$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e372e302f32342d3234203d3e203539303738.roa File: 3133392e3139382e372e302f32342d3234203d3e203539303738.roa (raw, json) Hash identifier: 2xVh0VBzJX1OZJz2Zvy7P3mfRUZM+/UGzOmzo7nTXwc= Subject key identifier: D0:70:9F:5A:FC:41:A0:0D:1A:65:0B:90:76:3B:EA:CC:1D:66:DC:E1 Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Certificate serial: 104305784920827D40CF5CA0C1FF2CF2D701A7AF Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e372e302f32342d3234203d3e203539303738.roa Signing time: Wed 15 Apr 2026 07:21:27 +0000 ROA not before: Wed 15 Apr 2026 07:16:27 +0000 ROA not after: Wed 14 Apr 2027 07:21:27 +0000 asID: 59078 IP address blocks: 139.198.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:43:05:78:49:20:82:7d:40:cf:5c:a0:c1:ff:2c:f2:d7:01:a7:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Validity Not Before: Apr 15 07:16:27 2026 GMT Not After : Apr 14 07:21:27 2027 GMT Subject: CN=D0709F5AFC41A00D1A650B90763BEACC1D66DCE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1e:01:71:82:e4:3f:0b:5d:b5:8d:d9:5b:91: 77:33:78:5c:d7:62:67:59:00:e6:96:92:4c:10:36: e8:7b:be:c5:d1:a0:35:4c:50:c9:56:21:6b:78:7b: e7:bf:02:03:4d:06:83:9a:97:ed:ad:76:2c:16:89: 1f:c3:32:59:2d:70:59:07:b8:bc:32:46:c6:53:db: c8:7a:35:4c:4f:0b:22:50:d7:0f:a4:c5:5e:6f:82: 8e:aa:25:7d:05:b7:2d:a0:80:c7:1e:20:db:fb:56: 12:0d:59:4d:fa:ee:fa:6e:74:11:53:f6:ae:c5:11: 24:8f:f2:d0:ba:6c:ef:dc:3c:ec:3d:8b:97:4c:b7: 06:8c:e9:a9:53:6a:6e:11:1f:24:5a:0d:e9:22:13: 3a:43:b6:c0:ab:26:fd:3e:2a:28:9f:f6:f0:2c:b9: 9c:10:81:f0:bc:ab:54:a4:34:dd:26:45:3a:e8:10: f2:df:ce:dd:58:cc:41:5e:41:e3:5a:c9:a7:76:df: 53:b7:45:7a:47:5b:bf:d3:4f:f0:96:b8:9a:30:0f: 9b:48:58:f8:42:c1:d2:fe:c0:61:36:0c:3d:a6:c6: 85:18:c1:5d:84:c9:f2:45:8a:0b:f0:c7:a6:87:1a: 19:d0:55:85:4f:bb:bf:e7:b8:5e:2f:f5:d7:a6:93: 36:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:70:9F:5A:FC:41:A0:0D:1A:65:0B:90:76:3B:EA:CC:1D:66:DC:E1 X509v3 Authority Key Identifier: keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e372e302f32342d3234203d3e203539303738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.198.7.0/24 Signature Algorithm: sha256WithRSAEncryption 08:78:6a:53:f4:ef:0b:5e:9d:af:41:7d:d6:e9:5c:1c:75:04: 13:77:e2:45:e8:c6:5f:e4:dc:9d:9e:dd:3e:ca:df:73:9a:77: 32:a8:da:ae:7b:44:8b:62:cb:b1:a1:29:0f:5c:91:9b:6b:f7: 17:f5:4a:46:56:8a:b8:60:89:c1:75:d4:d5:bd:a3:90:47:fe: 1d:51:ea:17:f1:49:9f:e3:de:4f:1e:f1:df:57:97:aa:c2:61: 3f:9c:f0:24:00:94:18:97:f4:bb:f0:84:88:a9:c0:09:ab:54: 42:d9:0c:d3:0f:6f:1c:bd:6b:a8:e9:6c:4e:4a:b5:10:b7:0f: 29:bf:b8:a2:65:09:7b:2d:7a:f3:d8:2a:75:a3:5b:b8:09:8d: ae:9f:df:bd:69:e5:df:08:6d:3a:04:bb:b3:1d:af:69:a4:61: 31:c7:0c:61:8f:da:0e:b7:f1:14:c1:12:19:b3:05:d8:91:c9: e6:27:f8:b1:c1:41:2f:54:52:c8:b6:6f:e9:cc:db:03:99:f0: 91:87:2e:fd:7f:a3:1b:47:ff:7d:c2:24:dd:7f:8a:5a:f2:20: 78:9c:de:35:57:d5:ec:97:e4:30:f4:28:e0:97:ab:78:3d:74: f0:63:65:5d:b6:89:98:40:55:54:77:1c:03:c7:b1:24:51:57: 0f:84:ed:8a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUEEMFeEkggn1Az1ygwf8s8tcBp68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz RUJEMTBDQTAeFw0yNjA0MTUwNzE2MjdaFw0yNzA0MTQwNzIxMjdaMDMxMTAvBgNV BAMTKEQwNzA5RjVBRkM0MUEwMEQxQTY1MEI5MDc2M0JFQUNDMUQ2NkRDRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpHgFxguQ/C121jdlbkXczeFzX YmdZAOaWkkwQNuh7vsXRoDVMUMlWIWt4e+e/AgNNBoOal+2tdiwWiR/DMlktcFkH uLwyRsZT28h6NUxPCyJQ1w+kxV5vgo6qJX0Fty2ggMceINv7VhINWU367vpudBFT 9q7FESSP8tC6bO/cPOw9i5dMtwaM6alTam4RHyRaDekiEzpDtsCrJv0+Kiif9vAs uZwQgfC8q1SkNN0mRTroEPLfzt1YzEFeQeNayad231O3RXpHW7/TT/CWuJowD5tI WPhCwdL+wGE2DD2mxoUYwV2EyfJFigvwx6aHGhnQVYVPu7/nuF4v9demkzbNAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU0HCfWvxBoA0aZQuQdjvqzB1m3OEwHwYDVR0j BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTIzNjUxLzEvMzEzMzM5MmUzMTM5 MzgyZTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTMwMzczOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAIvGBzANBgkqhkiG9w0BAQsFAAOCAQEACHhqU/TvC16dr0F91ulcHHUEE3fi RejGX+TcnZ7dPsrfc5p3MqjarntEi2LLsaEpD1yRm2v3F/VKRlaKuGCJwXXU1b2j kEf+HVHqF/FJn+PeTx7x31eXqsJhP5zwJACUGJf0u/CEiKnACatUQtkM0w9vHL1r qOlsTkq1ELcPKb+4omUJey1689gqdaNbuAmNrp/fvWnl3whtOgS7sx2vaaRhMccM YY/aDrfxFMESGbMF2JHJ5if4scFBL1RSyLZv6czbA5nwkYcu/X+jG0f/fcIk3X+K WvIgeJzeNVfV7JfkMPQo4JereD108GNlXbaJmEBVVHccA8exJFFXD4Ttig== -----END CERTIFICATE-----Generated at Fri Apr 17 19:42:15 2026 by rpki-client