$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132362e302f32342d3234203d3e203538343636.roa File: 3133392e3139382e3132362e302f32342d3234203d3e203538343636.roa (raw, json) Hash identifier: atteLEylrbqARHHuQsVORONbJMgLXj2/gOEhHSsUFnU= Subject key identifier: D9:D4:C3:01:2D:FA:8C:DF:FA:5C:58:EE:A3:5F:8B:C2:40:43:10:F5 Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Certificate serial: 7C7D0AD7B0525EED5BBDFF311CFE27E5988DCC45 Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132362e302f32342d3234203d3e203538343636.roa Signing time: Wed 15 Apr 2026 07:47:04 +0000 ROA not before: Wed 15 Apr 2026 07:42:04 +0000 ROA not after: Wed 14 Apr 2027 07:47:04 +0000 asID: 58466 IP address blocks: 139.198.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:7d:0a:d7:b0:52:5e:ed:5b:bd:ff:31:1c:fe:27:e5:98:8d:cc:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Validity Not Before: Apr 15 07:42:04 2026 GMT Not After : Apr 14 07:47:04 2027 GMT Subject: CN=D9D4C3012DFA8CDFFA5C58EEA35F8BC2404310F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:60:53:2f:e0:c5:af:0a:23:47:e7:3a:21:4b: 22:2b:6a:48:0e:a1:d0:6c:5b:88:d8:95:2b:15:94: 8c:31:83:cd:a0:9e:73:2f:21:0f:9a:72:0e:b8:f0: 8e:1d:65:06:53:81:ec:11:36:07:2d:ff:d3:05:a6: 52:7d:04:34:ec:e6:77:30:dc:42:95:c4:80:99:44: 87:52:23:26:fa:f2:5c:44:85:bd:65:60:a0:aa:77: 67:b9:aa:36:49:79:6f:d1:b6:60:32:65:09:96:8a: b0:ae:6e:4f:62:f2:e3:72:ea:1e:df:f5:0c:8b:0e: 82:b9:45:d7:07:4a:39:2c:99:9c:58:1c:b9:e5:ef: eb:94:87:36:5d:58:81:5f:bc:71:dc:99:5c:29:f5: be:ca:a0:99:61:17:d0:01:b0:e7:d0:ec:5c:0c:c7: d6:79:0b:46:37:17:f5:b1:fe:7f:61:c6:45:4c:e5: db:9d:80:39:40:d2:d3:3e:87:e5:5d:85:9e:69:7f: bb:75:75:bd:cf:0a:53:37:df:13:6d:96:19:fc:ea: 80:b9:b8:c9:e0:3b:4c:2e:2a:d3:cc:64:ec:13:04: 85:40:6f:29:e7:cd:2f:03:d9:4a:9e:40:77:7b:51: be:ac:d0:34:f5:1d:39:37:38:46:2a:be:0e:78:43: 07:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D4:C3:01:2D:FA:8C:DF:FA:5C:58:EE:A3:5F:8B:C2:40:43:10:F5 X509v3 Authority Key Identifier: keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132362e302f32342d3234203d3e203538343636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.198.126.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:aa:c4:a6:ee:46:2b:dc:60:64:df:2d:e7:83:4e:5e:c8:01: 45:0d:38:41:45:0c:35:0a:e7:df:f8:03:0c:86:57:4b:50:0f: 7e:21:57:e7:f3:41:8e:5c:b3:3f:4a:35:de:a5:bc:63:c7:fe: 8a:e6:3a:f1:e7:45:b4:97:e3:61:b2:de:5e:59:8b:0a:32:24: 78:09:2a:35:95:61:5d:b7:0b:02:96:44:a1:4d:2a:43:bb:78: 0d:d8:2c:67:b9:0f:80:80:53:f4:5e:79:13:f8:23:8c:54:7e: 07:75:bd:5c:91:42:79:61:2c:b4:39:4a:84:8d:17:28:39:e9: 93:ef:04:3f:43:ca:8e:b1:c1:77:46:11:ac:40:fa:95:25:82: 0f:72:09:99:89:b8:95:0c:93:96:91:1b:4b:c8:a4:e6:9d:c3: 72:c3:83:45:b4:ee:bc:cd:4e:7d:99:08:ab:21:e2:62:0a:51: 15:1e:e6:4f:66:3e:77:2e:aa:67:30:70:63:69:17:25:01:f9: a1:f5:e7:c2:f5:aa:87:20:ef:b9:17:e6:23:83:8a:b4:f7:4f: aa:e6:c1:8f:cd:ee:ef:05:48:99:14:c1:63:6f:67:49:44:8e: da:e4:b5:08:0c:5b:bf:a6:9a:45:d1:ee:c5:0d:d5:19:75:e3: b2:9d:c2:8c -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUfH0K17BSXu1bvf8xHP4n5ZiNzEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz RUJEMTBDQTAeFw0yNjA0MTUwNzQyMDRaFw0yNzA0MTQwNzQ3MDRaMDMxMTAvBgNV BAMTKEQ5RDRDMzAxMkRGQThDREZGQTVDNThFRUEzNUY4QkMyNDA0MzEwRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjYFMv4MWvCiNH5zohSyIrakgO odBsW4jYlSsVlIwxg82gnnMvIQ+acg648I4dZQZTgewRNgct/9MFplJ9BDTs5ncw 3EKVxICZRIdSIyb68lxEhb1lYKCqd2e5qjZJeW/RtmAyZQmWirCubk9i8uNy6h7f 9QyLDoK5RdcHSjksmZxYHLnl7+uUhzZdWIFfvHHcmVwp9b7KoJlhF9ABsOfQ7FwM x9Z5C0Y3F/Wx/n9hxkVM5dudgDlA0tM+h+VdhZ5pf7t1db3PClM33xNtlhn86oC5 uMngO0wuKtPMZOwTBIVAbynnzS8D2UqeQHd7Ub6s0DT1HTk3OEYqvg54QwfVAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU2dTDAS36jN/6XFjuo1+LwkBDEPUwHwYDVR0j BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMS8zMTMzMzkyZTMx MzkzODJlMzEzMjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzODM0MzYzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIvGfjANBgkqhkiG9w0BAQsFAAOCAQEACqrEpu5GK9xgZN8t54NO XsgBRQ04QUUMNQrn3/gDDIZXS1APfiFX5/NBjlyzP0o13qW8Y8f+iuY68edFtJfj YbLeXlmLCjIkeAkqNZVhXbcLApZEoU0qQ7t4DdgsZ7kPgIBT9F55E/gjjFR+B3W9 XJFCeWEstDlKhI0XKDnpk+8EP0PKjrHBd0YRrED6lSWCD3IJmYm4lQyTlpEbS8ik 5p3DcsODRbTuvM1OfZkIqyHiYgpRFR7mT2Y+dy6qZzBwY2kXJQH5ofXnwvWqhyDv uRfmI4OKtPdPqubBj83u7wVImRTBY29nSUSO2uS1CAxbv6aaRdHuxQ3VGXXjsp3C jA== -----END CERTIFICATE-----Generated at Fri Apr 17 21:21:38 2026 by rpki-client