$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132372e302f32342d3234203d3e203539303738.roa File: 3133392e3139382e3132372e302f32342d3234203d3e203539303738.roa (raw, json) Hash identifier: fKHoZNCrvQCxBGfy7aSnp5/giXE2eAQXJPQDxLMnnh8= Subject key identifier: B5:E8:83:DD:93:19:BC:6B:DF:FB:4A:84:6B:9E:1A:07:6F:EF:2F:C5 Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Certificate serial: 2000BB79201077CE5437BA85B50406554B39F626 Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132372e302f32342d3234203d3e203539303738.roa Signing time: Wed 15 Apr 2026 07:31:21 +0000 ROA not before: Wed 15 Apr 2026 07:26:21 +0000 ROA not after: Wed 14 Apr 2027 07:31:21 +0000 asID: 59078 IP address blocks: 139.198.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:00:bb:79:20:10:77:ce:54:37:ba:85:b5:04:06:55:4b:39:f6:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Validity Not Before: Apr 15 07:26:21 2026 GMT Not After : Apr 14 07:31:21 2027 GMT Subject: CN=B5E883DD9319BC6BDFFB4A846B9E1A076FEF2FC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f7:c5:c5:10:1e:a9:f4:8d:4d:06:ee:d7:3e: 04:44:da:14:2f:13:39:06:3a:9c:8f:1d:39:ea:1e: 36:61:ac:1b:91:30:93:6e:77:4f:3c:16:5c:66:84: 45:18:2b:c7:06:0c:f7:43:72:45:f4:04:72:d7:ff: 76:84:ef:80:31:47:33:b5:be:91:09:38:8b:3b:32: 74:95:d7:e1:61:a6:7a:4b:f1:13:ef:9b:f6:67:97: 51:cf:5c:0d:9c:4b:85:92:2d:eb:b6:ee:be:8c:9a: c6:55:52:6a:62:65:0d:57:39:db:fd:4c:1b:85:ea: a3:de:f7:f1:30:98:47:3f:4b:f7:8c:0e:a6:41:9c: a5:fe:60:9c:13:dc:5f:24:e4:b0:3b:47:a4:be:3e: 17:58:19:ad:a8:f7:72:fe:32:da:64:87:59:51:68: 62:5e:bd:9a:75:9a:a5:5d:7c:d1:c9:fe:27:bb:74: 74:5c:2b:bb:9d:f6:66:36:30:05:a1:a2:4b:31:d8: 46:20:ab:64:a1:0e:c4:8c:cb:6b:48:f5:84:45:17: 62:ec:75:4f:c7:a5:51:f7:79:85:fb:1a:0b:66:8f: 09:76:e1:bf:42:23:72:c7:0e:c3:7b:ed:96:a0:a9: a3:de:fc:5d:cb:c2:ae:00:c7:50:2d:a2:4c:fd:b1: f0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E8:83:DD:93:19:BC:6B:DF:FB:4A:84:6B:9E:1A:07:6F:EF:2F:C5 X509v3 Authority Key Identifier: keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132372e302f32342d3234203d3e203539303738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.198.127.0/24 Signature Algorithm: sha256WithRSAEncryption ac:07:92:c6:c1:23:7e:ce:e1:c5:68:a2:d9:40:72:f3:d9:74: 1e:de:23:3d:9b:11:57:23:7e:8f:e7:60:10:ea:b9:ac:bf:c5: 7d:f5:53:9f:ab:d6:36:60:55:03:5f:ed:88:87:72:e1:3b:53: f6:9a:63:e1:f0:6b:7f:18:56:ae:18:ca:92:53:b1:46:c0:c5: 9e:f7:2a:13:30:79:89:aa:b7:c0:5c:2c:c5:83:39:a9:16:61: db:4c:61:25:c9:1f:d8:c4:4f:7b:1b:a7:eb:ed:b2:1d:46:51: 18:ea:45:81:88:42:f7:85:8b:6b:64:98:0d:c8:13:d1:5f:a9: 9e:66:37:63:e7:d1:94:a9:b8:da:ba:e1:5d:12:21:46:80:ec: f0:b6:4f:9f:83:73:fb:26:47:37:e9:25:4e:7b:e9:20:f1:a1: 67:ce:5c:f5:56:21:37:1c:46:35:29:11:ec:f1:10:7e:7a:b1: 80:4a:e7:d4:77:79:df:c7:72:67:e2:f0:ef:2b:d7:b1:18:4e: 3a:02:e9:c8:59:19:f6:9c:dc:63:65:d2:d5:f0:ee:76:97:d3: ca:74:94:d8:e9:f3:21:24:c4:4f:7b:a7:e3:b6:46:9a:6b:06: 44:52:cb:d3:69:7a:a0:7d:3e:c5:f1:e1:e9:3a:e0:2e:a5:98: 17:21:e5:f5 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUIAC7eSAQd85UN7qFtQQGVUs59iYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz RUJEMTBDQTAeFw0yNjA0MTUwNzI2MjFaFw0yNzA0MTQwNzMxMjFaMDMxMTAvBgNV BAMTKEI1RTg4M0REOTMxOUJDNkJERkZCNEE4NDZCOUUxQTA3NkZFRjJGQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC298XFEB6p9I1NBu7XPgRE2hQv EzkGOpyPHTnqHjZhrBuRMJNud088FlxmhEUYK8cGDPdDckX0BHLX/3aE74AxRzO1 vpEJOIs7MnSV1+FhpnpL8RPvm/Znl1HPXA2cS4WSLeu27r6MmsZVUmpiZQ1XOdv9 TBuF6qPe9/EwmEc/S/eMDqZBnKX+YJwT3F8k5LA7R6S+PhdYGa2o93L+Mtpkh1lR aGJevZp1mqVdfNHJ/ie7dHRcK7ud9mY2MAWhoksx2EYgq2ShDsSMy2tI9YRFF2Ls dU/HpVH3eYX7Ggtmjwl24b9CI3LHDsN77ZagqaPe/F3Lwq4Ax1Atokz9sfALAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUteiD3ZMZvGvf+0qEa54aB2/vL8UwHwYDVR0j BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMS8zMTMzMzkyZTMx MzkzODJlMzEzMjM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTMwMzczOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIvGfzANBgkqhkiG9w0BAQsFAAOCAQEArAeSxsEjfs7hxWii2UBy 89l0Ht4jPZsRVyN+j+dgEOq5rL/FffVTn6vWNmBVA1/tiIdy4TtT9ppj4fBrfxhW rhjKklOxRsDFnvcqEzB5iaq3wFwsxYM5qRZh20xhJckf2MRPexun6+2yHUZRGOpF gYhC94WLa2SYDcgT0V+pnmY3Y+fRlKm42rrhXRIhRoDs8LZPn4Nz+yZHN+klTnvp IPGhZ85c9VYhNxxGNSkR7PEQfnqxgErn1Hd538dyZ+Lw7yvXsRhOOgLpyFkZ9pzc Y2XS1fDudpfTynSU2OnzISTET3un47ZGmmsGRFLL02l6oH0+xfHh6TrgLqWYFyHl 9Q== -----END CERTIFICATE-----Generated at Fri Apr 17 23:30:26 2026 by rpki-client