$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947878403/0/3230332e3136312e3139322e302f31392d3234203d3e203137393639.roa File: 3230332e3136312e3139322e302f31392d3234203d3e203137393639.roa (raw, json) Hash identifier: 5Tg0FQdSDq/Zu86whup67Wa88hxIMsyCZY10zhpGkNQ= Subject key identifier: FF:55:A3:BF:AD:98:8C:99:06:94:05:B5:DF:DA:C1:19:A6:65:54:75 Certificate issuer: /CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0 Certificate serial: 0D962909883A77C8B70028AD9F1E4CF2B817A1C5 Authority key identifier: 57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/3230332e3136312e3139322e302f31392d3234203d3e203137393639.roa Signing time: Fri 10 Apr 2026 01:43:51 +0000 ROA not before: Fri 10 Apr 2026 01:38:51 +0000 ROA not after: Fri 09 Apr 2027 01:43:51 +0000 asID: 17969 IP address blocks: 203.161.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 07:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:96:29:09:88:3a:77:c8:b7:00:28:ad:9f:1e:4c:f2:b8:17:a1:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0 Validity Not Before: Apr 10 01:38:51 2026 GMT Not After : Apr 9 01:43:51 2027 GMT Subject: CN=FF55A3BFAD988C99069405B5DFDAC119A6655475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c9:78:59:dc:30:f5:4a:4e:35:a9:51:c3:e7: 18:32:73:ea:07:48:ba:6f:34:56:09:34:75:f1:d4: bc:30:fe:2e:de:29:10:c7:cf:65:04:12:dd:c0:ee: df:69:df:cb:fb:72:fe:8f:71:4b:f9:c5:86:1c:0d: 51:7d:18:8a:fd:38:38:33:53:a5:2b:ad:dd:bd:01: 69:31:18:72:12:d7:28:29:30:f5:57:37:b8:de:a1: 82:e3:23:72:8c:40:c0:8b:91:4c:e4:d5:5d:b9:1c: 73:b3:bd:e0:82:fa:b0:07:24:66:4c:f5:52:52:01: 06:0f:30:3a:37:33:b0:ee:ba:ca:f1:01:d9:16:4e: 5e:c8:25:ab:b6:93:0e:52:44:1c:71:59:e7:29:62: 87:bc:7b:4c:a6:bd:9f:b2:d7:c8:df:65:64:cc:3d: 91:84:f6:fe:b4:10:27:20:93:86:8d:1a:fa:99:d6: cc:63:5d:c1:68:e0:bd:7b:79:5b:81:cf:76:e8:12: 91:de:ed:05:87:53:04:65:c1:b6:bf:a8:e2:d0:b0: dd:93:92:be:ba:97:47:f3:b2:71:4d:e9:80:f6:20: b7:f7:b2:31:d5:c2:ca:9b:69:91:b9:a5:3e:73:39: 5f:4a:74:a9:66:0a:f3:ab:1d:00:4c:c9:a4:a9:4f: 59:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:55:A3:BF:AD:98:8C:99:06:94:05:B5:DF:DA:C1:19:A6:65:54:75 X509v3 Authority Key Identifier: keyid:57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/3230332e3136312e3139322e302f31392d3234203d3e203137393639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.161.192.0/19 Signature Algorithm: sha256WithRSAEncryption 70:b5:3e:f9:e9:fb:11:0b:11:3a:16:e2:c1:ef:02:df:e0:0d: