$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096979629178093570/0/3131362e3231342e3133322e302f32342d3234203d3e203633393831.roa File: 3131362e3231342e3133322e302f32342d3234203d3e203633393831.roa (raw, json) Hash identifier: BR9DyygvBYnXR1fAh3XW1vDD1d/0G17MHg0VKGRGr/I= Subject key identifier: 81:B1:BE:73:DF:DE:0A:69:CE:04:EC:D2:3A:67:00:67:4A:C0:DF:4E Certificate issuer: /CN=0491F42A3990BD60D32248583741F141AC61F0EE Certificate serial: 5B2205297D295C998B739D25575987A5AE36B491 Authority key identifier: 04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/3131362e3231342e3133322e302f32342d3234203d3e203633393831.roa Signing time: Thu 16 Apr 2026 02:26:40 +0000 ROA not before: Thu 16 Apr 2026 02:21:40 +0000 ROA not after: Thu 15 Apr 2027 02:26:40 +0000 asID: 63981 IP address blocks: 116.214.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 23:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:22:05:29:7d:29:5c:99:8b:73:9d:25:57:59:87:a5:ae:36:b4:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0491F42A3990BD60D32248583741F141AC61F0EE Validity Not Before: Apr 16 02:21:40 2026 GMT Not After : Apr 15 02:26:40 2027 GMT Subject: CN=81B1BE73DFDE0A69CE04ECD23A6700674AC0DF4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:82:e4:b8:77:cf:b4:48:46:78:c7:f1:c3:33: 1f:c3:24:c6:24:7e:df:75:76:73:71:d4:82:ad:f1: c4:3f:8d:99:a7:d8:1d:88:6b:e9:4e:00:a0:6a:ce: c8:9c:15:9e:1b:99:fd:99:05:44:5c:e0:b8:a0:c6: 0a:15:03:5f:53:45:23:91:23:af:82:02:31:ad:3e: 5e:e8:9c:9c:1d:25:98:5a:5d:df:5e:13:c1:f5:99: 1a:b3:a5:a2:a8:c2:e6:86:55:2d:37:56:f3:06:45: 8b:14:5f:43:19:6b:48:52:65:66:df:e3:ab:6a:86: 64:8f:40:a1:73:66:85:ee:4d:78:3f:9b:00:98:a9: 33:a0:84:23:ad:ae:fe:20:29:7f:61:b5:7f:2b:e0: d1:d4:71:58:98:d4:32:a2:10:4d:74:3d:e0:c3:24: f5:e5:f6:cf:1e:93:1f:25:cb:f7:98:07:62:8d:df: 7d:b2:ec:27:61:d9:2d:70:d7:02:80:60:8f:2b:89: eb:36:3f:11:af:11:15:6e:f3:58:c1:5e:1e:5a:55: f6:9a:f3:70:6d:92:82:43:84:6d:f9:8a:5b:58:2f: 30:64:53:a7:cb:07:79:a4:58:ac:2d:ea:55:b6:ea: 79:d8:67:68:f5:0b:bd:d6:bc:ee:8f:32:d4:d5:b4: aa:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B1:BE:73:DF:DE:0A:69:CE:04:EC:D2:3A:67:00:67:4A:C0:DF:4E X509v3 Authority Key Identifier: keyid:04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/3131362e3231342e3133322e302f32342d3234203d3e203633393831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.214.132.0/24 Signature Algorithm: sha256WithRSAEncryption b6:5d:8f:55:b5:76:b0:7c:da:7f:6a:11:e5:69:a9:9b:31:2f: