$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/3131372e37322e302e302f31362d3234203d3e203233373234.roa File: 3131372e37322e302e302f31362d3234203d3e203233373234.roa (raw, json) Hash identifier: rljwiFdh2gKgB1gvD9McSE3gjCu9riMHGvgoiVydZRI= Subject key identifier: 09:41:A9:D8:37:2B:28:D9:10:11:74:8D:85:56:F3:7B:4A:F3:64:72 Certificate issuer: /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Certificate serial: 5B5DE7B4DAB4A936A242195581B217F74BD64FA5 Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/3131372e37322e302e302f31362d3234203d3e203233373234.roa Signing time: Fri 10 Apr 2026 09:52:02 +0000 ROA not before: Fri 10 Apr 2026 09:47:02 +0000 ROA not after: Fri 09 Apr 2027 09:52:02 +0000 asID: 23724 IP address blocks: 117.72.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:5d:e7:b4:da:b4:a9:36:a2:42:19:55:81:b2:17:f7:4b:d6:4f:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Validity Not Before: Apr 10 09:47:02 2026 GMT Not After : Apr 9 09:52:02 2027 GMT Subject: CN=0941A9D8372B28D91011748D8556F37B4AF36472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:74:18:25:7e:da:21:75:f9:8a:14:c8:21:23: a8:b8:c9:fb:73:17:da:dc:a5:84:2e:e9:f3:8f:4e: 9e:b5:20:2a:8e:b7:fe:16:e3:92:ea:5f:2f:48:fc: 5d:26:88:19:90:25:c1:e5:54:70:8e:18:5d:03:95: ca:74:d5:25:dc:1a:ac:3c:f0:20:bc:ce:1e:04:73: 12:df:b0:5e:46:3a:13:ba:26:4c:8e:d2:0c:97:40: 70:cf:f4:cc:b5:58:69:4c:3d:b5:64:c0:8f:c9:9e: d4:96:c4:68:c6:6a:59:35:72:76:27:7f:67:d8:e8: b4:38:57:da:c6:7c:98:58:26:9e:d0:11:75:09:ca: dc:4f:36:fb:f6:1d:22:b8:70:0a:f4:4c:0c:f9:e4: 1d:12:27:91:7a:aa:d7:7a:68:92:90:d9:c2:30:35: 56:50:77:5e:a5:a7:9b:60:b6:e7:da:b8:41:b7:7f: 5a:25:68:00:31:cd:80:25:65:cf:98:13:f6:99:4b: b4:48:de:fb:4a:6f:93:6f:2f:de:86:5c:61:62:66: 10:4a:69:fc:6b:dd:02:6c:73:1f:42:4a:3f:ce:c0: 7f:c8:af:f6:39:d2:40:f0:29:64:96:39:36:cc:f7: 0a:c5:3c:c5:f4:c9:19:9f:87:3d:80:6e:3c:3e:36: 11:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:41:A9:D8:37:2B:28:D9:10:11:74:8D:85:56:F3:7B:4A:F3:64:72 X509v3 Authority Key Identifier: keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/3131372e37322e302e302f31362d3234203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.72.0.0/16 Signature Algorithm: sha256WithRSAEncryption a8:00:4a:90:a4:2f:3b:71:17:a2:8d:52:25:57:a9:5e:9c:08: 79:d2:bf:d9:bd:3f:97:87:f8:f3:02:fa:0d:86:af:8e:f2:bf: