$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e32342e302f32312d3231203d3e203539303738.roa File: 3133392e3139382e32342e302f32312d3231203d3e203539303738.roa (raw, json) Hash identifier: iK0yXXOsATEm2gp6HYkLBZvKbpiE4oM2RRdtcmMLpOM= Subject key identifier: 09:A1:F5:45:ED:53:F6:EE:0F:81:0B:B9:92:0E:35:CC:E5:5A:CA:E4 Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Certificate serial: 15D50E7D002D282DAD50E1539E89792151B37AFF Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e32342e302f32312d3231203d3e203539303738.roa Signing time: Wed 15 Apr 2026 07:27:30 +0000 ROA not before: Wed 15 Apr 2026 07:22:30 +0000 ROA not after: Wed 14 Apr 2027 07:27:30 +0000 asID: 59078 IP address blocks: 139.198.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d5:0e:7d:00:2d:28:2d:ad:50:e1:53:9e:89:79:21:51:b3:7a:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Validity Not Before: Apr 15 07:22:30 2026 GMT Not After : Apr 14 07:27:30 2027 GMT Subject: CN=09A1F545ED53F6EE0F810BB9920E35CCE55ACAE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0d:a6:de:da:79:a2:d5:dd:6b:ba:b4:a0:fd: c4:f0:ec:0e:e2:b2:e0:97:3d:1f:a5:d3:04:42:e2: e4:a6:7c:86:5d:45:88:b9:24:27:6d:02:0d:b2:26: 78:cf:3a:f0:6a:c1:da:29:d6:68:38:2c:f8:00:91: 52:89:52:0d:12:e5:99:b5:d0:59:2d:64:07:37:e6: 57:7a:66:d6:76:e5:f7:d8:7c:10:b9:0f:48:2e:31: 2c:cf:64:5c:e8:86:84:79:06:7d:1c:0c:9b:2c:5b: 9b:9d:d2:4e:52:f5:f9:0d:b4:af:f8:38:a9:3e:4b: 5d:dd:c8:a7:b5:f2:ee:12:e4:b4:89:19:97:22:c0: f2:1d:99:b2:2c:1d:29:4d:60:0b:5e:8e:9b:c4:f0: 1b:f8:5f:df:b8:9d:02:5c:96:1c:18:07:36:c4:1e: 0d:1a:26:74:a0:0a:f6:93:ad:bd:1e:d2:98:ea:fa: ab:26:73:4d:f1:fe:1f:47:05:9c:60:df:9e:13:94: ec:8f:78:22:d9:f0:b4:d5:87:89:de:f6:d0:07:07: a1:8b:fa:9c:64:e5:40:d2:b6:dc:6c:82:7f:78:31: 9b:9d:33:14:ae:57:c0:05:27:0c:98:ff:d1:2d:ab: 4d:63:15:3f:03:60:e5:23:4e:9c:b1:94:d1:1e:ef: f8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A1:F5:45:ED:53:F6:EE:0F:81:0B:B9:92:0E:35:CC:E5:5A:CA:E4 X509v3 Authority Key Identifier: keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e32342e302f32312d3231203d3e203539303738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.198.24.0/21 Signature Algorithm: sha256WithRSAEncryption 9b:24:c7:da:2a:82:7e:52:fa:c9:77:93:1b:32:65:73:70:a8: 44:a0:51:df:c4:82:71:6b:80:2e:2d:84:f1:e7:b3:88:4d:c8: 30:24:20:89:a7:5f:f6:3a:55:ef:2d:6f:a3:9c:ba:dc:25:e1: 62:54:b5:4e:ac:f6:dd:a4:bd:2f:79:48:63:30:fd:6d:4a:7d: e9:09:ac:66:31:2d:5d:48:09:cd:8e:b2:d2:79:53:6f:d9:ee: d4:7e:31:55:74:b2:57:a7:60:8b:c7:66:87:50:02:a4:8c:5d: 9b:d3:b1:bd:1d:c2:ed:80:51:ef:60:ac:87:fe:0d:90:a8:c7: ed:88:4f:04:3d:54:f6:8e:76:73:74:a6:86:9e:57:28:a9:73: 1b:5b:06:5e:e1:b6:e7:91:2f:96:b0:e3:17:7e:0e:81:c4:5f: fc:54:fb:ee:9d:1f:ae:62:38:7c:94:de:89:83:f2:55:9c:f9: 95:74:fe:96:4d:1e:75:4f:f8:50:fe:2b:5f:28:7e:52:76:11: cd:b8:ca:58:d7:c7:f4:52:95:5f:89:03:02:11:14:0d:90:67: 5c:4f:be:fb:39:fe:84:42:dc:ab:da:59:ae:b6:73:9a:b2:1f: 29:9b:d4:a2:30:02:a6:a0:24:04:d6:98:c7:57:d6:d3:28:be: 08:fa:97:b4 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUFdUOfQAtKC2tUOFTnol5IVGzev8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz RUJEMTBDQTAeFw0yNjA0MTUwNzIyMzBaFw0yNzA0MTQwNzI3MzBaMDMxMTAvBgNV BAMTKDA5QTFGNTQ1RUQ1M0Y2RUUwRjgxMEJCOTkyMEUzNUNDRTU1QUNBRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvDabe2nmi1d1rurSg/cTw7A7i suCXPR+l0wRC4uSmfIZdRYi5JCdtAg2yJnjPOvBqwdop1mg4LPgAkVKJUg0S5Zm1 0FktZAc35ld6ZtZ25ffYfBC5D0guMSzPZFzohoR5Bn0cDJssW5ud0k5S9fkNtK/4 OKk+S13dyKe18u4S5LSJGZciwPIdmbIsHSlNYAtejpvE8Bv4X9+4nQJclhwYBzbE Hg0aJnSgCvaTrb0e0pjq+qsmc03x/h9HBZxg354TlOyPeCLZ8LTVh4ne9tAHB6GL +pxk5UDSttxsgn94MZudMxSuV8AFJwyY/9Etq01jFT8DYOUjTpyxlNEe7/gtAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUCaH1Re1T9u4PgQu5kg41zOVayuQwHwYDVR0j BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDUyMzY1MS8xLzMxMzMzOTJlMzEz OTM4MmUzMjM0MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzUzOTMwMzczOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA4vGGDANBgkqhkiG9w0BAQsFAAOCAQEAmyTH2iqCflL6yXeTGzJlc3Co RKBR38SCcWuALi2E8eeziE3IMCQgiadf9jpV7y1vo5y63CXhYlS1Tqz23aS9L3lI YzD9bUp96QmsZjEtXUgJzY6y0nlTb9nu1H4xVXSyV6dgi8dmh1ACpIxdm9OxvR3C 7YBR72Csh/4NkKjH7YhPBD1U9o52c3Smhp5XKKlzG1sGXuG255EvlrDjF34OgcRf /FT77p0frmI4fJTeiYPyVZz5lXT+lk0edU/4UP4rXyh+UnYRzbjKWNfH9FKVX4kD AhEUDZBnXE+++zn+hELcq9pZrrZzmrIfKZvUojACpqAkBNaYx1fW0yi+CPqXtA== -----END CERTIFICATE-----Generated at Fri Apr 17 17:20:07 2026 by rpki-client