$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/3131362e3139382e302e302f31362d3234203d3e203233373234.roa File: 3131362e3139382e302e302f31362d3234203d3e203233373234.roa (raw, json) Hash identifier: rED8aYVMupUcbp8vCc3pd8Re+A1W3rQK5Ox8C6yZ4dk= Subject key identifier: 2A:E0:2C:38:C5:EC:CC:0F:36:18:EF:6C:B6:C8:28:92:98:E6:BE:ED Certificate issuer: /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Certificate serial: 225FE6869E8DA6EB557C330370FADBDDD77D782C Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/3131362e3139382e302e302f31362d3234203d3e203233373234.roa Signing time: Fri 10 Apr 2026 09:42:12 +0000 ROA not before: Fri 10 Apr 2026 09:37:12 +0000 ROA not after: Fri 09 Apr 2027 09:42:12 +0000 asID: 23724 IP address blocks: 116.198.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:5f:e6:86:9e:8d:a6:eb:55:7c:33:03:70:fa:db:dd:d7:7d:78:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Validity Not Before: Apr 10 09:37:12 2026 GMT Not After : Apr 9 09:42:12 2027 GMT Subject: CN=2AE02C38C5ECCC0F3618EF6CB6C8289298E6BEED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bf:a8:bc:93:88:62:8b:f1:e9:34:fc:a3:39: 32:57:0e:84:da:13:cc:51:e9:c8:b4:84:61:57:4a: a7:69:ac:0f:38:ec:50:50:14:2a:27:d5:11:23:4a: fb:73:5a:3c:4d:fc:b7:bc:4b:d9:6a:b3:eb:c4:ff: e0:52:a7:ff:9c:3d:b6:79:43:da:9a:bf:d8:73:fb: ad:77:2f:a1:3a:f0:0d:b7:80:57:a4:a9:50:2e:c6: 4b:27:7b:c0:a6:c1:7b:7a:32:c0:5f:92:7a:7f:29: bd:ef:e1:de:10:70:89:41:85:26:b6:18:0f:fc:48: 0c:1a:7f:aa:24:3c:84:e4:1b:f9:86:41:ba:09:f8: d2:fa:f6:24:8c:54:2b:e4:7f:17:b6:63:e4:a5:da: bc:46:dd:5e:28:75:58:d4:d5:d5:a0:72:64:4b:a0: 69:78:0b:f0:02:a8:63:ec:7b:d2:4a:df:1f:0e:9e: f1:e8:ac:5b:71:70:7c:37:ae:1f:1a:e5:98:fb:ff: 75:93:3a:c6:0f:88:f7:d3:de:94:a0:c2:f1:c2:18: 6c:c3:2f:6a:7d:79:0d:bd:15:5b:c7:8f:23:97:59: 91:06:88:32:7f:24:c1:ff:56:48:dc:54:2a:08:e3: 38:50:ce:65:06:6b:4b:87:75:3b:09:7e:84:eb:8a: 42:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E0:2C:38:C5:EC:CC:0F:36:18:EF:6C:B6:C8:28:92:98:E6:BE:ED X509v3 Authority Key Identifier: keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/3131362e3139382e302e302f31362d3234203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.198.0.0/16 Signature Algorithm: sha256WithRSAEncryption ab:ee:8c:4b:cf:f2:a2:e6:87:a8:0a:20:55:3e:44:95:69:20: f3:d0:ff:e8:b0:af:a1:76:e8:3b:c9:9a:db:e3:05:8b:ce:8b: 