$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3135362e302f32342d3234203d3e203633363331.roa File: 3131392e3136312e3135362e302f32342d3234203d3e203633363331.roa (raw, json) Hash identifier: 7XOgZuVkvvQZdo3gGn56dhtyiau+6lvq0uc3bf0+xMY= Subject key identifier: 3D:97:71:CC:0D:C3:F2:4E:FB:6C:10:4F:76:20:BF:CD:33:BC:53:07 Certificate issuer: /CN=D9EB5C6DC17682949F5243587DA38740C3EEA953 Certificate serial: 2E098D5CAEB56EE5D43F3CDA9EB7FC7468E365D1 Authority key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3135362e302f32342d3234203d3e203633363331.roa Signing time: Thu 16 Apr 2026 07:16:03 +0000 ROA not before: Thu 16 Apr 2026 07:11:03 +0000 ROA not after: Thu 15 Apr 2027 07:16:03 +0000 asID: 63631 IP address blocks: 119.161.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 08:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:09:8d:5c:ae:b5:6e:e5:d4:3f:3c:da:9e:b7:fc:74:68:e3:65:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953 Validity Not Before: Apr 16 07:11:03 2026 GMT Not After : Apr 15 07:16:03 2027 GMT Subject: CN=3D9771CC0DC3F24EFB6C104F7620BFCD33BC5307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:18:72:cc:aa:da:d1:64:6d:34:3d:5b:6c:f7: 13:f9:8a:e1:c6:07:71:c0:d2:d1:2a:f0:22:11:76: 3c:ae:b7:f5:ef:26:de:1e:e7:b7:c2:cd:ae:20:81: 32:4a:25:c7:4c:41:69:8b:2e:34:ad:16:2b:8c:2a: 4f:1d:07:97:b8:17:c0:07:0c:7b:8a:1e:d8:c7:e1: 67:94:7f:b1:d1:ba:ac:90:87:eb:e8:19:8d:ef:df: 04:e7:2f:9b:ad:63:98:2b:3a:e0:6d:2e:c6:c6:cd: 5d:97:44:d0:b2:94:0d:2c:62:99:f7:0b:a1:69:c4: 12:7f:9d:bb:cb:e6:e2:43:78:26:70:74:03:68:40: 9c:8a:b5:5c:28:de:9f:f7:c7:e1:0e:6b:f5:dd:e1: 67:bf:38:2d:5c:4f:e1:af:c3:8f:c4:3a:36:2a:d4: bc:f3:8e:ef:41:1b:af:96:8d:dd:5c:8b:4c:cc:79: 07:9f:bd:6f:0e:94:e7:e8:c3:e4:3d:00:62:5b:33: 59:c7:ac:27:ac:4e:a7:9d:e2:de:2b:8a:e3:93:63: 24:56:76:73:bc:99:bb:de:22:72:fb:96:ac:58:36: bb:12:7e:6e:68:1c:e6:ec:7f:bc:17:57:b1:e2:35: ef:6e:68:f6:1b:df:47:cf:7c:db:3a:7a:58:d9:2a: 0c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:97:71:CC:0D:C3:F2:4E:FB:6C:10:4F:76:20:BF:CD:33:BC:53:07 X509v3 Authority Key Identifier: keyid:D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3135362e302f32342d3234203d3e203633363331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.161.156.0/24 Signature Algorithm: sha256WithRSAEncryption 91:c2:c0:87:e1:8e:69:4d:9c:24:1e:13:db:d9:55:3d:60:54: 