$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/3131342e36372e3132382e302f31372d3234203d3e203233373234.roa File: 3131342e36372e3132382e302f31372d3234203d3e203233373234.roa (raw, json) Hash identifier: IsnwTMWejVj98i7cROIj2LNC4GBTBLqsYXdLOQP8FLQ= Subject key identifier: 83:78:51:56:88:39:8D:77:D0:AA:B4:4E:D3:83:5E:5D:DF:E3:31:3C Certificate issuer: /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Certificate serial: 3E20E395D822355476E606BD6C51D35BB2218A56 Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/3131342e36372e3132382e302f31372d3234203d3e203233373234.roa Signing time: Fri 10 Apr 2026 09:46:04 +0000 ROA not before: Fri 10 Apr 2026 09:41:04 +0000 ROA not after: Fri 09 Apr 2027 09:46:04 +0000 asID: 23724 IP address blocks: 114.67.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:20:e3:95:d8:22:35:54:76:e6:06:bd:6c:51:d3:5b:b2:21:8a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Validity Not Before: Apr 10 09:41:04 2026 GMT Not After : Apr 9 09:46:04 2027 GMT Subject: CN=8378515688398D77D0AAB44ED3835E5DDFE3313C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7d:be:a2:46:d0:40:b5:be:c2:11:b4:f3:07: 15:6f:12:af:9f:21:b0:7b:5f:a9:a8:50:3b:47:a6: 37:95:12:59:25:ba:56:90:60:64:1b:05:a8:15:7d: ac:56:97:88:06:32:61:f2:b3:71:d5:4d:b6:3c:cf: 7a:f4:19:df:bf:8a:97:c6:0b:5d:7e:f0:9e:a3:d1: 91:2d:28:44:09:0d:3b:5f:42:62:1d:6c:1c:87:2d: d8:9a:1c:88:b8:9c:c1:64:49:5b:81:b5:fc:bd:ff: 32:43:8d:3f:88:ca:1c:f1:89:a8:f8:af:f4:de:5a: 64:a4:0a:42:cb:a0:a6:5b:2d:d1:18:6b:31:e4:c8: 55:96:ec:3c:af:57:4f:4a:5b:2b:5f:d0:19:67:5a: f0:31:a7:86:87:e8:0d:ba:d0:b7:4e:16:22:17:24: 66:04:5c:94:62:8f:b4:39:d5:ac:64:db:b9:dd:52: d9:02:7a:00:8d:f8:a9:62:f0:19:14:bf:fc:37:d8: c0:b0:bc:c1:c0:11:53:10:dd:ed:8e:56:dd:83:f5: 64:74:b2:bf:a5:f0:81:56:b2:c4:5a:81:f4:50:34: 16:31:7c:7c:25:df:a9:e6:14:27:35:17:5d:f9:39: f4:d2:44:5d:26:db:46:ec:9b:15:16:d7:26:f8:2c: 87:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:78:51:56:88:39:8D:77:D0:AA:B4:4E:D3:83:5E:5D:DF:E3:31:3C X509v3 Authority Key Identifier: keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/3131342e36372e3132382e302f31372d3234203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.67.128.0/17 Signature Algorithm: sha256WithRSAEncryption a3:f9:2f:a5:90:eb:a9:25:9a:50:22:b9:ed:8b:54:52:43:ae: b7:b9:f9:47:6f:bb:b6:a6:06:b6:56:ac:7f:a0:33:d9:5a:7e: 