$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132312e302f32342d3234203d3e203538343636.roa File: 3133392e3139382e3132312e302f32342d3234203d3e203538343636.roa (raw, json) Hash identifier: uP6X63EllwsVKAcY+d9BftkcA7uUAloqlAgeo2Y05+s= Subject key identifier: E1:08:DF:54:52:A8:A1:0F:68:93:28:6E:3A:C8:64:30:84:C3:03:9B Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Certificate serial: 629016C96C498C36F05641AE8EC96301204785BB Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132312e302f32342d3234203d3e203538343636.roa Signing time: Wed 15 Apr 2026 07:43:15 +0000 ROA not before: Wed 15 Apr 2026 07:38:15 +0000 ROA not after: Wed 14 Apr 2027 07:43:15 +0000 asID: 58466 IP address blocks: 139.198.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:90:16:c9:6c:49:8c:36:f0:56:41:ae:8e:c9:63:01:20:47:85:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Validity Not Before: Apr 15 07:38:15 2026 GMT Not After : Apr 14 07:43:15 2027 GMT Subject: CN=E108DF5452A8A10F6893286E3AC8643084C3039B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:66:33:40:8f:d2:4e:c8:e5:31:f6:d7:19:3b: 2a:0d:f9:c4:f0:b7:4f:52:9c:83:50:14:ab:d4:f0: 0b:dc:ec:b3:f1:0b:f0:e4:8e:56:62:20:ce:b0:f6: 58:b4:23:01:02:fc:dd:a1:9d:2b:3b:cb:d2:5d:66: 4e:79:dc:6c:06:d8:1c:f9:8e:bc:51:8e:74:81:a0: ef:ee:69:6f:f8:c6:fd:ef:e1:df:27:c6:da:34:da: 75:7c:87:6d:1f:79:e5:26:68:f3:5b:6b:bc:97:67: ff:69:10:8c:19:8c:51:61:7a:32:2f:05:17:02:b7: 4f:ef:f2:4b:32:7e:b6:11:2b:35:b0:67:ae:e1:1f: ce:3e:ca:d4:1e:cb:61:0c:8b:34:cd:ee:1d:bf:34: 09:cd:5e:09:19:f0:6c:ed:f6:bc:9b:b7:78:e8:ad: ee:3e:c2:59:3c:86:f7:71:37:60:46:e8:53:b5:2b: ce:a4:4d:3f:c4:ff:51:af:f8:8d:62:55:1b:f5:c3: ce:fd:22:dd:8c:9b:90:b2:61:a9:d6:e2:b2:03:e3: 04:4e:fc:b7:f4:91:c1:16:30:cf:4f:ef:de:e9:4a: 47:75:0a:63:a2:fc:b6:5b:87:e7:15:37:10:df:a1: 98:36:90:ea:e0:3a:8f:39:a3:ac:3f:2d:07:10:4a: 47:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:08:DF:54:52:A8:A1:0F:68:93:28:6E:3A:C8:64:30:84:C3:03:9B X509v3 Authority Key Identifier: keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132312e302f32342d3234203d3e203538343636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.198.121.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:ce:3c:35:9e:dd:3c:a9:7b:a2:d8:93:8c:d0:f3:d7:8c:57: dc:89:f7:e2:cc:b3:59:06:54:d0:c9:83:50:0a:89:b0:e4:bb: 6f:ea:4f:e8:14:5d:19:59:f4:a8:09:b2:fa:4e:45:7e:7e:ed: a4:fe:2f:86:09:b2:ca:f5:0f:cd:95:9d:31:67:ac:2b:12:49: 41:8a:94:90:ce:a8:a3:3d:72:4a:c9:a4:9b:e8:16:37:7c:a8: fb:6f:0b:64:70:84:78:c3:f3:d8:7b:bf:6e:24:71:f8:13:ed: 8c:a3:63:dd:b3:4b:34:90:07:dd:f8:33:70:5d:5e:83:49:8f: f9:e9:fc:0d:e8:9f:6d:3a:f3:7a:94:18:dd:dd:c5:04:43:c9: ad:25:95:2b:5f:e2:0a:9c:22:c8:87:a5:35:b6:0d:e3:16:38: 68:45:f5:95:34:1c:38:59:cf:b4:94:3d:04:8c:bf:b1:4d:4a: 74:13:fa:4a:8f:e3:70:cc:f9:87:95:a4:96:b9:a4:f4:05:b6: dd:99:a4:99:89:64:5d:15:a8:1d:85:a0:ba:a1:bd:25:b8:ad: 1f:4a:af:6f:de:a9:d1:19:0f:76:b0:0a:c1:16:e5:9f:73:21: 7d:61:f2:be:06:60:c2:99:e4:8b:64:77:66:ec:43:04:14:a4: 47:60:0c:fa -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUYpAWyWxJjDbwVkGujsljASBHhbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz RUJEMTBDQTAeFw0yNjA0MTUwNzM4MTVaFw0yNzA0MTQwNzQzMTVaMDMxMTAvBgNV BAMTKEUxMDhERjU0NTJBOEExMEY2ODkzMjg2RTNBQzg2NDMwODRDMzAzOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ZjNAj9JOyOUx9tcZOyoN+cTw t09SnINQFKvU8Avc7LPxC/DkjlZiIM6w9li0IwEC/N2hnSs7y9JdZk553GwG2Bz5 jrxRjnSBoO/uaW/4xv3v4d8nxto02nV8h20feeUmaPNba7yXZ/9pEIwZjFFhejIv BRcCt0/v8ksyfrYRKzWwZ67hH84+ytQey2EMizTN7h2/NAnNXgkZ8Gzt9rybt3jo re4+wlk8hvdxN2BG6FO1K86kTT/E/1Gv+I1iVRv1w879It2Mm5CyYanW4rID4wRO /Lf0kcEWMM9P797pSkd1CmOi/LZbh+cVNxDfoZg2kOrgOo85o6w/LQcQSkf7AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU4QjfVFKooQ9okyhuOshkMITDA5swHwYDVR0j BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMS8zMTMzMzkyZTMx MzkzODJlMzEzMjMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzODM0MzYzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIvGeTANBgkqhkiG9w0BAQsFAAOCAQEAWs48NZ7dPKl7otiTjNDz 14xX3In34syzWQZU0MmDUAqJsOS7b+pP6BRdGVn0qAmy+k5Ffn7tpP4vhgmyyvUP zZWdMWesKxJJQYqUkM6ooz1ySsmkm+gWN3yo+28LZHCEeMPz2Hu/biRx+BPtjKNj 3bNLNJAH3fgzcF1eg0mP+en8DeifbTrzepQY3d3FBEPJrSWVK1/iCpwiyIelNbYN 4xY4aEX1lTQcOFnPtJQ9BIy/sU1KdBP6So/jcMz5h5Wklrmk9AW23ZmkmYlkXRWo HYWguqG9JbitH0qvb96p0RkPdrAKwRbln3MhfWHyvgZgwpnki2R3ZuxDBBSkR2AM +g== -----END CERTIFICATE-----Generated at Sat Apr 18 03:53:33 2026 by rpki-client