$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e34302e302f32312d3231203d3e203539303738.roa File: 3133392e3139382e34302e302f32312d3231203d3e203539303738.roa (raw, json) Hash identifier: gEozNrwkxzxmuVcN10vm+r+HUv6UV1OuQ6SN0EvNQrQ= Subject key identifier: 17:2E:3D:84:6C:CE:67:AC:15:AE:15:C3:0F:BD:AF:2B:C4:31:87:4A Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Certificate serial: 5F4A714546E5DA181C55A8D03A07394288C181 Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e34302e302f32312d3231203d3e203539303738.roa Signing time: Wed 15 Apr 2026 07:27:31 +0000 ROA not before: Wed 15 Apr 2026 07:22:31 +0000 ROA not after: Wed 14 Apr 2027 07:27:31 +0000 asID: 59078 IP address blocks: 139.198.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:4a:71:45:46:e5:da:18:1c:55:a8:d0:3a:07:39:42:88:c1:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Validity Not Before: Apr 15 07:22:31 2026 GMT Not After : Apr 14 07:27:31 2027 GMT Subject: CN=172E3D846CCE67AC15AE15C30FBDAF2BC431874A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cc:aa:b9:31:6e:62:e6:63:83:cf:18:14:63: 35:28:ce:d5:f4:b1:01:45:13:b7:41:6b:d4:9c:2c: be:db:32:fe:80:f1:ad:ae:64:b1:c3:2e:88:ca:8c: ef:74:20:a4:21:40:8a:c5:b8:cc:ec:a1:60:99:18: d3:1a:3a:8a:05:62:a5:fb:c3:e2:8c:51:4f:12:d6: 4f:55:be:ba:1a:47:c1:79:dc:4c:7f:06:a7:29:f0: c1:9b:36:b9:b3:13:7f:2e:f3:2e:a9:2e:5e:a7:43: a0:28:68:8a:13:b7:93:b8:33:56:63:06:dd:cc:aa: 76:47:1a:7f:8c:68:1f:b9:16:fb:b4:8f:e1:5d:24: 0e:bf:09:85:12:38:5a:e5:bd:cc:2f:68:bc:10:fa: 52:d9:ec:4b:fa:dd:70:86:b5:b6:2d:e3:38:5e:e9: 1b:95:d5:00:82:c3:aa:1f:6a:46:79:63:ee:47:bf: 56:41:d5:95:ec:f3:d8:f4:40:93:d4:a3:47:86:25: e8:47:72:8d:60:b8:c2:d0:f7:67:91:6c:c2:c2:5c: 02:1d:18:a3:3d:bc:a8:6d:db:99:c4:da:cf:1d:03: 93:2f:7e:29:1c:bd:f7:14:e2:85:b7:bc:61:86:9a: 2c:be:1e:6d:8d:2f:8a:b1:f6:d0:20:cd:d5:b3:e6: 90:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2E:3D:84:6C:CE:67:AC:15:AE:15:C3:0F:BD:AF:2B:C4:31:87:4A X509v3 Authority Key Identifier: keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e34302e302f32312d3231203d3e203539303738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.198.40.0/21 Signature Algorithm: sha256WithRSAEncryption 98:0a:b4:d6:8b:70:35:41:39:b3:9a:f4:8a:fe:ef:e0:05:57: 77:32:d9:fd:66:81:03:cc:29:a4:78:91:c1:d9:d0:1b:82:e6: ab:91:c7:27:d8:8e:24:52:4e:84:a4:fa:39:62:fc:9b:1d:3d: f8:ad:32:89:f3:6e:84:f0:22:5d:56:25:a8:31:cc:07:1a:ed: