$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984486035816451/0/3136302e32352e3139342e302f32332d3233203d3e20313531323830.roa File: 3136302e32352e3139342e302f32332d3233203d3e20313531323830.roa (raw, json) Hash identifier: X8RsreK6Rmi5o20yh98YatJZCTgpMieWRH7desYRWkk= Subject key identifier: FE:54:94:19:FA:00:C7:0A:CB:C2:83:A2:C8:6A:7B:C1:8C:61:D5:A9 Certificate issuer: /CN=EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3 Certificate serial: 157814D79E4F5069450C373572BC29993CB692CD Authority key identifier: EC:7E:47:6D:D1:FA:65:A1:A1:3C:74:E8:A5:47:C9:E1:D2:7D:8D:F3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/3136302e32352e3139342e302f32332d3233203d3e20313531323830.roa Signing time: Mon 13 Apr 2026 08:21:09 +0000 ROA not before: Mon 13 Apr 2026 08:16:09 +0000 ROA not after: Mon 12 Apr 2027 08:21:09 +0000 asID: 151280 IP address blocks: 160.25.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:78:14:d7:9e:4f:50:69:45:0c:37:35:72:bc:29:99:3c:b6:92:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3 Validity Not Before: Apr 13 08:16:09 2026 GMT Not After : Apr 12 08:21:09 2027 GMT Subject: CN=FE549419FA00C70ACBC283A2C86A7BC18C61D5A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:63:a0:53:f6:63:78:a4:e5:4f:51:35:16:a9: 70:f5:6d:c0:78:86:e8:c3:4c:a1:de:52:d3:c0:f3: cd:35:34:b4:9b:8e:10:3c:c1:ee:95:b9:54:2e:00: 4f:d3:01:8e:d7:b4:ff:1a:1a:b3:a8:a2:5b:41:1d: 3b:08:1e:d4:d4:32:b8:ae:46:97:33:3b:37:8b:46: 24:8b:b4:3c:5d:c8:f5:19:70:e7:6f:ab:ba:44:34: 1c:b4:4f:06:a0:96:f1:ea:18:3d:d9:fc:a4:89:40: 26:67:96:84:b1:ff:2c:81:20:56:a7:cc:cf:f9:8f: a2:d8:99:91:b6:08:04:8b:08:3d:51:fc:f9:39:57: c3:ae:32:44:9b:aa:0f:56:18:f4:42:1b:6b:f1:e0: e9:93:ad:eb:1f:09:cc:d3:e1:71:a8:c7:a3:24:1e: b8:96:b1:75:63:3f:43:03:9f:2e:70:e4:91:46:cd: 2c:c6:73:94:e4:d7:95:4d:d9:0b:de:4e:96:fd:6d: ab:6b:d5:a5:73:74:92:89:7e:fd:96:e1:87:0b:ce: 45:f9:07:c4:39:97:06:c9:ad:0e:0f:e4:a2:06:61: 06:7b:3d:ce:bc:39:06:da:04:21:79:d9:99:bc:0c: 5f:55:a4:84:81:75:96:72:fb:f1:7c:83:d4:8e:59: 16:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:54:94:19:FA:00:C7:0A:CB:C2:83:A2:C8:6A:7B:C1:8C:61:D5:A9 X509v3 Authority Key Identifier: keyid:EC:7E:47:6D:D1:FA:65:A1:A1:3C:74:E8:A5:47:C9:E1:D2:7D:8D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/3136302e32352e3139342e302f32332d3233203d3e20313531323830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.194.0/23 Signature Algorithm: sha256WithRSAEncryption a5:cc:48:f6:da:ec:07:71:31:e0:1c:77:5b:8a:41:f0:69:59: 