$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096628436677427201/0/3131392e34322e3133362e302f32312d3234203d3e203338333735.roa File: 3131392e34322e3133362e302f32312d3234203d3e203338333735.roa (raw, json) Hash identifier: onz07yEDGzQ5lM3czrPnQNjHr6shpdjA+AGj0B+B8V0= Subject key identifier: 27:79:70:12:F8:60:7C:B4:49:DA:D2:3F:97:23:2A:7C:2A:88:B2:97 Certificate issuer: /CN=66E8C6C4D3432C457DBC420613F170D1895B607C Certificate serial: 0E75FB14BCDCB99DE31CDA18EDC4110ECA03473B Authority key identifier: 66:E8:C6:C4:D3:43:2C:45:7D:BC:42:06:13:F1:70:D1:89:5B:60:7C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/3131392e34322e3133362e302f32312d3234203d3e203338333735.roa Signing time: Wed 15 Apr 2026 02:51:14 +0000 ROA not before: Wed 15 Apr 2026 02:46:14 +0000 ROA not after: Wed 14 Apr 2027 02:51:14 +0000 asID: 38375 IP address blocks: 119.42.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.crl rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:75:fb:14:bc:dc:b9:9d:e3:1c:da:18:ed:c4:11:0e:ca:03:47:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66E8C6C4D3432C457DBC420613F170D1895B607C Validity Not Before: Apr 15 02:46:14 2026 GMT Not After : Apr 14 02:51:14 2027 GMT Subject: CN=27797012F8607CB449DAD23F97232A7C2A88B297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fb:b3:8f:42:e8:89:68:9d:b2:b5:77:75:c7: 05:b5:91:7c:f6:b3:0e:69:18:0d:04:cb:ee:e8:07: ba:28:be:69:e1:0f:5c:3b:88:84:25:b9:40:d7:6d: 76:e1:f1:20:9c:01:f5:3e:cd:2e:b5:90:92:9a:07: ab:b2:70:ec:0b:1d:29:d3:9e:1a:af:87:eb:1d:97: c7:d5:fb:b3:aa:ae:9d:2f:33:ce:34:da:9d:8e:af: 6d:fd:6e:83:52:07:af:0c:83:20:49:72:31:09:b9: 11:eb:c3:43:83:67:db:fc:bc:68:84:74:ed:ce:be: 29:ab:47:56:f5:e2:25:e2:1c:c7:45:5f:32:7c:d2: 64:43:6f:3f:2d:33:f0:d1:f9:f3:96:79:82:23:92: df:60:6b:1f:49:81:0e:67:8d:3c:76:59:df:9f:81: 6f:03:8a:b5:eb:7c:db:64:20:a5:49:56:ca:1f:f3: fe:f8:a5:41:17:17:a5:7c:63:ed:d4:e2:a0:da:4e: b2:6a:a7:30:77:f4:4a:8f:40:d2:5b:48:3c:1f:5f: bd:84:e1:5a:b2:6e:7c:fd:a3:4c:d6:5e:c2:e1:63: bc:cb:94:c8:e0:02:8a:b7:a5:06:91:fe:ff:4a:07: 94:66:4e:cf:c2:d5:6e:6e:b9:ed:f1:c1:99:1b:1b: 53:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:79:70:12:F8:60:7C:B4:49:DA:D2:3F:97:23:2A:7C:2A:88:B2:97 X509v3 Authority Key Identifier: keyid:66:E8:C6:C4:D3:43:2C:45:7D:BC:42:06:13:F1:70:D1:89:5B:60:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/3131392e34322e3133362e302f32312d3234203d3e203338333735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.42.136.0/21 Signature Algorithm: sha256WithRSAEncryption 