$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132332e302f32342d3234203d3e203539303738.roa File: 3133392e3139382e3132332e302f32342d3234203d3e203539303738.roa (raw, json) Hash identifier: GcvdPVgx4uAlt1H+4vi5eN+TURDf6951i4fZSQeTX+s= Subject key identifier: C6:D6:BA:52:12:1E:79:A6:3C:99:89:4A:88:B1:32:B6:9B:97:33:A3 Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Certificate serial: 703E1651E321D8B43596DA0D838A8FD19A42274C Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132332e302f32342d3234203d3e203539303738.roa Signing time: Wed 15 Apr 2026 07:31:21 +0000 ROA not before: Wed 15 Apr 2026 07:26:21 +0000 ROA not after: Wed 14 Apr 2027 07:31:21 +0000 asID: 59078 IP address blocks: 139.198.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:3e:16:51:e3:21:d8:b4:35:96:da:0d:83:8a:8f:d1:9a:42:27:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Validity Not Before: Apr 15 07:26:21 2026 GMT Not After : Apr 14 07:31:21 2027 GMT Subject: CN=C6D6BA52121E79A63C99894A88B132B69B9733A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:af:81:5d:72:7f:d6:a2:c7:dc:13:b5:e5:2b: 6c:5d:6a:6e:89:f8:33:d0:2e:b8:7d:97:03:eb:4d: f9:92:88:ef:a0:a3:17:1a:29:48:dd:ae:fb:75:c3: 1c:c6:79:0e:15:f6:46:1d:cf:16:bc:bb:ff:36:16: 95:7f:f3:09:f9:5a:37:38:42:88:d7:ad:3d:a5:b2: da:2c:ab:cc:41:ce:af:02:33:93:89:1f:f0:72:10: 1b:f5:be:a6:94:92:0b:c7:3b:d4:04:ff:a5:4c:f4: f1:d1:4c:d0:34:4f:22:5d:a0:97:c0:a8:27:16:f4: a6:25:ba:11:e3:30:fe:59:00:1d:3c:4d:64:10:02: 9d:a1:9f:16:18:d0:76:5e:d7:51:b4:40:e3:11:dd: 9c:e1:cc:a9:39:5e:e7:44:c2:33:65:12:0b:4d:b6: 35:28:16:86:8a:8a:20:13:00:64:24:6c:19:16:10: ac:2c:90:3c:b1:1f:b3:ef:49:c8:32:4e:14:29:95: 5e:ae:9f:78:9e:51:91:cb:65:a1:d2:c0:59:f0:2d: b1:2c:99:05:3e:96:bd:89:27:c3:89:7d:c7:3b:6a: 8f:e0:fa:33:26:c6:68:31:1d:8e:24:3b:61:6c:c8: 51:21:9d:5e:2a:f1:66:49:4b:79:ef:ed:de:fa:cc: 4c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D6:BA:52:12:1E:79:A6:3C:99:89:4A:88:B1:32:B6:9B:97:33:A3 X509v3 Authority Key Identifier: keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132332e302f32342d3234203d3e203539303738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.198.123.0/24 Signature Algorithm: sha256WithRSAEncryption 02:6a:fc:e3:66:85:0a:b1:fa:82:dd:e6:2b:24:83:cf:98:7c: ce:13:0e:94:c6:d2:e8:14:1b:9a:80:98:8e:c2:76:a2:68:30: 1f:3b:ab:bc:c1:dc:98:bb:69:8e:a5:64:15:81:a8:56:0f:95: 47:e8:ca:33:0d:04:d3:e7:bc:25:47:3e:cb:9e:9c:94:a3:cc: 6e:35:18:7b:cf:c8:3a:10:f7:de:be:38:cb:d1:e0:2e:76:d9: 97:2f:ce:2e:e2:a4:41:56:b5:a3:2d:20:7b:06:a5:d6:46:22: 97:a7:85:eb:16:fe:5b:bf:42:16:28:ff:5c:17:f5:1b:b4:fa: cb:6e:d7:2f:34:31:96:53:f4:49:a9:d9:e7:5b:51:28:05:b0: d6:38:37:43:3c:f0:93:0c:99:ae:4e:13:f8:23:86:9f:e7:4d: 78:6b:b8:82:73:8b:7b:85:34:01:4f:4b:d7:64:0b:14:b5:4f: 83:72:af:67:11:3e:b8:d3:0a:7f:1a:a5:7e:98:5b:11:cd:cb: 42:b0:e2:34:04:14:e0:06:0d:58:8d:ee:88:5d:76:d2:1e:fb: c0:8c:ef:1f:3f:73:e4:22:0c:77:f0:bd:bd:6a:44:41:a3:80: 50:42:df:36:bb:f4:78:81:6e:06:7b:2f:27:43:6c:57:d2:09: e6:7b:6a:31 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUcD4WUeMh2LQ1ltoNg4qP0ZpCJ0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz RUJEMTBDQTAeFw0yNjA0MTUwNzI2MjFaFw0yNzA0MTQwNzMxMjFaMDMxMTAvBgNV BAMTKEM2RDZCQTUyMTIxRTc5QTYzQzk5ODk0QTg4QjEzMkI2OUI5NzMzQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9r4Fdcn/WosfcE7XlK2xdam6J +DPQLrh9lwPrTfmSiO+goxcaKUjdrvt1wxzGeQ4V9kYdzxa8u/82FpV/8wn5Wjc4 QojXrT2lstosq8xBzq8CM5OJH/ByEBv1vqaUkgvHO9QE/6VM9PHRTNA0TyJdoJfA qCcW9KYluhHjMP5ZAB08TWQQAp2hnxYY0HZe11G0QOMR3ZzhzKk5XudEwjNlEgtN tjUoFoaKiiATAGQkbBkWEKwskDyxH7PvScgyThQplV6un3ieUZHLZaHSwFnwLbEs mQU+lr2JJ8OJfcc7ao/g+jMmxmgxHY4kO2FsyFEhnV4q8WZJS3nv7d76zEz1AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUxta6UhIeeaY8mYlKiLEytpuXM6MwHwYDVR0j BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMS8zMTMzMzkyZTMx MzkzODJlMzEzMjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTMwMzczOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIvGezANBgkqhkiG9w0BAQsFAAOCAQEAAmr842aFCrH6gt3mKySD z5h8zhMOlMbS6BQbmoCYjsJ2omgwHzurvMHcmLtpjqVkFYGoVg+VR+jKMw0E0+e8 JUc+y56clKPMbjUYe8/IOhD33r44y9HgLnbZly/OLuKkQVa1oy0gewal1kYil6eF 6xb+W79CFij/XBf1G7T6y27XLzQxllP0SanZ51tRKAWw1jg3QzzwkwyZrk4T+COG n+dNeGu4gnOLe4U0AU9L12QLFLVPg3KvZxE+uNMKfxqlfphbEc3LQrDiNAQU4AYN WI3uiF120h77wIzvHz9z5CIMd/C9vWpEQaOAUELfNrv0eIFuBnsvJ0NsV9IJ5ntq MQ== -----END CERTIFICATE-----Generated at Fri Apr 17 23:28:28 2026 by rpki-client