$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e35362e302f32312d3231203d3e2034383038.roa File: 3131382e3139342e35362e302f32312d3231203d3e2034383038.roa (raw, json) Hash identifier: kPLgk6dYiF/WX5Rq65tlfXz+gdLaxsqZIwF0A7Ufkqo= Subject key identifier: 9B:B9:F5:ED:74:36:23:02:C8:BE:0C:99:E3:61:A6:46:D2:40:3F:00 Certificate issuer: /CN=098D421CB46F292F13CE71DF3D685D5E82893289 Certificate serial: 13DBA57A0351E6A27AC57E84D176FD6EA8DA55CD Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e35362e302f32312d3231203d3e2034383038.roa Signing time: Tue 02 Jun 2026 07:44:13 +0000 ROA not before: Tue 02 Jun 2026 07:39:13 +0000 ROA not after: Tue 01 Jun 2027 07:44:13 +0000 asID: 4808 IP address blocks: 118.194.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:db:a5:7a:03:51:e6:a2:7a:c5:7e:84:d1:76:fd:6e:a8:da:55:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289 Validity Not Before: Jun 2 07:39:13 2026 GMT Not After : Jun 1 07:44:13 2027 GMT Subject: CN=9BB9F5ED74362302C8BE0C99E361A646D2403F00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:85:32:e6:14:1f:5b:be:e7:a1:5d:3a:77:b8: 84:13:0a:b5:50:e9:3e:0e:45:e3:dc:cb:e0:ef:f6: 5e:20:b0:8f:10:94:5f:94:4b:8a:6d:15:3e:ae:ee: 6c:b8:9d:00:9d:6d:0e:a7:48:aa:bf:d9:52:46:bd: b1:11:9f:fc:de:b1:91:e8:bb:ee:00:ae:35:fd:f1: 04:66:93:46:1f:8c:e3:89:f5:b5:78:4d:b3:ce:fe: b4:62:1b:cb:58:bf:92:b3:07:49:1a:4b:2b:df:5f: 66:1f:8f:95:3a:2d:67:7a:4a:df:2b:ec:ff:cc:f6: 02:fb:01:19:0e:35:dd:f7:6b:f8:68:f9:04:3f:47: d9:87:01:06:b1:ea:17:9e:7f:0b:d9:53:1a:1f:d4: d9:fe:c6:25:12:e6:4a:c1:3e:16:5e:cc:40:39:01: 6e:5c:85:bf:6a:c1:5a:41:a6:5e:3e:69:71:75:fc: 17:73:da:6b:6f:1b:3f:26:88:e6:6a:51:b5:68:87: d8:1c:58:91:b3:c2:b5:a8:08:8f:ff:48:10:3f:8b: 7d:f0:b4:67:c2:e2:4d:cd:64:ac:f3:d9:49:c7:ba: f1:bc:9e:ce:14:3f:7d:42:8f:cf:f9:9f:be:08:0e: 20:ba:4a:97:ef:e4:55:8b:46:23:aa:1e:b9:45:aa: 8b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B9:F5:ED:74:36:23:02:C8:BE:0C:99:E3:61:A6:46:D2:40:3F:00 X509v3 Authority Key Identifier: keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e35362e302f32312d3231203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 118.194.56.0/21 Signature Algorithm: sha256WithRSAEncryption 7d:50:37:13:b5:73:dc:f2:3e:ca:e0:30:35:d1:63:44:36:0b: 5a:c1:64:a2:49:e3:c2:e0:f1:92:e0:4c:1a:dc:39:4b:b6:29: 