$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/1/3137302e3137392e302e302f31362d3234203d3e20313331343836.roa File: 3137302e3137392e302e302f31362d3234203d3e20313331343836.roa (raw, json) Hash identifier: qat1H617QJwQjY8jG6LbfzleO4RxVlthXXvF9jpIwLY= Subject key identifier: AF:98:4D:2C:06:73:2F:6C:A2:42:0E:50:5F:13:4C:34:7F:56:EB:DB Certificate issuer: /CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601 Certificate serial: 7039BFE302A6921C65133C6A5EE7E2F23B24359E Authority key identifier: 98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/3137302e3137392e302e302f31362d3234203d3e20313331343836.roa Signing time: Fri 10 Apr 2026 10:03:06 +0000 ROA not before: Fri 10 Apr 2026 09:58:06 +0000 ROA not after: Fri 09 Apr 2027 10:03:06 +0000 asID: 131486 IP address blocks: 170.179.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:39:bf:e3:02:a6:92:1c:65:13:3c:6a:5e:e7:e2:f2:3b:24:35:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601 Validity Not Before: Apr 10 09:58:06 2026 GMT Not After : Apr 9 10:03:06 2027 GMT Subject: CN=AF984D2C06732F6CA2420E505F134C347F56EBDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0f:a0:1b:02:ac:ec:80:d6:e8:0d:d3:da:c9: 92:2e:f3:38:50:a5:2e:aa:10:fd:d9:06:b7:98:35: b2:42:59:b4:97:dc:67:56:ad:7c:6f:42:02:71:88: a0:85:51:0c:ad:79:d1:15:8f:82:57:c8:af:85:f3: a9:dc:c6:8c:76:32:f8:3c:2b:85:70:68:30:75:53: 7c:49:cc:a1:88:b7:0e:4b:80:16:69:37:7d:21:b4: 11:18:8e:07:cf:84:3d:c0:3f:5b:88:2b:c0:6c:d0: 37:bd:74:64:43:f7:68:4e:5c:61:90:54:8a:ce:3a: 97:4b:4e:c0:13:c3:19:13:f0:04:8c:08:fa:b9:b5: 7b:35:5d:c1:e6:7a:31:f8:57:4b:37:4d:57:79:67: 08:ee:35:9a:41:ea:b5:44:95:2a:3e:e0:ee:29:4e: cc:37:e8:78:12:19:09:a6:4f:83:cf:ed:4a:ae:e8: 83:98:dd:dd:a6:ad:0f:13:02:ee:a5:6f:70:de:ba: 6d:17:07:45:44:64:88:25:d9:57:67:72:cb:71:25: 68:8c:b3:4d:23:8a:fd:3a:d9:36:8a:80:92:95:06: f8:e8:51:00:bf:d9:03:77:d9:9c:33:06:0e:78:bd: 6f:1f:e5:1a:4b:71:14:fe:dd:33:59:37:c9:fd:ab: ee:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:98:4D:2C:06:73:2F:6C:A2:42:0E:50:5F:13:4C:34:7F:56:EB:DB X509v3 Authority Key Identifier: keyid:98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/3137302e3137392e302e302f31362d3234203d3e20313331343836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.179.0.0/16 Signature Algorithm: sha256WithRSAEncryption a7:64:a4:d6:79:a4:0d:15:83:78:7d:aa:6c:91:e3:1d:b8:e8: fe:9a:96:be:83:3b:33:db:6c:46:5b:b9:58:2e:38:7e:82:37: 