$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131332e302f32342d3234203d3e203539303738.roa File: 3133392e3139382e3131332e302f32342d3234203d3e203539303738.roa (raw, json) Hash identifier: mH+M/YlkSv5yAFaiZbDZsUAIyqRZ3r1h7nMbuhEcwjs= Subject key identifier: 7B:DD:2B:C4:C0:8C:09:C8:D3:78:13:A8:6B:39:96:29:70:89:28:A9 Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Certificate serial: 25C90F5720D5697F13617A9ADA25828B516F6654 Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131332e302f32342d3234203d3e203539303738.roa Signing time: Wed 15 Apr 2026 07:43:14 +0000 ROA not before: Wed 15 Apr 2026 07:38:14 +0000 ROA not after: Wed 14 Apr 2027 07:43:14 +0000 asID: 59078 IP address blocks: 139.198.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c9:0f:57:20:d5:69:7f:13:61:7a:9a:da:25:82:8b:51:6f:66:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Validity Not Before: Apr 15 07:38:14 2026 GMT Not After : Apr 14 07:43:14 2027 GMT Subject: CN=7BDD2BC4C08C09C8D37813A86B399629708928A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a9:eb:79:2f:55:4b:a6:4b:13:c3:b1:68:db: 44:ba:64:15:f1:62:d4:6d:8d:58:39:48:05:e3:49: 83:e2:42:00:57:40:cf:0c:46:75:05:45:57:0f:d7: bb:07:45:5d:f7:b7:d9:8a:7d:96:be:4b:af:b5:20: f0:45:e2:e6:b1:b5:69:cf:f3:57:45:48:d9:05:7a: 62:27:84:e7:1f:61:86:94:ae:5f:37:1b:72:51:9e: 07:8e:50:05:a9:9d:3d:6e:df:9e:a8:cc:3c:39:97: 03:eb:59:7d:58:55:6e:84:9e:bb:f0:e3:91:1f:d7: 1b:0e:68:e4:eb:9a:f9:6d:85:01:d5:8a:13:a4:b3: cd:2d:da:f5:53:d4:3d:49:cd:20:e9:96:51:ef:93: 5d:4d:47:f7:7a:54:82:67:b2:f3:09:a3:de:86:6b: 0b:e8:59:02:0d:21:77:ed:99:6d:3d:cd:83:92:24: 83:ee:25:1a:53:c6:ee:c3:a4:61:4d:80:d2:e5:e9: b9:48:11:2c:59:a4:cd:92:7b:af:a3:97:15:57:f1: 10:81:78:89:2a:7b:a9:51:e9:06:b3:13:35:c2:b3: fe:2a:cc:46:df:50:1c:25:fb:cb:64:7a:63:76:ff: ef:0e:10:15:6f:94:6c:14:17:44:09:fd:34:6f:ec: 7b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:DD:2B:C4:C0:8C:09:C8:D3:78:13:A8:6B:39:96:29:70:89:28:A9 X509v3 Authority Key Identifier: keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131332e302f32342d3234203d3e203539303738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.198.113.0/24 Signature Algorithm: sha256WithRSAEncryption ac:f8:d0:7c:bc:26:3c:2e:80:a4:59:6a:30:c0:87:0a:5a:cd: dc:08:5a:24:34:18:7e:00:2f:57:6e:f2:23:50:da:9b:84:c4: df:e7:b6:0c:fa:7d:df:3f:76:2e:d6:80:73:e9:a1:40:90:a2: a1:58:a1:39:d7:0b:96:8d:2e:09:5a:45:98:6c:53:8a:a6:bc: fc:76:13:38:7c:fa:7b:17:74:60:5d:c0:aa:01:4c:4c:b4:7a: ff:a7:ff:aa:a4:37:2d:f3:87:d3:08:e7:38:3e:f3:ed:1b:f6: d3:36:19:96:49:42:80:25:78:68:46:3c:5b:cc:dd:c2:b9:3f: bb:e9:3f:19:b0:36:42:7f:41:4e:bb:85:33:fd:2e:09:53:21: 9a:59:3a:ed:79:46:0c:5d:1c:8f:8a:9b:32:c2:94:b6:a3:19: 26:cf:8f:7c:14:39:b2:fe:74:a1:9f:90:29:d2:c7:59:29:16: 55:ee:11:6c:20:11:71:a2:a1:98:7a:79:64:ca:f3:b1:8b:d1: 5a:2d:b2:35:a8:65:fb:bb:f1:db:9c:27:06:d4:b0:c4:5b:cf: c7:cc:9a:7f:49:e6:a8:79:5a:3b:e0:65:a2:4f:b5:99:21:e9: a0:e7:92:3e:d2:e8:b9:19:4a:f7:a4:76:6a:ba:63:a6:f3:7a: 1e:4f:fc:d3 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUJckPVyDVaX8TYXqa2iWCi1FvZlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz RUJEMTBDQTAeFw0yNjA0MTUwNzM4MTRaFw0yNzA0MTQwNzQzMTRaMDMxMTAvBgNV BAMTKDdCREQyQkM0QzA4QzA5QzhEMzc4MTNBODZCMzk5NjI5NzA4OTI4QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGqet5L1VLpksTw7Fo20S6ZBXx YtRtjVg5SAXjSYPiQgBXQM8MRnUFRVcP17sHRV33t9mKfZa+S6+1IPBF4uaxtWnP 81dFSNkFemInhOcfYYaUrl83G3JRngeOUAWpnT1u356ozDw5lwPrWX1YVW6Enrvw 45Ef1xsOaOTrmvlthQHVihOks80t2vVT1D1JzSDpllHvk11NR/d6VIJnsvMJo96G awvoWQINIXftmW09zYOSJIPuJRpTxu7DpGFNgNLl6blIESxZpM2Se6+jlxVX8RCB eIkqe6lR6QazEzXCs/4qzEbfUBwl+8tkemN2/+8OEBVvlGwUF0QJ/TRv7HvxAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUe90rxMCMCcjTeBOoazmWKXCJKKkwHwYDVR0j BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMS8zMTMzMzkyZTMx MzkzODJlMzEzMTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTMwMzczOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIvGcTANBgkqhkiG9w0BAQsFAAOCAQEArPjQfLwmPC6ApFlqMMCH ClrN3AhaJDQYfgAvV27yI1Dam4TE3+e2DPp93z92LtaAc+mhQJCioVihOdcLlo0u CVpFmGxTiqa8/HYTOHz6exd0YF3AqgFMTLR6/6f/qqQ3LfOH0wjnOD7z7Rv20zYZ lklCgCV4aEY8W8zdwrk/u+k/GbA2Qn9BTruFM/0uCVMhmlk67XlGDF0cj4qbMsKU tqMZJs+PfBQ5sv50oZ+QKdLHWSkWVe4RbCARcaKhmHp5ZMrzsYvRWi2yNahl+7vx 25wnBtSwxFvPx8yaf0nmqHlaO+Blok+1mSHpoOeSPtLouRlK96R2arpjpvN6Hk/8 0w== -----END CERTIFICATE-----Generated at Fri Apr 17 23:28:21 2026 by rpki-client