$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3135322e302f32312d3231203d3e203539303738.roa File: 3133392e3139382e3135322e302f32312d3231203d3e203539303738.roa (raw, json) Hash identifier: ktfgBmwkTl2anIMjcuMb6KfC+tdo1/pNfJdNoWH1eNE= Subject key identifier: 3C:2E:86:A7:A4:37:80:3B:74:BA:70:4F:5E:E8:8D:96:D8:AF:44:AB Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Certificate serial: 5C01DF40F4995D8C92972BC8B62E5740D3A3D102 Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3135322e302f32312d3231203d3e203539303738.roa Signing time: Wed 15 Apr 2026 07:27:31 +0000 ROA not before: Wed 15 Apr 2026 07:22:31 +0000 ROA not after: Wed 14 Apr 2027 07:27:31 +0000 asID: 59078 IP address blocks: 139.198.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:01:df:40:f4:99:5d:8c:92:97:2b:c8:b6:2e:57:40:d3:a3:d1:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Validity Not Before: Apr 15 07:22:31 2026 GMT Not After : Apr 14 07:27:31 2027 GMT Subject: CN=3C2E86A7A437803B74BA704F5EE88D96D8AF44AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:31:16:54:db:d2:74:24:b1:4d:9a:67:4d:12: b6:57:e2:dc:9f:b1:c3:c2:a3:32:ec:d1:2c:6a:60: 4a:a9:d9:9d:7e:33:31:3f:72:e1:a2:72:0c:98:f2: 1c:64:f6:8f:7a:70:89:31:d8:f9:13:89:32:78:6f: 74:6b:b2:12:40:fd:2b:c3:f9:c2:4c:4e:c5:f6:d6: 8e:67:57:99:ae:27:1a:18:94:c3:cb:b6:4c:2d:22: 29:15:6a:ab:f9:22:c6:89:bb:a7:5f:ce:6b:7a:90: f9:d1:4c:ee:08:e2:dc:eb:19:0a:fa:b7:47:b2:9c: f9:eb:e0:41:e7:fa:84:e3:73:00:e0:18:e9:ff:06: 7f:24:9b:ad:19:f9:3d:c1:fd:69:ae:b7:f2:e2:64: a4:44:3d:d5:73:e6:8c:54:e1:f3:39:66:ec:56:d6: 84:97:39:03:2a:bc:ee:a3:58:25:7c:97:72:81:cd: 20:82:d1:42:18:fd:db:f0:45:5a:71:b9:f0:0b:c7: 05:5f:08:dd:0e:f5:63:b1:b3:36:c3:07:5e:ff:0d: 14:b3:e7:55:03:f4:ee:43:43:00:a3:19:7f:7b:c1: 9b:9f:bf:18:5e:d4:f4:9a:ae:38:b2:15:77:2c:27: aa:40:7e:81:b7:b6:3c:0d:99:e1:46:19:96:05:26: 21:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2E:86:A7:A4:37:80:3B:74:BA:70:4F:5E:E8:8D:96:D8:AF:44:AB X509v3 Authority Key Identifier: keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3135322e302f32312d3231203d3e203539303738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.198.152.0/21 Signature Algorithm: sha256WithRSAEncryption 1d:87:80:3d:c9:84:b8:34:81:b5:ae:e0:ee:a7:bd:9c:95:02: 60:c8:7f:25:0f:2e:35:91:0b:0a:f6:60:ad:40:a7:10:51:fd: 04:77:f5:74:83:d6:66:89:46:7b:83:80:95:a6:fe:63:d4:80: e8:1d:97:98:4e:7e:84:ad:b4:4b:0f:37:03:c3:c6:59:54:a9: de:b9:a2:5d:73:b1:4e:c6:02:41:75:5a:16:2b:b4:f4:a9:42: 2c:f4:77:d8:f5:d8:78:63:11:72:06:c9:32:fe:1b:13:a5:94: 3d:d3:48:62:5c:f9:fa:67:aa:cd:e3:b5:d8:d7:f6:2b:c8:6e: 2a:88:8c:62:56:ca:b5:d0:87:c2:0d:10:5d:38:86:a7:1b:82: 9e:2b:74:80:38:58:9c:df:6b:ee:db:1b:69:d9:53:64:6d:f8: 42:ef:d2:6d:1b:18:c5:fe:92:1b:0f:c9:c9:3d:73:c8:76:3d: 3d:35:49:78:7c:d2:32:de:93:9d:d1:02:d7:d8:69:45:35:b9: 49:e2:09:b4:6c:65:24:a4:99:5d:59:ca:5d:c5:2d:cd:56:7f: 16:c4:98:f3:18:60:be:34:ce:30:58:11:a0:1f:ae:c1:eb:6a: 8c:12:ec:87:c2:53:d8:55:f9:75:f0:04:87:5b:d6:9e:bf:a9: ba:49:62:cd -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUXAHfQPSZXYySlyvIti5XQNOj0QIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz RUJEMTBDQTAeFw0yNjA0MTUwNzIyMzFaFw0yNzA0MTQwNzI3MzFaMDMxMTAvBgNV BAMTKDNDMkU4NkE3QTQzNzgwM0I3NEJBNzA0RjVFRTg4RDk2RDhBRjQ0QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcMRZU29J0JLFNmmdNErZX4tyf scPCozLs0SxqYEqp2Z1+MzE/cuGicgyY8hxk9o96cIkx2PkTiTJ4b3RrshJA/SvD +cJMTsX21o5nV5muJxoYlMPLtkwtIikVaqv5IsaJu6dfzmt6kPnRTO4I4tzrGQr6 t0eynPnr4EHn+oTjcwDgGOn/Bn8km60Z+T3B/Wmut/LiZKREPdVz5oxU4fM5ZuxW 1oSXOQMqvO6jWCV8l3KBzSCC0UIY/dvwRVpxufALxwVfCN0O9WOxszbDB17/DRSz 51UD9O5DQwCjGX97wZufvxhe1PSarjiyFXcsJ6pAfoG3tjwNmeFGGZYFJiFXAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUPC6Gp6Q3gDt0unBPXuiNltivRKswHwYDVR0j BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMS8zMTMzMzkyZTMx MzkzODJlMzEzNTMyMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzUzOTMwMzczOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA4vGmDANBgkqhkiG9w0BAQsFAAOCAQEAHYeAPcmEuDSBta7g7qe9 nJUCYMh/JQ8uNZELCvZgrUCnEFH9BHf1dIPWZolGe4OAlab+Y9SA6B2XmE5+hK20 Sw83A8PGWVSp3rmiXXOxTsYCQXVaFiu09KlCLPR32PXYeGMRcgbJMv4bE6WUPdNI Ylz5+meqzeO12Nf2K8huKoiMYlbKtdCHwg0QXTiGpxuCnit0gDhYnN9r7tsbadlT ZG34Qu/SbRsYxf6SGw/JyT1zyHY9PTVJeHzSMt6TndEC19hpRTW5SeIJtGxlJKSZ XVnKXcUtzVZ/FsSY8xhgvjTOMFgRoB+uwetqjBLsh8JT2FX5dfAEh1vWnr+pukli zQ== -----END CERTIFICATE-----Generated at Fri Apr 17 22:12:53 2026 by rpki-client