$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132342e302f32342d3234203d3e203539303738.roa File: 3133392e3139382e3132342e302f32342d3234203d3e203539303738.roa (raw, json) Hash identifier: 1j6I9T4lHsa1IV7c9DQlXziud7ivouM0r4CAbWsPXw8= Subject key identifier: 6B:81:65:92:52:22:60:D1:8D:7E:5F:70:6B:B9:82:DD:FA:4B:8A:44 Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Certificate serial: 6858C8C0BF4EB1346EE621F752B8863E2E407A1F Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132342e302f32342d3234203d3e203539303738.roa Signing time: Wed 15 Apr 2026 07:31:21 +0000 ROA not before: Wed 15 Apr 2026 07:26:21 +0000 ROA not after: Wed 14 Apr 2027 07:31:21 +0000 asID: 59078 IP address blocks: 139.198.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:58:c8:c0:bf:4e:b1:34:6e:e6:21:f7:52:b8:86:3e:2e:40:7a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Validity Not Before: Apr 15 07:26:21 2026 GMT Not After : Apr 14 07:31:21 2027 GMT Subject: CN=6B816592522260D18D7E5F706BB982DDFA4B8A44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:18:99:22:e6:b1:01:31:8b:b5:dd:ea:d1:84: 0b:d4:13:73:67:8c:f5:02:2d:14:60:52:3e:8d:35: 6a:f0:1e:69:86:38:65:d0:79:54:23:d0:4f:d4:ed: 43:a0:bd:01:b8:a6:35:81:e6:77:0d:cb:2f:d2:6c: 54:db:31:e7:3f:64:8c:fb:25:ab:84:7a:9d:b8:dd: c8:ef:3f:26:99:a3:ca:1f:22:1d:b6:47:74:52:f8: ef:16:b5:b8:48:01:6c:93:16:08:38:1b:43:28:58: c1:f0:e2:ec:fd:dd:75:19:6a:c4:f1:b0:b9:ad:0f: 5a:a4:f1:da:f5:9c:9a:fa:93:46:98:f4:3d:3b:50: d4:26:de:e3:57:64:4f:5c:10:63:26:61:1b:d8:9b: e7:b1:5c:8a:88:8e:c5:eb:22:76:3b:db:27:03:34: 97:26:2f:e8:8f:f1:cc:2f:31:f3:46:c2:07:95:e6: 71:e5:0d:47:e2:a6:fe:49:3f:47:aa:5d:20:63:1a: f7:08:5f:4d:5b:f1:35:00:fe:92:f8:4c:0b:61:2a: 57:f6:aa:6d:66:ca:f8:fb:54:f9:dc:f8:5b:cf:9a: e6:74:36:43:c8:fd:06:ba:e5:15:7c:f8:c2:70:7b: 0a:19:6c:44:35:9e:f7:ba:51:30:93:96:60:8a:46: 7a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:81:65:92:52:22:60:D1:8D:7E:5F:70:6B:B9:82:DD:FA:4B:8A:44 X509v3 Authority Key Identifier: keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132342e302f32342d3234203d3e203539303738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.198.124.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:9f:b6:4a:88:d1:7a:92:f7:e2:9c:18:81:c5:d6:98:77:54: 05:5c:67:c1:a5:9e:35:88:d7:2c:b9:35:3d:11:72:ed:e6:44: 65:1f:92:7d:7b:d9:4a:4c:6c:a1:6d:53:c1:34:33:8c:97:cf: 8b:52:30:14:c2:9b:3d:12:54:38:5c:a6:6d:7b:f1:15:c3:5e: 4b:8f:37:70:45:d8:ef:8c:f8:6e:7a:75:96:11:1e:81:1b:d3: 31:da:e6:cd:67:69:e0:01:e1:a3:c7:0e:ae:27:ad:00:eb:86: 80:45:bf:3f:e7:86:88:9f:ae:93:a7:c1:32:0a:37:52:ec:61: ce:0c:6f:6f:c7:ea:5e:04:b1:ce:f6:81:34:88:05:86:52:58: 97:ab:01:a8:39:5b:b5:47:18:47:39:ae:22:24:c3:af:c4:24: 98:5b:d0:d9:f1:29:7a:62:25:bd:a9:4f:e5:ed:80:d9:bd:76: 15:c3:7e:be:ec:b3:6f:fa:1c:ea:33:43:64:77:08:c1:da:6e: f6:de:99:1e:d6:a3:07:32:3e:56:65:3d:a0:26:48:b2:d5:aa: f4:0d:93:dc:4e:64:d1:fb:99:9d:61:f2:9e:44:4f:0f:14:34: e2:87:1d:2d:7d:19:1c:c6:08:67:bc:1a:b9:cf:2a:d8:3a:a9: de:7f:e4:48 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUaFjIwL9OsTRu5iH3UriGPi5Aeh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz RUJEMTBDQTAeFw0yNjA0MTUwNzI2MjFaFw0yNzA0MTQwNzMxMjFaMDMxMTAvBgNV BAMTKDZCODE2NTkyNTIyMjYwRDE4RDdFNUY3MDZCQjk4MkRERkE0QjhBNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6GJki5rEBMYu13erRhAvUE3Nn jPUCLRRgUj6NNWrwHmmGOGXQeVQj0E/U7UOgvQG4pjWB5ncNyy/SbFTbMec/ZIz7 JauEep243cjvPyaZo8ofIh22R3RS+O8WtbhIAWyTFgg4G0MoWMHw4uz93XUZasTx sLmtD1qk8dr1nJr6k0aY9D07UNQm3uNXZE9cEGMmYRvYm+exXIqIjsXrInY72ycD NJcmL+iP8cwvMfNGwgeV5nHlDUfipv5JP0eqXSBjGvcIX01b8TUA/pL4TAthKlf2 qm1myvj7VPnc+FvPmuZ0NkPI/Qa65RV8+MJwewoZbEQ1nve6UTCTlmCKRnrXAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUa4FlklIiYNGNfl9wa7mC3fpLikQwHwYDVR0j BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMS8zMTMzMzkyZTMx MzkzODJlMzEzMjM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTMwMzczOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIvGfDANBgkqhkiG9w0BAQsFAAOCAQEAT5+2SojRepL34pwYgcXW mHdUBVxnwaWeNYjXLLk1PRFy7eZEZR+SfXvZSkxsoW1TwTQzjJfPi1IwFMKbPRJU OFymbXvxFcNeS483cEXY74z4bnp1lhEegRvTMdrmzWdp4AHho8cOrietAOuGgEW/ P+eGiJ+uk6fBMgo3Uuxhzgxvb8fqXgSxzvaBNIgFhlJYl6sBqDlbtUcYRzmuIiTD r8QkmFvQ2fEpemIlvalP5e2A2b12FcN+vuyzb/oc6jNDZHcIwdpu9t6ZHtajBzI+ VmU9oCZIstWq9A2T3E5k0fuZnWHynkRPDxQ04ocdLX0ZHMYIZ7wauc8q2Dqp3n/k SA== -----END CERTIFICATE-----Generated at Fri Apr 17 22:12:04 2026 by rpki-client