bc:b9:fc:3e:38:fe:c1:4b:63:bf:dc:cf:10:cd:1f:99:d2:80: 9f:3c:8b:62:71:2c:1f:fd:25:be:21:a3:a8:d2:98:79:51:11: ee:33:3f:60:f4:3c:e9:a7:bb:19:61:93:db:5e:a8:f0:ab:f2: a9:48:55:cf:b0:9c:cc:07:13:f7:9b:cc:90:30:b0:f0:20:23: 59:c5:55:26:a7:42:5b:91:c7:17:88:68:70:3a:18:fb:06:32: 62:29:e5:ed:76:52:33:7d:9c:c5:f1:97:e6:00:94:90:92:cf: 05:07:66:03:b4:5d:71:98:1c:6d:0b:07:bd:34:f7:d7:e8:0f: 4a:47:98:65:1d:f7:b1:a0:bd:d2:9a:de:7c:1c:50:f3:77:3e: eb:3d:1c:03:80:03:43:6a:81:54:e4:c3:ed:d6:52:61:f1:78: a2:ce:e9:fc:6f:88:05:11:f2:d5:5e:38:67:7f:0f:72:f5:79: 08:ba:b7:79:54:39:9d:f3:cd:bb:28:b9:a4:0e:15:90:9d:79: a3:c5:b2:d0:c0:68:d0:93:58:36:ec:8a:7c:34:33:12:c6:d7: 19:09:77:fe:51:07:be:4d:5b:f0:6e:84:e7:c2:45:9b:06:04: c2:f4:7e:3b -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUWyIFKX0pXJmLc50lV1mHpa42tJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ5MUY0MkEzOTkwQkQ2MEQzMjI0ODU4Mzc0MUYxNDFB QzYxRjBFRTAeFw0yNjA0MTYwMjIxNDBaFw0yNzA0MTUwMjI2NDBaMDMxMTAvBgNV BAMTKDgxQjFCRTczREZERTBBNjlDRTA0RUNEMjNBNjcwMDY3NEFDMERGNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1guS4d8+0SEZ4x/HDMx/DJMYk ft91dnNx1IKt8cQ/jZmn2B2Ia+lOAKBqzsicFZ4bmf2ZBURc4LigxgoVA19TRSOR I6+CAjGtPl7onJwdJZhaXd9eE8H1mRqzpaKowuaGVS03VvMGRYsUX0MZa0hSZWbf 46tqhmSPQKFzZoXuTXg/mwCYqTOghCOtrv4gKX9htX8r4NHUcViY1DKiEE10PeDD JPXl9s8ekx8ly/eYB2KN332y7Cdh2S1w1wKAYI8ries2PxGvERVu81jBXh5aVfaa 83BtkoJDhG35iltYLzBkU6fLB3mkWKwt6lW26nnYZ2j1C73WvO6PMtTVtKoxAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUgbG+c9/eCmnOBOzSOmcAZ0rA304wHwYDVR0j BBgwFoAUBJH0KjmQvWDTIkhYN0HxQaxh8O4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk3OTYyOTE3ODA5MzU3MC8wLzA0OTFGNDJBMzk5MEJENjBEMzIyNDg1ODM3NDFG MTQxQUM2MUYwRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDQ5MUY0MkEzOTkwQkQ2MEQzMjI0ODU4Mzc0MUYxNDFBQzYxRjBFRS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTY5Nzk2MjkxNzgwOTM1NzAvMC8zMTMxMzYyZTMy MzEzNDJlMzEzMzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM5MzgzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAHTWhDANBgkqhkiG9w0BAQsFAAOCAQEAtl2PVbV2sHzaf2oR5Wmp mzEvvLn8Pjj+wUtjv9zPEM0fmdKAnzyLYnEsH/0lviGjqNKYeVER7jM/YPQ86ae7 GWGT216o8KvyqUhVz7CczAcT95vMkDCw8CAjWcVVJqdCW5HHF4hocDoY+wYyYinl 7XZSM32cxfGX5gCUkJLPBQdmA7RdcZgcbQsHvTT31+gPSkeYZR33saC90prefBxQ 83c+6z0cA4ADQ2qBVOTD7dZSYfF4os7p/G+IBRHy1V44Z38PcvV5CLq3eVQ5nfPN uyi5pA4VkJ15o8Wy0MBo0JNYNuyKfDQzEsbXGQl3/lEHvk1b8G6E58JFmwYEwvR+ Ow== -----END CERTIFICATE-----Generated at Fri Apr 17 17:13:21 2026 by rpki-client