$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e2034383437.roa File: 35392e3135312e302e302f31372d3332203d3e2034383437.roa (raw, json) Hash identifier: ArI4wYAC7SWJvSpBRbho8maAZkwC/m4Zaj42AphTHnE= Subject key identifier: 21:D0:8C:50:1D:CA:9C:94:94:7E:3A:F9:CA:8A:90:C7:F9:F6:FE:50 Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Certificate serial: 6FA32438960A1D0AB3CE43DE8B85750CCCB3DE05 Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e2034383437.roa Signing time: Tue 14 Apr 2026 03:06:35 +0000 ROA not before: Tue 14 Apr 2026 03:01:35 +0000 ROA not after: Tue 13 Apr 2027 03:06:35 +0000 asID: 4847 IP address blocks: 59.151.0.0/17 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 05:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:a3:24:38:96:0a:1d:0a:b3:ce:43:de:8b:85:75:0c:cc:b3:de:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Validity Not Before: Apr 14 03:01:35 2026 GMT Not After : Apr 13 03:06:35 2027 GMT Subject: CN=21D08C501DCA9C94947E3AF9CA8A90C7F9F6FE50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f6:93:8b:23:80:ce:6d:b0:dd:b2:67:d1:5c: f5:b4:2e:e3:af:91:54:c4:fd:06:c9:a0:15:8f:01: 69:1d:1f:5f:8c:36:7b:75:80:9e:a9:6c:40:e3:c1: 00:4e:8e:32:1d:37:07:ec:e5:87:e4:f2:cc:d6:5e: 15:f6:85:3e:eb:91:9f:6b:62:10:d8:e9:00:18:93: 72:e2:78:e6:64:93:56:2a:2c:3a:6a:a4:52:c9:74: 81:c9:1e:ff:ab:3d:c5:09:24:38:7e:ae:9f:cf:a2: 7f:32:19:83:47:9d:99:82:bb:54:62:5e:c8:c4:94: d6:96:a3:35:85:b8:36:76:b2:fe:5f:73:f5:1a:80: 09:6d:3c:62:28:7f:94:62:52:60:db:1f:4f:e6:47: 7d:a8:ea:09:17:dd:d7:f5:f6:16:81:c4:a4:66:c2: 05:77:32:4e:ce:45:8d:62:c6:39:57:9a:19:51:e5: 46:87:17:f6:8e:6e:c2:b5:1c:91:ff:c7:5b:fa:2c: 2d:87:76:c9:37:e3:e5:75:8b:61:4b:69:73:ed:cc: 1c:99:fc:42:64:69:85:70:7f:7a:05:9c:20:15:d4: b7:af:94:fb:fd:50:e2:b6:9a:7e:ab:ee:61:98:b5: c4:a5:e0:53:e7:cd:75:0b:5a:c2:df:20:0e:65:2b: 70:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D0:8C:50:1D:CA:9C:94:94:7E:3A:F9:CA:8A:90:C7:F9:F6:FE:50 X509v3 Authority Key Identifier: keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.151.0.0/17 Signature Algorithm: sha256WithRSAEncryption 84:5e:ee:bc:9f:01:3c:48:bb:a6:56:f5:02:50:72:4f:81:4e: 6f:7c:b3:9f:f5:4b:11:e6:59:63:7c:65:09:33:15:88:c4:58: fa:25:8f:c1:8a:ed:00:98:68:cd:ad:a0:5b:69:b1:05:b1:06: 5c:5b:6d:6a:95:86:ea:c6:9b:b9:01:6f:53:a4:a9:3b:76:82: 34:0e:8b:53:16:41:47:5c:af:f2:66:c1:85:d5:2d:4c:b6:95: fc:36:be:51:15:56:a9:8d:e8:23:73:53:00:ef:b8:6b:ee:21: a0:b9:33:dd:a2:5f:48:cc:19:b4:02:cb:84:14:58:09:c7:6b: dc:71:e5:9e:82:0e:46:c9:fd:4e:31:8f:2d:31:5d:e3:1f:6f: 27:19:54:45:7d:37:d1:e4:c8:4c:b1:6b:33:d9:36:02:41:65: d8:35:80:38:4d:7e:34:0e:64:22:c9:25:fd:f0:1b:5c:e0:f9: 06:cb:a7:c0:ad:d5:66:00:ef:eb:77:ec:b6:c5:08:49:27:81: a6:3f:7d:2f:65:8c:dc:3e:cf:83:9e:17:74:d4:2a:ce:0b:39: 6d:c5:90:58:35:bd:25:76:b2:35:ee:c0:f4:33:4a:c3:8e:1b: 9a:e7:b1:35:70:ce:6a:28:ff:c2:f7:86:61:39:de:53:bb:af: de:37:cf:f5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUb6MkOJYKHQqzzkPei4V1DMyz3gUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVD NTQ0Qzc0QjAeFw0yNjA0MTQwMzAxMzVaFw0yNzA0MTMwMzA2MzVaMDMxMTAvBgNV BAMTKDIxRDA4QzUwMURDQTlDOTQ5NDdFM0FGOUNBOEE5MEM3RjlGNkZFNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd9pOLI4DObbDdsmfRXPW0LuOv kVTE/QbJoBWPAWkdH1+MNnt1gJ6pbEDjwQBOjjIdNwfs5Yfk8szWXhX2hT7rkZ9r YhDY6QAYk3LieOZkk1YqLDpqpFLJdIHJHv+rPcUJJDh+rp/Pon8yGYNHnZmCu1Ri XsjElNaWozWFuDZ2sv5fc/UagAltPGIof5RiUmDbH0/mR32o6gkX3df19haBxKRm wgV3Mk7ORY1ixjlXmhlR5UaHF/aObsK1HJH/x1v6LC2Hdsk34+V1i2FLaXPtzByZ /EJkaYVwf3oFnCAV1LevlPv9UOK2mn6r7mGYtcSl4FPnzXULWsLfIA5lK3BlAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUIdCMUB3KnJSUfjr5yoqQx/n2/lAwHwYDVR0j BBgwFoAUHFGc0cQVkl5/zpL9og/xjsVEx0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NTQ1OTM0ODUzNzM0Ni8xLzFDNTE5Q0QxQzQxNTkyNUU3RkNFOTJGREEyMEZG MThFQzU0NEM3NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVDNTQ0Qzc0Qi5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2MjY1NDU5MzQ4NTM3MzQ2LzEvMzUzOTJlMzEzNTMx MmUzMDJlMzAyZjMxMzcyZDMzMzIyMDNkM2UyMDM0MzgzNDM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH O5cAMA0GCSqGSIb3DQEBCwUAA4IBAQCEXu68nwE8SLumVvUCUHJPgU5vfLOf9UsR 5lljfGUJMxWIxFj6JY/Biu0AmGjNraBbabEFsQZcW21qlYbqxpu5AW9TpKk7doI0 DotTFkFHXK/yZsGF1S1MtpX8Nr5RFVapjegjc1MA77hr7iGguTPdol9IzBm0AsuE FFgJx2vcceWegg5Gyf1OMY8tMV3jH28nGVRFfTfR5MhMsWsz2TYCQWXYNYA4TX40 DmQiySX98Btc4PkGy6fArdVmAO/rd+y2xQhJJ4GmP30vZYzcPs+Dnhd01CrOCzlt xZBYNb0ldrI17sD0M0rDjhua57E1cM5qKP/C94ZhOd5Tu6/eN8/1 -----END CERTIFICATE-----Generated at Fri Apr 17 18:13:38 2026 by rpki-client