40:2e:d7:cc:4f:ee:0d:5d:6d:12:ae:58:ed:a5:50:70:07:cc: 93:c2:e9:bd:d4:7c:e0:94:a6:cb:22:09:8a:30:d2:18:e1:8f: 63:0f:54:5d:5e:a6:b1:bc:17:4e:c1:8a:2b:cf:6b:f2:a7:18: bb:b2:9b:82:17:ab:7c:29:0a:a9:ac:3f:bc:8f:9a:5f:63:a5: f8:c5:1f:4b:92:93:3f:4d:fb:cb:bc:1e:03:7f:b3:48:57:f3: 7e:f8:60:82:8c:ac:05:86:2e:0a:f2:b6:2d:37:3c:bf:b9:12: 66:2c:41:bf:f2:57:ea:ef:3f:8b:01:ad:60:43:81:ba:6a:cc: fe:7f:e7:c7:bf:a8:c9:0c:4b:a8:4a:fb:33:9c:36:87:57:35: f1:b2:7a:38:ef:58:58:e7:2f:d3:e5:e0:bc:11:da:51:6e:e7: de:54:75:6f:f7:3c:df:e7:60:ea:f5:3b:c1:f3:63:ac:03:92: 46:76:af:e9:e8:61:67:9b:ab:d7:b9:05:42:07:4b:09:29:f8: 5f:6e:03:d0:62:22:7c:bb:91:73:0e:9a:c8:01:3a:52:45:15: 05:d9:fd:89:47:73:26:bf:b5:13:1b:4e:4f:71:b7:a0:94:4a: f0:e0:64:e9 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUFXgU155PUGlFDDc1crwpmTy2ks0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM3RTQ3NkREMUZBNjVBMUExM0M3NEU4QTU0N0M5RTFE MjdEOERGMzAeFw0yNjA0MTMwODE2MDlaFw0yNzA0MTIwODIxMDlaMDMxMTAvBgNV BAMTKEZFNTQ5NDE5RkEwMEM3MEFDQkMyODNBMkM4NkE3QkMxOEM2MUQ1QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgY6BT9mN4pOVPUTUWqXD1bcB4 hujDTKHeUtPA8801NLSbjhA8we6VuVQuAE/TAY7XtP8aGrOooltBHTsIHtTUMriu RpczOzeLRiSLtDxdyPUZcOdvq7pENBy0TwaglvHqGD3Z/KSJQCZnloSx/yyBIFan zM/5j6LYmZG2CASLCD1R/Pk5V8OuMkSbqg9WGPRCG2vx4OmTresfCczT4XGox6Mk HriWsXVjP0MDny5w5JFGzSzGc5Tk15VN2QveTpb9batr1aVzdJKJfv2W4YcLzkX5 B8Q5lwbJrQ4P5KIGYQZ7Pc68OQbaBCF52Zm8DF9VpISBdZZy+/F8g9SOWRYlAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU/lSUGfoAxwrLwoOiyGp7wYxh1akwHwYDVR0j BBgwFoAU7H5HbdH6ZaGhPHTopUfJ4dJ9jfMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDQ4NjAzNTgxNjQ1MS8wL0VDN0U0NzZERDFGQTY1QTFBMTNDNzRFOEE1NDdD OUUxRDI3RDhERjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRUM3RTQ3NkREMUZBNjVBMUExM0M3NEU4QTU0N0M5RTFEMjdEOERGMy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTU5ODQ0ODYwMzU4MTY0NTEvMC8zMTM2MzAyZTMy MzUyZTMxMzkzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzUzMTMyMzgzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaAZwjANBgkqhkiG9w0BAQsFAAOCAQEApcxI9trsB3Ex4Bx3W4pB 8GlZQC7XzE/uDV1tEq5Y7aVQcAfMk8LpvdR84JSmyyIJijDSGOGPYw9UXV6msbwX TsGKK89r8qcYu7KbgherfCkKqaw/vI+aX2Ol+MUfS5KTP037y7weA3+zSFfzfvhg goysBYYuCvK2LTc8v7kSZixBv/JX6u8/iwGtYEOBumrM/n/nx7+oyQxLqEr7M5w2 h1c18bJ6OO9YWOcv0+XgvBHaUW7n3lR1b/c83+dg6vU7wfNjrAOSRnav6ehhZ5ur 17kFQgdLCSn4X24D0GIifLuRcw6ayAE6UkUVBdn9iUdzJr+1ExtOT3G3oJRK8OBk 6Q== -----END CERTIFICATE-----Generated at Sat Apr 18 06:06:22 2026 by rpki-client