$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3130312e33372e302e302f31362d3234203d3e203337393633.roa File: 3130312e33372e302e302f31362d3234203d3e203337393633.roa (raw, json) Hash identifier: yoDJaCa80Du317eps7/Dbh/7gEyBEOco8kvM39u+Ygk= Subject key identifier: 9B:5E:A9:58:E5:02:7F:31:2F:A7:27:63:83:1C:83:F4:91:A0:34:90 Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Certificate serial: 1400E72EAB701A227CC397EFEE76C3B0B64C25F6 Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3130312e33372e302e302f31362d3234203d3e203337393633.roa Signing time: Mon 20 Apr 2026 02:26:59 +0000 ROA not before: Mon 20 Apr 2026 02:21:59 +0000 ROA not after: Mon 19 Apr 2027 02:26:59 +0000 asID: 37963 IP address blocks: 101.37.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 04:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:00:e7:2e:ab:70:1a:22:7c:c3:97:ef:ee:76:c3:b0:b6:4c:25:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Validity Not Before: Apr 20 02:21:59 2026 GMT Not After : Apr 19 02:26:59 2027 GMT Subject: CN=9B5EA958E5027F312FA72763831C83F491A03490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f5:73:c3:d7:7d:21:e0:0b:bf:48:94:64:bc: 12:fc:f6:48:2e:b1:30:da:88:12:a0:7f:b8:84:6c: 89:ec:70:62:d1:10:1d:ab:b3:fa:f6:84:14:7f:8b: 91:d0:fd:d8:4e:6c:3f:f5:5f:ab:40:0b:95:b9:c7: 31:3e:7f:41:b7:5f:e6:ed:d1:c4:28:ce:8b:9b:95: b2:26:a4:e5:08:4a:36:3a:15:1e:d9:e5:db:c5:97: 1d:21:ab:12:24:47:45:f4:74:57:6e:e7:03:59:37: 7f:6b:5f:45:75:55:a4:20:70:a7:39:53:cf:9c:32: 7a:14:ed:af:2c:d5:da:b2:0b:27:5b:1c:5f:ab:48: b9:df:b4:b0:ba:07:02:0d:58:c9:c6:1b:1c:72:26: 5a:e7:b1:36:0e:34:d7:85:59:9c:16:4b:9a:45:5e: ee:c3:04:c3:2a:72:77:a3:db:ba:00:cd:25:9b:aa: dd:48:fa:9f:11:73:33:dc:cd:d6:e6:dc:f9:38:6f: 7a:94:4e:95:6e:26:9a:1b:87:29:7d:3c:6d:6a:2b: 5a:e6:e6:1a:24:7a:8a:0f:36:7b:59:e2:2c:f7:c9: 53:c2:aa:f3:1a:44:65:1b:02:2e:f6:1b:fc:3b:e4: 7b:1a:4a:37:05:e3:bd:3f:da:05:73:cd:bf:e9:e8: 33:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5E:A9:58:E5:02:7F:31:2F:A7:27:63:83:1C:83:F4:91:A0:34:90 X509v3 Authority Key Identifier: keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3130312e33372e302e302f31362d3234203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.37.0.0/16 Signature Algorithm: sha256WithRSAEncryption 91:e3:5d:88:8f:d5:ca:fc:1a:4f:75:cb:7d:d1:1a:8a:40:f6: 36:a2:76:b1:e1:0f:81:fd:ab:3d:f6:37:a7:62:03:ae:78:47: 81:07:5d:45:cf:b9:b5:b7:36:dc:14:cf:f2:45:02:93:3f:52: 45:41:a5:1b:51:1e:e1:c8:99:ce:79:d8:6a:36:f1:09:97:8a: 55:ce:fa:8f:83:8e:d6:19:4a:72:94:be:fd:05:a5:1c:c4:2c: 20:4b:44:d5:39:8f:3e:97:3f:68:22:b0:27:0e:ce:09:9d:28: 89:96:b3:a3:e0:96:c9:bc:ea:25:72:86:95:74:54:96:bb:3c: 15:bf:93:d0:75:63:d3:63:37:73:ba:cd:7b:36:0f:d8:de:50: 36:8b:70:aa:2d:65:be:fe:da:b2:85:1a:05:bd:83:e5:8a:f4: 21:3c:10:ef:92:96:e3:22:fa:1a:20:1c:36:07:78:d3:7f:fe: 14:e8:e2:cf:d4:1f:5e:88:36:9b:0a:bd:9c:aa:04:1c:2f:0e: 94:2e:2d:f1:12:f2:2a:00:36:17:55:72:7e:4e:09:0d:30:e7: 17:b5:d2:d2:57:48:f5:db:59:85:46:84:86:ed:6e:5f:d5:83: 75:1c:4a:6e:30:64:34:88:51:f7:84:8b:04:19:32:df:76:f8: 54:8d:d5:94 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUFADnLqtwGiJ8w5fv7nbDsLZMJfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx NTdEMEM4RTAeFw0yNjA0MjAwMjIxNTlaFw0yNzA0MTkwMjI2NTlaMDMxMTAvBgNV BAMTKDlCNUVBOTU4RTUwMjdGMzEyRkE3Mjc2MzgzMUM4M0Y0OTFBMDM0OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC79XPD130h4Au/SJRkvBL89kgu sTDaiBKgf7iEbInscGLREB2rs/r2hBR/i5HQ/dhObD/1X6tAC5W5xzE+f0G3X+bt 0cQozoublbImpOUISjY6FR7Z5dvFlx0hqxIkR0X0dFdu5wNZN39rX0V1VaQgcKc5 U8+cMnoU7a8s1dqyCydbHF+rSLnftLC6BwINWMnGGxxyJlrnsTYONNeFWZwWS5pF Xu7DBMMqcnej27oAzSWbqt1I+p8RczPczdbm3Pk4b3qUTpVuJpobhyl9PG1qK1rm 5hokeooPNntZ4iz3yVPCqvMaRGUbAi72G/w75HsaSjcF470/2gVzzb/p6DNPAgMB AAGjggIOMIICCjAdBgNVHQ4EFgQUm16pWOUCfzEvpydjgxyD9JGgNJAwHwYDVR0j BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5 MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzAvMzEzMDMxMmUzMzM3 MmUzMDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMzMzczOTM2MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwBlJTANBgkqhkiG9w0BAQsFAAOCAQEAkeNdiI/VyvwaT3XLfdEaikD2NqJ2seEP gf2rPfY3p2IDrnhHgQddRc+5tbc23BTP8kUCkz9SRUGlG1Ee4ciZznnYajbxCZeK Vc76j4OO1hlKcpS+/QWlHMQsIEtE1TmPPpc/aCKwJw7OCZ0oiZazo+CWybzqJXKG lXRUlrs8Fb+T0HVj02M3c7rNezYP2N5QNotwqi1lvv7asoUaBb2D5Yr0ITwQ75KW 4yL6GiAcNgd403/+FOjiz9QfXog2mwq9nKoEHC8OlC4t8RLyKgA2F1Vyfk4JDTDn F7XS0ldI9dtZhUaEhu1uX9WDdRxKbjBkNIhR94SLBBky33b4VI3VlA== -----END CERTIFICATE-----Generated at Wed Apr 22 06:41:11 2026 by rpki-client