$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/33392e3130382e302e302f31362d3234203d3e203337393633.roa File: 33392e3130382e302e302f31362d3234203d3e203337393633.roa (raw, json) Hash identifier: ifKigCoHxx8hnDWUHG1TfL6yxBR/rTj3scWQrbDqxQM= Subject key identifier: 78:B4:0D:F3:31:21:E6:C2:31:B6:64:D7:45:F7:48:05:6F:D7:20:59 Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Certificate serial: 620D848D20DA3F6E2CCF8C9B6F4621A5C00B873E Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/33392e3130382e302e302f31362d3234203d3e203337393633.roa Signing time: Wed 22 Apr 2026 08:19:30 +0000 ROA not before: Wed 22 Apr 2026 08:14:30 +0000 ROA not after: Wed 21 Apr 2027 08:19:30 +0000 asID: 37963 IP address blocks: 39.108.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 21:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:0d:84:8d:20:da:3f:6e:2c:cf:8c:9b:6f:46:21:a5:c0:0b:87:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Validity Not Before: Apr 22 08:14:30 2026 GMT Not After : Apr 21 08:19:30 2027 GMT Subject: CN=78B40DF33121E6C231B664D745F748056FD72059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:60:55:37:66:5d:52:94:60:bf:16:0d:9b:e5: 1c:ea:40:3e:0e:3c:e5:e7:93:15:dd:d9:6e:60:3f: 88:06:9b:b8:b3:47:2d:0a:43:bf:6b:20:4c:3f:73: 4a:58:ce:a5:84:af:15:ba:db:bb:14:eb:ad:74:51: 57:da:a7:ce:59:c3:86:27:3c:48:32:35:6a:65:24: 32:e5:75:ac:98:45:3a:07:d7:2f:14:3f:0f:be:1c: 5f:c7:1d:b8:aa:c8:52:dc:fb:c6:bb:ad:5f:75:65: 8d:44:7f:6e:09:d7:38:77:97:06:5e:4e:56:6b:55: bd:14:5e:b1:04:50:61:6f:9f:3b:1d:f2:07:80:78: a7:d5:79:37:22:0a:2e:c1:81:70:d5:c4:0b:29:8f: 6a:36:fe:c2:0a:77:c3:a9:4d:12:a3:16:09:76:97: aa:04:fb:ed:91:33:2e:1b:8d:77:7a:fe:94:92:f0: b0:7f:d4:db:fb:7d:4f:f0:93:d8:3e:ed:46:ff:00: da:cc:8b:60:a3:d1:88:6c:9e:ed:ef:85:91:ae:22: 78:40:5e:63:e9:dc:eb:3d:ec:c6:2e:fc:53:1e:1f: 76:47:f9:9b:d2:c1:cd:05:a6:1a:7e:d3:10:ca:6d: 55:43:f6:88:06:92:c1:a6:53:d2:e3:0f:2d:1a:12: ad:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B4:0D:F3:31:21:E6:C2:31:B6:64:D7:45:F7:48:05:6F:D7:20:59 X509v3 Authority Key Identifier: keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/33392e3130382e302e302f31362d3234203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 39.108.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7f:8c:b3:cd:07:3e:6c:43:6a:df:c2:a9:54:0e:23:6e:dc:64: 8a:8f:a0:69:5e:1e:2f:e4:e7:20:2d:bf:85:52:b9:bd:8d:c1: 02:55:b8:2a:2d:6b:d7:1f:ca:9c:9d:ec:3e:95:90:40:45:01: 6a:ac:50:d9:78:77:e4:6d:ca:34:22:70:d0:9a:a2:89:f2:1b: bd:22:73:13:16:b1:e2:68:e4:7f:cd:62:37:5e:ee:22:24:f2: f5:bf:44:02:0e:a1:97:8c:46:15:bb:61:d9:54:bc:70:f5:25: 9e:d4:6e:5d:b4:b5:93:18:00:25:2a:0f:87:fb:35:25:81:b1: d3:d9:e1:68:36:81:fe:71:94:b7:c1:52:76:6e:9f:1e:50:06: e9:bf:c7:cb:64:92:59:75:d1:6e:b9:12:ef:58:3a:5a:db:a7: 74:0a:3b:61:d7:6b:11:8a:74:0c:f9:a1:07:3c:37:f4:82:e9: 4c:11:73:b0:e4:be:b5:ab:54:c0:f1:dc:45:6d:de:0e:31:f8: ad:67:b6:4b:ce:bb:df:25:b4:b5:16:7f:ea:c0:e6:af:07:5e: 72:49:dd:41:f6:7f:44:48:62:7d:bb:5f:96:81:85:d6:c2:8f: e3:56:e2:d6:5b:79:11:b5:cd:3d:80:5f:02:d2:75:05:45:f0: 0f:6d:7b:74 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUYg2EjSDaP24sz4ybb0YhpcALhz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx NTdEMEM4RTAeFw0yNjA0MjIwODE0MzBaFw0yNzA0MjEwODE5MzBaMDMxMTAvBgNV BAMTKDc4QjQwREYzMzEyMUU2QzIzMUI2NjRENzQ1Rjc0ODA1NkZENzIwNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmYFU3Zl1SlGC/Fg2b5RzqQD4O POXnkxXd2W5gP4gGm7izRy0KQ79rIEw/c0pYzqWErxW627sU6610UVfap85Zw4Yn PEgyNWplJDLldayYRToH1y8UPw++HF/HHbiqyFLc+8a7rV91ZY1Ef24J1zh3lwZe TlZrVb0UXrEEUGFvnzsd8geAeKfVeTciCi7BgXDVxAspj2o2/sIKd8OpTRKjFgl2 l6oE++2RMy4bjXd6/pSS8LB/1Nv7fU/wk9g+7Ub/ANrMi2Cj0Yhsnu3vhZGuInhA XmPp3Os97MYu/FMeH3ZH+ZvSwc0Fphp+0xDKbVVD9ogGksGmU9LjDy0aEq03AgMB AAGjggIOMIICCjAdBgNVHQ4EFgQUeLQN8zEh5sIxtmTXRfdIBW/XIFkwHwYDVR0j BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5 MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzAvMzMzOTJlMzEzMDM4 MmUzMDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMzMzczOTM2MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwAnbDANBgkqhkiG9w0BAQsFAAOCAQEAf4yzzQc+bENq38KpVA4jbtxkio+gaV4e L+TnIC2/hVK5vY3BAlW4Ki1r1x/KnJ3sPpWQQEUBaqxQ2Xh35G3KNCJw0JqiifIb vSJzExax4mjkf81iN17uIiTy9b9EAg6hl4xGFbth2VS8cPUlntRuXbS1kxgAJSoP h/s1JYGx09nhaDaB/nGUt8FSdm6fHlAG6b/Hy2SSWXXRbrkS71g6WtundAo7Yddr EYp0DPmhBzw39ILpTBFzsOS+tatUwPHcRW3eDjH4rWe2S8673yW0tRZ/6sDmrwde ckndQfZ/REhifbtfloGF1sKP41bi1lt5EbXNPYBfAtJ1BUXwD217dA== -----END CERTIFICATE-----Generated at Tue Apr 28 08:04:43 2026 by rpki-client