$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e31362e302f32312d3231203d3e2034383038.roa File: 3137352e32352e31362e302f32312d3231203d3e2034383038.roa (raw, json) Hash identifier: 0CwSur83BVnds/HCDW3WT1rsUBv9ifbBsK3FbpTKzYs= Subject key identifier: EC:00:33:24:27:E6:4B:B6:5D:3D:13:2C:62:0D:C8:6B:D7:87:3F:12 Certificate issuer: /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680 Certificate serial: 16B43A49C79F54C6B02BAB33B261B73D75E1E156 Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e31362e302f32312d3231203d3e2034383038.roa Signing time: Tue 14 Apr 2026 06:32:26 +0000 ROA not before: Tue 14 Apr 2026 06:27:26 +0000 ROA not after: Tue 13 Apr 2027 06:32:26 +0000 asID: 4808 IP address blocks: 175.25.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 09:09:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:b4:3a:49:c7:9f:54:c6:b0:2b:ab:33:b2:61:b7:3d:75:e1:e1:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680 Validity Not Before: Apr 14 06:27:26 2026 GMT Not After : Apr 13 06:32:26 2027 GMT Subject: CN=EC00332427E64BB65D3D132C620DC86BD7873F12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9b:f5:a0:88:fe:37:fa:7d:76:c2:35:77:30: c0:dc:db:a1:9b:46:ca:c1:1e:4f:67:00:df:bd:98: 2c:5a:16:92:f2:15:b2:99:e6:e3:a2:36:7f:31:fd: ad:ff:99:63:d5:5b:28:98:de:56:bb:d9:b9:ca:a8: e1:41:2c:f7:35:33:62:74:ac:ab:d2:af:cc:c3:7f: f1:3b:7f:5e:6e:80:06:02:5e:49:12:d8:7c:da:2f: 7c:14:15:e0:f1:e7:6c:63:84:20:5a:63:23:39:29: d1:94:7c:0f:94:ef:75:bc:ba:61:8c:22:f6:e0:55: c9:fa:a8:1e:8f:e0:04:4b:91:76:08:6d:82:93:30: 80:02:9d:e4:97:74:fd:aa:0d:17:63:f9:2a:3c:09: 2a:3e:23:b2:1f:2a:d6:1e:92:e5:48:c3:58:d9:84: af:da:a3:65:bc:ba:6f:f1:b0:82:d8:0b:ef:01:9f: 5f:92:76:3f:9c:80:97:87:28:a7:b6:2d:6f:04:01: 61:fa:60:22:76:5c:a4:2b:18:44:33:c5:95:91:da: 50:90:4b:47:89:70:38:05:ba:9f:c0:10:51:2f:a3: 6d:3e:b0:3c:85:7f:b6:a4:78:b2:00:11:db:a9:a8: e0:17:d8:d3:23:e2:d7:c4:42:9f:38:45:24:07:c6: ec:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:00:33:24:27:E6:4B:B6:5D:3D:13:2C:62:0D:C8:6B:D7:87:3F:12 X509v3 Authority Key Identifier: keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e31362e302f32312d3231203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.25.16.0/21 Signature Algorithm: sha256WithRSAEncryption 93:16:e8:5b:a8:9c:08:3d:a8:e1:94:9c:31:bf:84:74:e7:38: 42:d5:40:7e:0f:fb:aa:9d:e9:28:f0:4c:a7:9e:6b:e4:e7:fd: