$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e3132382e302f31372d3234203d3e203231383539.roa File: 3131342e3131342e3132382e302f31372d3234203d3e203231383539.roa (raw, json) Hash identifier: TvprcYp8fQ7VaasMW02+bn5WNN6zIFcA0VFszax2RFE= Subject key identifier: 14:57:7C:D1:7E:46:A3:A4:12:49:46:29:7D:1E:BA:68:26:83:BE:8A Certificate issuer: /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8 Certificate serial: 15DC394BBF0C853E5B3403EA94CE9A62E94D8892 Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e3132382e302f31372d3234203d3e203231383539.roa Signing time: Thu 16 Apr 2026 00:19:21 +0000 ROA not before: Thu 16 Apr 2026 00:14:21 +0000 ROA not after: Thu 15 Apr 2027 00:19:21 +0000 asID: 21859 IP address blocks: 114.114.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 12:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:dc:39:4b:bf:0c:85:3e:5b:34:03:ea:94:ce:9a:62:e9:4d:88:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8 Validity Not Before: Apr 16 00:14:21 2026 GMT Not After : Apr 15 00:19:21 2027 GMT Subject: CN=14577CD17E46A3A4124946297D1EBA682683BE8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6f:a4:fb:41:f3:5a:92:5a:5e:54:87:5c:07: 3b:5e:05:66:62:19:f0:d8:67:3d:69:98:49:97:41: 70:bc:ce:b7:95:ea:21:d2:e4:fe:2f:c9:f8:e7:89: 8f:c8:0c:4a:6e:69:7f:e2:b3:9b:02:9e:f9:44:3f: 18:9f:d1:74:3a:7d:4e:aa:6c:3b:5c:73:b5:05:2c: d8:76:13:4d:e3:d7:86:a1:55:2d:fe:21:2d:20:0c: ee:a1:b4:c0:ce:12:17:a2:44:22:38:47:43:d7:94: 07:ad:5c:22:98:24:34:98:96:77:bf:24:76:dc:c3: cd:32:84:c4:6f:67:cd:1e:0f:89:88:17:0a:61:a2: 3a:be:7f:66:f0:e2:3f:02:af:02:47:23:60:1a:cb: 4c:5d:cf:af:74:3d:9f:f4:0b:b2:ce:85:86:0a:d9: 96:6a:9f:ed:b3:12:4d:9a:37:a4:c9:c7:89:9a:3a: d4:8b:53:3c:e6:c5:cb:17:4c:2c:f3:19:c5:26:8a: bb:38:ea:82:1a:8c:b8:68:c0:0f:38:12:c9:b6:e1: 0c:14:a3:66:ad:c8:83:a1:34:f4:00:6c:38:05:17: c3:b3:a9:1a:25:05:73:c8:1c:7c:ae:69:da:2a:1a: f5:4f:9a:98:86:63:30:57:d7:17:24:9e:c3:1c:ac: 61:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:57:7C:D1:7E:46:A3:A4:12:49:46:29:7D:1E:BA:68:26:83:BE:8A X509v3 Authority Key Identifier: keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e3132382e302f31372d3234203d3e203231383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.114.128.0/17 Signature Algorithm: sha256WithRSAEncryption a6:f8:d8:a3:e2:3b:74:ad:7e:9e:f6:19:7f:1a:aa:11:7c:ad: 51:d4:bc:b5:3d:50:f5:6d:6f:e7:f9:63:6d:e2:69:0d:e1:1a: