$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131352e32382e302e302f31352d3234203d3e203337393633.roa File: 3131352e32382e302e302f31352d3234203d3e203337393633.roa (raw, json) Hash identifier: XnPKl+/JEplwm/WK08Thtb7z0ksM1JvmzW9Ppeb6mYM= Subject key identifier: FE:74:04:36:87:C5:4C:53:E9:8F:B3:D3:C9:4D:54:4C:13:9A:CA:CF Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Certificate serial: 5D333C8C8C923136E489BA46F4BD6D6F4AFEF8FA Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131352e32382e302e302f31352d3234203d3e203337393633.roa Signing time: Wed 15 Apr 2026 02:26:36 +0000 ROA not before: Wed 15 Apr 2026 02:21:36 +0000 ROA not after: Wed 14 Apr 2027 02:26:36 +0000 asID: 37963 IP address blocks: 115.28.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 11:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:33:3c:8c:8c:92:31:36:e4:89:ba:46:f4:bd:6d:6f:4a:fe:f8:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Validity Not Before: Apr 15 02:21:36 2026 GMT Not After : Apr 14 02:26:36 2027 GMT Subject: CN=FE74043687C54C53E98FB3D3C94D544C139ACACF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:65:e2:6a:32:7b:fe:7d:54:db:56:4d:c9:10: 71:4e:a3:c3:04:89:3d:9d:db:c1:a8:5d:27:ea:43: 1d:bd:3c:38:07:ed:5b:da:f2:be:88:14:95:4f:a8: d4:80:8b:09:fd:49:9b:df:18:21:55:32:ee:b6:3c: db:4a:7a:c0:ac:60:5b:58:4a:49:02:fd:17:cb:57: 56:a7:bc:3e:8f:b0:0a:f8:09:98:5f:c9:5d:e7:1f: c0:9b:93:d2:09:ee:06:1c:82:56:42:2d:9d:e7:e4: 14:cc:15:7d:10:dc:f3:50:1a:69:48:aa:a3:fa:93: f0:d2:00:c7:5e:66:50:84:5c:fb:62:b4:5e:62:73: 75:05:d4:68:b2:34:9a:45:cc:0b:96:01:af:ee:01: 02:98:c0:51:b8:cf:6c:2d:ff:05:5b:f9:7c:40:a1: bd:e6:8f:26:8d:24:b9:d6:4c:ec:0e:58:55:df:f4: fe:1d:56:77:02:2d:5f:82:51:2c:85:a4:1b:a9:34: bf:f8:14:51:76:f3:c8:36:61:0e:3e:cd:b6:9b:e9: 06:81:91:ed:b0:59:75:3c:97:22:a4:47:1f:bf:60: 61:ae:79:bc:be:71:cf:bc:c3:59:7d:f8:9d:08:62: ba:dd:38:8b:0e:61:b0:a3:2c:82:ad:f0:4a:c0:6e: 9c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:74:04:36:87:C5:4C:53:E9:8F:B3:D3:C9:4D:54:4C:13:9A:CA:CF X509v3 Authority Key Identifier: keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131352e32382e302e302f31352d3234203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 115.28.0.0/15 Signature Algorithm: sha256WithRSAEncryption 60:1b:6b:ea:89:c2:7a:c4:fd:24:10:26:e9:73:5d:a5:93:bb: 0e:fe:57:3e:2d:ed:8f:1a:60:be:40:64:86:c2:e7:ae:24:b1: b3:bf:ff:9d:d3:06:1d:6f:3b:b6:6f:0a:29:ce:56:49:b7:67: 04:79:eb:4a:1f:ff:c6:97:d7:fb:cb:82:6d:96:ce:43:28:9f: 83:4b:b3:4b:ed:41:dc:ef:c7:a3:bf:49:66:eb:e2:1c:f7:c5: 00:d7:ff:e6:af:80:23:16:96:0f:d7:45:82:e8:e2:73:40:7c: 02:f1:66:af:3f:41:d7:4c:31:20:b7:18:97:78:c0:89:17:ea: f8:79:99:08:d2:39:de:0e:d2:f6:46:9f:36:4c:b0:ce:a4:d6: b0:01:06:b3:28:85:47:3d:8f:c7:bf:33:54:2d:bf:0d:64:b6: 4f:e2:30:9f:60:d3:7b:95:65:0d:4e:3b:a9:ad:1f:96:ef:98: 6f:56:db:cf:c9:64:d4:b9:29:20:8d:f7:6f:04:b8:7d:b8:28: 81:b4:48:7f:48:22:0d:3c:0f:31:fe:91:e7:a7:9b:bc:49:a7: 9f:44:cf:03:66:a1:92:58:b5:1f:c9:5a:5b:df:a8:82:05:38: ca:9a:df:fe:5b:10:30:92:40:9b:42:ce:db:da:52:85:d0:f1: b0:17:cc:48 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUXTM8jIySMTbkibpG9L1tb0r++PowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx NTdEMEM4RTAeFw0yNjA0MTUwMjIxMzZaFw0yNzA0MTQwMjI2MzZaMDMxMTAvBgNV BAMTKEZFNzQwNDM2ODdDNTRDNTNFOThGQjNEM0M5NEQ1NDRDMTM5QUNBQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ZeJqMnv+fVTbVk3JEHFOo8ME iT2d28GoXSfqQx29PDgH7Vva8r6IFJVPqNSAiwn9SZvfGCFVMu62PNtKesCsYFtY SkkC/RfLV1anvD6PsAr4CZhfyV3nH8Cbk9IJ7gYcglZCLZ3n5BTMFX0Q3PNQGmlI qqP6k/DSAMdeZlCEXPtitF5ic3UF1GiyNJpFzAuWAa/uAQKYwFG4z2wt/wVb+XxA ob3mjyaNJLnWTOwOWFXf9P4dVncCLV+CUSyFpBupNL/4FFF288g2YQ4+zbab6QaB ke2wWXU8lyKkRx+/YGGueby+cc+8w1l9+J0IYrrdOIsOYbCjLIKt8ErAbpxDAgMB AAGjggIOMIICCjAdBgNVHQ4EFgQU/nQENofFTFPpj7PTyU1UTBOays8wHwYDVR0j BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5 MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzAvMzEzMTM1MmUzMjM4 MmUzMDJlMzAyZjMxMzUyZDMyMzQyMDNkM2UyMDMzMzczOTM2MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwFzHDANBgkqhkiG9w0BAQsFAAOCAQEAYBtr6onCesT9JBAm6XNdpZO7Dv5XPi3t jxpgvkBkhsLnriSxs7//ndMGHW87tm8KKc5WSbdnBHnrSh//xpfX+8uCbZbOQyif g0uzS+1B3O/Ho79JZuviHPfFANf/5q+AIxaWD9dFgujic0B8AvFmrz9B10wxILcY l3jAiRfq+HmZCNI53g7S9kafNkywzqTWsAEGsyiFRz2Px78zVC2/DWS2T+Iwn2DT e5VlDU47qa0flu+Yb1bbz8lk1LkpII33bwS4fbgogbRIf0giDTwPMf6R56ebvEmn n0TPA2ahkli1H8laW9+oggU4yprf/lsQMJJAm0LO29pShdDxsBfMSA== -----END CERTIFICATE-----Generated at Sat Apr 18 04:13:24 2026 by rpki-client