$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/3131372e37322e302e302f32342d3234203d3e203233373234.roa File: 3131372e37322e302e302f32342d3234203d3e203233373234.roa (raw, json) Hash identifier: 5OPji910OOWBxsRjyox1ZV8VrK37ti88gI2qzs1her0= Subject key identifier: 1E:C2:86:AD:69:A6:14:E8:21:9C:EF:E4:0D:E7:68:2D:14:C1:CF:37 Certificate issuer: /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Certificate serial: 5895B870981469D1C0E0F9E40C21B5C163DDAA01 Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/3131372e37322e302e302f32342d3234203d3e203233373234.roa Signing time: Thu 09 Apr 2026 06:19:36 +0000 ROA not before: Thu 09 Apr 2026 06:14:36 +0000 ROA not after: Thu 08 Apr 2027 06:19:36 +0000 asID: 23724 IP address blocks: 117.72.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:95:b8:70:98:14:69:d1:c0:e0:f9:e4:0c:21:b5:c1:63:dd:aa:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Validity Not Before: Apr 9 06:14:36 2026 GMT Not After : Apr 8 06:19:36 2027 GMT Subject: CN=1EC286AD69A614E8219CEFE40DE7682D14C1CF37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:31:35:19:f3:a1:f7:0a:70:33:b7:75:67:5c: 11:be:33:a4:76:3f:f5:f5:fb:63:35:5a:da:c6:2e: 15:c9:e2:17:30:cc:bb:32:5d:fe:28:1d:fb:1d:16: 5d:66:da:f0:5d:ce:38:94:84:60:6c:8f:51:99:4b: 12:66:88:78:89:6d:22:34:f7:05:91:69:59:3e:11: 31:c6:9c:8c:18:17:e4:ed:af:58:45:8c:f1:ff:fe: dc:a6:22:54:aa:c4:a2:d8:16:88:f8:13:e8:60:49: 8f:a3:45:56:d8:71:08:66:a7:14:05:04:a7:4a:c0: 49:c2:dd:70:5f:9e:9f:90:1c:18:36:1a:bb:31:76: f0:fa:07:a3:54:0c:09:4f:90:27:86:66:24:fc:54: 41:54:2f:9c:43:4c:ac:8a:6e:f1:53:c3:5f:fb:7e: ce:64:e8:8b:ed:96:87:cc:64:35:6f:d7:25:dd:d1: 4a:74:a6:aa:4b:23:3b:21:16:4d:76:d4:cb:44:39: 19:f6:45:7c:34:00:97:0d:e9:8d:35:56:4e:f4:0f: 2c:76:10:58:9e:52:78:09:e5:ff:d3:de:f0:8f:4e: 34:b1:fd:95:02:e9:fd:60:99:69:8d:27:1a:f6:1f: ed:3b:70:81:f3:98:8a:0a:a1:49:6f:cd:ff:bf:a9: 85:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C2:86:AD:69:A6:14:E8:21:9C:EF:E4:0D:E7:68:2D:14:C1:CF:37 X509v3 Authority Key Identifier: keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/3131372e37322e302e302f32342d3234203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.72.0.0/24 Signature Algorithm: sha256WithRSAEncryption 73:1e:c7:31:d4:47:f5:19:6d:5d:55:21:9c:9b:c0:ed:ca:cc: ef:c1:c3:4e:df:d9:55:79:37:a5:68:2e:74:1f:be:cb:86:a3: ca:c3:ac:3f:94:89:62:36:ec:3a:74:61:36:0d:dc:27:dc:a0: d1:30:20:34:e2:9f:96:08:3c:0e:6b:f6:20:25:9e:83:7e:2f: c2:9c:6c:78:1e:80:86:ce:39:7a:4e:81:3f:59:2b:38:63:05: 92:1e:b0:1d:f1:85:eb:7b:14:f3:55:ce:d3:15:fd:8e:c3:d9: 54:f4:83:64:35:43:9c:0f:8f:50:df:83:f5:80:d9:d8:98:66: 9d:ad:58:ed:4b:fa:7d:66:f1:55:f5:5f:af:3e:5a:8e:69:11: 87:7e:bb:99:98:c7:80:df:76:0b:7d:bb:f1:fb:db:64:6b:04: 38:4d:0e:e1:c6:68:e3:2c:47:52:c4:41:06:9a:2a:d1:b5:5c: e8:e3:33:53:c3:d0:3e:54:2b:ba:6f:44:3c:d8:62:0b:ae:c4: be:5c:86:b5:61:7a:95:ab:dd:56:70:20:cf:f7:26:0d:94:3f: 65:33:4d:48:32:88:fd:d9:a7:14:94:03:ad:4d:28:54:cf:4b: 09:52:69:bc:3b:8d:03:58:fd:2a:77:13:ef:92:0a:d9:d9:05: 48:bc:c9:5b -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUWJW4cJgUadHA4PnkDCG1wWPdqgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNC MEQzODlFNTAeFw0yNjA0MDkwNjE0MzZaFw0yNzA0MDgwNjE5MzZaMDMxMTAvBgNV BAMTKDFFQzI4NkFENjlBNjE0RTgyMTlDRUZFNDBERTc2ODJEMTRDMUNGMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjMTUZ86H3CnAzt3VnXBG+M6R2 P/X1+2M1WtrGLhXJ4hcwzLsyXf4oHfsdFl1m2vBdzjiUhGBsj1GZSxJmiHiJbSI0 9wWRaVk+ETHGnIwYF+Ttr1hFjPH//tymIlSqxKLYFoj4E+hgSY+jRVbYcQhmpxQF BKdKwEnC3XBfnp+QHBg2GrsxdvD6B6NUDAlPkCeGZiT8VEFUL5xDTKyKbvFTw1/7 fs5k6IvtlofMZDVv1yXd0Up0pqpLIzshFk121MtEORn2RXw0AJcN6Y01Vk70Dyx2 EFieUngJ5f/T3vCPTjSx/ZUC6f1gmWmNJxr2H+07cIHzmIoKoUlvzf+/qYXbAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUHsKGrWmmFOghnO/kDedoLRTBzzcwHwYDVR0j BBgwFoAU1oBdswkFdhLMknLLLIW6bLDTieUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODM2MzU5OTc5MDk5NzUwNi8wL0Q2ODA1REIzMDkwNTc2MTJDQzkyNzJDQjJDODVC QTZDQjBEMzg5RTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNCMEQzODlFNS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY4MzYzNTk5NzkwOTk3NTA2LzAvMzEzMTM3MmUzNzMy MmUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzMzNzMyMzQucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAB1SAAwDQYJKoZIhvcNAQELBQADggEBAHMexzHUR/UZbV1VIZybwO3KzO/Bw07f 2VV5N6VoLnQfvsuGo8rDrD+UiWI27Dp0YTYN3CfcoNEwIDTin5YIPA5r9iAlnoN+ L8KcbHgegIbOOXpOgT9ZKzhjBZIesB3xhet7FPNVztMV/Y7D2VT0g2Q1Q5wPj1Df g/WA2diYZp2tWO1L+n1m8VX1X68+Wo5pEYd+u5mYx4Dfdgt9u/H722RrBDhNDuHG aOMsR1LEQQaaKtG1XOjjM1PD0D5UK7pvRDzYYguuxL5chrVhepWr3VZwIM/3Jg2U P2UzTUgyiP3ZpxSUA61NKFTPSwlSabw7jQNY/Sp3E++SCtnZBUi8yVs= -----END CERTIFICATE-----Generated at Mon Apr 13 15:24:37 2026 by rpki-client