$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347192321/0/3136332e35332e35362e302f32322d3332203d3e2030.roa File: 3136332e35332e35362e302f32322d3332203d3e2030.roa (raw, json) Hash identifier: rAnzQxKUU4nmTXeEcZWUPRleZJ3o8e2ZdKbS6H6ir7w= Subject key identifier: F3:8F:9C:A8:DC:DE:3B:28:3A:83:BF:2A:D8:CF:33:D1:FD:CD:6F:3D Certificate issuer: /CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Certificate serial: 6E5F760BD4CCF3C5D9E37814D9EE684D1FA0460C Authority key identifier: BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/3136332e35332e35362e302f32322d3332203d3e2030.roa Signing time: Mon 13 Apr 2026 03:32:55 +0000 ROA not before: Mon 13 Apr 2026 03:27:55 +0000 ROA not after: Mon 12 Apr 2027 03:32:55 +0000 asID: 0 IP address blocks: 163.53.56.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:5f:76:0b:d4:cc:f3:c5:d9:e3:78:14:d9:ee:68:4d:1f:a0:46:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Validity Not Before: Apr 13 03:27:55 2026 GMT Not After : Apr 12 03:32:55 2027 GMT Subject: CN=F38F9CA8DCDE3B283A83BF2AD8CF33D1FDCD6F3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:79:b5:ef:28:73:98:d6:70:ca:f9:5a:a4:54: ac:72:2e:df:64:c7:f4:0c:4d:6f:55:ee:18:f5:ae: 04:fa:95:fb:d6:f5:0a:90:25:40:8d:89:9c:80:b6: a2:33:97:49:47:f8:1b:46:50:c0:cf:a8:e4:b6:51: 9f:4e:99:b0:9b:68:91:e5:25:d1:bb:17:a4:14:10: c4:1e:35:36:22:83:f9:7f:74:5c:ce:ef:2c:4f:dd: 43:69:08:44:e7:2f:b2:22:b0:29:45:05:87:f5:64: 4e:5b:1a:ab:ba:c2:a1:b2:c9:41:b7:b3:25:61:fd: c3:2c:52:c7:0f:64:cc:96:d1:19:46:c8:e5:0d:df: dd:ef:dc:52:cc:ab:ab:e2:c4:2a:05:34:6f:14:7d: 02:63:d5:89:bc:87:7f:d0:73:98:35:80:c9:72:8b: 71:7d:fa:19:84:2f:93:4c:84:fb:6d:14:3f:5f:3b: 22:a5:16:04:d7:2d:65:eb:22:6d:66:84:3a:48:0f: 66:9f:ba:ff:ba:11:37:b0:07:04:5a:70:7f:9b:88: 6b:ed:48:c2:42:61:71:c9:bc:a7:80:3b:f2:27:e7: 15:2c:ba:76:96:1d:08:b7:0e:62:9b:10:ba:cc:c2: ce:b0:92:12:b4:2d:d4:f1:eb:d6:ec:f9:90:75:cc: dd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8F:9C:A8:DC:DE:3B:28:3A:83:BF:2A:D8:CF:33:D1:FD:CD:6F:3D X509v3 Authority Key Identifier: keyid:BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/3136332e35332e35362e302f32322d3332203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.53.56.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:01:1e:c2:85:f9:15:bb:b9:63:e9:24:70:a9:c0:3b:9d:9b: 82:89:15:5f:a4:4a:a8:57:60:8b:7e:b5:8e:56:05:41:8b:1c: ae:6b:e7:70:5c:28:68:fa:0f:7b:5d:ab:a3:53:28:23:e9:93: 4f:7f:23:16:f0:72:2d:81:e4:84:9c:80:e6:fb:92:d0:a5:27: a7:bd:7a:d3:eb:ab:44:86:8d:c2:81:bc:4b:7c:07:cd:0d:ee: 16:a3:0e:25:5f:b6:56:ac:af:5d:d4:66:9e:77:eb:bc:db:c5: 67:77:27:95:60:1f:5e:c3:b3:7f:00:0b:cc:c4:03:d4:cd:ca: 8c:9a:53:03:da:e9:25:93:00:8f:5e:be:12:73:80:47:13:98: 91:5b:83:49:ae:6b:54:b1:5e:4e:1e:ce:19:fa:02:83:b5:b2: ea:a2:03:a9:12:7b:e2:ad:03:79:e7:6c:75:d2:57:52:97:ec: 5b:e2:3d:a6:83:fa:44:1d:93:d0:0f:a9:cc:6d:98:64:19:d8: 4d:27:f9:1e:6c:0b:f8:b2:28:f9:da:7c:5e:9c:0e:bf:4d:2a: 3f:90:66:6d:df:de:92:54:cb:bf:42:9c:a8:d5:35:69:00:e2: e8:62:e0:d0:a5:a1:f8:7d:15:74:1d:64:02:34:43:44:38:96: 8c:a6:f0:8f -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUbl92C9TM88XZ43gU2e5oTR+gRgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNE RDlBREIxMzAeFw0yNjA0MTMwMzI3NTVaFw0yNzA0MTIwMzMyNTVaMDMxMTAvBgNV BAMTKEYzOEY5Q0E4RENERTNCMjgzQTgzQkYyQUQ4Q0YzM0QxRkRDRDZGM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTebXvKHOY1nDK+VqkVKxyLt9k x/QMTW9V7hj1rgT6lfvW9QqQJUCNiZyAtqIzl0lH+BtGUMDPqOS2UZ9OmbCbaJHl JdG7F6QUEMQeNTYig/l/dFzO7yxP3UNpCETnL7IisClFBYf1ZE5bGqu6wqGyyUG3 syVh/cMsUscPZMyW0RlGyOUN393v3FLMq6vixCoFNG8UfQJj1Ym8h3/Qc5g1gMly i3F9+hmEL5NMhPttFD9fOyKlFgTXLWXrIm1mhDpID2afuv+6ETewBwRacH+biGvt SMJCYXHJvKeAO/In5xUsunaWHQi3DmKbELrMws6wkhK0LdTx69bs+ZB1zN1PAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQU84+cqNzeOyg6g78q2M8z0f3Nbz0wHwYDVR0j BBgwFoAUvKjibobcJ6QQ3aU7DarSHN2a2xMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzE5MjMyMS8wL0JDQThFMjZFODZEQzI3QTQxMEREQTUzQjBEQUFE MjFDREQ5QURCMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNERDlBREIxMy5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ3MTkyMzIxLzAvMzEzNjMzMmUzNTMz MmUzNTM2MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKjNTgw DQYJKoZIhvcNAQELBQADggEBAF0BHsKF+RW7uWPpJHCpwDudm4KJFV+kSqhXYIt+ tY5WBUGLHK5r53BcKGj6D3tdq6NTKCPpk09/Ixbwci2B5IScgOb7ktClJ6e9etPr q0SGjcKBvEt8B80N7hajDiVftlasr13UZp5367zbxWd3J5VgH17Ds38AC8zEA9TN yoyaUwPa6SWTAI9evhJzgEcTmJFbg0mua1SxXk4ezhn6AoO1suqiA6kSe+KtA3nn bHXSV1KX7FviPaaD+kQdk9APqcxtmGQZ2E0n+R5sC/iyKPnafF6cDr9NKj+QZm3f 3pJUy79CnKjVNWkA4uhi4NClofh9FXQdZAI0Q0Q4loym8I8= -----END CERTIFICATE-----Generated at Mon Apr 13 12:23:30 2026 by rpki-client