ba:76:39:2f:90:e7:ea:55:cd:76:f8:df:7f:1e:52:26:13:e7: a6:0f:79:ad:4b:8a:7d:e0:ad:e8:4d:e5:9b:51:cc:34:6a:4c: b4:45:35:d4:8c:7e:82:25:4d:d4:3b:00:0d:0f:43:ef:3d:ab: 6a:77:4b:be:2c:56:29:09:6b:4b:28:30:7c:53:e3:c6:52:b9: b0:6a:9a:d1:82:12:73:6c:05:79:20:eb:71:69:75:4d:e4:ee: 7d:fe:7b:6f:d7:f7:f6:48:5b:96:41:e8:d9:e3:23:76:c1:72: 99:9f:f5:f5:fa:dd:46:7f:23:9a:09:72:4a:c9:fe:75:56:f5: fc:00:59:13:bc:00:e9:ba:d0:f5:03:de:11:96:c8:8d:49:c8: 64:6e:e0:4e:31:75:ac:85:9b:48:35:3a:3b:4e:9c:3f:fc:36: 8f:25:8a:10:0f:30:7e:f2:4b:ea:58:c5:f8:c3:3a:77:31:c6: d2:a6:53:91:0c:d7:29:4d:3f:60:56:1e:9d:4f:cc:16:08:16: 92:42:67:89:7a:c8:4b:bc:39:2e:66:f6:8e:71:da:d4:8f:94: 52:af:4c:1b -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUFdw5S78MhT5bNAPqlM6aYulNiJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhCNEZDMjlGRUYyMEFERkFGQjI0QTZEQUY1RjQ0MTUy MjZFRjhBODAeFw0yNjA0MTYwMDE0MjFaFw0yNzA0MTUwMDE5MjFaMDMxMTAvBgNV BAMTKDE0NTc3Q0QxN0U0NkEzQTQxMjQ5NDYyOTdEMUVCQTY4MjY4M0JFOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4b6T7QfNaklpeVIdcBzteBWZi GfDYZz1pmEmXQXC8zreV6iHS5P4vyfjniY/IDEpuaX/is5sCnvlEPxif0XQ6fU6q bDtcc7UFLNh2E03j14ahVS3+IS0gDO6htMDOEheiRCI4R0PXlAetXCKYJDSYlne/ JHbcw80yhMRvZ80eD4mIFwphojq+f2bw4j8CrwJHI2Aay0xdz690PZ/0C7LOhYYK 2ZZqn+2zEk2aN6TJx4maOtSLUzzmxcsXTCzzGcUmirs46oIajLhowA84Esm24QwU o2atyIOhNPQAbDgFF8OzqRolBXPIHHyuadoqGvVPmpiGYzBX1xcknsMcrGEzAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUFFd80X5Go6QSSUYpfR66aCaDvoowHwYDVR0j BBgwFoAU+LT8Kf7yCt+vskptr19EFSJu+KgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjU4Njc2NDAxNDg0NTk1NS8wL0Y4QjRGQzI5RkVGMjBBREZBRkIyNEE2REFGNUY0 NDE1MjI2RUY4QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjhCNEZDMjlGRUYyMEFERkFGQjI0QTZEQUY1RjQ0MTUyMjZFRjhBOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTY1ODY3NjQwMTQ4NDU5NTUvMC8zMTMxMzQyZTMx MzEzNDJlMzEzMjM4MmUzMDJmMzEzNzJkMzIzNDIwM2QzZTIwMzIzMTM4MzUzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEB3JygDANBgkqhkiG9w0BAQsFAAOCAQEApvjYo+I7dK1+nvYZfxqq EXytUdS8tT1Q9W1v5/ljbeJpDeEaunY5L5Dn6lXNdvjffx5SJhPnpg95rUuKfeCt 6E3lm1HMNGpMtEU11Ix+giVN1DsADQ9D7z2randLvixWKQlrSygwfFPjxlK5sGqa 0YISc2wFeSDrcWl1TeTuff57b9f39khblkHo2eMjdsFymZ/19frdRn8jmglySsn+ dVb1/ABZE7wA6brQ9QPeEZbIjUnIZG7gTjF1rIWbSDU6O06cP/w2jyWKEA8wfvJL 6ljF+MM6dzHG0qZTkQzXKU0/YFYenU/MFggWkkJniXrIS7w5Lmb2jnHa1I+UUq9M Gw== -----END CERTIFICATE-----Generated at Fri Apr 17 14:51:47 2026 by rpki-client