$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3131362e3139362e3132382e302f31392d3234203d3e20313331353136.roa File: 3131362e3139362e3132382e302f31392d3234203d3e20313331353136.roa (raw, json) Hash identifier: kBDnBj7F6mTZybN06dLoVjAeHV729EiyoegL3hPqQzM= Subject key identifier: C5:2C:B1:95:4A:86:F6:E8:A3:FE:9C:63:91:DE:10:31:E1:A4:BF:58 Certificate issuer: /CN=25C6596195B162409A5AFAA92570F258BAD3C42D Certificate serial: 3608CCEC0F90CE8583C8CBEC2989B4F589CC1A9D Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3131362e3139362e3132382e302f31392d3234203d3e20313331353136.roa Signing time: Tue 14 Apr 2026 09:19:35 +0000 ROA not before: Tue 14 Apr 2026 09:14:35 +0000 ROA not after: Tue 13 Apr 2027 09:19:35 +0000 asID: 131516 IP address blocks: 116.196.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 14:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:08:cc:ec:0f:90:ce:85:83:c8:cb:ec:29:89:b4:f5:89:cc:1a:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D Validity Not Before: Apr 14 09:14:35 2026 GMT Not After : Apr 13 09:19:35 2027 GMT Subject: CN=C52CB1954A86F6E8A3FE9C6391DE1031E1A4BF58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cb:ce:a8:dd:96:00:c2:7c:87:f0:4a:80:ed: a4:0e:18:c6:e4:de:92:82:c0:22:1b:4d:79:93:85: 91:46:17:8b:47:19:e5:ab:33:00:cc:b7:df:9f:f9: d9:c8:14:74:f8:df:70:71:81:07:44:56:fb:5f:6f: 0e:56:43:8a:d6:4a:be:f5:e2:10:b0:4f:f0:2b:4b: b8:0c:1b:23:ef:87:e6:cb:2d:1b:5c:01:35:7d:65: 70:14:21:07:e1:76:02:ee:c8:12:84:cf:c3:40:15: 82:07:f3:82:c1:8b:d0:dc:ac:17:ec:5c:be:c8:b4: 69:fb:d0:98:8f:c9:3a:e4:e9:ef:7f:ed:b0:81:5d: 5d:0d:30:ac:48:e0:54:3c:07:a3:89:8f:82:94:16: 6d:bd:21:09:be:f9:62:6d:34:5f:8e:35:58:e7:91: 5c:c8:21:d0:53:b0:8b:dc:20:a8:fd:f0:79:e9:bc: 7b:3a:14:a4:e2:52:91:b3:51:05:17:b9:02:d1:21: e8:93:8f:2a:8b:61:b1:22:3a:bb:f9:55:4f:f4:2f: 92:30:22:9c:94:eb:c5:57:fd:c9:67:ec:d8:f8:41: 10:d9:80:dd:31:3c:73:52:a3:0f:2c:c8:3d:7e:84: 71:7b:f2:1a:65:fc:7c:01:ba:84:c1:f6:8d:e6:93: f3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2C:B1:95:4A:86:F6:E8:A3:FE:9C:63:91:DE:10:31:E1:A4:BF:58 X509v3 Authority Key Identifier: keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3131362e3139362e3132382e302f31392d3234203d3e20313331353136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.196.128.0/19 Signature Algorithm: sha256WithRSAEncryption 38:fd:51:c9:8d:6a:7f:ce:ca:db:73:b3:7b:9b:a8:6a:47:39: 