$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3134342e302f32342d3234203d3e203633363331.roa File: 3131392e3136312e3134342e302f32342d3234203d3e203633363331.roa (raw, json) Hash identifier: 6ovO21OX+Y8oKycYWcOevNdq7wTJgYIGsvp+nnMw1x8= Subject key identifier: DE:77:3A:97:9E:95:0F:1C:25:99:4D:FE:A5:71:09:A6:BE:C3:12:B5 Certificate issuer: /CN=D9EB5C6DC17682949F5243587DA38740C3EEA953 Certificate serial: 179024CCAB584CBA1246D8142B9B01E4A1EFC172 Authority key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3134342e302f32342d3234203d3e203633363331.roa Signing time: Thu 16 Apr 2026 07:09:24 +0000 ROA not before: Thu 16 Apr 2026 07:04:24 +0000 ROA not after: Thu 15 Apr 2027 07:09:24 +0000 asID: 63631 IP address blocks: 119.161.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 08:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:90:24:cc:ab:58:4c:ba:12:46:d8:14:2b:9b:01:e4:a1:ef:c1:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953 Validity Not Before: Apr 16 07:04:24 2026 GMT Not After : Apr 15 07:09:24 2027 GMT Subject: CN=DE773A979E950F1C25994DFEA57109A6BEC312B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:56:32:e7:75:d0:13:42:d0:b5:96:43:ea:f5: 6e:a0:65:4f:3c:5c:b7:1f:a8:fb:25:91:4b:9e:2a: 32:9d:64:a8:6c:3d:7d:05:c7:4b:53:2b:61:b4:d3: d2:e6:e9:41:9f:61:4c:df:f7:0e:58:57:12:ee:66: 2d:74:43:15:10:a9:ab:01:8e:3a:d2:2b:e4:22:a0: d4:5c:87:3e:78:24:6c:8d:d1:da:40:7e:98:2b:63: 1e:88:58:83:1d:c2:a1:77:db:fd:cf:d4:28:84:63: d4:50:11:d3:fe:07:a6:8e:a6:d1:18:57:56:5c:eb: a7:d8:f2:2a:87:68:f8:ec:6a:b5:f5:4f:d0:43:f8: e9:84:e4:1b:d8:47:43:0c:15:c6:e7:12:5f:50:1d: a8:ee:56:35:be:02:6c:0b:62:6c:af:3c:51:b0:f9: 5d:5a:bb:f1:b0:0d:57:11:77:e5:ce:fa:5a:f0:0e: 46:8e:26:02:d1:d6:fe:42:de:dd:29:60:92:3f:b7: ce:2d:a0:94:0c:fd:04:81:53:e5:ff:39:82:a7:13: 92:fe:d1:c9:00:31:21:10:23:aa:84:04:80:23:64: 21:f4:08:0f:0e:6c:01:6c:d8:8f:d8:2e:b8:25:b7: 5f:7d:04:5e:47:61:5f:3d:de:84:7c:dc:59:cd:f6: 02:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:77:3A:97:9E:95:0F:1C:25:99:4D:FE:A5:71:09:A6:BE:C3:12:B5 X509v3 Authority Key Identifier: keyid:D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3134342e302f32342d3234203d3e203633363331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.161.144.0/24 Signature Algorithm: sha256WithRSAEncryption 63:c6:2f:ad:8a:32:92:63:9f:14:57:4f:81:52:71:a7:06:2d: d3:7f:82:08:f2:6d:b9:e5:4e:d7:ab:e1:c0:ab:57:b6:4b:9e: 0d:80:34:62:14:c2:f3:41:c7:97:e3:9a:e4:75:a5:dd:19:16: 83:2b:d9:c3:17:0c:65:dd:55:7e:2c:d5:53:91:1d:de:34:73: 0d:60:41:34:0c:5a:25:72:b8:d8:be:fd:2b:7d:ef:2f:dc:e1: 97:ed:b4:dc:c6:9d:3e:5c:ac:d1:37:56:2f:7d:fd:19:24:65: 74:70:0e:16:a8:4b:bd:64:22:e6:4f:b4:ef:ef:c4:77:4f:07: 33:1d:7b:83:2c:9a:57:0a:50:6a:48:9d:6e:9c:a1:89:0c:18: 7c:8e:3d:ea:55:d1:b1:ec:82:c5:6b:57:3f:44:0c:75:4b:61: 61:af:c4:0e:6f:94:24:d2:f9:27:4c:5e:69:d7:16:f5:67:86: 31:3a:b6:fe:38:e2:fa:12:40:21:30:14:0d:55:8c:d2:1b:e2: f6:75:ed:cc:79:da:f0:88:6d:c4:5b:41:f9:23:0f:80:d9:29: c0:b9:59:b1:9e:30:f3:de:15:50:08:ce:64:26:3f:21:90:e2: 6d:9f:27:5e:ab:7f:c1:88:8d:3f:33:af:27:d4:a8:fe:da:e9: ea:97:a9:13 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUF5AkzKtYTLoSRtgUK5sB5KHvwXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBD M0VFQTk1MzAeFw0yNjA0MTYwNzA0MjRaFw0yNzA0MTUwNzA5MjRaMDMxMTAvBgNV BAMTKERFNzczQTk3OUU5NTBGMUMyNTk5NERGRUE1NzEwOUE2QkVDMzEyQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTVjLnddATQtC1lkPq9W6gZU88 XLcfqPslkUueKjKdZKhsPX0Fx0tTK2G009Lm6UGfYUzf9w5YVxLuZi10QxUQqasB jjrSK+QioNRchz54JGyN0dpAfpgrYx6IWIMdwqF32/3P1CiEY9RQEdP+B6aOptEY V1Zc66fY8iqHaPjsarX1T9BD+OmE5BvYR0MMFcbnEl9QHajuVjW+AmwLYmyvPFGw +V1au/GwDVcRd+XO+lrwDkaOJgLR1v5C3t0pYJI/t84toJQM/QSBU+X/OYKnE5L+ 0ckAMSEQI6qEBIAjZCH0CA8ObAFs2I/YLrglt199BF5HYV893oR83FnN9gLjAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU3nc6l56VDxwlmU3+pXEJpr7DErUwHwYDVR0j BBgwFoAU2etcbcF2gpSfUkNYfaOHQMPuqVMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njg2NDY0MS8wL0Q5RUI1QzZEQzE3NjgyOTQ5RjUyNDM1ODdEQTM4 NzQwQzNFRUE5NTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBDM0VFQTk1My5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY4NjQ2NDEvMC8zMTMxMzkyZTMx MzYzMTJlMzEzNDM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzMzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAHehkDANBgkqhkiG9w0BAQsFAAOCAQEAY8YvrYoykmOfFFdPgVJx pwYt03+CCPJtueVO16vhwKtXtkueDYA0YhTC80HHl+Oa5HWl3RkWgyvZwxcMZd1V fizVU5Ed3jRzDWBBNAxaJXK42L79K33vL9zhl+203MadPlys0TdWL339GSRldHAO FqhLvWQi5k+07+/Ed08HMx17gyyaVwpQakidbpyhiQwYfI496lXRseyCxWtXP0QM dUthYa/EDm+UJNL5J0xeadcW9WeGMTq2/jji+hJAITAUDVWM0hvi9nXtzHna8Iht xFtB+SMPgNkpwLlZsZ4w894VUAjOZCY/IZDibZ8nXqt/wYiNPzOvJ9So/trp6pep Ew== -----END CERTIFICATE-----Generated at Fri Apr 17 20:24:28 2026 by rpki-client