$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/0/3133392e3137362e302e302f31362d3136203d3e2039383033.roa File: 3133392e3137362e302e302f31362d3136203d3e2039383033.roa (raw, json) Hash identifier: rprXfo+mQWYwe2oVBzgwFN7TztyCOZlqUd+lE3fdHj0= Subject key identifier: DF:66:6A:1F:F8:57:65:9D:56:2B:92:E4:7D:5C:17:BE:83:CD:0E:ED Certificate issuer: /CN=727CC49FFE2FAF9584C2E103AC6FD293020DD07D Certificate serial: 089F8D97EA701C212CB9F4ED116AE1A6504016BA Authority key identifier: 72:7C:C4:9F:FE:2F:AF:95:84:C2:E1:03:AC:6F:D2:93:02:0D:D0:7D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/3133392e3137362e302e302f31362d3136203d3e2039383033.roa Signing time: Mon 13 Apr 2026 04:12:32 +0000 ROA not before: Mon 13 Apr 2026 04:07:32 +0000 ROA not after: Mon 12 Apr 2027 04:12:32 +0000 asID: 9803 IP address blocks: 139.176.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 07:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:9f:8d:97:ea:70:1c:21:2c:b9:f4:ed:11:6a:e1:a6:50:40:16:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=727CC49FFE2FAF9584C2E103AC6FD293020DD07D Validity Not Before: Apr 13 04:07:32 2026 GMT Not After : Apr 12 04:12:32 2027 GMT Subject: CN=DF666A1FF857659D562B92E47D5C17BE83CD0EED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1f:c8:2e:8c:c6:4e:c1:6d:ae:50:15:7d:8a: c9:f9:ed:0e:63:ee:db:a9:8c:79:d6:24:79:1d:4f: 20:4d:8d:ca:25:70:b9:4b:52:e9:bd:e3:18:65:64: da:00:9c:0e:d8:c6:8e:21:ef:fb:d1:8a:54:d2:e3: 5c:98:02:6c:e1:3d:be:0e:5f:56:e4:ad:33:1f:3a: eb:ee:1d:f2:3e:41:57:f8:d8:61:09:70:7c:15:89: 4c:2d:9e:3a:8f:2a:d2:73:be:c3:59:09:26:f6:72: fe:46:bb:17:de:57:3b:eb:cd:d6:b9:98:7f:c2:8d: b8:e7:9f:98:6b:8e:fd:59:08:2f:43:78:a4:ee:d6: 39:ab:cd:b2:d1:13:f2:15:fb:6b:a6:6a:f4:7f:ce: 02:55:0b:af:b0:87:c7:e0:af:1a:d2:40:0c:75:cd: 28:23:c3:f8:3c:8b:e1:99:47:64:e0:b8:3e:bf:5c: 37:7b:ad:9f:63:7c:74:bc:a9:91:08:15:44:d1:2a: 1e:41:b4:a1:51:82:85:e9:ca:01:e4:bb:db:67:d1: f9:f5:0b:77:15:cd:ea:1f:09:ca:d2:b9:e1:c7:96: 52:e6:94:df:03:65:c0:25:05:06:19:fd:3d:3e:d1: 48:09:2f:c6:bc:00:fa:d3:74:8b:81:00:fe:b5:78: 55:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:66:6A:1F:F8:57:65:9D:56:2B:92:E4:7D:5C:17:BE:83:CD:0E:ED X509v3 Authority Key Identifier: keyid:72:7C:C4:9F:FE:2F:AF:95:84:C2:E1:03:AC:6F:D2:93:02:0D:D0:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/3133392e3137362e302e302f31362d3136203d3e2039383033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.176.0.0/16 Signature Algorithm: sha256WithRSAEncryption