90:25:19:b0:cc:79:f6:14:22:19:0e:52:3a:1e:2a:b0:21:14: 8f:39:0e:3a:34:a9:c9:79:20:f0:a4:3b:94:c4:b4:50:ef:e0: 0b:15:1c:43:cc:06:52:f2:d2:5f:41:79:0c:cb:84:f9:07:63: 52:19:ed:ff:90:ee:da:b5:1a:99:1e:44:1c:5c:62:81:67:ff: 1c:9d:71:8e:c1:5f:9e:1d:54:c4:99:03:0d:c5:62:2f:a6:05: 92:65:23:4e:4f:5d:1f:1c:09:29:f0:fc:6c:3d:79:0f:5e:05: 02:20:68:6c:b1:e3:e7:02:03:58:39:06:81:05:79:6e:94:4e: 3a:0f:90:a6:16:e2:2d:f9:32:cc:48:e1:96:51:0c:94:9f:90: 0f:d9:1b:48:f3:c4:9d:e3:43:21:f7:00:1f:2b:6b:43:2e:2d: a4:c9:7d:9b:f5:f4:82:39:7c:3b:2d:1d:c3:95:a1:27:79:9e: 10:47:4c:cc:98:1d:48:d7:ff:04:e8:7e:65:e0:9c:91:45:0d: 33:45:88:ce:48:39:4f:ef:0d:80:98:00:3e:bc:d2:d0:5e:4c: cc:40:42:dd:3d:67:de:73:eb:f3:08:b0:8f:78:e9:8b:a8:fa: 13:d1:2c:31 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUNgjM7A+QzoWDyMvsKYm09YnMGp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThC QUQzQzQyRDAeFw0yNjA0MTQwOTE0MzVaFw0yNzA0MTMwOTE5MzVaMDMxMTAvBgNV BAMTKEM1MkNCMTk1NEE4NkY2RThBM0ZFOUM2MzkxREUxMDMxRTFBNEJGNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8y86o3ZYAwnyH8EqA7aQOGMbk 3pKCwCIbTXmThZFGF4tHGeWrMwDMt9+f+dnIFHT433BxgQdEVvtfbw5WQ4rWSr71 4hCwT/ArS7gMGyPvh+bLLRtcATV9ZXAUIQfhdgLuyBKEz8NAFYIH84LBi9DcrBfs XL7ItGn70JiPyTrk6e9/7bCBXV0NMKxI4FQ8B6OJj4KUFm29IQm++WJtNF+ONVjn kVzIIdBTsIvcIKj98HnpvHs6FKTiUpGzUQUXuQLRIeiTjyqLYbEiOrv5VU/0L5Iw IpyU68VX/cln7Nj4QRDZgN0xPHNSow8syD1+hHF78hpl/HwBuoTB9o3mk/P1AgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUxSyxlUqG9uij/pxjkd4QMeGkv1gwHwYDVR0j BBgwFoAUJcZZYZWxYkCaWvqpJXDyWLrTxC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNjk5NjM1NS8wLzI1QzY1OTYxOTVCMTYyNDA5QTVBRkFBOTI1NzBG MjU4QkFEM0M0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThCQUQzQzQyRC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE2OTk2MzU1LzAvMzEzMTM2MmUz MTM5MzYyZTMxMzIzODJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzMzMTM1MzEz Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEBXTEgDANBgkqhkiG9w0BAQsFAAOCAQEAOP1RyY1qf87K23Oz e5uoakc5kCUZsMx59hQiGQ5SOh4qsCEUjzkOOjSpyXkg8KQ7lMS0UO/gCxUcQ8wG UvLSX0F5DMuE+QdjUhnt/5Du2rUamR5EHFxigWf/HJ1xjsFfnh1UxJkDDcViL6YF kmUjTk9dHxwJKfD8bD15D14FAiBobLHj5wIDWDkGgQV5bpROOg+QphbiLfkyzEjh llEMlJ+QD9kbSPPEneNDIfcAHytrQy4tpMl9m/X0gjl8Oy0dw5WhJ3meEEdMzJgd SNf/BOh+ZeCckUUNM0WIzkg5T+8NgJgAPrzS0F5MzEBC3T1n3nPr8wiwj3jpi6j6 E9EsMQ== -----END CERTIFICATE-----Generated at Fri Apr 17 23:27:14 2026 by rpki-client