$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096369310038753281/0/3138302e3138382e31362e302f32302d3332203d3e20313336313930.roa File: 3138302e3138382e31362e302f32302d3332203d3e20313336313930.roa (raw, json) Hash identifier: 8KRQd5SZhIFUpvdfzUkOF0VZK0tyf5VR0X6xZxHeSUQ= Subject key identifier: 5A:E8:48:68:5C:A4:84:E7:58:92:F4:C6:05:7D:73:00:15:B6:13:DB Certificate issuer: /CN=F8C6F9367F4D734F71F08C8E153CC520475E2DB7 Certificate serial: 6769A23CC8662B545D9D1406F5AEBDEC59935795 Authority key identifier: F8:C6:F9:36:7F:4D:73:4F:71:F0:8C:8E:15:3C:C5:20:47:5E:2D:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/3138302e3138382e31362e302f32302d3332203d3e20313336313930.roa Signing time: Wed 15 Apr 2026 08:05:41 +0000 ROA not before: Wed 15 Apr 2026 08:00:41 +0000 ROA not after: Wed 14 Apr 2027 08:05:41 +0000 asID: 136190 IP address blocks: 180.188.16.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:69:a2:3c:c8:66:2b:54:5d:9d:14:06:f5:ae:bd:ec:59:93:57:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C6F9367F4D734F71F08C8E153CC520475E2DB7 Validity Not Before: Apr 15 08:00:41 2026 GMT Not After : Apr 14 08:05:41 2027 GMT Subject: CN=5AE848685CA484E75892F4C6057D730015B613DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ad:04:61:c5:6e:25:bf:ac:91:a3:64:14:8c: 43:0a:85:b7:bb:01:f6:d6:7d:ba:5a:a9:12:80:d9: 2d:39:9f:d5:c4:d2:71:4d:5b:d2:80:6a:5c:66:a5: 97:ba:cc:18:1d:0c:5d:1d:c5:c3:fb:ed:45:24:50: a3:39:62:74:18:34:d0:b9:78:19:9e:ad:a3:d7:c6: 6b:b5:08:7e:05:0e:a2:f1:59:89:02:a1:33:94:55: 55:c9:4e:ef:8d:51:5d:75:2c:ad:67:f4:3c:74:2f: 08:c3:f2:f9:01:06:ab:fa:4a:2f:b9:f8:65:92:4e: 24:b6:b3:49:5d:3d:ce:3f:2f:1a:87:eb:f4:42:13: ff:55:9b:2a:ae:20:0f:d8:32:ed:e2:07:96:c8:88: a6:a5:57:95:a0:26:eb:95:db:d2:53:cc:da:50:43: d4:27:68:e7:b8:43:a8:0b:ce:62:df:e9:ec:f6:66: 56:9a:f5:6c:06:73:c5:a1:ab:f1:2a:79:ae:f5:01: 05:fb:3e:0c:56:6a:ef:9a:11:b0:a9:b1:20:14:b2: d8:14:c8:8f:83:ed:da:20:44:99:33:85:64:a6:24: b2:bb:a7:44:23:19:02:46:51:54:a1:cc:f0:48:ba: bb:30:ca:7a:e6:28:ab:9f:3a:45:59:1e:69:4f:74: 7b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E8:48:68:5C:A4:84:E7:58:92:F4:C6:05:7D:73:00:15:B6:13:DB X509v3 Authority Key Identifier: keyid:F8:C6:F9:36:7F:4D:73:4F:71:F0:8C:8E:15:3C:C5:20:47:5E:2D:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/3138302e3138382e31362e302f32302d3332203d3e20313336313930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.188.16.0/20 Signature Algorithm: sha256WithRSAEncryption 