$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e302e302f31382d3234203d3e2034383337.roa File: 3131342e3131342e302e302f31382d3234203d3e2034383337.roa (raw, json) Hash identifier: zQmY5XoxEgFfEocFlMn7zYUhUWjw1W1jR7h66vVfXRg= Subject key identifier: 59:32:50:E8:30:C0:DA:78:95:F1:0D:B0:A7:90:CB:45:2E:0B:91:EF Certificate issuer: /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8 Certificate serial: 60A3738C682B35C47D4093A64606EC8794AAEDB7 Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e302e302f31382d3234203d3e2034383337.roa Signing time: Thu 16 Apr 2026 00:18:22 +0000 ROA not before: Thu 16 Apr 2026 00:13:22 +0000 ROA not after: Thu 15 Apr 2027 00:18:22 +0000 asID: 4837 IP address blocks: 114.114.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 23:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:a3:73:8c:68:2b:35:c4:7d:40:93:a6:46:06:ec:87:94:aa:ed:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8 Validity Not Before: Apr 16 00:13:22 2026 GMT Not After : Apr 15 00:18:22 2027 GMT Subject: CN=593250E830C0DA7895F10DB0A790CB452E0B91EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fa:77:98:06:f6:6b:07:da:7d:1f:1a:16:3d: 9c:c9:64:ce:8b:e7:40:74:11:6a:c1:17:9e:f4:cb: 7c:dc:a9:ec:5b:5c:f6:9e:ce:eb:00:00:4b:9c:f5: 5c:91:c2:9c:06:db:6c:8c:d5:df:35:29:38:29:cc: df:3c:aa:e6:3f:b6:c1:12:5d:4f:4d:9e:ac:51:f2: 93:d6:f4:5d:e6:a7:4c:8a:7c:34:cd:bc:b7:d4:28: b3:5e:2b:09:11:57:e8:5c:e7:a2:63:cf:b3:23:94: 4a:7d:dd:56:8a:37:cb:5b:62:e1:5e:78:9c:03:8e: 40:be:9c:f6:06:ae:21:61:01:11:de:2a:3b:67:32: 17:1e:d0:cc:62:90:a9:db:58:4d:97:25:e4:f0:16: f9:06:2e:4d:64:62:dd:33:b7:d6:42:ca:b1:ac:6f: 41:4d:07:10:43:e6:c1:1a:12:95:8e:22:28:9d:97: 6b:93:b9:32:aa:af:c2:12:21:fd:7f:50:e5:96:b3: f8:49:01:d6:33:11:67:08:8b:bc:9a:87:7e:7d:80: 66:0c:6a:78:cf:6a:fc:47:07:0c:b4:02:13:b5:cc: 99:ed:9a:e7:e5:83:44:93:77:07:70:6e:a9:41:71: 10:cd:b6:38:8a:6a:c2:4f:53:c4:05:91:c2:06:af: 68:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:32:50:E8:30:C0:DA:78:95:F1:0D:B0:A7:90:CB:45:2E:0B:91:EF X509v3 Authority Key Identifier: keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e302e302f31382d3234203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.114.0.0/18 Signature Algorithm: sha256WithRSAEncryption bd:46:ee:43:4f:82:73:40:ca:fe:b3:fa:9d:7b:d2:60:c1:a8: 30:c1:fa:fc:41:94:c6:97:04:10:c4:8e:4d:e3:02:7c:92:01: 