b0:59:75:b9:29:6a:31:e3:dc:68:7d:91:6e:c8:ef:fb:dd:0c: b2:9e:21:8c:85:e9:45:b9:71:de:51:6a:27:21:a9:ea:20:75: ae:1a:18:d5:fb:cf:3b:48:47:43:bf:6c:6c:5d:69:a5:77:9b: 82:dd:0e:aa:1b:b7:fa:39:00:b2:7d:04:a8:11:37:8a:54:ec: 48:dd:3f:6e:91:2c:00:94:f7:25:6c:3b:29:3e:bf:40:8f:7d: 5b:46:87:0d:1b:27:62:eb:f2:f6:5b:62:24:e5:e4:4e:fb:ea: 2b:4e:ff:d1:0b:fb:dd:fd:9b:1d:15:1a:60:d2:0a:cb:9e:f2: dd:cd:74:90:26:8b:49:e9:bd:0e:b1:e8:97:52:28:06:cf:fd: 11:31:b9:dc:f7:57:d7:1d:1c:4f:1f:4c:d3:f4:36:d4:87:d2: 3f:22:64:3a:0d:00:20:b6:a2:a3:e1:c0:75:f9:e8:45:bb:7f: 53:4b:93:b5:6a:b5:4a:a4:59:0f:0b:47:94:33:83:6c:60:ec: 97:8f:20:72:e0:3a:ed:1e:06:e3:3a:5c:c2:34:14:b8:37:0a: 56:f1:e0:6d:93:44:1b:26:a2:4c:39:44:5d:0a:a9:9c:8c:0a: 57:29:96:71:23:6a:c0:32:ba:7c:b7:67:cb:cb:5f:e9:c2:d6: 79:97:08:c8 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUCJ+Nl+pwHCEsufTtEWrhplBAFrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI3Q0M0OUZGRTJGQUY5NTg0QzJFMTAzQUM2RkQyOTMw MjBERDA3RDAeFw0yNjA0MTMwNDA3MzJaFw0yNzA0MTIwNDEyMzJaMDMxMTAvBgNV BAMTKERGNjY2QTFGRjg1NzY1OUQ1NjJCOTJFNDdENUMxN0JFODNDRDBFRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChH8gujMZOwW2uUBV9isn57Q5j 7tupjHnWJHkdTyBNjcolcLlLUum94xhlZNoAnA7Yxo4h7/vRilTS41yYAmzhPb4O X1bkrTMfOuvuHfI+QVf42GEJcHwViUwtnjqPKtJzvsNZCSb2cv5GuxfeVzvrzda5 mH/Cjbjnn5hrjv1ZCC9DeKTu1jmrzbLRE/IV+2umavR/zgJVC6+wh8fgrxrSQAx1 zSgjw/g8i+GZR2TguD6/XDd7rZ9jfHS8qZEIFUTRKh5BtKFRgoXpygHku9tn0fn1 C3cVzeofCcrSueHHllLmlN8DZcAlBQYZ/T0+0UgJL8a8APrTdIuBAP61eFUTAgMB AAGjggIOMIICCjAdBgNVHQ4EFgQU32ZqH/hXZZ1WK5LkfVwXvoPNDu0wHwYDVR0j BBgwFoAUcnzEn/4vr5WEwuEDrG/SkwIN0H0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkyMDAwNjk1NDIyMTU2OS8wLzcyN0NDNDlGRkUyRkFGOTU4NEMyRTEwM0FDNkZE MjkzMDIwREQwN0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNzI3Q0M0OUZGRTJGQUY5NTg0QzJFMTAzQUM2RkQyOTMwMjBERDA3RC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1OTIwMDA2OTU0MjIxNTY5LzAvMzEzMzM5MmUzMTM3 MzYyZTMwMmUzMDJmMzEzNjJkMzEzNjIwM2QzZTIwMzkzODMwMzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwCLsDANBgkqhkiG9w0BAQsFAAOCAQEAsFl1uSlqMePcaH2Rbsjv+90Msp4hjIXp Rblx3lFqJyGp6iB1rhoY1fvPO0hHQ79sbF1ppXebgt0Oqhu3+jkAsn0EqBE3ilTs SN0/bpEsAJT3JWw7KT6/QI99W0aHDRsnYuvy9ltiJOXkTvvqK07/0Qv73f2bHRUa YNIKy57y3c10kCaLSem9DrHol1IoBs/9ETG53PdX1x0cTx9M0/Q21IfSPyJkOg0A ILaio+HAdfnoRbt/U0uTtWq1SqRZDwtHlDODbGDsl48gcuA67R4G4zpcwjQUuDcK VvHgbZNEGyaiTDlEXQqpnIwKVymWcSNqwDK6fLdny8tf6cLWeZcIyA== -----END CERTIFICATE-----Generated at Mon Apr 13 15:30:49 2026 by rpki-client