$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132352e302f32342d3234203d3e203539303738.roa File: 3133392e3139382e3132352e302f32342d3234203d3e203539303738.roa (raw, json) Hash identifier: 9CiHPCnS8MJTWGtT9dYIRkPKvRjcwIuNw8D0Oeuhy0g= Subject key identifier: 42:30:BB:F5:C7:60:18:D5:E5:64:EB:15:5A:C4:5C:75:82:64:94:F5 Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Certificate serial: 4AEEA36C68871F4D091D8151BF34377B27A2154F Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132352e302f32342d3234203d3e203539303738.roa Signing time: Wed 15 Apr 2026 07:31:21 +0000 ROA not before: Wed 15 Apr 2026 07:26:21 +0000 ROA not after: Wed 14 Apr 2027 07:31:21 +0000 asID: 59078 IP address blocks: 139.198.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ee:a3:6c:68:87:1f:4d:09:1d:81:51:bf:34:37:7b:27:a2:15:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Validity Not Before: Apr 15 07:26:21 2026 GMT Not After : Apr 14 07:31:21 2027 GMT Subject: CN=4230BBF5C76018D5E564EB155AC45C75826494F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:da:db:ea:c9:fc:b0:49:43:35:17:70:d5:21: 27:d5:be:97:cf:56:5a:50:6d:4f:73:a5:e8:85:a8: 1c:eb:a3:5f:b4:ae:e4:10:8d:31:58:dc:24:54:14: e5:18:f2:e8:73:8e:12:78:f1:ec:8a:aa:c9:ef:17: 91:e5:45:f9:e3:2f:9e:d3:a0:75:ad:44:02:54:75: c4:93:61:06:65:0b:fd:48:e1:c1:50:c1:6b:9f:44: 5c:dc:85:ed:5a:93:80:e3:b9:85:40:66:ba:8a:de: 4d:50:04:aa:89:66:25:f7:1f:d4:72:ce:79:3a:84: ed:dc:49:aa:d9:e1:f7:af:c0:4c:2b:03:6a:d8:6e: 07:41:06:61:14:13:c8:f7:02:4a:36:44:cf:ac:1a: 72:c7:39:95:b4:c6:39:7c:3a:c7:a5:53:ae:5a:2b: ce:c7:cb:a9:51:a2:fd:7c:96:1b:dd:db:a9:96:84: 9d:eb:0c:a0:51:47:22:d4:5f:8a:78:88:45:a3:25: 50:99:3e:99:1e:82:76:df:ea:9e:97:3c:b0:30:9e: 1a:cd:cc:a3:d5:c9:10:59:0b:81:9a:95:75:21:ba: d0:db:d1:f3:10:0e:a3:bc:08:ad:2c:a5:04:22:26: 6a:f5:80:d7:f9:aa:78:b8:0e:e7:76:6b:33:e2:52: 79:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:30:BB:F5:C7:60:18:D5:E5:64:EB:15:5A:C4:5C:75:82:64:94:F5 X509v3 Authority Key Identifier: keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132352e302f32342d3234203d3e203539303738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.198.125.0/24 Signature Algorithm: sha256WithRSAEncryption c3:b1:06:cb:a5:9c:d5:27:60:78:b1:86:8e:62:42:9d:d4:26: 2f:9a:2d:50:65:9b:70:7f:17:e4:54:ff:0c:a8:35:8d:d9:a2: c8:3e:41:89:27:c1:79:d7:63:2d:59:6c:1f:30:c9:d7:5b:25: 5b:73:a1:54:e3:17:9a:95:85:6e:b2:9a:e0:73:a5:2a:91:0d: 1a:4b:bd:03:48:33:68:3e:54:1d:d5:85:9a:0d:e1:43:cf:32: be:e7:74:ef:55:cb:ae:d6:bb:9f:38:5e:36:80:ac:bb:8b:40: 75:ce:7e:f0:28:0a:fc:9d:8d:e8:e6:2f:96:26:3e:f7:68:52: 79:60:5f:c6:1b:5a:cd:11:14:95:68:6b:42:44:c9:27:10:ce: 82:97:78:0d:c4:d5:e9:0d:0c:53:79:5f:ad:00:b7:4b:74:77: 3b:50:5a:10:ec:2b:47:e2:5c:27:87:d8:71:69:91:8e:b1:15: 8e:3d:d9:da:64:b2:61:90:69:10:64:b4:33:da:d1:be:7c:f0: 58:b5:1a:94:63:df:55:1c:91:43:d3:57:fc:4b:96:0b:99:d0: 42:80:e4:6f:03:0f:02:1b:63:78:12:e2:b7:cd:05:b7:55:13: 2e:56:ee:91:de:67:d8:e1:6a:a2:13:18:12:54:7e:26:aa:09: 75:94:83:33 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUSu6jbGiHH00JHYFRvzQ3eyeiFU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz RUJEMTBDQTAeFw0yNjA0MTUwNzI2MjFaFw0yNzA0MTQwNzMxMjFaMDMxMTAvBgNV BAMTKDQyMzBCQkY1Qzc2MDE4RDVFNTY0RUIxNTVBQzQ1Qzc1ODI2NDk0RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk2tvqyfywSUM1F3DVISfVvpfP VlpQbU9zpeiFqBzro1+0ruQQjTFY3CRUFOUY8uhzjhJ48eyKqsnvF5HlRfnjL57T oHWtRAJUdcSTYQZlC/1I4cFQwWufRFzche1ak4DjuYVAZrqK3k1QBKqJZiX3H9Ry znk6hO3cSarZ4fevwEwrA2rYbgdBBmEUE8j3Ako2RM+sGnLHOZW0xjl8OselU65a K87Hy6lRov18lhvd26mWhJ3rDKBRRyLUX4p4iEWjJVCZPpkegnbf6p6XPLAwnhrN zKPVyRBZC4GalXUhutDb0fMQDqO8CK0spQQiJmr1gNf5qni4Dud2azPiUnmTAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUQjC79cdgGNXlZOsVWsRcdYJklPUwHwYDVR0j BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMS8zMTMzMzkyZTMx MzkzODJlMzEzMjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTMwMzczOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIvGfTANBgkqhkiG9w0BAQsFAAOCAQEAw7EGy6Wc1SdgeLGGjmJC ndQmL5otUGWbcH8X5FT/DKg1jdmiyD5BiSfBeddjLVlsHzDJ11slW3OhVOMXmpWF brKa4HOlKpENGku9A0gzaD5UHdWFmg3hQ88yvud071XLrta7nzheNoCsu4tAdc5+ 8CgK/J2N6OYvliY+92hSeWBfxhtazREUlWhrQkTJJxDOgpd4DcTV6Q0MU3lfrQC3 S3R3O1BaEOwrR+JcJ4fYcWmRjrEVjj3Z2mSyYZBpEGS0M9rRvnzwWLUalGPfVRyR Q9NX/EuWC5nQQoDkbwMPAhtjeBLit80Ft1UTLlbukd5n2OFqohMYElR+JqoJdZSD Mw== -----END CERTIFICATE-----Generated at Fri Apr 17 20:17:25 2026 by rpki-client