9b:00:0e:47:69:53:9b:90:48:fe:76:95:9d:0b:1a:64:64:3a: 2f:31:e4:18:9f:53:32:2e:b7:e8:b1:7c:6c:b0:46:aa:91:38: dc:88:0f:59:cf:5c:53:62:c5:e0:11:23:ab:df:8a:a1:2f:e7: 65:a9:76:14:3f:64:b8:23:36:b7:f0:52:a8:97:7c:b3:7e:a5: 70:7e:9c:78:d1:f0:73:85:01:c7:c0:ed:8c:50:5e:43:99:1f: 1e:cf:d0:fb:05:7e:99:c8:1b:df:d8:2f:82:28:ca:51:df:22: f6:43:00:01:33:cb:7e:32:06:0b:90:0a:6c:e1:5c:94:ce:cd: 2a:ea:88:19:ca:6f:76:ef:59:e4:8c:a3:59:6e:22:28:26:fa: e3:57:7b:26:f5:03:13:2e:f4:bc:0b:ac:ac:f8:84:cb:53:c4: 54:04:e3:fe:9d:74:9a:94:4a:13:08:66:f0:64:1f:54:95:cf: 6e:e7:68:fe:3f:5e:d3:90:70:e9:de:77:3b:e0:14:25:a9:b0: 87:82:e3:f3:16:9a:03:43:e1:ee:e2:2c:fb:66:94:d7:fe:a5: 7d:71:af:82:44:91:90:49:d1:d5:a2:57:d4:98:5c:0b:51:ea: 15:4f:1f:94:80:e2:8d:f0:cf:ab:2c:09:87:f4:76:71:3d:31: 50:42:e3:87 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUDnX7FLzcuZ3jHNoY7cQRDsoDRzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZFOEM2QzREMzQzMkM0NTdEQkM0MjA2MTNGMTcwRDE4 OTVCNjA3QzAeFw0yNjA0MTUwMjQ2MTRaFw0yNzA0MTQwMjUxMTRaMDMxMTAvBgNV BAMTKDI3Nzk3MDEyRjg2MDdDQjQ0OURBRDIzRjk3MjMyQTdDMkE4OEIyOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT+7OPQuiJaJ2ytXd1xwW1kXz2 sw5pGA0Ey+7oB7oovmnhD1w7iIQluUDXbXbh8SCcAfU+zS61kJKaB6uycOwLHSnT nhqvh+sdl8fV+7Oqrp0vM8402p2Or239boNSB68MgyBJcjEJuRHrw0ODZ9v8vGiE dO3OvimrR1b14iXiHMdFXzJ80mRDbz8tM/DR+fOWeYIjkt9gax9JgQ5njTx2Wd+f gW8DirXrfNtkIKVJVsof8/74pUEXF6V8Y+3U4qDaTrJqpzB39EqPQNJbSDwfX72E 4Vqybnz9o0zWXsLhY7zLlMjgAoq3pQaR/v9KB5RmTs/C1W5uue3xwZkbG1PNAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUJ3lwEvhgfLRJ2tI/lyMqfCqIspcwHwYDVR0j BBgwFoAUZujGxNNDLEV9vEIGE/Fw0YlbYHwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYyODQzNjY3NzQyNzIwMS8wLzY2RThDNkM0RDM0MzJDNDU3REJDNDIwNjEzRjE3 MEQxODk1QjYwN0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjZFOEM2QzREMzQzMkM0NTdEQkM0MjA2MTNGMTcwRDE4OTVCNjA3Qy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjYyODQzNjY3NzQyNzIwMS8wLzMxMzEzOTJlMzQz MjJlMzEzMzM2MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzMzODMzMzczNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA3cqiDANBgkqhkiG9w0BAQsFAAOCAQEAmwAOR2lTm5BI/naVnQsaZGQ6 LzHkGJ9TMi636LF8bLBGqpE43IgPWc9cU2LF4BEjq9+KoS/nZal2FD9kuCM2t/BS qJd8s36lcH6ceNHwc4UBx8DtjFBeQ5kfHs/Q+wV+mcgb39gvgijKUd8i9kMAATPL fjIGC5AKbOFclM7NKuqIGcpvdu9Z5IyjWW4iKCb641d7JvUDEy70vAusrPiEy1PE VATj/p10mpRKEwhm8GQfVJXPbudo/j9e05Bw6d53O+AUJamwh4Lj8xaaA0Ph7uIs +2aU1/6lfXGvgkSRkEnR1aJX1JhcC1HqFU8flIDijfDPqywJh/R2cT0xUELjhw== -----END CERTIFICATE-----Generated at Sat Apr 18 01:01:05 2026 by rpki-client