67:65:14:a5:17:04:74:41:d2:f9:eb:d9:d3:d2:8c:42:68:83: c1:f0:01:1c:34:0b:2c:d9:e1:e1:63:5a:0e:77:65:3c:23:29: e3:79:49:28:dd:09:a5:ab:29:0c:8e:66:91:dc:90:61:eb:2e: ce:59:e6:b3:a3:75:5e:08:94:d7:cd:b2:7a:43:f1:a7:59:aa: 40:2f:ed:3a:23:65:02:a2:f1:e4:a8:6d:84:c6:bd:4c:f3:39: 22:39:c5:0f:5a:65:03:75:91:ac:be:4b:23:62:0d:62:3f:09: 1b:b5:2f:55:b5:17:2b:5f:ee:ca:7e:88:f8:4a:0c:ee:2a:05: 6a:9c:b6:9e:64:30:86:c0:e0:37:23:d8:b4:cb:37:8f:5f:e2: ad:dc:54:31:ae:6c:e8:cf:36:2d:77:f3:4d:9b:a3:d3:90:b1: 09:e4:6f:4b:59:43:7d:4d:84:f7:1a:c5:98:92:36:26:c5:f0: b6:61:65:3a:da:05:5a:91:a6:32:e3:ee:89:a0:70:f8:d6:ef: 0a:f9:b2:11:83:16:a6:cd:b2:d4:cc:40:48:42:14:1a:6b:b9: 53:19:43:f6:6b:8c:be:ea:d3:83:38:c1:88:d5:51:2a:a7:23: 24:ea:cd:a7:37:2a:42:2b:d9:37:c3:86:d3:ac:20:ee:a7:9c: 4f:45:ca:f8 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUZ2miPMhmK1RdnRQG9a697FmTV5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDNkY5MzY3RjRENzM0RjcxRjA4QzhFMTUzQ0M1MjA0 NzVFMkRCNzAeFw0yNjA0MTUwODAwNDFaFw0yNzA0MTQwODA1NDFaMDMxMTAvBgNV BAMTKDVBRTg0ODY4NUNBNDg0RTc1ODkyRjRDNjA1N0Q3MzAwMTVCNjEzREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGrQRhxW4lv6yRo2QUjEMKhbe7 AfbWfbpaqRKA2S05n9XE0nFNW9KAalxmpZe6zBgdDF0dxcP77UUkUKM5YnQYNNC5 eBmeraPXxmu1CH4FDqLxWYkCoTOUVVXJTu+NUV11LK1n9Dx0LwjD8vkBBqv6Si+5 +GWSTiS2s0ldPc4/LxqH6/RCE/9VmyquIA/YMu3iB5bIiKalV5WgJuuV29JTzNpQ Q9QnaOe4Q6gLzmLf6ez2Zlaa9WwGc8Whq/Eqea71AQX7PgxWau+aEbCpsSAUstgU yI+D7dogRJkzhWSmJLK7p0QjGQJGUVShzPBIurswynrmKKufOkVZHmlPdHtRAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUWuhIaFykhOdYkvTGBX1zABW2E9swHwYDVR0j BBgwFoAU+Mb5Nn9Nc09x8IyOFTzFIEdeLbcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM2OTMxMDAzODc1MzI4MS8wL0Y4QzZGOTM2N0Y0RDczNEY3MUYwOEM4RTE1M0ND NTIwNDc1RTJEQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjhDNkY5MzY3RjRENzM0RjcxRjA4QzhFMTUzQ0M1MjA0NzVFMkRCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTYzNjkzMTAwMzg3NTMyODEvMC8zMTM4MzAyZTMx MzgzODJlMzEzNjJlMzAyZjMyMzAyZDMzMzIyMDNkM2UyMDMxMzMzNjMxMzkzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBLS8EDANBgkqhkiG9w0BAQsFAAOCAQEAZ2UUpRcEdEHS+evZ09KM QmiDwfABHDQLLNnh4WNaDndlPCMp43lJKN0JpaspDI5mkdyQYesuzlnms6N1XgiU 182yekPxp1mqQC/tOiNlAqLx5KhthMa9TPM5IjnFD1plA3WRrL5LI2INYj8JG7Uv VbUXK1/uyn6I+EoM7ioFapy2nmQwhsDgNyPYtMs3j1/irdxUMa5s6M82LXfzTZuj 05CxCeRvS1lDfU2E9xrFmJI2JsXwtmFlOtoFWpGmMuPuiaBw+NbvCvmyEYMWps2y 1MxASEIUGmu5UxlD9muMvurTgzjBiNVRKqcjJOrNpzcqQivZN8OG06wg7qecT0XK +A== -----END CERTIFICATE-----Generated at Fri Apr 17 23:27:55 2026 by rpki-client