$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131372e302f32342d3234203d3e203538343636.roa File: 3133392e3139382e3131372e302f32342d3234203d3e203538343636.roa (raw, json) Hash identifier: QFsXWufp93OxSsWQ2fPQloYBo+RUm0lbYQO4k5rRgOs= Subject key identifier: 31:81:76:22:E1:17:28:66:FA:85:D9:2E:D6:7C:0A:7F:D8:87:92:EF Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Certificate serial: 2F681C73483FDACD06257C1496839A4A53158FB3 Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131372e302f32342d3234203d3e203538343636.roa Signing time: Wed 15 Apr 2026 07:47:04 +0000 ROA not before: Wed 15 Apr 2026 07:42:04 +0000 ROA not after: Wed 14 Apr 2027 07:47:04 +0000 asID: 58466 IP address blocks: 139.198.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:68:1c:73:48:3f:da:cd:06:25:7c:14:96:83:9a:4a:53:15:8f:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Validity Not Before: Apr 15 07:42:04 2026 GMT Not After : Apr 14 07:47:04 2027 GMT Subject: CN=31817622E1172866FA85D92ED67C0A7FD88792EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a6:19:fc:c7:48:65:cd:ba:8f:c0:ad:bf:e9: d9:11:a5:98:45:3f:d1:9c:2d:1e:fd:8b:b4:fa:e4: ac:53:d1:d7:72:27:dc:06:33:68:cb:1b:b1:6e:5b: 4a:4e:6b:75:31:82:35:b1:66:4b:a9:02:fa:5f:8d: 28:ed:05:d8:34:a8:c1:6d:49:41:b5:55:d2:c8:c3: 62:f0:92:3a:a7:81:94:e2:92:aa:8d:76:8a:2b:46: ff:16:ec:de:85:0a:2e:53:04:03:3f:74:9b:d3:11: 30:50:f4:91:27:cb:f3:57:f1:94:5d:49:a3:62:47: ec:c5:a1:37:0c:5c:e1:ce:94:c6:40:3e:19:3f:db: 27:dd:b3:8f:48:27:d9:9d:4d:48:c2:57:97:f1:82: d5:30:33:6b:49:99:ed:a9:6d:cd:15:85:02:27:0e: 8e:56:5a:6e:ab:a2:16:d4:7e:34:04:67:86:80:b6: 1d:f2:aa:64:79:63:b3:d9:95:c4:46:f8:42:df:bf: 0d:95:71:6a:fb:2f:69:29:55:b3:b8:73:2d:ae:f4: a0:d2:ca:32:da:90:37:a1:d4:df:41:65:de:a3:8b: d9:e6:80:92:a7:38:cf:41:7f:87:bd:56:83:5b:e5: 21:e3:e2:da:bf:8e:90:08:08:b1:64:f4:b1:6a:6b: bd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:81:76:22:E1:17:28:66:FA:85:D9:2E:D6:7C:0A:7F:D8:87:92:EF X509v3 Authority Key Identifier: keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131372e302f32342d3234203d3e203538343636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.198.117.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:bb:7b:31:8c:8e:7f:99:69:c3:0c:fa:48:7f:45:09:97:0a: ef:59:67:d5:32:05:0e:5c:a2:a3:9e:a8:88:eb:19:83:bc:f6: de:52:49:c7:28:84:af:15:fd:99:54:59:e6:2f:04:7e:2a:84: a0:ac:bd:f3:b4:8e:4a:05:34:87:a0:06:cc:c7:4f:c5:a8:d4: 00:94:0d:07:3e:b1:96:93:ef:e6:1c:1f:ac:b7:26:a5:6e:a6: ce:14:7a:da:5e:a7:46:04:06:17:4f:6e:cc:69:df:c3:06:3b: f4:4a:28:78:85:ad:49:46:6a:30:76:d5:fc:dc:03:66:d5:13: fa:58:b3:40:b8:17:b8:9c:b0:2a:99:db:32:ad:a5:3d:50:22: c3:01:42:dd:ed:0c:5c:ca:74:71:9d:c0:63:68:d8:98:4a:8c: 6b:fa:4c:2a:88:5b:3d:45:ff:cf:44:dc:eb:17:22:65:df:00: f3:2b:32:3e:ef:27:e6:d1:9f:00:a2:7a:7b:89:42:29:11:04: 58:83:7d:d7:df:93:5e:1e:dd:42:22:1e:ef:cf:3a:b7:cb:a7: 14:c9:8f:14:90:d0:89:f6:99:dd:d9:3e:a4:8f:91:8b:0e:0f: 20:71:83:30:99:e9:df:61:b1:90:4e:50:65:d5:c9:6c:ac:ae: ba:51:e4:c4 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUL2gcc0g/2s0GJXwUloOaSlMVj7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz RUJEMTBDQTAeFw0yNjA0MTUwNzQyMDRaFw0yNzA0MTQwNzQ3MDRaMDMxMTAvBgNV BAMTKDMxODE3NjIyRTExNzI4NjZGQTg1RDkyRUQ2N0MwQTdGRDg4NzkyRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkphn8x0hlzbqPwK2/6dkRpZhF P9GcLR79i7T65KxT0ddyJ9wGM2jLG7FuW0pOa3UxgjWxZkupAvpfjSjtBdg0qMFt SUG1VdLIw2LwkjqngZTikqqNdoorRv8W7N6FCi5TBAM/dJvTETBQ9JEny/NX8ZRd SaNiR+zFoTcMXOHOlMZAPhk/2yfds49IJ9mdTUjCV5fxgtUwM2tJme2pbc0VhQIn Do5WWm6rohbUfjQEZ4aAth3yqmR5Y7PZlcRG+ELfvw2VcWr7L2kpVbO4cy2u9KDS yjLakDeh1N9BZd6ji9nmgJKnOM9Bf4e9VoNb5SHj4tq/jpAICLFk9LFqa70dAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUMYF2IuEXKGb6hdku1nwKf9iHku8wHwYDVR0j BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMS8zMTMzMzkyZTMx MzkzODJlMzEzMTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzODM0MzYzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIvGdTANBgkqhkiG9w0BAQsFAAOCAQEAWrt7MYyOf5lpwwz6SH9F CZcK71ln1TIFDlyio56oiOsZg7z23lJJxyiErxX9mVRZ5i8EfiqEoKy987SOSgU0 h6AGzMdPxajUAJQNBz6xlpPv5hwfrLcmpW6mzhR62l6nRgQGF09uzGnfwwY79Eoo eIWtSUZqMHbV/NwDZtUT+lizQLgXuJywKpnbMq2lPVAiwwFC3e0MXMp0cZ3AY2jY mEqMa/pMKohbPUX/z0Tc6xciZd8A8ysyPu8n5tGfAKJ6e4lCKREEWIN919+TXh7d QiIe7886t8unFMmPFJDQifaZ3dk+pI+Riw4PIHGDMJnp32GxkE5QZdXJbKyuulHk xA== -----END CERTIFICATE-----Generated at Fri Apr 17 21:21:43 2026 by rpki-client