c7:41:81:82:02:ea:e1:b3:95:d2:d0:30:d8:4a:b8:15:9d:04: d6:25:e2:10:07:8a:74:6d:7a:a8:67:40:8d:2d:09:0c:79:63: 5b:dd:9c:33:6d:00:26:2c:ce:dc:57:e1:af:6f:17:04:f5:ca: e3:4d:3a:f3:83:90:68:c2:4b:d6:53:2f:a4:6e:8f:dc:2a:2b: 01:e0:ac:5b:66:ee:c9:47:af:ac:7d:c1:3b:7e:c9:19:86:ff: c2:dd:f6:5b:05:58:8f:09:9b:ac:11:1f:fa:40:7a:b2:a3:d2: cd:86:2d:30:1a:f8:82:a4:9d:3d:c7:f3:0f:10:4e:c2:d5:7a: b8:d4:ef:93:9f:a5:ec:3f:43:48:2b:40:1c:47:6c:c8:41:d0: 91:98:df:94:5d:e3:2b:6c:1e:fc:2d:e5:87:59:cf:58:81:8e: 18:c2:c7:24:5f:46:0b:1c:30:af:cc:98:d0:68:aa:20:58:17: e7:bf:ac:36:34:8a:ab:1c:63:38:b7:e2:df:93:42:c6:ba:14: a8:f4:b0:a3:b2:ba:51:fc:9f:41:34:4d:47:69:a9:89:7f:6b: a5:92:29:fe -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUFrQ6ScefVMawK6szsmG3PXXh4VYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTExNzlENjc1QzNDQjU2QTJENDRBQTYwRkEyQjkzMzBB MEMwNjY4MDAeFw0yNjA0MTQwNjI3MjZaFw0yNzA0MTMwNjMyMjZaMDMxMTAvBgNV BAMTKEVDMDAzMzI0MjdFNjRCQjY1RDNEMTMyQzYyMERDODZCRDc4NzNGMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGm/WgiP43+n12wjV3MMDc26Gb RsrBHk9nAN+9mCxaFpLyFbKZ5uOiNn8x/a3/mWPVWyiY3la72bnKqOFBLPc1M2J0 rKvSr8zDf/E7f15ugAYCXkkS2HzaL3wUFeDx52xjhCBaYyM5KdGUfA+U73W8umGM IvbgVcn6qB6P4ARLkXYIbYKTMIACneSXdP2qDRdj+So8CSo+I7IfKtYekuVIw1jZ hK/ao2W8um/xsILYC+8Bn1+Sdj+cgJeHKKe2LW8EAWH6YCJ2XKQrGEQzxZWR2lCQ S0eJcDgFup/AEFEvo20+sDyFf7akeLIAEdupqOAX2NMj4tfEQp84RSQHxuwzAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQU7AAzJCfmS7ZdPRMsYg3Ia9eHPxIwHwYDVR0j BBgwFoAUURedZ1w8tWotRKpg+iuTMKDAZoAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI3NjU5ODY5ODYwNjU5NS8wLzUxMTc5RDY3NUMzQ0I1NkEyRDQ0QUE2MEZBMkI5 MzMwQTBDMDY2ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTExNzlENjc1QzNDQjU2QTJENDRBQTYwRkEyQjkzMzBBMEMwNjY4MC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2Mjc2NTk4Njk4NjA2NTk1LzAvMzEzNzM1MmUzMjM1 MmUzMTM2MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAOvGRAwDQYJKoZIhvcNAQELBQADggEBAJMW6FuonAg9qOGUnDG/hHTnOELVQH4P +6qd6SjwTKeea+Tn/cdBgYIC6uGzldLQMNhKuBWdBNYl4hAHinRteqhnQI0tCQx5 Y1vdnDNtACYsztxX4a9vFwT1yuNNOvODkGjCS9ZTL6Ruj9wqKwHgrFtm7slHr6x9 wTt+yRmG/8Ld9lsFWI8Jm6wRH/pAerKj0s2GLTAa+IKknT3H8w8QTsLVerjU75Of pew/Q0grQBxHbMhB0JGY35Rd4ytsHvwt5YdZz1iBjhjCxyRfRgscMK/MmNBoqiBY F+e/rDY0iqscYzi34t+TQsa6FKj0sKOyulH8n0E0TUdpqYl/a6WSKf4= -----END CERTIFICATE-----Generated at Fri Apr 17 16:47:39 2026 by rpki-client