$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131382e33312e302e302f31362d3234203d3e203337393633.roa File: 3131382e33312e302e302f31362d3234203d3e203337393633.roa (raw, json) Hash identifier: oC00bR8DARTBt7yKWgZk4xdyJtfYgmgpq+qER1i9T2Y= Subject key identifier: 01:EB:0B:AE:41:06:69:42:CB:D5:EF:05:34:A6:33:93:E5:1F:14:A9 Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Certificate serial: 1AE5293FF9BE84C7CD4C5F988370395D043B4292 Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131382e33312e302e302f31362d3234203d3e203337393633.roa Signing time: Mon 20 Apr 2026 09:11:35 +0000 ROA not before: Mon 20 Apr 2026 09:06:35 +0000 ROA not after: Mon 19 Apr 2027 09:11:35 +0000 asID: 37963 IP address blocks: 118.31.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 06:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:e5:29:3f:f9:be:84:c7:cd:4c:5f:98:83:70:39:5d:04:3b:42:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Validity Not Before: Apr 20 09:06:35 2026 GMT Not After : Apr 19 09:11:35 2027 GMT Subject: CN=01EB0BAE41066942CBD5EF0534A63393E51F14A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3b:2f:4c:8d:5f:f5:6b:3d:43:b4:9b:ef:6e: 07:9f:8f:d3:60:4f:de:2f:d4:ce:63:1c:72:77:bd: 6a:e7:b5:99:7a:a6:54:ec:f3:61:b6:a1:05:2f:2f: 72:bf:2d:77:ff:fe:d9:35:00:db:f1:05:f3:49:37: 6f:56:fb:81:13:28:e9:7d:b5:ff:65:25:08:83:c7: 32:ed:b8:de:32:61:2f:e4:ee:11:ba:f0:04:df:8b: 4b:a5:de:6e:b8:3e:7e:cc:23:3e:73:f6:d3:91:62: a2:46:5a:f4:84:34:63:72:45:d4:f4:11:aa:bd:c3: c8:3c:5f:b8:e7:ad:54:07:ff:15:eb:d1:38:14:47: c8:e3:a7:1a:dc:8d:84:a6:9e:6e:f1:b1:c9:78:75: 6c:ec:9d:32:32:ad:67:8b:c9:29:82:a8:95:10:02: 37:eb:26:47:95:25:e4:22:39:d8:a5:5d:e2:e7:d5: 7c:23:d7:a4:89:db:77:e7:9a:7c:c9:7e:98:7e:69: 92:90:c5:c1:78:6f:43:48:4b:63:c6:82:26:16:14: 7e:e3:ee:8b:b5:18:5a:a3:49:c4:96:67:06:61:a9: 9e:2a:6a:ff:1b:09:15:b9:14:15:7b:e9:73:59:a8: 7b:46:2c:aa:fe:92:ff:72:33:56:51:19:3f:6d:46: 6f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EB:0B:AE:41:06:69:42:CB:D5:EF:05:34:A6:33:93:E5:1F:14:A9 X509v3 Authority Key Identifier: keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131382e33312e302e302f31362d3234203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 118.31.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5d:b0:b2:6c:ff:63:62:cb:ec:16:4a:d2:2e:cd:1f:12:f9:e3: be:6c:a5:d4:4b:fd:db:25:6d:80:7e:e3:27:3a:75:e3:d6:70: d7:d0:e6:71:fe:a3:a8:c0:c3:90:ed:88:ef:e8:dc:07:4d:e1: 1d:70:51:8c:58:0e:96:ed:9e:19:09:bd:52:3b:0a:4a:b0:da: f4:22:8d:04:4b:4c:9c:63:2c:de:ec:9c:22:dd:12:fd:70:df: b6:6d:31:55:cb:ba:f2:c6:1b:88:75:63:e1:e2:e4:16:18:11: 53:64:c8:9f:8e:21:82:33:09:11:0f:b4:92:b5:80:2c:70:d9: 07:04:00:2a:53:c1:73:fd:58:f5:64:59:0f:cc:6e:e4:9f:c7: 02:91:f4:47:b6:9f:e0:58:b3:e7:78:da:fd:b0:f9:43:67:65: 89:2f:d7:f5:c7:94:de:38:77:33:46:e2:17:1d:c3:71:61:14: 27:c6:47:0a:05:16:57:d8:60:87:e5:5a:a3:9d:90:19:f5:af: 51:59:19:52:98:a4:0b:33:b3:35:33:39:18:db:1b:9d:d9:f9: f7:26:0e:64:35:8e:29:7a:6b:79:1c:ed:f4:1a:55:10:62:30: 6c:01:ba:62:d8:a1:93:13:d7:a6:85:a0:27:73:91:c5:f4:a3: ac:7d:e2:f1 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUGuUpP/m+hMfNTF+Yg3A5XQQ7QpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx NTdEMEM4RTAeFw0yNjA0MjAwOTA2MzVaFw0yNzA0MTkwOTExMzVaMDMxMTAvBgNV BAMTKDAxRUIwQkFFNDEwNjY5NDJDQkQ1RUYwNTM0QTYzMzkzRTUxRjE0QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdOy9MjV/1az1DtJvvbgefj9Ng T94v1M5jHHJ3vWrntZl6plTs82G2oQUvL3K/LXf//tk1ANvxBfNJN29W+4ETKOl9 tf9lJQiDxzLtuN4yYS/k7hG68ATfi0ul3m64Pn7MIz5z9tORYqJGWvSENGNyRdT0 Eaq9w8g8X7jnrVQH/xXr0TgUR8jjpxrcjYSmnm7xscl4dWzsnTIyrWeLySmCqJUQ AjfrJkeVJeQiOdilXeLn1Xwj16SJ23fnmnzJfph+aZKQxcF4b0NIS2PGgiYWFH7j 7ou1GFqjScSWZwZhqZ4qav8bCRW5FBV76XNZqHtGLKr+kv9yM1ZRGT9tRm8xAgMB AAGjggIOMIICCjAdBgNVHQ4EFgQUAesLrkEGaULL1e8FNKYzk+UfFKkwHwYDVR0j BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5 MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzAvMzEzMTM4MmUzMzMx MmUzMDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMzMzczOTM2MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwB2HzANBgkqhkiG9w0BAQsFAAOCAQEAXbCybP9jYsvsFkrSLs0fEvnjvmyl1Ev9 2yVtgH7jJzp149Zw19Dmcf6jqMDDkO2I7+jcB03hHXBRjFgOlu2eGQm9UjsKSrDa 9CKNBEtMnGMs3uycIt0S/XDftm0xVcu68sYbiHVj4eLkFhgRU2TIn44hgjMJEQ+0 krWALHDZBwQAKlPBc/1Y9WRZD8xu5J/HApH0R7af4Fiz53ja/bD5Q2dliS/X9ceU 3jh3M0biFx3DcWEUJ8ZHCgUWV9hgh+Vao52QGfWvUVkZUpikCzOzNTM5GNsbndn5 9yYOZDWOKXpreRzt9BpVEGIwbAG6YtihkxPXpoWgJ3ORxfSjrH3i8Q== -----END CERTIFICATE-----Generated at Wed Apr 22 06:42:11 2026 by rpki-client