$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/3131362e3139382e302e302f31362d3234203d3e2034383131.roa File: 3131362e3139382e302e302f31362d3234203d3e2034383131.roa (raw, json) Hash identifier: RArekskrDPuRBFQNbBJ+vACIbXqEfpqK49Iea0V6hho= Subject key identifier: D0:04:AF:5F:81:49:0F:2B:26:80:A3:BC:90:C4:D8:DE:DB:75:7E:FB Certificate issuer: /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Certificate serial: 09C9E755D1DCE4416721522A47864F388DEDA845 Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/3131362e3139382e302e302f31362d3234203d3e2034383131.roa Signing time: Fri 10 Apr 2026 09:42:12 +0000 ROA not before: Fri 10 Apr 2026 09:37:12 +0000 ROA not after: Fri 09 Apr 2027 09:42:12 +0000 asID: 4811 IP address blocks: 116.198.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c9:e7:55:d1:dc:e4:41:67:21:52:2a:47:86:4f:38:8d:ed:a8:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Validity Not Before: Apr 10 09:37:12 2026 GMT Not After : Apr 9 09:42:12 2027 GMT Subject: CN=D004AF5F81490F2B2680A3BC90C4D8DEDB757EFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:5e:af:be:da:54:31:f4:2c:d2:0c:af:b0:8e: 88:f2:a4:1d:76:fd:2b:31:63:36:1d:7e:bf:77:6c: 39:51:28:31:fd:cf:e8:65:b3:25:63:65:51:80:6a: d3:b0:22:4c:e0:f7:86:3d:ab:ee:f3:8c:47:75:bb: c4:16:7f:01:3e:4c:32:82:1a:6b:fc:b2:75:6d:e4: 9e:a0:74:67:28:8a:29:6f:59:d6:c8:e8:c5:eb:4c: fd:a4:a8:9d:74:41:4d:60:ff:e1:9a:c7:11:85:7f: 49:3e:56:85:d7:c5:11:88:be:d0:44:c6:43:18:f3: 54:76:db:85:82:4f:51:70:8d:c8:9b:95:7c:5c:e0: 5e:fe:c2:cc:71:d6:31:87:6a:aa:da:c0:e4:32:aa: 6e:c5:d2:e9:39:f4:86:a7:d1:3a:d1:ca:9d:41:47: 17:1d:17:b2:40:b8:6d:18:54:24:c6:e0:7a:b3:64: ef:99:28:d0:bb:e6:8d:86:08:91:60:d8:3c:29:ad: 07:41:b2:eb:ea:45:96:e1:25:1f:a9:79:8d:2c:12: ea:80:24:d3:7b:51:8c:09:af:22:f3:54:31:55:d0: 76:20:ce:0d:65:f7:4f:fd:ad:7a:64:bd:2f:af:a6: 08:2a:6c:5d:78:b2:e3:0c:7e:a1:f9:28:80:e3:b7: 0c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:04:AF:5F:81:49:0F:2B:26:80:A3:BC:90:C4:D8:DE:DB:75:7E:FB X509v3 Authority Key Identifier: keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/3131362e3139382e302e302f31362d3234203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.198.0.0/16 Signature Algorithm: sha256WithRSAEncryption 60:9a:ed:cb:61:07:14:33:f2:43:a8:ee:5e:ad:4a:6c:c5:29: df:61:73:7c:c8:b7:a4:8d:79:f7:44:63:89:7f:d1:3e:e6:f3: 