$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e34382e302f32322d3232203d3e2034383038.roa File: 3137352e32352e34382e302f32322d3232203d3e2034383038.roa (raw, json) Hash identifier: +kWqnjRjtrfm/c5wPeI+YTWHfmSm4fuk2lJAKjiDSKg= Subject key identifier: 29:B5:A9:74:93:67:9C:0F:B0:58:AA:38:08:64:9E:43:A9:06:E6:1C Certificate issuer: /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680 Certificate serial: 25CC4B938E7598172DF683F21C8B6E520FDFD084 Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e34382e302f32322d3232203d3e2034383038.roa Signing time: Tue 14 Apr 2026 06:46:50 +0000 ROA not before: Tue 14 Apr 2026 06:41:50 +0000 ROA not after: Tue 13 Apr 2027 06:46:50 +0000 asID: 4808 IP address blocks: 175.25.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 09:09:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:cc:4b:93:8e:75:98:17:2d:f6:83:f2:1c:8b:6e:52:0f:df:d0:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680 Validity Not Before: Apr 14 06:41:50 2026 GMT Not After : Apr 13 06:46:50 2027 GMT Subject: CN=29B5A97493679C0FB058AA3808649E43A906E61C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f0:cf:d5:a2:d8:92:23:04:fe:79:89:0f:5a: 11:90:ed:a1:a5:26:83:a1:35:26:2f:52:0a:f9:f8: b1:36:7f:bc:e8:6e:12:15:a5:52:f3:98:ef:b1:0d: 88:6c:ae:a8:ab:0b:1e:b6:3a:ec:79:26:58:ec:5f: d5:9d:da:51:38:8a:ae:de:f2:e1:a5:c6:11:b9:d7: 6c:07:73:f6:ef:70:f6:40:b0:cd:c8:63:2a:ee:b6: ae:3f:6e:68:d7:5a:59:d8:77:60:66:01:d2:16:64: 53:1b:15:5a:ec:88:e2:0b:73:76:46:f3:cc:5b:7d: 10:d5:02:54:d4:00:b6:9d:5b:c8:e0:ec:8a:42:2f: 8a:e0:64:23:e5:11:99:76:76:eb:72:f0:44:8e:55: 3f:16:c0:1f:b2:a3:f6:e5:39:96:4b:8f:af:8b:58: 6a:3a:c4:35:f6:36:a5:a3:12:a9:0c:f7:3c:c7:02: 0c:d8:a1:14:85:f1:79:7b:a2:eb:92:da:52:8a:f6: d5:5a:18:08:e7:97:bf:9c:d3:36:16:2a:41:0d:fd: f5:ba:eb:d5:4a:f7:b6:6a:d8:b8:50:61:9a:d5:a6: b8:e1:2b:86:9a:f0:49:98:36:29:9c:2a:7d:3e:4b: 38:b0:98:f3:0d:92:f0:d2:36:a1:e5:f7:a3:65:fa: 5a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B5:A9:74:93:67:9C:0F:B0:58:AA:38:08:64:9E:43:A9:06:E6:1C X509v3 Authority Key Identifier: keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e34382e302f32322d3232203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.25.48.0/22 Signature Algorithm: sha256WithRSAEncryption 76:94:f0:35:ee:71:d9:7f:60:66:43:c2:07:dd:ba:72:79:da: 7f:24:97:1f:90:e4:5a:8f:a3:c4:ee:d2:b4:7e:ba:5f:af:8e: 