b5:66:18:dc:4b:da:8b:08:7c:41:4f:e6:d1:61:1b:23:cd:dd: 26:ea:04:a4:b9:e1:75:6d:1d:c0:0c:85:e4:49:d7:01:bf:13: fa:c6:4d:68:be:3f:87:40:f4:82:eb:df:42:65:c2:3f:1d:a1: ca:16:49:d7:d6:56:05:cd:78:e5:13:1b:08:74:72:78:5b:2f: 49:f4:b4:78:92:59:e1:ef:d2:65:02:1e:7c:8e:3e:01:10:79: eb:ea:d8:4f:90:ed:c9:8b:70:1a:a1:7b:88:19:f1:80:6b:52: b9:df:79:74:1b:92:6b:5d:4f:af:12:10:9e:b1:bb:ec:8b:ff: d8:5e:f3:09:ae:f9:9f:41:1b:5f:44:b6:27:15:94:b9:f6:0c: 40:50:3e:6e:b1:b2:f2:54:da:64:e0:4e:4e:f7:07:2f:4f:da: 36:fd:e7:42:5b:51:a3:66:13:ad:25:d8:16:e8:f9:49:7a:d2: 90:8b:42:7c:24:49:2d:59:ff:be:c9:1c:ef:4c:d6:08:e3:74: 6e:99:bd:a3:a6:67:e2:1c:e3:fe:bf:b6:ca:95:d1:7d:e4:b7: c5:fc:13:36:4f:2c:6b:0c:9d:63:44:39:e5:31:9c:c2:ea:f5: f0:fb:f5:dd -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUDZYpCYg6d8i3ACitnx5M8rgXocUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhF Nzk5NUFFMDAeFw0yNjA0MTAwMTM4NTFaFw0yNzA0MDkwMTQzNTFaMDMxMTAvBgNV BAMTKEZGNTVBM0JGQUQ5ODhDOTkwNjk0MDVCNURGREFDMTE5QTY2NTU0NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnyXhZ3DD1Sk41qVHD5xgyc+oH SLpvNFYJNHXx1Lww/i7eKRDHz2UEEt3A7t9p38v7cv6PcUv5xYYcDVF9GIr9ODgz U6Urrd29AWkxGHIS1ygpMPVXN7jeoYLjI3KMQMCLkUzk1V25HHOzveCC+rAHJGZM 9VJSAQYPMDo3M7DuusrxAdkWTl7IJau2kw5SRBxxWecpYoe8e0ymvZ+y18jfZWTM PZGE9v60ECcgk4aNGvqZ1sxjXcFo4L17eVuBz3boEpHe7QWHUwRlwba/qOLQsN2T kr66l0fzsnFN6YD2ILf3sjHVwsqbaZG5pT5zOV9KdKlmCvOrHQBMyaSpT1lTAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU/1Wjv62YjJkGlAW139rBGaZlVHUwHwYDVR0j BBgwFoAUV/vGAvjdGqBtRefz8Zk5aOeZWuAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzg3ODQwMy8wLzU3RkJDNjAyRjhERDFBQTA2RDQ1RTdGM0YxOTkz OTY4RTc5OTVBRTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhFNzk5NUFFMC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc4Nzg0MDMvMC8zMjMwMzMyZTMx MzYzMTJlMzEzOTMyMmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzEzNzM5MzYzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBcuhwDANBgkqhkiG9w0BAQsFAAOCAQEAcLU++en7EQsROhbiwe8C 3+ANtWYY3Evaiwh8QU/m0WEbI83dJuoEpLnhdW0dwAyF5EnXAb8T+sZNaL4/h0D0 guvfQmXCPx2hyhZJ19ZWBc145RMbCHRyeFsvSfS0eJJZ4e/SZQIefI4+ARB56+rY T5DtyYtwGqF7iBnxgGtSud95dBuSa11PrxIQnrG77Iv/2F7zCa75n0EbX0S2JxWU ufYMQFA+brGy8lTaZOBOTvcHL0/aNv3nQltRo2YTrSXYFuj5SXrSkItCfCRJLVn/ vskc70zWCON0bpm9o6Zn4hzj/r+2ypXRfeS3xfwTNk8sawydY0Q55TGcwur18Pv1 3Q== -----END CERTIFICATE-----Generated at Mon Apr 13 13:53:22 2026 by rpki-client