$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/1/3136312e3234382e38342e302f32332d3234203d3e20313937353337.roa File: 3136312e3234382e38342e302f32332d3234203d3e20313937353337.roa (raw, json) Hash identifier: s1FXph5zH5cjrNWCOsz0f6kZpe72KM5uAjTF3GadQzk= Subject key identifier: EF:F3:C5:24:53:58:8B:0F:41:7A:A6:CE:08:AD:D7:92:63:B9:77:81 Certificate issuer: /CN=8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8 Certificate serial: 1AA3A0613EBE2FD6E74E3B98BCDDDF4A352CE4E4 Authority key identifier: 8B:D8:35:B2:E2:15:D6:86:F2:4F:B3:1A:8A:EC:EE:E4:4F:BD:BD:C8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/3136312e3234382e38342e302f32332d3234203d3e20313937353337.roa Signing time: Tue 14 Apr 2026 03:23:38 +0000 ROA not before: Tue 14 Apr 2026 03:18:38 +0000 ROA not after: Tue 13 Apr 2027 03:23:38 +0000 asID: 197537 IP address blocks: 161.248.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 08:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a3:a0:61:3e:be:2f:d6:e7:4e:3b:98:bc:dd:df:4a:35:2c:e4:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8 Validity Not Before: Apr 14 03:18:38 2026 GMT Not After : Apr 13 03:23:38 2027 GMT Subject: CN=EFF3C52453588B0F417AA6CE08ADD79263B97781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:55:e5:69:2f:4d:37:fa:a3:2c:ab:66:49:d7: 6d:e3:fe:fd:30:67:1a:9e:45:73:bd:2d:bf:da:bf: 5d:9d:8d:1f:71:5e:d1:5e:90:71:2d:de:30:db:e5: 76:9b:a6:43:ac:45:67:87:91:54:72:61:05:48:c5: 44:e5:a2:be:dc:05:a7:64:52:33:9e:dd:04:1b:48: 68:2d:e3:a0:af:8f:c5:d8:ee:00:5b:32:17:d6:d7: 7f:63:99:2c:78:a9:1b:03:4a:19:74:96:55:a1:76: 46:2a:07:6f:c2:ca:ad:aa:62:3f:99:a1:c6:20:8b: 97:e3:f1:ad:b0:ff:fc:a9:08:c3:42:b8:2a:06:32: b7:d5:c1:f9:14:73:78:50:0d:fc:6a:8e:17:b7:6c: 70:a5:e3:f8:6d:1e:89:50:9e:2a:d3:7f:69:d9:c8: dd:a5:5e:74:35:af:bb:d3:fc:67:c7:27:8d:53:93: 83:42:d9:d0:83:b9:5f:4a:19:37:6f:e5:15:ce:95: 03:30:1b:80:6d:70:fa:8b:92:6d:91:1b:68:e9:af: 19:d8:53:4a:09:c0:55:14:10:c4:21:4e:67:fa:5d: 4a:55:5c:62:0c:c3:6b:01:8b:79:50:d7:4f:22:c2: f3:1f:5d:e5:bf:cf:f9:03:3f:8e:31:ae:7f:cf:10: 00:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F3:C5:24:53:58:8B:0F:41:7A:A6:CE:08:AD:D7:92:63:B9:77:81 X509v3 Authority Key Identifier: keyid:8B:D8:35:B2:E2:15:D6:86:F2:4F:B3:1A:8A:EC:EE:E4:4F:BD:BD:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/3136312e3234382e38342e302f32332d3234203d3e20313937353337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.248.84.