$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3134392e302f32342d3234203d3e203633363331.roa File: 3131392e3136312e3134392e302f32342d3234203d3e203633363331.roa (raw, json) Hash identifier: N5OiNy6gpNAI122IfWvxLK3QW0HsLsxWhpB7bPfA+x8= Subject key identifier: 25:29:4D:A3:0B:99:74:BD:7A:AA:66:AB:16:19:FD:8A:CD:BC:97:B5 Certificate issuer: /CN=D9EB5C6DC17682949F5243587DA38740C3EEA953 Certificate serial: 5478167B1C391EDD0EDBB57C74BA3AE1899B6345 Authority key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3134392e302f32342d3234203d3e203633363331.roa Signing time: Thu 16 Apr 2026 07:09:24 +0000 ROA not before: Thu 16 Apr 2026 07:04:24 +0000 ROA not after: Thu 15 Apr 2027 07:09:24 +0000 asID: 63631 IP address blocks: 119.161.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 08:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:78:16:7b:1c:39:1e:dd:0e:db:b5:7c:74:ba:3a:e1:89:9b:63:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953 Validity Not Before: Apr 16 07:04:24 2026 GMT Not After : Apr 15 07:09:24 2027 GMT Subject: CN=25294DA30B9974BD7AAA66AB1619FD8ACDBC97B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b2:56:c6:5f:64:79:f9:f8:66:b0:bf:c0:40: 63:79:a7:ce:ba:3f:73:74:83:66:69:ba:eb:ed:4c: 89:b9:77:29:63:ca:74:17:6e:6c:59:42:50:3a:ec: 6e:70:93:b0:14:66:65:a7:2b:96:58:c6:a4:4b:84: c6:6a:8c:67:c0:59:37:48:62:0d:09:7f:4e:8a:2f: 80:0b:de:bb:79:48:ac:bb:19:8d:2b:17:d9:85:fa: 6e:ac:a3:6f:16:d6:b1:30:86:45:d0:b9:c1:ee:49: f8:5b:f5:6d:e2:a8:3c:77:c4:26:c0:67:c9:5e:b5: a6:1a:6e:1d:44:ec:00:7e:5e:10:86:12:a5:75:c0: 2a:bb:1b:58:54:f4:aa:bb:8e:ce:bb:67:d7:8c:a5: 41:78:39:15:fc:fa:a5:da:6d:ee:52:97:68:46:a6: 18:55:77:ed:43:7e:65:44:38:ba:38:d0:b3:12:4f: c4:42:67:71:47:4d:2b:a3:cf:7d:ac:99:04:aa:08: 2c:91:ba:ce:b6:93:85:f8:d2:64:95:74:16:e9:d4: 5a:9e:7f:a6:5b:67:20:1b:99:72:fa:a9:bb:54:d4: 2e:11:a1:db:b0:29:f6:20:51:ce:32:0c:7d:80:51: e2:15:e2:ff:ef:e1:2d:b1:66:d2:e1:c7:ae:3b:07: f3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:29:4D:A3:0B:99:74:BD:7A:AA:66:AB:16:19:FD:8A:CD:BC:97:B5 X509v3 Authority Key Identifier: keyid:D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3134392e302f32342d3234203d3e203633363331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.161.149.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:29:0f:80:33:58:51:8f:7a:1b:32:ea:0d:46:11:5c:cd:78: 0d:f4:7b:75:95:b8:59:f1:d3:8c:4b:0c:5d:4c:56:52:2d:8c: b8:43:dc:0d:79:98:5b:2a:a1:12:14:ee:d8:e2:5c:1f:b3:50: 4a:e0:8a:77:9e:b7:8c:6a:4e:f9:00:8a:01:ad:c2:54:ce:55: f4:c6:10:00:7b:61:1f:e6:45:09:82:79:ba:15:a6:e2:90:87: 26:de:02:68:81:aa:29:80:c4:72:e4:44:8f:c6:66:2d:a3:8f: 5d:a6:d3:40:ae:19:b3:52:58:ba:93:5e:cf:0c:e3:a5:12:f0: 28:07:aa:1b:94:a8:15:13:a8:62:35:68:e1:be:16:0e:69:1e: 01:f5:db:de:54:56:64:44:96:8a:8e:b9:2a:b5:06:38:1f:05: 68:8a:23:63:d7:f8:8d:fa:fc:a7:46:90:0b:b6:12:bd:6d:59: 4d:d5:c9:8b:0f:de:6a:c1:87:f4:a6:56:11:ef:37:d9:88:d9: c0:e9:3d:39:8c:64:df:ce:c8:aa:59:9a:57:42:5b:78:96:2f: 19:ba:59:95:e4:1e:e4:f6:7d:7b:c4:e2:25:44:45:53:2b:4f: e5:16:90:52:d6:c8:73:d1:d4:ae:e8:3b:44:a4:16:88:27:35: 1d:0f:c4:5d -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUVHgWexw5Ht0O27V8dLo64YmbY0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBD M0VFQTk1MzAeFw0yNjA0MTYwNzA0MjRaFw0yNzA0MTUwNzA5MjRaMDMxMTAvBgNV BAMTKDI1Mjk0REEzMEI5OTc0QkQ3QUFBNjZBQjE2MTlGRDhBQ0RCQzk3QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRslbGX2R5+fhmsL/AQGN5p866 P3N0g2ZpuuvtTIm5dyljynQXbmxZQlA67G5wk7AUZmWnK5ZYxqRLhMZqjGfAWTdI Yg0Jf06KL4AL3rt5SKy7GY0rF9mF+m6so28W1rEwhkXQucHuSfhb9W3iqDx3xCbA Z8letaYabh1E7AB+XhCGEqV1wCq7G1hU9Kq7js67Z9eMpUF4ORX8+qXabe5Sl2hG phhVd+1DfmVEOLo40LMST8RCZ3FHTSujz32smQSqCCyRus62k4X40mSVdBbp1Fqe f6ZbZyAbmXL6qbtU1C4RoduwKfYgUc4yDH2AUeIV4v/v4S2xZtLhx647B/PBAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUJSlNowuZdL16qmarFhn9is28l7UwHwYDVR0j BBgwFoAU2etcbcF2gpSfUkNYfaOHQMPuqVMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njg2NDY0MS8wL0Q5RUI1QzZEQzE3NjgyOTQ5RjUyNDM1ODdEQTM4 NzQwQzNFRUE5NTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBDM0VFQTk1My5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY4NjQ2NDEvMC8zMTMxMzkyZTMx MzYzMTJlMzEzNDM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzMzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAHehlTANBgkqhkiG9w0BAQsFAAOCAQEAfikPgDNYUY96GzLqDUYR XM14DfR7dZW4WfHTjEsMXUxWUi2MuEPcDXmYWyqhEhTu2OJcH7NQSuCKd563jGpO +QCKAa3CVM5V9MYQAHthH+ZFCYJ5uhWm4pCHJt4CaIGqKYDEcuREj8ZmLaOPXabT QK4Zs1JYupNezwzjpRLwKAeqG5SoFROoYjVo4b4WDmkeAfXb3lRWZESWio65KrUG OB8FaIojY9f4jfr8p0aQC7YSvW1ZTdXJiw/easGH9KZWEe832YjZwOk9OYxk387I qlmaV0JbeJYvGbpZleQe5PZ9e8TiJURFUytP5RaQUtbIc9HUrug7RKQWiCc1HQ/E XQ== -----END CERTIFICATE-----Generated at Fri Apr 17 19:25:46 2026 by rpki-client