$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3135322e302f32342d3234203d3e203633363331.roa File: 3131392e3136312e3135322e302f32342d3234203d3e203633363331.roa (raw, json) Hash identifier: 0O6HwC17CULgpOdtwyeoQhjd7sYNr0qRKV4vgoZ3uFs= Subject key identifier: 7C:8B:75:39:1F:23:13:12:61:13:62:46:63:2B:2E:21:E3:25:3A:4B Certificate issuer: /CN=D9EB5C6DC17682949F5243587DA38740C3EEA953 Certificate serial: 651308650F1378458A35503533E830E477BE1C19 Authority key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3135322e302f32342d3234203d3e203633363331.roa Signing time: Thu 16 Apr 2026 07:16:03 +0000 ROA not before: Thu 16 Apr 2026 07:11:03 +0000 ROA not after: Thu 15 Apr 2027 07:16:03 +0000 asID: 63631 IP address blocks: 119.161.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 08:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:13:08:65:0f:13:78:45:8a:35:50:35:33:e8:30:e4:77:be:1c:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953 Validity Not Before: Apr 16 07:11:03 2026 GMT Not After : Apr 15 07:16:03 2027 GMT Subject: CN=7C8B75391F23131261136246632B2E21E3253A4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b3:20:cf:17:ee:ba:15:6d:6f:ba:24:de:bf: df:6c:41:3f:72:1b:9f:aa:d3:d5:61:cc:ce:d4:50: 9f:f4:c6:61:da:45:71:c9:1a:c7:90:26:bb:35:81: 4a:9d:60:ee:a2:80:9f:9e:2e:8e:50:86:b3:60:7a: 8b:76:57:70:3e:d6:2f:b0:8d:82:81:11:22:8d:d2: 97:24:71:57:99:ce:c4:da:4f:7f:e5:1c:3d:59:84: 0d:21:43:92:ff:1b:87:cc:b4:33:cd:96:b2:e3:f8: 80:35:74:1f:94:55:69:02:10:71:a1:b1:c3:8a:d5: 22:c1:50:5a:a1:52:93:82:a4:b5:70:b6:25:e5:bb: b1:eb:51:89:56:f7:e7:42:d2:6e:c7:66:7c:2a:00: 68:03:54:9c:cc:ae:01:c2:43:76:66:34:6c:57:61: 25:22:ec:e2:66:d4:39:6d:12:ad:92:8a:e0:c4:ec: d3:4a:e9:0e:82:7d:35:a6:48:d0:8c:99:77:a8:ba: 1a:21:50:2e:3b:be:45:b9:42:41:a8:c4:06:b7:be: d2:8b:39:b7:a7:e0:02:a7:3b:7c:9c:f5:6a:e2:44: 69:6e:30:45:3a:3a:3f:98:88:fd:53:8b:c8:cd:1f: 39:60:b3:31:55:c6:cd:38:2e:80:2c:7a:7c:9c:fb: 91:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:8B:75:39:1F:23:13:12:61:13:62:46:63:2B:2E:21:E3:25:3A:4B X509v3 Authority Key Identifier: keyid:D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3135322e302f32342d3234203d3e203633363331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.161.152.0/24 Signature Algorithm: sha256WithRSAEncryption 19:13:93:bd:a5:cc:54:cc:e6:e8:a3:2b:50:96:27:47:f3:fc: 9b:de:2e:a0:d0:9e:78:b5:ac:fb:9b:a7:4f:3f:fd:5c:0a:21: ee:e4:18:f6:94:3e:b1:5c:a1:48:b2:05:ca:59:34:9a:06:8b: 43:60:87:f7:eb:93:c3:5f:70:c8:4d:02:a2:fb:72:ff:53:a2: 4d:7a:f0:9b:f1:22:20:71:1c:69:ca:09:de:6d:25:c4:60:b1: 11:d2:44:41:93:4e:4a:da:fb:da:78:d6:a0:e4:b2:3f:36:7f: ae:72:14:32:32:85:9a:e5:23:f8:92:05:4d:80:ce:6b:45:c1: 18:b0:fa:8d:e4:b5:6a:80:ac:8a:a9:8f:57:ed:9b:e2:16:8d: 97:96:0f:7e:f7:41:12:b3:db:13:39:99:16:8b:e7:58:e9:91: 20:5d:45:96:96:13:6d:b5:ab:d6:7a:65:10:3b:b7:70:03:32: 37:e9:55:3b:43:4e:60:29:e0:28:67:0c:61:14:0b:3a:b5:39: bb:7a:db:a7:26:1a:be:1b:9b:23:ab:cb:8b:f6:b4:be:e6:78: 1c:ba:31:2d:b0:c8:56:4c:2d:a1:b9:de:06:79:b6:a8:4b:d6: 80:bf:42:ab:03:af:02:75:b4:33:31:ed:10:17:af:9f:82:07: 5c:67:30:b8 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUZRMIZQ8TeEWKNVA1M+gw5He+HBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBD M0VFQTk1MzAeFw0yNjA0MTYwNzExMDNaFw0yNzA0MTUwNzE2MDNaMDMxMTAvBgNV BAMTKDdDOEI3NTM5MUYyMzEzMTI2MTEzNjI0NjYzMkIyRTIxRTMyNTNBNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCssyDPF+66FW1vuiTev99sQT9y G5+q09VhzM7UUJ/0xmHaRXHJGseQJrs1gUqdYO6igJ+eLo5QhrNgeot2V3A+1i+w jYKBESKN0pckcVeZzsTaT3/lHD1ZhA0hQ5L/G4fMtDPNlrLj+IA1dB+UVWkCEHGh scOK1SLBUFqhUpOCpLVwtiXlu7HrUYlW9+dC0m7HZnwqAGgDVJzMrgHCQ3ZmNGxX YSUi7OJm1DltEq2SiuDE7NNK6Q6CfTWmSNCMmXeouhohUC47vkW5QkGoxAa3vtKL Oben4AKnO3yc9WriRGluMEU6Oj+YiP1Ti8jNHzlgszFVxs04LoAsenyc+5H3AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUfIt1OR8jExJhE2JGYysuIeMlOkswHwYDVR0j BBgwFoAU2etcbcF2gpSfUkNYfaOHQMPuqVMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njg2NDY0MS8wL0Q5RUI1QzZEQzE3NjgyOTQ5RjUyNDM1ODdEQTM4 NzQwQzNFRUE5NTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBDM0VFQTk1My5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY4NjQ2NDEvMC8zMTMxMzkyZTMx MzYzMTJlMzEzNTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzMzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAHehmDANBgkqhkiG9w0BAQsFAAOCAQEAGROTvaXMVMzm6KMrUJYn R/P8m94uoNCeeLWs+5unTz/9XAoh7uQY9pQ+sVyhSLIFylk0mgaLQ2CH9+uTw19w yE0Covty/1OiTXrwm/EiIHEcacoJ3m0lxGCxEdJEQZNOStr72njWoOSyPzZ/rnIU MjKFmuUj+JIFTYDOa0XBGLD6jeS1aoCsiqmPV+2b4haNl5YPfvdBErPbEzmZFovn WOmRIF1FlpYTbbWr1nplEDu3cAMyN+lVO0NOYCngKGcMYRQLOrU5u3rbpyYavhub I6vLi/a0vuZ4HLoxLbDIVkwtobneBnm2qEvWgL9CqwOvAnW0MzHtEBevn4IHXGcw uA== -----END CERTIFICATE-----Generated at Fri Apr 17 18:43:10 2026 by rpki-client