$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/0/3135302e3234322e3234342e302f32322d3232203d3e20313334373635.roa File: 3135302e3234322e3234342e302f32322d3232203d3e20313334373635.roa (raw, json) Hash identifier: Z0Og2VRkF9so8DXGO9qx7+fqZAupDQA2fhEa1vdrebg= Subject key identifier: B2:C1:61:55:4A:49:B3:12:A2:DC:B6:96:11:64:93:A7:77:84:47:17 Certificate issuer: /CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Certificate serial: 14C80888260AB3F205DF3193AA5DFA35A33715D1 Authority key identifier: 66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/3135302e3234322e3234342e302f32322d3232203d3e20313334373635.roa Signing time: Wed 08 Apr 2026 05:29:35 +0000 ROA not before: Wed 08 Apr 2026 05:24:35 +0000 ROA not after: Wed 07 Apr 2027 05:29:35 +0000 asID: 134765 IP address blocks: 150.242.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 19:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:c8:08:88:26:0a:b3:f2:05:df:31:93:aa:5d:fa:35:a3:37:15:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Validity Not Before: Apr 8 05:24:35 2026 GMT Not After : Apr 7 05:29:35 2027 GMT Subject: CN=B2C161554A49B312A2DCB696116493A777844717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b1:c0:39:75:77:11:e7:2b:ac:8b:35:52:f3: 08:67:7f:24:77:64:71:d9:48:20:36:a7:b4:42:b9: 6e:3f:b1:8c:ea:66:f7:c8:67:e6:1b:4e:ef:16:36: c0:7f:aa:da:21:41:2f:a1:0f:e6:87:f9:c6:bf:19: ec:0e:7f:eb:a5:95:09:c7:fe:cd:48:39:da:d6:43: 75:5d:3a:cc:e8:bd:47:55:28:dd:99:34:bf:3e:19: 11:e3:b7:cc:5a:47:d1:5e:d0:cf:20:11:da:a8:a8: 23:b8:b4:aa:69:86:92:07:14:88:6c:d6:ff:3b:27: 8b:9d:06:8a:36:01:51:fd:ce:db:d0:0d:51:0b:62: 53:02:e7:1b:85:94:24:c8:47:78:e7:dc:4b:0a:9a: 6b:af:f9:0a:34:50:49:e3:cf:7a:47:8d:b0:f7:f5: 1c:34:4b:f1:f8:ce:b8:7e:19:7e:fc:03:fc:ed:d5: ad:c5:81:17:43:e9:79:da:0b:fe:c3:4e:54:12:97: 92:74:ff:dd:49:fd:ac:15:ca:76:f2:45:b0:a7:ba: ed:30:5c:33:8a:55:69:17:aa:2c:74:e5:6e:64:25: fa:d7:a5:d9:6c:14:ff:eb:b1:05:80:33:31:d9:18: a2:a9:14:42:e2:4c:81:2e:11:50:4d:0d:70:3a:02: 7d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C1:61:55:4A:49:B3:12:A2:DC:B6:96:11:64:93:A7:77:84:47:17 X509v3 Authority Key Identifier: keyid:66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/3135302e3234322e3234342e302f32322d3232203d3e20313334373635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.242.244.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:eb:d7:86:cc:96:14:14:fc:87:b8:7d:fa:d1:c3:bc:6b:b4: 58:89:e6:98:c4:f6:7f:18:32:f6:3d:38:0d:6a:bb:b7:2d:73: 77:72:af:4d:2c:3d:42:e6:0c:01:38:49:ca:16:06:c0:83:52: 2b:51:f3:5c:50:e2:91:61:36:89:65:e9:7a:32:bb:d8:55:2d: d0:6b:b3:08:fc:e3:af:1f:a4:39:d0:d7:cb:3c:eb:fb:31:d4: 1e:da:b2:4d:d6:80:3c:99:c1:31:d7:83:55:10:af:4d:cc:ed: 80:05:d5:70:b3:09:c1:be:e7:17:b1:20:b8:7a:9a:38:42:6a: fa:71:d1:47:3c:a2:aa:7b:e3:bf:8f:17:de:b7:d3:71:8c:19: e2:8f:5e:db:40:d3:b7:69:48:27:98:b2:44:af:a8:ea:55:fc: 66:06:b1:ce:6d:ea:cb:38:cc:39:6b:0f:dc:7d:39:45:59:ff: 3c:fb:4b:25:e7:93:0f:a3:f2:11:93:9a:c3:7b:4b:93:0f:a2: d0:31:b9:82:e5:c1:ac:bf:a0:57:0f:9b:b6:5c:08:1c:1f:60: 68:59:80:34:8f:37:9e:83:4a:98:60:ef:14:19:06:85:f7:86: 5d:14:d3:73:6f:55:20:74:bb:fb:eb:8b:1f:24:e9:9c:61:d7: db:2f:d5:4c -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUFMgIiCYKs/IF3zGTql36NaM3FdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4 NEFGQUEyQTAeFw0yNjA0MDgwNTI0MzVaFw0yNzA0MDcwNTI5MzVaMDMxMTAvBgNV BAMTKEIyQzE2MTU1NEE0OUIzMTJBMkRDQjY5NjExNjQ5M0E3Nzc4NDQ3MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqscA5dXcR5yusizVS8whnfyR3 ZHHZSCA2p7RCuW4/sYzqZvfIZ+YbTu8WNsB/qtohQS+hD+aH+ca/GewOf+ullQnH /s1IOdrWQ3VdOszovUdVKN2ZNL8+GRHjt8xaR9Fe0M8gEdqoqCO4tKpphpIHFIhs 1v87J4udBoo2AVH9ztvQDVELYlMC5xuFlCTIR3jn3EsKmmuv+Qo0UEnjz3pHjbD3 9Rw0S/H4zrh+GX78A/zt1a3FgRdD6XnaC/7DTlQSl5J0/91J/awVynbyRbCnuu0w XDOKVWkXqix05W5kJfrXpdlsFP/rsQWAMzHZGKKpFELiTIEuEVBNDXA6An0vAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUssFhVUpJsxKi3LaWEWSTp3eERxcwHwYDVR0j BBgwFoAUZviwXfuKSb2Nr5D88XC+C4SvqiowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzYxMjAzNS8wLzY2RjhCMDVERkI4QTQ5QkQ4REFGOTBGQ0YxNzBC RTBCODRBRkFBMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4NEFGQUEyQS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTE3NzU3NjEyMDM1LzAvMzEzNTMwMmUz MjM0MzIyZTMyMzQzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzNDM3MzYz NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEApby9DANBgkqhkiG9w0BAQsFAAOCAQEAD+vXhsyWFBT8h7h9 +tHDvGu0WInmmMT2fxgy9j04DWq7ty1zd3KvTSw9QuYMAThJyhYGwINSK1HzXFDi kWE2iWXpejK72FUt0GuzCPzjrx+kOdDXyzzr+zHUHtqyTdaAPJnBMdeDVRCvTczt gAXVcLMJwb7nF7EguHqaOEJq+nHRRzyiqnvjv48X3rfTcYwZ4o9e20DTt2lIJ5iy RK+o6lX8Zgaxzm3qyzjMOWsP3H05RVn/PPtLJeeTD6PyEZOaw3tLkw+i0DG5guXB rL+gVw+btlwIHB9gaFmANI83noNKmGDvFBkGhfeGXRTTc29VIHS7++uLHyTpnGHX 2y/VTA== -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:34 2026 by rpki-client