34:09:21:6b:22:47:37:fe:71:a3:db:b6:90:aa:1a:df:99:6e: f2:73:b1:73:6f:e5:ae:7f:d7:39:e7:1c:1e:69:67:3b:7b:8c: 93:ab:3a:16:0f:6c:d5:50:a3:ab:fa:29:02:ed:9f:cb:42:e8: d8:1c:2d:b7:82:7d:2b:84:f8:cb:37:df:de:a5:4d:65:c4:f9: bc:52:e2:c7:d5:68:b8:9b:6f:34:18:f6:4d:dc:1c:77:e2:46: 3e:3a:4a:42:9c:eb:8c:63:21:63:bb:c4:66:83:d5:15:cc:75: 26:65:64:2e:75:b4:84:dc:b8:4c:8a:3c:90:32:09:9d:b9:80: 14:6e:ee:db:28:3e:40:ce:db:b1:4a:1c:c2:95:1b:a8:fc:bb: 8f:24:a0:07:50:6d:d0:be:34:cf:eb:c7:be:da:18:24:cf:79: f4:60:ad:cd:d5:b3:df:2e:47:c1:f5:a1:16:6f:2c:53:93:8a: 86:66:4b:35:92:b1:22:de:9a:62:58:88:0b:ac:93:ad:bb:b1: 5d:59:2d:fc:be:e9:13:76:1f:f4:91:af:ab:3e:74:97:13:58: 5f:66:ac:63 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUYKNzjGgrNcR9QJOmRgbsh5Sq7bcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhCNEZDMjlGRUYyMEFERkFGQjI0QTZEQUY1RjQ0MTUy MjZFRjhBODAeFw0yNjA0MTYwMDEzMjJaFw0yNzA0MTUwMDE4MjJaMDMxMTAvBgNV BAMTKDU5MzI1MEU4MzBDMERBNzg5NUYxMERCMEE3OTBDQjQ1MkUwQjkxRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF+neYBvZrB9p9HxoWPZzJZM6L 50B0EWrBF570y3zcqexbXPaezusAAEuc9VyRwpwG22yM1d81KTgpzN88quY/tsES XU9NnqxR8pPW9F3mp0yKfDTNvLfUKLNeKwkRV+hc56Jjz7MjlEp93VaKN8tbYuFe eJwDjkC+nPYGriFhARHeKjtnMhce0MxikKnbWE2XJeTwFvkGLk1kYt0zt9ZCyrGs b0FNBxBD5sEaEpWOIiidl2uTuTKqr8ISIf1/UOWWs/hJAdYzEWcIi7yah359gGYM anjPavxHBwy0AhO1zJntmuflg0STdwdwbqlBcRDNtjiKasJPU8QFkcIGr2ivAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUWTJQ6DDA2niV8Q2wp5DLRS4Lke8wHwYDVR0j BBgwFoAU+LT8Kf7yCt+vskptr19EFSJu+KgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjU4Njc2NDAxNDg0NTk1NS8wL0Y4QjRGQzI5RkVGMjBBREZBRkIyNEE2REFGNUY0 NDE1MjI2RUY4QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjhCNEZDMjlGRUYyMEFERkFGQjI0QTZEQUY1RjQ0MTUyMjZFRjhBOC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2NTg2NzY0MDE0ODQ1OTU1LzAvMzEzMTM0MmUzMTMx MzQyZTMwMmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAZycgAwDQYJKoZIhvcNAQELBQADggEBAL1G7kNPgnNAyv6z+p170mDBqDDB+vxB lMaXBBDEjk3jAnySATQJIWsiRzf+caPbtpCqGt+ZbvJzsXNv5a5/1znnHB5pZzt7 jJOrOhYPbNVQo6v6KQLtn8tC6NgcLbeCfSuE+Ms3396lTWXE+bxS4sfVaLibbzQY 9k3cHHfiRj46SkKc64xjIWO7xGaD1RXMdSZlZC51tITcuEyKPJAyCZ25gBRu7tso PkDO27FKHMKVG6j8u48koAdQbdC+NM/rx77aGCTPefRgrc3Vs98uR8H1oRZvLFOT ioZmSzWSsSLemmJYiAusk627sV1ZLfy+6RN2H/SRr6s+dJcTWF9mrGM= -----END CERTIFICATE-----Generated at Sun Apr 19 08:50:36 2026 by rpki-client