af:b1:a4:49:0d:a4:65:03:3f:0a:db:dd:10:7f:27:84:73:f5: 24:ae:ab:4d:8f:c1:f1:50:d0:8c:2b:5d:47:96:92:2e:d9:68: 6f:43:66:0d:ea:3c:8f:a4:13:ba:6a:40:bb:59:4c:b1:2a:3f: 50:52:78:2f:41:58:76:ee:56:8c:18:98:cf:ac:09:4c:47:79: ff:e8:06:36:b9:16:c0:ad:4d:fe:23:6d:eb:04:2f:0a:d9:43: 6c:25:d4:ce:53:23:93:bb:1b:7f:e5:9a:dc:07:7d:3f:7c:e6: f2:c2:a3:5a:df:f2:66:04:02:14:58:e3:bd:03:38:42:c9:8b: e0:07:f9:14:27:fa:43:22:bb:75:4f:02:57:e0:12:4b:57:84: 47:d4:2a:2b:4e:60:e0:8e:7f:95:fe:42:dd:3c:7d:19:fa:8c: 2b:d9:e7:f8:c3:0e:eb:2c:7e:21:8c:a6:22:dd:d9:d3:63:ed: 38:a7:82:7c:b5:cb:a8:60:5c:59:2c:59:62:58:f5:55:b1:7f: b9:0b:0f:66:42:c7:7a:07:f7:3d:3b:0c:76:97:ca:a9:08:d4: b0:d4:a0:e8 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUW13ntNq0qTaiQhlVgbIX90vWT6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNC MEQzODlFNTAeFw0yNjA0MTAwOTQ3MDJaFw0yNzA0MDkwOTUyMDJaMDMxMTAvBgNV BAMTKDA5NDFBOUQ4MzcyQjI4RDkxMDExNzQ4RDg1NTZGMzdCNEFGMzY0NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1dBglftohdfmKFMghI6i4yftz F9rcpYQu6fOPTp61ICqOt/4W45LqXy9I/F0miBmQJcHlVHCOGF0Dlcp01SXcGqw8 8CC8zh4EcxLfsF5GOhO6JkyO0gyXQHDP9My1WGlMPbVkwI/JntSWxGjGalk1cnYn f2fY6LQ4V9rGfJhYJp7QEXUJytxPNvv2HSK4cAr0TAz55B0SJ5F6qtd6aJKQ2cIw NVZQd16lp5tgtufauEG3f1olaAAxzYAlZc+YE/aZS7RI3vtKb5NvL96GXGFiZhBK afxr3QJscx9CSj/OwH/Ir/Y50kDwKWSWOTbM9wrFPMX0yRmfhz2Abjw+NhFTAgMB AAGjggIOMIICCjAdBgNVHQ4EFgQUCUGp2DcrKNkQEXSNhVbze0rzZHIwHwYDVR0j BBgwFoAU1oBdswkFdhLMknLLLIW6bLDTieUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODM2MzU5OTc5MDk5NzUwNi8wL0Q2ODA1REIzMDkwNTc2MTJDQzkyNzJDQjJDODVC QTZDQjBEMzg5RTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNCMEQzODlFNS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY4MzYzNTk5NzkwOTk3NTA2LzAvMzEzMTM3MmUzNzMy MmUzMDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMyMzMzNzMyMzQucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwB1SDANBgkqhkiG9w0BAQsFAAOCAQEAqABKkKQvO3EXoo1SJVepXpwIedK/2b0/ l4f48wL6DYavjvK/r7GkSQ2kZQM/CtvdEH8nhHP1JK6rTY/B8VDQjCtdR5aSLtlo b0NmDeo8j6QTumpAu1lMsSo/UFJ4L0FYdu5WjBiYz6wJTEd5/+gGNrkWwK1N/iNt 6wQvCtlDbCXUzlMjk7sbf+Wa3Ad9P3zm8sKjWt/yZgQCFFjjvQM4QsmL4Af5FCf6 QyK7dU8CV+ASS1eER9QqK05g4I5/lf5C3Tx9GfqMK9nn+MMO6yx+IYymIt3Z02Pt OKeCfLXLqGBcWSxZYlj1VbF/uQsPZkLHegf3PTsMdpfKqQjUsNSg6A== -----END CERTIFICATE-----Generated at Mon Apr 13 15:24:37 2026 by rpki-client