63:21:a7:39:70:05:f9:c5:84:30:6d:f0:0b:76:19:d6:8d:22: 81:aa:23:97:82:13:ad:65:c4:36:4e:09:54:d4:93:7e:07:24: 80:a2:b1:c6:06:ae:c0:a6:23:73:b1:d5:ed:d0:2c:82:fe:75: 6d:63:06:6f:fa:af:e7:4f:6a:00:aa:d4:8c:52:47:d4:d4:ed: 36:f5:19:bc:7f:aa:38:4f:e8:66:e2:76:46:a9:33:5e:d6:b0: f5:8b:52:01:d4:c1:0b:ac:1a:ec:2c:b4:74:60:ee:82:99:8d: 6d:3c:dc:54:67:d2:7f:3b:98:12:58:37:41:a0:47:ee:82:e5: c4:07:f2:6b:3a:7e:9d:39:0b:b7:30:e3:88:f2:5e:9d:c5:df: fd:c2:e7:af:98:1d:a3:ff:1f:99:64:47:a4:44:d2:1e:d0:d8: ab:be:8d:c4:1e:ad:bf:ce:d0:9d:db:d0:1c:97:3b:9f:e6:2e: 7b:ff:ba:ae:ba:00:a5:78:5d:18:8b:ae:f5:60:81:2d:19:04: 45:4d:a2:c5:6e:19:2b:4f:c1:9a:51:9c:04:ea:d3:c2:07:7e: c1:4c:ca:65 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUIl/mhp6NputVfDMDcPrb3dd9eCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNC MEQzODlFNTAeFw0yNjA0MTAwOTM3MTJaFw0yNzA0MDkwOTQyMTJaMDMxMTAvBgNV BAMTKDJBRTAyQzM4QzVFQ0NDMEYzNjE4RUY2Q0I2QzgyODkyOThFNkJFRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9v6i8k4hii/HpNPyjOTJXDoTa E8xR6ci0hGFXSqdprA847FBQFCon1REjSvtzWjxN/Le8S9lqs+vE/+BSp/+cPbZ5 Q9qav9hz+613L6E68A23gFekqVAuxksne8CmwXt6MsBfknp/Kb3v4d4QcIlBhSa2 GA/8SAwaf6okPITkG/mGQboJ+NL69iSMVCvkfxe2Y+Sl2rxG3V4odVjU1dWgcmRL oGl4C/ACqGPse9JK3x8OnvHorFtxcHw3rh8a5Zj7/3WTOsYPiPfT3pSgwvHCGGzD L2p9eQ29FVvHjyOXWZEGiDJ/JMH/VkjcVCoI4zhQzmUGa0uHdTsJfoTrikKzAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUKuAsOMXszA82GO9stsgokpjmvu0wHwYDVR0j BBgwFoAU1oBdswkFdhLMknLLLIW6bLDTieUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODM2MzU5OTc5MDk5NzUwNi8wL0Q2ODA1REIzMDkwNTc2MTJDQzkyNzJDQjJDODVC QTZDQjBEMzg5RTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNCMEQzODlFNS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY4MzYzNTk5NzkwOTk3NTA2LzAvMzEzMTM2MmUzMTM5 MzgyZTMwMmUzMDJmMzEzNjJkMzIzNDIwM2QzZTIwMzIzMzM3MzIzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAHTGMA0GCSqGSIb3DQEBCwUAA4IBAQCr7oxLz/Ki5oeoCiBVPkSVaSDz0P/o sK+hdug7yZrb4wWLzotjIac5cAX5xYQwbfALdhnWjSKBqiOXghOtZcQ2TglU1JN+ BySAorHGBq7ApiNzsdXt0CyC/nVtYwZv+q/nT2oAqtSMUkfU1O029Rm8f6o4T+hm 4nZGqTNe1rD1i1IB1MELrBrsLLR0YO6CmY1tPNxUZ9J/O5gSWDdBoEfuguXEB/Jr On6dOQu3MOOI8l6dxd/9wuevmB2j/x+ZZEekRNIe0Nirvo3EHq2/ztCd29Aclzuf 5i57/7quugCleF0Yi671YIEtGQRFTaLFbhkrT8GaUZwE6tPCB37BTMpl -----END CERTIFICATE-----Generated at Mon Apr 13 15:25:03 2026 by rpki-client