0b:04:ce:07:b0:b5:b3:31:8b:51:32:e9:9b:4c:7b:e2:06:fd: 7f:ed:e7:d4:90:fa:dd:0d:71:3d:d0:aa:47:63:23:96:9d:f6: 77:ac:80:39:14:79:4d:f5:32:b7:be:29:0a:b9:be:1a:07:3f: b0:71:e4:f4:ff:3e:1c:af:9b:1c:cb:6e:87:4a:d0:59:4c:bc: 2e:b4:7c:4b:f9:31:e1:4a:88:e0:34:58:17:7d:6e:46:b3:28: 20:56:53:3d:96:da:0b:04:ee:2f:72:3a:14:8b:1e:5d:c8:14: 27:98:8f:0e:4f:29:40:6c:3c:6b:ca:07:b7:e7:5f:53:2e:6d: 75:7f:1c:9f:df:d3:16:11:bb:36:a8:48:7f:a1:a3:fe:5c:2f: 09:78:68:88:ae:e4:10:5f:e2:0f:d5:40:93:4e:e9:31:47:bf: 9f:d2:a7:1f:a8:86:82:81:d4:ca:89:54:41:cf:20:e3:83:13: 85:a8:43:8d:06:f3:63:77:44:d6:0f:b0:89:cb:05:c6:b0:0c: 56:60:ef:b8:75:ce:16:79:61:ba:d0:b1:ec:21:0b:00:2c:e8: 26:b4:ce:2b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIUcDm/4wKmkhxlEzxqXufi8jskNZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgzMTlBM0JDOEY4Q0ZENEZCQjM4QzczMURCRkVDMTBB QzA1MzYwMTAeFw0yNjA0MTAwOTU4MDZaFw0yNzA0MDkxMDAzMDZaMDMxMTAvBgNV BAMTKEFGOTg0RDJDMDY3MzJGNkNBMjQyMEU1MDVGMTM0QzM0N0Y1NkVCREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfD6AbAqzsgNboDdPayZIu8zhQ pS6qEP3ZBreYNbJCWbSX3GdWrXxvQgJxiKCFUQytedEVj4JXyK+F86ncxox2Mvg8 K4VwaDB1U3xJzKGItw5LgBZpN30htBEYjgfPhD3AP1uIK8Bs0De9dGRD92hOXGGQ VIrOOpdLTsATwxkT8ASMCPq5tXs1XcHmejH4V0s3TVd5ZwjuNZpB6rVElSo+4O4p Tsw36HgSGQmmT4PP7Uqu6IOY3d2mrQ8TAu6lb3Deum0XB0VEZIgl2VdncstxJWiM s00jiv062TaKgJKVBvjoUQC/2QN32ZwzBg54vW8f5RpLcRT+3TNZN8n9q+7JAgMB AAGjggITMIICDzAdBgNVHQ4EFgQUr5hNLAZzL2yiQg5QXxNMNH9W69swHwYDVR0j BBgwFoAUmDGaO8j4z9T7s4xzHb/sEKwFNgEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODM2MzU5OTc5MDk5NzUwNi8xLzk4MzE5QTNCQzhGOENGRDRGQkIzOEM3MzFEQkZF QzEwQUMwNTM2MDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOTgzMTlBM0JDOEY4Q0ZENEZCQjM4QzczMURCRkVDMTBBQzA1MzYwMS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2ODM2MzU5OTc5MDk5NzUwNi8xLzMxMzczMDJlMzEz NzM5MmUzMDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMxMzMzMTM0MzgzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQC AAEwBQMDAKqzMA0GCSqGSIb3DQEBCwUAA4IBAQCnZKTWeaQNFYN4fapskeMduOj+ mpa+gzsz22xGW7lYLjh+gjcLBM4HsLWzMYtRMumbTHviBv1/7efUkPrdDXE90KpH YyOWnfZ3rIA5FHlN9TK3vikKub4aBz+wceT0/z4cr5scy26HStBZTLwutHxL+THh SojgNFgXfW5GsyggVlM9ltoLBO4vcjoUix5dyBQnmI8OTylAbDxryge3519TLm11 fxyf39MWEbs2qEh/oaP+XC8JeGiIruQQX+IP1UCTTukxR7+f0qcfqIaCgdTKiVRB zyDjgxOFqEONBvNjd0TWD7CJywXGsAxWYO+4dc4WeWG60LHsIQsALOgmtM4r -----END CERTIFICATE-----Generated at Sat Apr 18 05:29:41 2026 by rpki-client