45:92:af:30:9b:67:4d:27:54:e4:b5:a6:4b:48:48:6e:91:1d: 36:8b:ae:76:15:23:85:e2:41:b0:fa:db:d7:a7:21:94:cd:b7: 78:00:d3:28:7d:da:95:85:3f:39:b6:be:f5:75:af:18:4c:9e: 19:6a:4f:c4:4d:94:10:87:95:3d:16:dd:99:e0:56:b6:38:4a: 94:85:21:68:33:22:50:c2:68:83:52:41:2a:6c:14:45:08:37: 80:37:db:85:78:98:92:b4:32:be:5c:73:b2:8f:e3:6e:e5:e2: 61:56:be:04:95:d8:8a:c0:6e:6a:bd:0e:2c:8a:0d:97:0f:44: ee:d1:bc:3a:a1:d5:36:86:22:9c:19:75:d7:d7:67:a5:4f:43: 97:89:6d:d9:c8:65:44:b6:60:77:0f:f3:e4:a2:31:ca:12:95: eb:20:31:3b:2c:eb:ef:89:91:2d:2e:36:67:5d:8c:08:c0:8e: 8f:79:be:8e:74:4e:a6:96:ea:80:58:bc:47:9e:5c:1d:13:e7: e5:54:eb:fc:2d:4b:52:e4:76:88:00:4b:b9:8c:3a:ce:3a:4e: f1:3b:1e:1f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUJcxLk451mBct9oPyHItuUg/f0IQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTExNzlENjc1QzNDQjU2QTJENDRBQTYwRkEyQjkzMzBB MEMwNjY4MDAeFw0yNjA0MTQwNjQxNTBaFw0yNzA0MTMwNjQ2NTBaMDMxMTAvBgNV BAMTKDI5QjVBOTc0OTM2NzlDMEZCMDU4QUEzODA4NjQ5RTQzQTkwNkU2MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo8M/VotiSIwT+eYkPWhGQ7aGl JoOhNSYvUgr5+LE2f7zobhIVpVLzmO+xDYhsrqirCx62Oux5JljsX9Wd2lE4iq7e 8uGlxhG512wHc/bvcPZAsM3IYyrutq4/bmjXWlnYd2BmAdIWZFMbFVrsiOILc3ZG 88xbfRDVAlTUALadW8jg7IpCL4rgZCPlEZl2duty8ESOVT8WwB+yo/blOZZLj6+L WGo6xDX2NqWjEqkM9zzHAgzYoRSF8Xl7ouuS2lKK9tVaGAjnl7+c0zYWKkEN/fW6 69VK97Zq2LhQYZrVprjhK4aa8EmYNimcKn0+SziwmPMNkvDSNqHl96Nl+lpbAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUKbWpdJNnnA+wWKo4CGSeQ6kG5hwwHwYDVR0j BBgwFoAUURedZ1w8tWotRKpg+iuTMKDAZoAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI3NjU5ODY5ODYwNjU5NS8wLzUxMTc5RDY3NUMzQ0I1NkEyRDQ0QUE2MEZBMkI5 MzMwQTBDMDY2ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTExNzlENjc1QzNDQjU2QTJENDRBQTYwRkEyQjkzMzBBMEMwNjY4MC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2Mjc2NTk4Njk4NjA2NTk1LzAvMzEzNzM1MmUzMjM1 MmUzNDM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAKvGTAwDQYJKoZIhvcNAQELBQADggEBAHaU8DXucdl/YGZDwgfdunJ52n8klx+Q 5FqPo8Tu0rR+ul+vjkWSrzCbZ00nVOS1pktISG6RHTaLrnYVI4XiQbD629enIZTN t3gA0yh92pWFPzm2vvV1rxhMnhlqT8RNlBCHlT0W3ZngVrY4SpSFIWgzIlDCaINS QSpsFEUIN4A324V4mJK0Mr5cc7KP427l4mFWvgSV2IrAbmq9DiyKDZcPRO7RvDqh 1TaGIpwZddfXZ6VPQ5eJbdnIZUS2YHcP8+SiMcoSlesgMTss6++JkS0uNmddjAjA jo95vo50TqaW6oBYvEeeXB0T5+VU6/wtS1LkdogAS7mMOs46TvE7Hh8= -----END CERTIFICATE-----Generated at Fri Apr 17 18:13:33 2026 by rpki-client