$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3133302e302f32342d3234203d3e20313938343836.roa File: 3131392e35392e3133302e302f32342d3234203d3e20313938343836.roa (raw, json) Hash identifier: sCJBIczjSjKHwYg4tr7Vt4b9W/CSWx+cTZb6kw5fUgI= Subject key identifier: 04:81:3D:15:24:49:CD:DF:E7:42:6A:A4:23:13:C0:4F:D4:EF:F8:9C Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 49B498AE03A767BC76DBEB679CF040A1F5ECA81F Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3133302e302f32342d3234203d3e20313938343836.roa Signing time: Mon 31 Aug 2026 09:55:28 +0000 ROA not before: Mon 31 Aug 2026 09:50:28 +0000 ROA not after: Mon 30 Aug 2027 09:55:28 +0000 asID: 198486 IP address blocks: 119.59.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 22:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:b4:98:ae:03:a7:67:bc:76:db:eb:67:9c:f0:40:a1:f5:ec:a8:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Aug 31 09:50:28 2026 GMT Not After : Aug 30 09:55:28 2027 GMT Subject: CN=04813D152449CDDFE7426AA42313C04FD4EFF89C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6c:ad:25:c2:0c:1d:33:8d:a5:ae:62:4b:68: 0d:64:6b:e8:50:cf:ee:28:3d:6b:24:51:d5:15:9c: 35:6f:a0:89:f4:99:48:f4:67:99:96:da:96:f6:90: 13:63:91:d3:56:6d:fd:d7:f9:c9:60:88:5b:79:83: b3:47:a9:c4:95:ad:2b:be:31:0b:a1:d3:d2:99:b1: c6:fb:28:f8:ae:bb:d6:e5:32:34:1d:7c:65:31:5c: 40:c1:47:30:c4:a0:2d:7b:eb:d4:0f:80:dd:e3:46: fe:73:55:07:de:66:5c:b0:67:bd:7f:e9:41:a0:33: 41:5c:64:92:67:0d:5f:60:7a:fc:91:28:1e:e7:4e: a1:3e:8a:d3:5d:cb:a9:47:ab:8f:b6:31:58:36:e6: 59:38:a5:c4:3e:81:d9:76:20:6e:92:e3:93:1e:4e: b6:56:36:fa:75:5d:8d:fb:5c:d4:3b:a6:56:00:53: 30:68:0b:19:c9:13:0e:e6:69:aa:fa:1f:a6:c6:de: 61:6e:2c:4f:f8:54:b1:14:84:58:bc:43:c6:5a:4d: 51:59:cf:de:ba:11:72:ed:06:a8:0a:62:09:9f:24: 30:2f:7c:72:a6:dc:26:f5:84:4e:2a:c1:dd:9e:b5: 54:4b:81:de:22:b4:e2:27:6e:f8:42:43:2f:39:08: 89:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:81:3D:15:24:49:CD:DF:E7:42:6A:A4:23:13:C0:4F:D4:EF:F8:9C X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3133302e302f32342d3234203d3e20313938343836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.59.130.0/24 Signature Algorithm: sha256WithRSAEncryption 82:57:d0:56:4b:63:05:a0:1b:97:f7:2f:24:e5:b7:26:64:15: 7a:7d:3b:6d:a2:00:59:0e:5e:a8:59:50:c3:22:12:fe:bf:ca: f3:e5:a8:e0:c1:7e:dc:4e:46:51:77:57:7c:c8:6c:60:0e:56: 2b:b7:7f:b0:a5:87:ee:bd:ae:57:ad:a2:db:34:66:e2:21:2a: f4:a6:10:7e:b3:bb:8f:a0:c9:05:85:e9:ce:04:79:45:33:6d: 06:ea:21:eb:a3:9a:ba:14:6e:39:ac:c4:22:3b:c1:a1:89:6e: 6e:c4:84:41:ca:46:dd:09:c8:97:b3:71:39:ac:b5:98:b8:74: 9b:8f:65:4a:78:c5:5a:8c:4c:45:72:14:1b:e9:34:ca:8b:80: e4:69:e4:b9:cb:4b:eb:5f:c3:99:03:f4:1c:54:c4:9c:f9:07: 39:52:17:58:89:ca:8f:00:0c:49:fb:a7:9d:8f:ae:d1:fb:6f: dc:c5:c5:d1:b3:c6:40:d8:f5:f5:0c:dd:f8:70:81:a8:17:c9: 48:4d:54:78:ad:0d:ce:b7:59:46:68:fd:81:f8:7d:e8:df:50: 26:dd:6f:67:ee:00:5d:e0:3f:51:60:91:6a:56:d2:c4:5e:8f: 29:89:a7:b7:0e:13:c0:98:58:9b:74:a0:f9:c1:42:e2:e5:d1: 16:72:c3:9d -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUSbSYrgOnZ7x22+tnnPBAofXsqB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA4MzEwOTUwMjhaFw0yNzA4MzAwOTU1MjhaMDMxMTAvBgNV BAMTKDA0ODEzRDE1MjQ0OUNEREZFNzQyNkFBNDIzMTNDMDRGRDRFRkY4OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbbK0lwgwdM42lrmJLaA1ka+hQ z+4oPWskUdUVnDVvoIn0mUj0Z5mW2pb2kBNjkdNWbf3X+clgiFt5g7NHqcSVrSu+ MQuh09KZscb7KPiuu9blMjQdfGUxXEDBRzDEoC1769QPgN3jRv5zVQfeZlywZ71/ 6UGgM0FcZJJnDV9gevyRKB7nTqE+itNdy6lHq4+2MVg25lk4pcQ+gdl2IG6S45Me TrZWNvp1XY37XNQ7plYAUzBoCxnJEw7maar6H6bG3mFuLE/4VLEUhFi8Q8ZaTVFZ z966EXLtBqgKYgmfJDAvfHKm3Cb1hE4qwd2etVRLgd4itOInbvhCQy85CIlRAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUBIE9FSRJzd/nQmqkIxPAT9Tv+JwwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC8zMTMxMzkyZTM1 MzkyZTMxMzMzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzkzODM0MzgzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAHc7gjANBgkqhkiG9w0BAQsFAAOCAQEAglfQVktjBaAbl/cvJOW3 JmQVen07baIAWQ5eqFlQwyIS/r/K8+Wo4MF+3E5GUXdXfMhsYA5WK7d/sKWH7r2u V62i2zRm4iEq9KYQfrO7j6DJBYXpzgR5RTNtBuoh66OauhRuOazEIjvBoYlubsSE QcpG3QnIl7NxOay1mLh0m49lSnjFWoxMRXIUG+k0youA5GnkuctL61/DmQP0HFTE nPkHOVIXWInKjwAMSfunnY+u0ftv3MXF0bPGQNj19Qzd+HCBqBfJSE1UeK0NzrdZ Rmj9gfh96N9QJt1vZ+4AXeA/UWCRalbSxF6PKYmntw4TwJhYm3Sg+cFC4uXRFnLD nQ== -----END CERTIFICATE-----Generated at Wed Sep 9 21:31:17 2026 by rpki-client