0e:a8:cd:d8:00:e3:5c:1b:e5:2a:06:61:ae:a3:e6:af:51:e4: ac:b2:d4:6a:2b:54:60:9c:f3:18:07:a8:c7:fd:dd:7e:7f:e3: 1e:b7:08:c6:a7:6a:b5:d1:a5:9d:22:58:e6:9b:fb:1c:e7:cb: d0:94:1d:11:9a:82:56:9f:a8:9e:4b:65:82:1d:0c:3f:12:bc: a6:b8:d1:5b:f7:d1:08:8d:09:ac:95:e8:ff:aa:51:6a:56:b6: d0:18:df:09:56:06:24:ad:a4:1a:38:dd:47:9f:80:a9:cc:45: 16:41:34:82:8e:dc:86:d9:9c:91:4b:a5:2e:fa:e2:f2:17:80: f6:01:d8:ba:82:b7:99:80:97:c4:e1:0c:49:a2:79:ce:f2:9d: e6:0d:9f:03:d7:48:c3:65:59:c7:47:b1:b1:f6:5d:f8:24:f0: 60:d4:c7:30:cc:f6:df:74:5c:26:3a:c1:6c:36:4a:21:2d:04: 35:d9:15:e1:12:d9:13:75:dc:61:b6:06:42:6c:38:47:2b:08: 9d:9e:db:10:c4:46:d6:c1:0e:40:ee:6d:5a:96:07:c6:e0:f1: 75:3f:5e:0c -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUPiDjldgiNVR25ga9bFHTW7IhilYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNC MEQzODlFNTAeFw0yNjA0MTAwOTQxMDRaFw0yNzA0MDkwOTQ2MDRaMDMxMTAvBgNV BAMTKDgzNzg1MTU2ODgzOThENzdEMEFBQjQ0RUQzODM1RTVEREZFMzMxM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyfb6iRtBAtb7CEbTzBxVvEq+f IbB7X6moUDtHpjeVElklulaQYGQbBagVfaxWl4gGMmHys3HVTbY8z3r0Gd+/ipfG C11+8J6j0ZEtKEQJDTtfQmIdbByHLdiaHIi4nMFkSVuBtfy9/zJDjT+Iyhzxiaj4 r/TeWmSkCkLLoKZbLdEYazHkyFWW7DyvV09KWytf0BlnWvAxp4aH6A260LdOFiIX JGYEXJRij7Q51axk27ndUtkCegCN+Kli8BkUv/w32MCwvMHAEVMQ3e2OVt2D9WR0 sr+l8IFWssRagfRQNBYxfHwl36nmFCc1F135OfTSRF0m20bsmxUW1yb4LIfzAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUg3hRVog5jXfQqrRO04NeXd/jMTwwHwYDVR0j BBgwFoAU1oBdswkFdhLMknLLLIW6bLDTieUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODM2MzU5OTc5MDk5NzUwNi8wL0Q2ODA1REIzMDkwNTc2MTJDQzkyNzJDQjJDODVC QTZDQjBEMzg5RTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNCMEQzODlFNS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2ODM2MzU5OTc5MDk5NzUwNi8wLzMxMzEzNDJlMzYz NzJlMzEzMjM4MmUzMDJmMzEzNzJkMzIzNDIwM2QzZTIwMzIzMzM3MzIzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEB3JDgDANBgkqhkiG9w0BAQsFAAOCAQEAo/kvpZDrqSWaUCK57YtUUkOu t7n5R2+7tqYGtlasf6Az2Vp+DqjN2ADjXBvlKgZhrqPmr1HkrLLUaitUYJzzGAeo x/3dfn/jHrcIxqdqtdGlnSJY5pv7HOfL0JQdEZqCVp+onktlgh0MPxK8prjRW/fR CI0JrJXo/6pRala20BjfCVYGJK2kGjjdR5+AqcxFFkE0go7chtmckUulLvri8heA 9gHYuoK3mYCXxOEMSaJ5zvKd5g2fA9dIw2VZx0exsfZd+CTwYNTHMMz233RcJjrB bDZKIS0ENdkV4RLZE3XcYbYGQmw4RysInZ7bEMRG1sEOQO5tWpYHxuDxdT9eDA== -----END CERTIFICATE-----Generated at Mon Apr 13 15:24:01 2026 by rpki-client