cb:33:08:1f:ac:71:f2:79:86:26:16:37:ad:a9:6c:01:2b:e1: 6d:7a:2c:e9:04:7e:bb:24:90:24:66:8e:1f:b6:0e:2e:69:55: 7b:8a:f8:9c:e4:21:b4:69:e7:ed:60:62:6a:a0:30:00:04:3d: 2c:dc:c4:3e:0d:5c:4f:14:27:91:8a:fa:ed:ab:ac:13:67:64: 22:43:13:5a:6b:d1:e0:f3:20:f6:b7:d8:7c:2d:07:b1:73:ce: c5:f2:23:d5:6f:91:fa:fc:44:03:b5:b1:3e:c8:08:fe:43:02: 4e:d5:52:eb:18:51:7d:fe:9a:10:e3:28:1a:47:18:f6:49:7f: f2:60:27:3d:8a:3e:b5:9a:c5:25:cc:f6:59:04:b5:87:d9:f3: 8d:72:08:64:dc:80:33:e5:e6:46:4a:83:04:d1:13:e5:07:77: 02:29:b9:b0:0a:0a:d6:e4:72:7c:b6:be:c8:58:61:f3:77:99: c1:38:02:15 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgITX0pxRUbl2hgcVajQOgc5QojBgTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygwMUZCNTYwOUZEMkFBNTY3QUQ3QUY2OUNEMjBDQzRBQjNF QkQxMENBMB4XDTI2MDQxNTA3MjIzMVoXDTI3MDQxNDA3MjczMVowMzExMC8GA1UE AxMoMTcyRTNEODQ2Q0NFNjdBQzE1QUUxNUMzMEZCREFGMkJDNDMxODc0QTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMXMqrkxbmLmY4PPGBRjNSjO1fSx AUUTt0Fr1Jwsvtsy/oDxra5kscMuiMqM73QgpCFAisW4zOyhYJkY0xo6igVipfvD 4oxRTxLWT1W+uhpHwXncTH8GpynwwZs2ubMTfy7zLqkuXqdDoChoihO3k7gzVmMG 3cyqdkcaf4xoH7kW+7SP4V0kDr8JhRI4WuW9zC9ovBD6UtnsS/rdcIa1ti3jOF7p G5XVAILDqh9qRnlj7ke/VkHVlezz2PRAk9SjR4Yl6EdyjWC4wtD3Z5FswsJcAh0Y oz28qG3bmcTazx0Dky9+KRy99xTihbe8YYaaLL4ebY0virH20CDN1bPmkCUCAwEA AaOCAhQwggIQMB0GA1UdDgQWBBQXLj2EbM5nrBWuFcMPva8rxDGHSjAfBgNVHSME GDAWgBQB+1YJ/SqlZ6169pzSDMSrPr0QyjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0f BGwwajBooGagZIZicnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1 NTc5NTM0Mzk0NTIzNjUxLzEvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0 QUIzRUJEMTBDQS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3lu YzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUwOTA2NzU3MTUv MC8wMUZCNTYwOUZEMkFBNTY3QUQ3QUY2OUNEMjBDQzRBQjNFQkQxMENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTIzNjUxLzEvMzEzMzM5MmUzMTM5 MzgyZTM0MzAyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNTM5MzAzNzM4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQDi8YoMA0GCSqGSIb3DQEBCwUAA4IBAQCYCrTWi3A1QTmzmvSK/u/gBVd3 Mtn9ZoEDzCmkeJHB2dAbguarkccn2I4kUk6EpPo5YvybHT34rTKJ826E8CJdViWo McwHGu3LMwgfrHHyeYYmFjetqWwBK+FteizpBH67JJAkZo4ftg4uaVV7ivic5CG0 aeftYGJqoDAABD0s3MQ+DVxPFCeRivrtq6wTZ2QiQxNaa9Hg8yD2t9h8LQexc87F 8iPVb5H6/EQDtbE+yAj+QwJO1VLrGFF9/poQ4ygaRxj2SX/yYCc9ij61msUlzPZZ BLWH2fONcghk3IAz5eZGSoME0RPlB3cCKbmwCgrW5HJ8tr7IWGHzd5nBOAIV -----END CERTIFICATE-----Generated at Sat Apr 18 07:28:46 2026 by rpki-client