5a:8e:95:f9:f9:d1:f2:98:3f:dd:d7:ff:84:b4:61:10:70:b3: 8f:74:86:25:c7:b2:23:0b:56:37:ff:72:67:c4:a4:9c:2c:47: c5:e7:83:0b:ed:36:a4:bf:fa:a2:86:6b:2a:0b:33:df:02:a9: c7:fb:e5:d4:dd:8d:43:7d:9c:16:58:ef:3f:ca:b6:62:61:dc: 4d:f4:3e:9b:23:81:1b:0a:98:07:95:4b:4b:02:3d:5f:bb:48: 4e:db:69:fb:65:75:7f:09:00:c9:cf:76:28:cf:26:d9:6a:e4: 9e:1e:d4:96:4d:48:e1:99:d0:d7:8e:90:e4:36:b9:a0:73:7a: 99:a9:1f:7f:e2:d3:86:fc:42:4d:85:a9:f2:e7:8d:af:81:3b: f9:3d:34:75:00:0b:70:b3:5d:c5:e3:4d:13:a7:22:14:71:f9: f6:e2:65:e3:69:26:cb:a3:28:d5:4a:f4:88:6f:56:52:98:ca: 8c:d6:d2:db:50:0d:1e:ba:cd:cf:ef:66:7a:88:3e:40:bf:0e: 5d:96:32:0d:36:7b:93:31:70:c4:fa:db:b2:ac:fb:dc:b3:33: 9c:96:d8:9e -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUE9ulegNR5qJ6xX6E0Xb9bqjaVc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4 Mjg5MzI4OTAeFw0yNjA2MDIwNzM5MTNaFw0yNzA2MDEwNzQ0MTNaMDMxMTAvBgNV BAMTKDlCQjlGNUVENzQzNjIzMDJDOEJFMEM5OUUzNjFBNjQ2RDI0MDNGMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEhTLmFB9bvuehXTp3uIQTCrVQ 6T4ORePcy+Dv9l4gsI8QlF+US4ptFT6u7my4nQCdbQ6nSKq/2VJGvbERn/zesZHo u+4ArjX98QRmk0YfjOOJ9bV4TbPO/rRiG8tYv5KzB0kaSyvfX2Yfj5U6LWd6St8r 7P/M9gL7ARkONd33a/ho+QQ/R9mHAQax6heefwvZUxof1Nn+xiUS5krBPhZezEA5 AW5chb9qwVpBpl4+aXF1/Bdz2mtvGz8miOZqUbVoh9gcWJGzwrWoCI//SBA/i33w tGfC4k3NZKzz2UnHuvG8ns4UP31Cj8/5n74IDiC6Spfv5FWLRiOqHrlFqosJAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUm7n17XQ2IwLIvgyZ42GmRtJAPwAwHwYDVR0j BBgwFoAUCY1CHLRvKS8TznHfPWhdXoKJMokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzY2MjQ2Ni8wLzA5OEQ0MjFDQjQ2RjI5MkYxM0NFNzFERjNENjg1 RDVFODI4OTMyODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4Mjg5MzI4OS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3NjYyNDY2LzAvMzEzMTM4MmUzMTM5 MzQyZTM1MzYyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA3bCODANBgkqhkiG9w0BAQsFAAOCAQEAfVA3E7Vz3PI+yuAwNdFjRDYLWsFk oknjwuDxkuBMGtw5S7YpWo6V+fnR8pg/3df/hLRhEHCzj3SGJceyIwtWN/9yZ8Sk nCxHxeeDC+02pL/6ooZrKgsz3wKpx/vl1N2NQ32cFljvP8q2YmHcTfQ+myOBGwqY B5VLSwI9X7tITttp+2V1fwkAyc92KM8m2Wrknh7Ulk1I4ZnQ146Q5Da5oHN6makf f+LThvxCTYWp8ueNr4E7+T00dQALcLNdxeNNE6ciFHH59uJl42kmy6Mo1Ur0iG9W UpjKjNbS21ANHrrNz+9meog+QL8OXZYyDTZ7kzFwxPrbsqz73LMznJbYng== -----END CERTIFICATE-----Generated at Fri Jun 12 02:24:49 2026 by rpki-client