$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/1/3135382e3134302e3235322e302f32332d3234203d3e2034383136.roa File: 3135382e3134302e3235322e302f32332d3234203d3e2034383136.roa (raw, json) Hash identifier: /INl4ky3xjx7mEQ0U6bBoC5+zKf+ujMJbBuWVFGPcb0= Subject key identifier: FA:05:DF:6C:D7:0E:D0:78:74:88:6A:0A:85:F6:3D:96:A0:F1:5D:19 Certificate issuer: /CN=855381EC93CF009732540F616E4905D544D838C8 Certificate serial: 430FACEEBA4815058D377AD097E18C52289D9AE3 Authority key identifier: 85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/3135382e3134302e3235322e302f32332d3234203d3e2034383136.roa Signing time: Thu 07 May 2026 15:59:00 +0000 ROA not before: Thu 07 May 2026 15:54:00 +0000 ROA not after: Thu 06 May 2027 15:59:00 +0000 asID: 4816 IP address blocks: 158.140.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:0f:ac:ee:ba:48:15:05:8d:37:7a:d0:97:e1:8c:52:28:9d:9a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855381EC93CF009732540F616E4905D544D838C8 Validity Not Before: May 7 15:54:00 2026 GMT Not After : May 6 15:59:00 2027 GMT Subject: CN=FA05DF6CD70ED07874886A0A85F63D96A0F15D19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ad:2b:e6:63:80:0a:d0:9d:a4:2c:8c:24:e1: 0b:17:03:ef:46:1d:39:9d:72:ba:1f:e1:fc:17:b8: 2b:a3:13:7c:85:b9:aa:2a:d5:6b:44:e0:17:cf:43: cf:c0:26:73:2a:af:08:a7:1f:25:96:54:e5:c0:98: f2:01:f6:8e:b3:c5:26:c9:c9:b0:da:3a:c7:4e:89: 59:21:6e:16:57:f4:0c:8d:3b:37:1c:87:8f:7f:c4: f2:a7:1c:e0:43:ee:fb:28:7c:29:4c:a7:40:d0:db: 46:f7:80:e6:51:c8:60:f2:d3:57:c8:eb:60:4c:c2: 38:39:37:b9:75:af:fb:bd:5a:e1:73:51:45:9d:28: e4:fa:33:e4:23:c4:2d:54:a6:c7:5c:c1:52:87:ad: 7f:47:44:e3:4d:ba:46:89:5b:92:ae:40:fb:a4:54: 91:43:30:09:16:e4:15:c4:0a:41:0c:9d:e3:08:f3: bd:ae:39:eb:ea:29:e5:7c:17:22:7a:ec:04:86:4c: 3b:48:ed:66:d2:53:76:23:63:19:00:90:29:64:5f: 5a:89:cc:18:11:16:ca:ad:b3:61:63:e3:86:32:22: 2b:67:44:1c:09:76:c3:93:4f:16:73:21:ea:f4:2f: 49:9f:87:ff:0a:f9:c3:6e:fb:6e:29:93:39:a9:03: 5f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:05:DF:6C:D7:0E:D0:78:74:88:6A:0A:85:F6:3D:96:A0:F1:5D:19 X509v3 Authority Key Identifier: keyid:85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/3135382e3134302e3235322e302f32332d3234203d3e2034383136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.252.0/23 Signature Algorithm: sha256WithRSAEncryption c3:67:73:89:82:d1:99:3b:4a:62:d8:5d:3e:5d:d7:e4:22:3a: c9:f8:b3:bc:1f:f7:af:70:80:69:f2:55:80:8d:b8:1f:6c:52: 50:e2:f1:01:79:cc:ce:c5:45:45:3c:29:36:e2:87:7d:0a:b7: 0c:75:73:77:42:f2:ef:58:f5:76:80:30:55:3b:28:cc:61:cc: 26:cd:a3:06:78:ad:cf:4d:75:e1:d7:6c:a2:8d:6a:2d:e2:d5: 39:9b:e9:e1:41:0f:c8:8f:0c:de:8a:4e:42:9f:ad:df:13:b5: d2:fc:e9:f1:12:55:19:62:b1:11:b5:bd:dc:cd:5b:6c:3d:84: b5:b0:d3:55:16:da:e3:65:63:a0:3e:31:b2:41:1f:ca:bf:0a: ea:7b:19:70:ec:f3:ff:08:8c:d6:50:94:70:d2:80:8e:91:a1: 72:d1:ea:40:f2:a5:f4:a2:20:10:45:e5:f4:24:5d:ea:43:3a: 21:21:a9:bf:78:13:65:cb:3b:d0:16:8d:65:b9:f8:cb:83:5c: 4b:7f:49:ae:f3:67:ac:23:16:35:9e:21:bf:3d:45:eb:b8:77: 73:64:44:fc:01:a2:4e:d9:2e:6f:b6:2b:6a:92:22:4d:13:84: c1:26:87:9f:0d:61:83:a0:16:af:37:23:89:00:9a:53:34:f8: 9d:89:0f:92 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUQw+s7rpIFQWNN3rQl+GMUiidmuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0 NEQ4MzhDODAeFw0yNjA1MDcxNTU0MDBaFw0yNzA1MDYxNTU5MDBaMDMxMTAvBgNV BAMTKEZBMDVERjZDRDcwRUQwNzg3NDg4NkEwQTg1RjYzRDk2QTBGMTVEMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6rSvmY4AK0J2kLIwk4QsXA+9G HTmdcrof4fwXuCujE3yFuaoq1WtE4BfPQ8/AJnMqrwinHyWWVOXAmPIB9o6zxSbJ ybDaOsdOiVkhbhZX9AyNOzcch49/xPKnHOBD7vsofClMp0DQ20b3gOZRyGDy01fI 62BMwjg5N7l1r/u9WuFzUUWdKOT6M+QjxC1UpsdcwVKHrX9HRONNukaJW5KuQPuk VJFDMAkW5BXECkEMneMI872uOevqKeV8FyJ67ASGTDtI7WbSU3YjYxkAkClkX1qJ zBgRFsqts2Fj44YyIitnRBwJdsOTTxZzIer0L0mfh/8K+cNu+24pkzmpA1+xAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU+gXfbNcO0Hh0iGoKhfY9lqDxXRkwHwYDVR0j BBgwFoAUhVOB7JPPAJcyVA9hbkkF1UTYOMgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8xLzg1NTM4MUVDOTNDRjAwOTczMjU0MEY2MTZFNDkw NUQ1NDREODM4QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0NEQ4MzhDOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzYwMjk0NS8xLzMxMzUzODJlMzEz NDMwMmUzMjM1MzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM4MzEzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAZ6M/DANBgkqhkiG9w0BAQsFAAOCAQEAw2dziYLRmTtKYthdPl3X5CI6 yfizvB/3r3CAafJVgI24H2xSUOLxAXnMzsVFRTwpNuKHfQq3DHVzd0Ly71j1doAw VTsozGHMJs2jBnitz0114ddsoo1qLeLVOZvp4UEPyI8M3opOQp+t3xO10vzp8RJV GWKxEbW93M1bbD2EtbDTVRba42VjoD4xskEfyr8K6nsZcOzz/wiM1lCUcNKAjpGh ctHqQPKl9KIgEEXl9CRd6kM6ISGpv3gTZcs70BaNZbn4y4NcS39JrvNnrCMWNZ4h vz1F67h3c2RE/AGiTtkub7YrapIiTROEwSaHnw1hg6AWrzcjiQCaUzT4nYkPkg== -----END CERTIFICATE-----Generated at Wed May 13 12:42:26 2026 by rpki-client