$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3135342e302f32342d3234203d3e203633363331.roa File: 3131392e3136312e3135342e302f32342d3234203d3e203633363331.roa (raw, json) Hash identifier: Ci42JOqMjSAJ3WJUTwnlTLR8G5pTY1EIpg2hwNySDug= Subject key identifier: 58:94:56:8A:EA:35:58:59:75:75:3C:2B:0F:AF:FC:43:C7:87:0E:87 Certificate issuer: /CN=D9EB5C6DC17682949F5243587DA38740C3EEA953 Certificate serial: 517734309C5A2E3EEE9F4961A9B8547B7B6CBF0D Authority key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3135342e302f32342d3234203d3e203633363331.roa Signing time: Thu 16 Apr 2026 07:16:04 +0000 ROA not before: Thu 16 Apr 2026 07:11:04 +0000 ROA not after: Thu 15 Apr 2027 07:16:04 +0000 asID: 63631 IP address blocks: 119.161.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 08:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:77:34:30:9c:5a:2e:3e:ee:9f:49:61:a9:b8:54:7b:7b:6c:bf:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953 Validity Not Before: Apr 16 07:11:04 2026 GMT Not After : Apr 15 07:16:04 2027 GMT Subject: CN=5894568AEA35585975753C2B0FAFFC43C7870E87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:af:eb:87:9e:9c:9c:6e:06:99:4a:ee:c8:d1: e5:75:11:6a:77:bf:df:0c:7a:84:34:9e:bb:07:64: 53:5c:bd:34:37:d6:5d:d5:a4:a8:f0:95:a1:f9:3c: 24:25:6f:96:ec:bd:40:40:55:2d:b2:68:05:bb:bc: 2f:36:c7:51:19:d9:73:b3:7c:78:d8:2f:b6:80:f5: bb:39:32:65:ab:e6:7d:43:89:5e:de:83:28:d9:1b: c6:db:25:8e:97:0a:65:87:e2:88:ee:6a:45:bb:7d: 06:9a:cc:61:f1:f2:38:84:9f:72:58:95:31:bd:f8: 71:d8:3a:23:1f:6d:f6:59:c4:e5:53:d4:77:91:29: 31:04:29:67:a4:92:05:ca:41:24:aa:a8:41:f0:66: fb:a2:a6:8a:1b:37:8d:9f:15:fa:6a:32:da:e5:5a: 4b:7f:45:27:c1:60:b3:b4:f1:1c:99:10:d9:a3:08: 47:d9:25:4f:c4:c0:29:63:b3:6b:3c:04:21:9f:40: bd:fb:4e:de:f0:50:c2:97:8f:22:70:16:c8:17:67: 0a:2e:ca:70:50:8a:4b:46:2d:e0:c2:de:63:0e:7e: c0:82:58:42:4a:69:8c:5e:93:3a:dd:2e:ab:ad:27: 1c:fc:4b:60:67:ac:1c:4e:a8:fd:37:36:db:4a:9d: 7b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:94:56:8A:EA:35:58:59:75:75:3C:2B:0F:AF:FC:43:C7:87:0E:87 X509v3 Authority Key Identifier: keyid:D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3135342e302f32342d3234203d3e203633363331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.161.154.0/24 Signature Algorithm: sha256WithRSAEncryption 55:e4:4d:73:d9:53:6b:e6:7b:c2:8f:78:f0:9f:51:a5:a6:5d: c3:1a:73:ac:99:42:98:43:be:c5:5f:e7:a7:60:31:a9:ee:24: 47:6e:f0:a6:72:5a:a4:1f:68:c9:c2:49:aa:3a:83:dd:37:1d: de:ad:54:65:78:fe:2b:7a:b4:cf:5d:83:2d:e8:cf:1d:8b:37: a7:27:51:f7:b2:97:bf:ea:5e:5f:4e:ba:97:26:ac:b2:4f:ce: a5:49:12:93:67:e3:ba:d8:1f:e5:61:84:f6:61:a5:24:1f:d3: b2:9e:1d:8a:59:7f:f7:19:64:0a:2b:72:ec:ad:12:5d:97:91: 61:d2:0e:57:a9:99:e8:29:63:c1:a0:9d:ca:f2:d6:dc:90:64: 55:b1:25:e9:8e:d9:aa:59:79:ae:88:1a:0c:d1:fb:fd:e8:d5: 83:57:c7:ea:47:74:6e:34:5b:cb:e1:d2:ec:58:34:d0:76:34: 7f:3a:7c:06:e9:75:57:36:5f:99:88:cf:63:01:85:01:fa:c6: 80:ec:04:f8:90:3a:b9:53:91:8d:63:8b:ce:ae:06:8f:bd:1e: dc:e7:a7:d9:5d:c5:5e:e0:a0:63:72:14:8f:d4:42:17:b9:2b: ca:7a:62:c0:37:79:61:ac:3e:96:0d:cb:fb:c3:5f:aa:20:85: ad:0c:3a:6f -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUUXc0MJxaLj7un0lhqbhUe3tsvw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBD M0VFQTk1MzAeFw0yNjA0MTYwNzExMDRaFw0yNzA0MTUwNzE2MDRaMDMxMTAvBgNV BAMTKDU4OTQ1NjhBRUEzNTU4NTk3NTc1M0MyQjBGQUZGQzQzQzc4NzBFODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdr+uHnpycbgaZSu7I0eV1EWp3 v98MeoQ0nrsHZFNcvTQ31l3VpKjwlaH5PCQlb5bsvUBAVS2yaAW7vC82x1EZ2XOz fHjYL7aA9bs5MmWr5n1DiV7egyjZG8bbJY6XCmWH4ojuakW7fQaazGHx8jiEn3JY lTG9+HHYOiMfbfZZxOVT1HeRKTEEKWekkgXKQSSqqEHwZvuipoobN42fFfpqMtrl Wkt/RSfBYLO08RyZENmjCEfZJU/EwCljs2s8BCGfQL37Tt7wUMKXjyJwFsgXZwou ynBQiktGLeDC3mMOfsCCWEJKaYxekzrdLqutJxz8S2BnrBxOqP03NttKnXtPAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUWJRWiuo1WFl1dTwrD6/8Q8eHDocwHwYDVR0j BBgwFoAU2etcbcF2gpSfUkNYfaOHQMPuqVMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njg2NDY0MS8wL0Q5RUI1QzZEQzE3NjgyOTQ5RjUyNDM1ODdEQTM4 NzQwQzNFRUE5NTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBDM0VFQTk1My5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY4NjQ2NDEvMC8zMTMxMzkyZTMx MzYzMTJlMzEzNTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzMzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAHehmjANBgkqhkiG9w0BAQsFAAOCAQEAVeRNc9lTa+Z7wo948J9R paZdwxpzrJlCmEO+xV/np2Axqe4kR27wpnJapB9oycJJqjqD3Tcd3q1UZXj+K3q0 z12DLejPHYs3pydR97KXv+peX066lyassk/OpUkSk2fjutgf5WGE9mGlJB/Tsp4d ill/9xlkCity7K0SXZeRYdIOV6mZ6CljwaCdyvLW3JBkVbEl6Y7Zqll5rogaDNH7 /ejVg1fH6kd0bjRby+HS7Fg00HY0fzp8Bul1VzZfmYjPYwGFAfrGgOwE+JA6uVOR jWOLzq4Gj70e3Oen2V3FXuCgY3IUj9RCF7krynpiwDd5Yaw+lg3L+8NfqiCFrQw6 bw== -----END CERTIFICATE-----Generated at Fri Apr 17 20:24:20 2026 by rpki-client