX2fvBl7q/CPW7A24or/n9jpQUsppNfDdPqwBimZh65Hu1BKrHLE1A1+NfUFlQ8 YX9jKltJlL44VjJH2616EU7TNvq44LCF5Tv0eoFe9LvJWTEA/b6Jk0HTa3HeTA== -----END CERTIFICATE-----Generated at Fri Apr 17 20:17:07 2026 by rpki-client