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:1f:47:e6:87:59:19:2d:f8:38:28:72:5a:54:cf:64:d0:65: 7c:ac:92:7a:dc:24:64:33:83:00:fb:16:c9:8c:9b:2e:22:88: e2:c3:89:45:a5:a4:af:6c:01:83:e6:03:7b:62:61:c8:2f:5b: bb:3c:0e:4b:d2:7f:f8:40:19:08:13:6b:61:11:a9:59:22:9b: 2a:83:85:82:6d:4f:c1:f3:36:bd:ac:f7:d8:4b:85:64:0f:4d: 7e:00:e4:d0:ca:dd:d8:45:5a:38:a4:06:75:08:20:40:3f:e8: 8b:c9:13:ef:8e:eb:39:bf:e2:2d:86:b0:36:14:cb:ad:33:a0: 99:db:f6:d6:38:e0:2a:9b:c7:33:d9:33:53:21:9c:ed:d9:33: b2:9c:eb:77:2d:37:3b:ea:21:46:85:e8:9c:a5:fd:31:6a:f5: 4c:1f:75:4c:55:96:57:c2:c0:40:44:44:01:6c:9b:51:56:da: ec:96:f1:49:18:71:69:9b:b3:c8:93:0c:0b:b5:43:77:50:8b: 54:92:c7:34:fa:fe:95:f4:f3:16:5c:70:0d:6c:3d:0f:3a:b0: de:c0:01:07:fb:09:94:72:d6:49:e4:0b:ad:5f:43:d3:d4:e9: 2d:9d:3a:a6:12:0e:98:4f:c0:68:b1:6c:da:05:bb:f6:d9:2a: 4f:3f:b4:e1 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUGqOgYT6+L9bnTjuYvN3fSjUs5OQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJEODM1QjJFMjE1RDY4NkYyNEZCMzFBOEFFQ0VFRTQ0 RkJEQkRDODAeFw0yNjA0MTQwMzE4MzhaFw0yNzA0MTMwMzIzMzhaMDMxMTAvBgNV BAMTKEVGRjNDNTI0NTM1ODhCMEY0MTdBQTZDRTA4QURENzkyNjNCOTc3ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDVeVpL003+qMsq2ZJ123j/v0w ZxqeRXO9Lb/av12djR9xXtFekHEt3jDb5XabpkOsRWeHkVRyYQVIxUTlor7cBadk UjOe3QQbSGgt46Cvj8XY7gBbMhfW139jmSx4qRsDShl0llWhdkYqB2/Cyq2qYj+Z ocYgi5fj8a2w//ypCMNCuCoGMrfVwfkUc3hQDfxqjhe3bHCl4/htHolQnirTf2nZ yN2lXnQ1r7vT/GfHJ41Tk4NC2dCDuV9KGTdv5RXOlQMwG4BtcPqLkm2RG2jprxnY U0oJwFUUEMQhTmf6XUpVXGIMw2sBi3lQ108iwvMfXeW/z/kDP44xrn/PEACXAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU7/PFJFNYiw9BeqbOCK3XkmO5d4EwHwYDVR0j BBgwFoAUi9g1suIV1obyT7Maiuzu5E+9vcgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzU4NjE3OS8xLzhCRDgzNUIyRTIxNUQ2ODZGMjRGQjMxQThBRUNF RUU0NEZCREJEQzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOEJEODM1QjJFMjE1RDY4NkYyNEZCMzFBOEFFQ0VFRTQ0RkJEQkRDOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1ODYxNzkvMS8zMTM2MzEyZTMy MzQzODJlMzgzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzkzNzM1MzMzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaH4VDANBgkqhkiG9w0BAQsFAAOCAQEALh9H5odZGS34OChyWlTP ZNBlfKySetwkZDODAPsWyYybLiKI4sOJRaWkr2wBg+YDe2JhyC9buzwOS9J/+EAZ CBNrYRGpWSKbKoOFgm1PwfM2vaz32EuFZA9NfgDk0Mrd2EVaOKQGdQggQD/oi8kT 747rOb/iLYawNhTLrTOgmdv21jjgKpvHM9kzUyGc7dkzspzrdy03O+ohRoXonKX9 MWr1TB91TFWWV8LAQEREAWybUVba7JbxSRhxaZuzyJMMC7VDd1CLVJLHNPr+lfTz FlxwDWw9Dzqw3sABB/sJlHLWSeQLrV9D09TpLZ06phIOmE/AaLFs2gW79tkqTz+0 4Q== -----END CERTIFICATE-----Generated at Fri Apr 17 20:16:46 2026 by rpki-client