$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3133362e302f32342d3234203d3e203633363331.roa File: 3131392e3136312e3133362e302f32342d3234203d3e203633363331.roa (raw, json) Hash identifier: NksUuzaBeVkKNYYjX7N4wyQP9lOFOqUoF5HK3727RWk= Subject key identifier: 6D:90:AF:48:34:A8:39:8A:A6:AD:FC:EF:76:FE:8A:A1:9F:B2:C8:1B Certificate issuer: /CN=D9EB5C6DC17682949F5243587DA38740C3EEA953 Certificate serial: 28D87D1E86BB0DD06454BFD2D93CBB195C945015 Authority key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3133362e302f32342d3234203d3e203633363331.roa Signing time: Thu 16 Apr 2026 07:09:23 +0000 ROA not before: Thu 16 Apr 2026 07:04:23 +0000 ROA not after: Thu 15 Apr 2027 07:09:23 +0000 asID: 63631 IP address blocks: 119.161.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 13:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d8:7d:1e:86:bb:0d:d0:64:54:bf:d2:d9:3c:bb:19:5c:94:50:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953 Validity Not Before: Apr 16 07:04:23 2026 GMT Not After : Apr 15 07:09:23 2027 GMT Subject: CN=6D90AF4834A8398AA6ADFCEF76FE8AA19FB2C81B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:af:14:dd:50:d9:53:60:66:40:cf:5e:01:44: 4a:1e:09:a8:d7:b0:e2:e0:76:1b:7d:cd:7f:8c:c1: 61:72:c3:1e:e2:14:a6:3c:05:fa:f4:56:e5:46:4f: 34:a2:44:7d:16:7a:bd:87:38:93:bf:25:59:04:91: 19:a0:f7:07:f9:c3:a1:ba:fb:4c:05:ae:cc:3c:84: 16:bb:62:2f:8f:c4:f0:26:2d:61:a0:80:cd:0d:9a: 1e:53:b1:52:40:45:a6:e4:15:0d:08:79:6a:71:ac: 47:bd:43:a7:11:e4:ae:87:a8:65:23:54:9f:fe:6e: ed:c5:a9:8b:d6:d7:b7:7a:0d:ea:c9:b7:c3:64:cc: 64:f0:79:18:e9:73:4b:a4:b6:c1:6b:fb:84:5a:2a: 6f:aa:a5:8a:06:a0:aa:ca:ec:49:48:08:ec:d9:99: 6f:a4:ea:49:6d:55:dd:43:65:67:9f:8b:84:b4:ef: d7:e7:87:e1:4f:1f:53:dc:82:9b:3f:64:f6:f8:5e: f7:36:30:84:47:e1:2f:95:94:12:0f:ab:53:40:20: 2d:40:75:26:87:c1:cc:72:e7:c2:b1:91:ab:75:fc: 88:90:4e:0e:85:09:3d:88:98:c7:f5:6a:04:0c:cf: d5:90:4f:7a:d3:e7:72:ab:4a:18:ba:a5:21:38:a8: da:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:90:AF:48:34:A8:39:8A:A6:AD:FC:EF:76:FE:8A:A1:9F:B2:C8:1B X509v3 Authority Key Identifier: keyid:D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3133362e302f32342d3234203d3e203633363331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.161.136.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:3a:03:fc:5b:96:e5:e8:50:d4:d3:4a:1d:9b:88:d0:fe:e0: 35:a8:57:92:21:72:75:45:e5:98:18:92:38:b8:45:4c:7b:f3: 1f:cf:fb:b6:0d:a8:af:63:bc:0b:3d:c6:fa:9f:5f:dc:50:1c: 7d:85:77:cc:91:fa:2d:43:8c:01:77:44:3b:cf:26:bc:4d:fe: d8:12:d8:0a:a7:21:60:fc:f0:17:19:5d:bd:6e:49:39:4c:cc: b9:d4:7a:70:47:75:50:4e:f0:72:45:04:48:62:de:c6:6b:f1: 05:04:1d:b9:09:4e:9b:12:7a:1f:1f:a8:13:61:b0:b6:39:4e: 01:97:48:b7:92:d7:57:b1:2c:b0:33:dc:73:51:9d:02:62:14: 80:04:cb:fa:7a:45:8a:e9:24:d3:7b:ec:4c:51:9d:6d:e0:a1: 5c:06:e7:cb:25:1c:c0:19:cd:fb:49:98:da:1e:e1:09:a9:19: b0:95:72:06:1d:79:d1:e5:85:33:3f:9c:0b:66:2b:32:f1:71: 64:94:39:76:72:5f:04:4b:b4:60:c8:4b:1c:65:b9:1e:ce:30: 11:f3:78:79:3b:f5:cf:16:1e:f1:ab:c8:3c:59:61:5f:6b:ed: 2f:e5:91:16:92:94:61:8e:cc:8c:fe:80:d4:ed:50:fd:41:69: 03:92:4b:c2 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUKNh9Hoa7DdBkVL/S2Ty7GVyUUBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBD M0VFQTk1MzAeFw0yNjA0MTYwNzA0MjNaFw0yNzA0MTUwNzA5MjNaMDMxMTAvBgNV BAMTKDZEOTBBRjQ4MzRBODM5OEFBNkFERkNFRjc2RkU4QUExOUZCMkM4MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwrxTdUNlTYGZAz14BREoeCajX sOLgdht9zX+MwWFywx7iFKY8Bfr0VuVGTzSiRH0Wer2HOJO/JVkEkRmg9wf5w6G6 +0wFrsw8hBa7Yi+PxPAmLWGggM0Nmh5TsVJARabkFQ0IeWpxrEe9Q6cR5K6HqGUj VJ/+bu3FqYvW17d6DerJt8NkzGTweRjpc0uktsFr+4RaKm+qpYoGoKrK7ElICOzZ mW+k6kltVd1DZWefi4S079fnh+FPH1Pcgps/ZPb4Xvc2MIRH4S+VlBIPq1NAIC1A dSaHwcxy58Kxkat1/IiQTg6FCT2ImMf1agQMz9WQT3rT53KrShi6pSE4qNqfAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUbZCvSDSoOYqmrfzvdv6KoZ+yyBswHwYDVR0j BBgwFoAU2etcbcF2gpSfUkNYfaOHQMPuqVMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njg2NDY0MS8wL0Q5RUI1QzZEQzE3NjgyOTQ5RjUyNDM1ODdEQTM4 NzQwQzNFRUE5NTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBDM0VFQTk1My5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY4NjQ2NDEvMC8zMTMxMzkyZTMx MzYzMTJlMzEzMzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzMzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAHehiDANBgkqhkiG9w0BAQsFAAOCAQEATToD/FuW5ehQ1NNKHZuI 0P7gNahXkiFydUXlmBiSOLhFTHvzH8/7tg2or2O8Cz3G+p9f3FAcfYV3zJH6LUOM AXdEO88mvE3+2BLYCqchYPzwFxldvW5JOUzMudR6cEd1UE7wckUESGLexmvxBQQd uQlOmxJ6Hx+oE2GwtjlOAZdIt5LXV7EssDPcc1GdAmIUgATL+npFiukk03vsTFGd beChXAbnyyUcwBnN+0mY2h7hCakZsJVyBh150eWFMz+cC2YrMvFxZJQ5dnJfBEu0 YMhLHGW5Hs4wEfN4eTv1zxYe8avIPFlhX2vtL+WRFpKUYY7MjP6A1O1Q/UFpA5JL wg== -----END CERTIFICATE-----Generated at Fri Apr 17 01:49:12 2026 by rpki-client