$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3136302e302f32312d3231203d3e2030.roa File: 3131392e3136312e3136302e302f32312d3231203d3e2030.roa (raw, json) Hash identifier: cPpjqUpV6F29loCVOOwbyveyBY/0tKDAJE22QRL0osg= Subject key identifier: 9A:33:A5:50:F9:94:8B:A2:DE:54:1F:D3:AB:94:96:C0:61:19:86:B5 Certificate issuer: /CN=D9EB5C6DC17682949F5243587DA38740C3EEA953 Certificate serial: 22EB841B2335A18A9E808D725D966066ABA53496 Authority key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3136302e302f32312d3231203d3e2030.roa Signing time: Thu 16 Apr 2026 07:16:04 +0000 ROA not before: Thu 16 Apr 2026 07:11:04 +0000 ROA not after: Thu 15 Apr 2027 07:16:04 +0000 asID: 0 IP address blocks: 119.161.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 13:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:eb:84:1b:23:35:a1:8a:9e:80:8d:72:5d:96:60:66:ab:a5:34:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953 Validity Not Before: Apr 16 07:11:04 2026 GMT Not After : Apr 15 07:16:04 2027 GMT Subject: CN=9A33A550F9948BA2DE541FD3AB9496C0611986B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:38:28:66:94:fd:d1:74:72:fe:a2:19:8e:60: 9f:c0:8b:85:52:d0:b0:2a:88:e7:5f:53:e6:f8:05: 55:02:0e:23:0c:7f:14:ef:77:97:50:c7:0c:b5:d9: 4f:58:11:56:36:e7:f4:8b:64:2e:2b:87:f6:65:c7: 81:c5:39:7f:2a:db:ab:58:87:01:29:bb:20:ef:b3: bc:aa:dc:e7:6b:9d:99:4b:a4:6e:c8:aa:0f:ed:c9: a1:c2:d0:7b:09:26:fd:c4:44:17:f4:1d:09:30:1a: 30:df:a5:1a:bc:dc:7d:7e:ea:55:75:de:58:ad:f5: e0:f0:92:30:f0:6b:13:37:c2:b1:d8:8b:f8:be:f0: 0a:70:cb:54:0a:aa:cd:3c:24:11:f0:6c:aa:de:4d: a8:5f:26:b2:4b:a8:4d:22:2e:5c:c8:97:f0:1e:a9: 35:24:1f:5b:fe:90:e7:ad:4c:9c:f2:0c:2a:da:8d: 3a:25:8c:b9:55:f0:c5:cb:ec:51:b7:98:9c:1c:ca: d5:bf:c8:0b:ae:1d:ad:eb:b7:82:2e:b2:39:27:13: 3c:91:2b:00:0e:3e:af:ad:38:20:2b:ed:12:a6:65: 63:e8:09:30:a2:2e:bc:94:e2:81:7c:47:ac:ae:d5: b2:38:64:13:29:60:2c:22:bb:e1:7b:1c:18:85:7c: 2c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:33:A5:50:F9:94:8B:A2:DE:54:1F:D3:AB:94:96:C0:61:19:86:B5 X509v3 Authority Key Identifier: keyid:D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3136302e302f32312d3231203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.161.160.0/21 Signature Algorithm: sha256WithRSAEncryption 81:65:5f:9e:8f:a3:e8:e7:43:dd:71:9e:e6:1a:de:28:2c:53: 63:44:48:8a:71:a9:c0:26:b8:d7:c7:8d:ef:a9:2c:62:63:a4: db:ef:c9:f7:ef:4c:03:fd:c9:6b:d2:1b:74:5a:d8:0c:37:5f: f9:7d:ba:bb:ad:7c:b5:57:bb:9f:88:9b:55:6e:8a:e6:e9:5d: 97:8b:1d:9e:6e:bb:0f:ff:d8:f9:a4:9a:61:32:ae:3c:7f:5c: a3:24:1d:07:de:69:a2:15:0f:f6:19:4b:21:b5:06:c1:20:c7: 91:df:c0:de:31:fe:e7:c3:3b:9f:33:ec:89:73:ed:78:e6:f1: e2:e8:2b:9e:a5:db:29:e3:dd:6e:b8:07:d0:6e:52:c0:99:98: a7:50:21:19:1a:f7:3a:cb:48:6e:13:b4:06:f9:fa:41:be:dd: 7b:2b:7c:45:d7:89:92:4a:47:25:de:9e:c1:d0:c7:39:9a:75: d5:f3:6b:aa:f2:20:86:b6:d1:5a:44:cc:b8:7b:9f:5e:78:8b: c4:16:d9:c5:be:57:bc:d3:cf:b4:c4:6f:91:0c:8f:b6:2f:23: 1c:01:31:97:5e:c9:05:e7:e5:ab:3a:ed:d8:33:f9:b8:24:25: 85:58:f8:b6:1e:0f:06:ec:e0:c1:87:38:e0:b5:02:c1:2e:e8: 79:48:7b:f1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUIuuEGyM1oYqegI1yXZZgZqulNJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBD M0VFQTk1MzAeFw0yNjA0MTYwNzExMDRaFw0yNzA0MTUwNzE2MDRaMDMxMTAvBgNV BAMTKDlBMzNBNTUwRjk5NDhCQTJERTU0MUZEM0FCOTQ5NkMwNjExOTg2QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIOChmlP3RdHL+ohmOYJ/Ai4VS 0LAqiOdfU+b4BVUCDiMMfxTvd5dQxwy12U9YEVY25/SLZC4rh/Zlx4HFOX8q26tY hwEpuyDvs7yq3OdrnZlLpG7Iqg/tyaHC0HsJJv3ERBf0HQkwGjDfpRq83H1+6lV1 3lit9eDwkjDwaxM3wrHYi/i+8Apwy1QKqs08JBHwbKreTahfJrJLqE0iLlzIl/Ae qTUkH1v+kOetTJzyDCrajToljLlV8MXL7FG3mJwcytW/yAuuHa3rt4IusjknEzyR KwAOPq+tOCAr7RKmZWPoCTCiLryU4oF8R6yu1bI4ZBMpYCwiu+F7HBiFfCzbAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUmjOlUPmUi6LeVB/Tq5SWwGEZhrUwHwYDVR0j BBgwFoAU2etcbcF2gpSfUkNYfaOHQMPuqVMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njg2NDY0MS8wL0Q5RUI1QzZEQzE3NjgyOTQ5RjUyNDM1ODdEQTM4 NzQwQzNFRUE5NTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBDM0VFQTk1My5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ2ODY0NjQxLzAvMzEzMTM5MmUzMTM2 MzEyZTMxMzYzMDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD d6GgMA0GCSqGSIb3DQEBCwUAA4IBAQCBZV+ej6Po50PdcZ7mGt4oLFNjREiKcanA JrjXx43vqSxiY6Tb78n370wD/clr0ht0WtgMN1/5fbq7rXy1V7ufiJtVborm6V2X ix2ebrsP/9j5pJphMq48f1yjJB0H3mmiFQ/2GUshtQbBIMeR38DeMf7nwzufM+yJ c+145vHi6Cuepdsp491uuAfQblLAmZinUCEZGvc6y0huE7QG+fpBvt17K3xF14mS Skcl3p7B0Mc5mnXV82uq8iCGttFaRMy4e59eeIvEFtnFvle808+0xG+RDI+2LyMc ATGXXskF5+WrOu3YM/m4JCWFWPi2Hg8G7ODBhzjgtQLBLuh5SHvx -----END CERTIFICATE-----Generated at Thu Apr 16 22:35:36 2026 by rpki-client