$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132372e302f32342d3234203d3e203538343636.roa File: 3133392e3139382e3132372e302f32342d3234203d3e203538343636.roa (raw, json) Hash identifier: 26aZx5YJbEZklxvIMs78R+7EGSuY0loQx6Q/kT1l5fc= Subject key identifier: 3A:74:2A:F8:81:2C:AB:DE:93:3D:DE:6E:7E:03:7E:A8:68:DC:C5:EC Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Certificate serial: 21AD81F60DA0E47D9B1B80576757B561804DA355 Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132372e302f32342d3234203d3e203538343636.roa Signing time: Wed 15 Apr 2026 07:47:04 +0000 ROA not before: Wed 15 Apr 2026 07:42:04 +0000 ROA not after: Wed 14 Apr 2027 07:47:04 +0000 asID: 58466 IP address blocks: 139.198.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ad:81:f6:0d:a0:e4:7d:9b:1b:80:57:67:57:b5:61:80:4d:a3:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Validity Not Before: Apr 15 07:42:04 2026 GMT Not After : Apr 14 07:47:04 2027 GMT Subject: CN=3A742AF8812CABDE933DDE6E7E037EA868DCC5EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9d:db:a4:ad:db:cf:0f:35:ee:a6:6b:d6:9b: f9:59:05:dd:36:8b:5e:58:8c:74:24:02:6d:bd:a5: 77:82:69:23:14:61:ac:5f:f1:22:b5:ab:5e:c0:f6: 97:e7:2f:4c:aa:f6:72:a1:60:6e:ef:cb:28:de:83: c5:68:73:2c:22:ec:e7:21:50:b8:f4:fa:f7:4a:47: 51:57:6f:97:c6:59:91:83:45:44:eb:f9:a7:a2:19: fc:21:28:84:30:61:19:27:0a:a5:95:60:aa:17:ab: d3:38:89:5c:ed:90:9e:4c:6e:e7:23:f0:2d:0b:90: 8b:e5:aa:bd:6b:fb:d2:eb:1a:ac:8b:f5:a1:cd:34: c5:80:b2:af:c6:d6:b0:51:83:5b:4b:8c:05:e9:6e: 40:10:9f:ef:06:3b:0a:e8:f4:8e:46:94:eb:75:d4: b2:c3:17:e4:be:6a:cc:0d:db:66:09:38:be:07:bb: 68:27:cc:17:99:b1:04:4d:68:71:4d:c0:56:98:d5: 6c:fe:14:a6:6a:8a:d4:36:59:2c:33:8f:90:7f:ec: b2:ba:e4:02:82:3f:62:bb:a5:94:d0:4f:4a:87:d4: d5:b8:1c:66:94:d2:21:d2:24:2a:67:ae:16:53:02: b2:25:0d:d1:bd:78:99:19:bc:4f:2b:9b:65:9b:d2: 26:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:74:2A:F8:81:2C:AB:DE:93:3D:DE:6E:7E:03:7E:A8:68:DC:C5:EC X509v3 Authority Key Identifier: keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132372e302f32342d3234203d3e203538343636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.198.127.0/24 Signature Algorithm: sha256WithRSAEncryption b2:de:54:63:86:ea:a4:ea:b0:ef:c7:0d:0b:b2:aa:a1:57:69: fd:41:44:79:83:ba:bd:c7:0b:ce:fe:05:de:2e:18:c9:fc:fd: d9:10:8d:58:ed:d4:90:17:70:5a:c7:bc:00:bc:4d:9c:5c:ac: cc:02:1e:1e:0a:ee:a1:d8:bc:ee:bc:9e:53:cd:46:16:af:f6: 1c:a2:bc:68:ac:ff:90:bc:ab:2f:88:e0:37:7f:55:1e:fc:9e: f1:4e:31:34:df:cb:7d:19:a2:5d:dd:b7:0b:91:9b:21:01:81: e0:43:d0:d4:5c:59:02:2e:5f:48:b3:93:c1:fb:43:db:61:4a: b4:a5:07:05:95:33:68:2b:2d:72:e9:28:61:f5:ab:28:06:b3: ff:e4:3d:e0:93:7e:4b:f5:19:2e:af:da:b6:d5:de:a0:64:1c: 19:ee:16:15:14:f7:c3:40:f7:62:2b:ac:42:59:2d:7c:01:29: 3e:09:e4:24:d3:1c:70:bf:6d:ff:6a:eb:e3:97:50:1a:40:bc: f1:e6:ac:2d:f6:9c:fb:6a:d6:fc:25:a5:3b:51:d7:dc:cd:4f: 53:3d:7d:26:79:ce:3e:25:15:f5:0f:f0:56:55:9b:e8:43:6d: a4:82:a2:5a:41:3f:b9:c0:0a:01:e4:02:f6:9e:24:64:d6:55: c4:3d:ab:dc -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUIa2B9g2g5H2bG4BXZ1e1YYBNo1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz RUJEMTBDQTAeFw0yNjA0MTUwNzQyMDRaFw0yNzA0MTQwNzQ3MDRaMDMxMTAvBgNV BAMTKDNBNzQyQUY4ODEyQ0FCREU5MzNEREU2RTdFMDM3RUE4NjhEQ0M1RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxndukrdvPDzXupmvWm/lZBd02 i15YjHQkAm29pXeCaSMUYaxf8SK1q17A9pfnL0yq9nKhYG7vyyjeg8Vocywi7Och ULj0+vdKR1FXb5fGWZGDRUTr+aeiGfwhKIQwYRknCqWVYKoXq9M4iVztkJ5Mbucj 8C0LkIvlqr1r+9LrGqyL9aHNNMWAsq/G1rBRg1tLjAXpbkAQn+8GOwro9I5GlOt1 1LLDF+S+aswN22YJOL4Hu2gnzBeZsQRNaHFNwFaY1Wz+FKZqitQ2WSwzj5B/7LK6 5AKCP2K7pZTQT0qH1NW4HGaU0iHSJCpnrhZTArIlDdG9eJkZvE8rm2Wb0ibtAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUOnQq+IEsq96TPd5ufgN+qGjcxewwHwYDVR0j BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMS8zMTMzMzkyZTMx MzkzODJlMzEzMjM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzODM0MzYzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIvGfzANBgkqhkiG9w0BAQsFAAOCAQEAst5UY4bqpOqw78cNC7Kq oVdp/UFEeYO6vccLzv4F3i4Yyfz92RCNWO3UkBdwWse8ALxNnFyszAIeHgruodi8 7ryeU81GFq/2HKK8aKz/kLyrL4jgN39VHvye8U4xNN/LfRmiXd23C5GbIQGB4EPQ 1FxZAi5fSLOTwftD22FKtKUHBZUzaCstcukoYfWrKAaz/+Q94JN+S/UZLq/attXe oGQcGe4WFRT3w0D3YiusQlktfAEpPgnkJNMccL9t/2rr45dQGkC88easLfac+2rW /CWlO1HX3M1PUz19JnnOPiUV9Q/wVlWb6ENtpIKiWkE/ucAKAeQC9p4kZNZVxD2r 3A== -----END CERTIFICATE-----Generated at Fri Apr 17 21:21:51 2026 by rpki-client