$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/36392e3233352e3138342e302f32312d3231203d3e20313334373631.roa File: 36392e3233352e3138342e302f32312d3231203d3e20313334373631.roa (raw, json) Hash identifier: np+j/2H1LcK7mut452khZieuC8xhFqCKScZ+LH57rOQ= Subject key identifier: 1F:A4:4C:4B:F0:0A:D5:BA:0E:4A:42:70:22:EF:CB:42:DB:AA:62:09 Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 70B2AFB05D37F11229D65AC3EA74DFF3DF58EFFF Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/36392e3233352e3138342e302f32312d3231203d3e20313334373631.roa Signing time: Wed 15 Apr 2026 02:32:11 +0000 ROA not before: Wed 15 Apr 2026 02:27:11 +0000 ROA not after: Wed 14 Apr 2027 02:32:11 +0000 asID: 134761 IP address blocks: 69.235.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 05:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b2:af:b0:5d:37:f1:12:29:d6:5a:c3:ea:74:df:f3:df:58:ef:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Apr 15 02:27:11 2026 GMT Not After : Apr 14 02:32:11 2027 GMT Subject: CN=1FA44C4BF00AD5BA0E4A427022EFCB42DBAA6209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e4:78:54:d5:fa:d8:45:2a:b4:91:6c:7c:4c: 0e:4e:0f:0d:cc:83:56:80:31:0a:63:00:e7:12:72: 74:49:4e:3e:95:3c:49:39:63:e4:08:25:1a:7f:58: 8c:64:68:99:67:15:56:02:70:52:e7:bf:da:1e:43: 6f:a5:42:70:0a:b6:95:7d:ee:5d:31:c7:67:9f:75: dc:b8:35:80:e7:91:5c:cc:3f:1d:b8:03:72:ed:36: 28:a8:1d:05:84:a1:51:4b:dc:e6:6e:97:bb:1d:ce: 3e:a7:1b:5c:6b:00:48:b4:6b:6b:90:39:df:27:3f: 1c:6e:99:f0:c1:9e:e1:f5:d9:48:a9:da:c9:00:cc: 57:81:84:99:bd:52:f4:90:f3:9b:64:d6:19:03:32: 20:62:1e:da:de:1a:81:47:b0:12:79:ed:b4:2e:fd: 41:fb:f1:10:30:9a:91:7e:50:36:0d:e5:b6:dd:66: 2e:df:c3:5b:f4:87:d2:d3:51:50:81:07:5f:29:77: 95:52:21:f8:17:0c:56:ee:d8:93:28:f4:11:99:98: cf:f9:29:16:d6:a0:2f:45:8f:42:c9:74:ab:9c:59: a4:a2:5f:28:90:1b:8e:83:05:b9:95:df:a8:30:b1: af:92:74:9e:90:8a:f5:5c:7b:4a:04:79:9a:ac:48: 75:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A4:4C:4B:F0:0A:D5:BA:0E:4A:42:70:22:EF:CB:42:DB:AA:62:09 X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/36392e3233352e3138342e302f32312d3231203d3e20313334373631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.235.184.0/21 Signature Algorithm: sha256WithRSAEncryption ab:ee:f5:ce:bd:69:8f:4b:d3:94:4a:ef:8c:7e:77:e8:57:02: f1:44:4e:b8:9c:6d:70:1a:4d:18:a7:c4:fa:fd:23:c9:d4:bb: 18:2c:6d:cd:1f:c0:a0:82:d8:44:2c:bb:e0:2d:99:c0:3d:81: 3c:68:b9:a3:6d:75:b7:29:9d:6c:99:7e:2a:5c:3d:fb:03:17: e5:bb:e8:2e:ef:af:2d:30:f1:47:44:67:71:ae:17:5c:a3:35: 1a:36:9c:86:25:a8:82:be:d0:61:1e:14:fb:67:2a:4e:9a:6a: fc:df:06:fc:b5:8e:25:e7:1d:ff:d3:3a:22:ee:9d:b8:47:a8: 84:16:00:b4:3a:22:dc:e3:d4:83:83:74:8e:86:8b:03:46:80: ba:0e:95:d4:9f:68:40:74:1b:2c:c8:71:bb:86:1f:7d:d8:4a: 59:40:be:3f:83:1e:75:51:54:74:aa:a5:a0:77:6b:b5:d5:69: 05:84:dc:c9:ea:37:6d:4b:b4:57:9c:f7:94:01:e5:d4:e1:6e: 53:69:1c:ae:af:42:c9:c7:be:e9:13:82:92:d8:2b:d1:c6:54: ab:0f:c2:10:61:9c:5b:34:2f:29:5e:5f:ac:85:6d:a7:b2:a7: bb:05:67:84:5a:a2:e2:97:86:63:6e:7a:ca:18:15:57:a8:da: 03:67:a8:d9 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUcLKvsF038RIp1lrD6nTf899Y7/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA0MTUwMjI3MTFaFw0yNzA0MTQwMjMyMTFaMDMxMTAvBgNV BAMTKDFGQTQ0QzRCRjAwQUQ1QkEwRTRBNDI3MDIyRUZDQjQyREJBQTYyMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC15HhU1frYRSq0kWx8TA5ODw3M g1aAMQpjAOcScnRJTj6VPEk5Y+QIJRp/WIxkaJlnFVYCcFLnv9oeQ2+lQnAKtpV9 7l0xx2efddy4NYDnkVzMPx24A3LtNiioHQWEoVFL3OZul7sdzj6nG1xrAEi0a2uQ Od8nPxxumfDBnuH12Uip2skAzFeBhJm9UvSQ85tk1hkDMiBiHtreGoFHsBJ57bQu /UH78RAwmpF+UDYN5bbdZi7fw1v0h9LTUVCBB18pd5VSIfgXDFbu2JMo9BGZmM/5 KRbWoC9Fj0LJdKucWaSiXyiQG46DBbmV36gwsa+SdJ6QivVce0oEeZqsSHV3AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUH6RMS/AK1boOSkJwIu/LQtuqYgkwHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5ODI0MDMvMS8zNjM5MmUzMjMz MzUyZTMxMzgzNDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMxMzMzNDM3MzYzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA0XruDANBgkqhkiG9w0BAQsFAAOCAQEAq+71zr1pj0vTlErvjH53 6FcC8UROuJxtcBpNGKfE+v0jydS7GCxtzR/AoILYRCy74C2ZwD2BPGi5o211tymd bJl+Klw9+wMX5bvoLu+vLTDxR0Rnca4XXKM1GjachiWogr7QYR4U+2cqTppq/N8G /LWOJecd/9M6Iu6duEeohBYAtDoi3OPUg4N0joaLA0aAug6V1J9oQHQbLMhxu4Yf fdhKWUC+P4MedVFUdKqloHdrtdVpBYTcyeo3bUu0V5z3lAHl1OFuU2kcrq9Cyce+ 6ROCktgr0cZUqw/CEGGcWzQvKV5frIVtp7KnuwVnhFqi4peGY256yhgVV6jaA2eo 2Q== -----END CERTIFICATE-----Generated at Fri Apr 17 19:42:16 2026 by rpki-client