11:d4:c7:e2:9c:51:25:ea:f9:0a:f5:07:24:f8:76:ef:b5:fb: 56:eb:69:5d:d0:ed:28:60:a3:92:61:cf:19:af:2d:64:43:a4: 1b:ae:b5:cb:9c:9a:61:df:65:96:07:97:ee:db:b4:31:db:ba: c0:1c:f6:f4:e0:03:56:12:9f:ca:2b:6a:30:c8:dd:95:d2:8b: 92:fb:4b:9e:3a:32:54:b5:0e:e3:0d:43:c0:de:41:f5:4c:54: 5a:37:0b:d4:ad:33:42:8d:64:30:16:1b:12:69:f8:4f:a7:8a: f5:4f:d3:cd:e2:08:b7:94:bf:24:99:bf:43:8c:55:c5:ad:ae: 75:44:00:14:71:ba:8a:70:9c:95:66:46:37:25:57:5e:7a:f0: c7:3d:96:ec:54:52:5f:22:f7:45:67:cb:ec:12:d5:5a:fa:5c: 25:88:bd:a9:fd:c9:d8:38:4e:25:d7:f8:ca:d6:97:ba:32:df: d2:44:ed:87:f0:9c:d6:c4:1e:d4:13:42:94:43:8e:1a:3a:db: f3:38:39:64:ee:6c:12:c6:d4:d2:4d:5f:9d:7b:92:6f:a1:03: e7:4c:a1:a7:ee:1f:93:c3:2c:23:be:e7:d1:7e:24:4a:90:21: 0f:bb:13:c5 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIULgmNXK61buXUPzzanrf8dGjjZdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBD M0VFQTk1MzAeFw0yNjA0MTYwNzExMDNaFw0yNzA0MTUwNzE2MDNaMDMxMTAvBgNV BAMTKDNEOTc3MUNDMERDM0YyNEVGQjZDMTA0Rjc2MjBCRkNEMzNCQzUzMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxGHLMqtrRZG00PVts9xP5iuHG B3HA0tEq8CIRdjyut/XvJt4e57fCza4ggTJKJcdMQWmLLjStFiuMKk8dB5e4F8AH DHuKHtjH4WeUf7HRuqyQh+voGY3v3wTnL5utY5grOuBtLsbGzV2XRNCylA0sYpn3 C6FpxBJ/nbvL5uJDeCZwdANoQJyKtVwo3p/3x+EOa/Xd4We/OC1cT+Gvw4/EOjYq 1Lzzju9BG6+Wjd1ci0zMeQefvW8OlOfow+Q9AGJbM1nHrCesTqed4t4riuOTYyRW dnO8mbveInL7lqxYNrsSfm5oHObsf7wXV7HiNe9uaPYb30fPfNs6eljZKgx9AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUPZdxzA3D8k77bBBPdiC/zTO8UwcwHwYDVR0j BBgwFoAU2etcbcF2gpSfUkNYfaOHQMPuqVMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njg2NDY0MS8wL0Q5RUI1QzZEQzE3NjgyOTQ5RjUyNDM1ODdEQTM4 NzQwQzNFRUE5NTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBDM0VFQTk1My5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY4NjQ2NDEvMC8zMTMxMzkyZTMx MzYzMTJlMzEzNTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzMzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAHehnDANBgkqhkiG9w0BAQsFAAOCAQEAkcLAh+GOaU2cJB4T29lV PWBUEdTH4pxRJer5CvUHJPh277X7VutpXdDtKGCjkmHPGa8tZEOkG661y5yaYd9l lgeX7tu0Mdu6wBz29OADVhKfyitqMMjdldKLkvtLnjoyVLUO4w1DwN5B9UxUWjcL 1K0zQo1kMBYbEmn4T6eK9U/TzeIIt5S/JJm/Q4xVxa2udUQAFHG6inCclWZGNyVX Xnrwxz2W7FRSXyL3RWfL7BLVWvpcJYi9qf3J2DhOJdf4ytaXujLf0kTth/Cc1sQe 1BNClEOOGjrb8zg5ZO5sEsbU0k1fnXuSb6ED50yhp+4fk8MsI77n0X4kSpAhD7sT xQ== -----END CERTIFICATE-----Generated at Fri Apr 17 19:10:10 2026 by rpki-client