00:c6:0b:79:32:d4:d1:7f:04:ce:76:95:e0:cc:89:7a:5b:bc: cb:b3:b1:9b:df:c8:9c:68:d7:2c:13:38:25:3d:3b:63:1d:55: 3c:f4:97:41:38:e4:99:f3:db:99:b2:8d:c2:70:7f:af:9e:1b: c2:dc:6d:61:90:da:57:bc:a7:53:fb:e1:e3:32:84:c6:88:12: 50:8b:aa:1e:41:71:fe:81:74:76:b4:1f:4f:67:99:86:f6:84: 3f:90:18:07:ff:7e:14:6c:5c:b6:b8:4e:17:cd:8d:4b:b6:df: 33:1d:49:ef:0e:6f:11:32:2b:c7:c1:76:99:3b:19:cf:50:76: ed:fc:34:4b:2e:81:0c:74:ed:c4:f8:65:e7:1a:88:71:40:c0: a2:7c:d3:35:84:55:30:46:86:c9:f5:14:ac:15:53:46:60:8a: 2c:fb:e6:83:00:69:8c:9a:3f:69:fa:86:6a:fa:83:ff:e9:d8: f6:65:1e:e5:e9:bd:19:61:86:74:8b:de:28:3c:a7:bb:c0:b2: 5e:cf:bc:e7:60:a2:e6:ee:73:56:a9:87:ae:7d:05:3a:84:5f: 96:e6:c3:35 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUCcnnVdHc5EFnIVIqR4ZPOI3tqEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNC MEQzODlFNTAeFw0yNjA0MTAwOTM3MTJaFw0yNzA0MDkwOTQyMTJaMDMxMTAvBgNV BAMTKEQwMDRBRjVGODE0OTBGMkIyNjgwQTNCQzkwQzREOERFREI3NTdFRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwXq++2lQx9CzSDK+wjojypB12 /SsxYzYdfr93bDlRKDH9z+hlsyVjZVGAatOwIkzg94Y9q+7zjEd1u8QWfwE+TDKC Gmv8snVt5J6gdGcoiilvWdbI6MXrTP2kqJ10QU1g/+GaxxGFf0k+VoXXxRGIvtBE xkMY81R224WCT1FwjciblXxc4F7+wsxx1jGHaqrawOQyqm7F0uk59Ian0TrRyp1B RxcdF7JAuG0YVCTG4HqzZO+ZKNC75o2GCJFg2DwprQdBsuvqRZbhJR+peY0sEuqA JNN7UYwJryLzVDFV0HYgzg1l90/9rXpkvS+vpggqbF14suMMfqH5KIDjtwwRAgMB AAGjggIOMIICCjAdBgNVHQ4EFgQU0ASvX4FJDysmgKO8kMTY3tt1fvswHwYDVR0j BBgwFoAU1oBdswkFdhLMknLLLIW6bLDTieUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODM2MzU5OTc5MDk5NzUwNi8wL0Q2ODA1REIzMDkwNTc2MTJDQzkyNzJDQjJDODVC QTZDQjBEMzg5RTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNCMEQzODlFNS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY4MzYzNTk5NzkwOTk3NTA2LzAvMzEzMTM2MmUzMTM5 MzgyZTMwMmUzMDJmMzEzNjJkMzIzNDIwM2QzZTIwMzQzODMxMzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwB0xjANBgkqhkiG9w0BAQsFAAOCAQEAYJrty2EHFDPyQ6juXq1KbMUp32FzfMi3 pI1590RjiX/RPubzAMYLeTLU0X8EznaV4MyJelu8y7Oxm9/InGjXLBM4JT07Yx1V PPSXQTjkmfPbmbKNwnB/r54bwtxtYZDaV7ynU/vh4zKExogSUIuqHkFx/oF0drQf T2eZhvaEP5AYB/9+FGxctrhOF82NS7bfMx1J7w5vETIrx8F2mTsZz1B27fw0Sy6B DHTtxPhl5xqIcUDAonzTNYRVMEaGyfUUrBVTRmCKLPvmgwBpjJo/afqGavqD/+nY 9mUe5em9GWGGdIveKDynu8CyXs+852Ci5u5zVqmHrn0FOoRflubDNQ== -----END CERTIFICATE-----Generated at Mon Apr 13 15:24:37 2026 by rpki-client