$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/3136312e3138392e302e302f31362d3234203d3e20313335363239.roa File: 3136312e3138392e302e302f31362d3234203d3e20313335363239.roa (raw, json) Hash identifier: VArv7wtcC799gjidJmBBAegNoq7R1zV2WHiORYAIAis= Subject key identifier: 9E:34:8A:29:E6:58:30:D6:8A:29:93:FA:43:E1:20:FF:54:B8:BC:56 Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 3F699F26E33186ED80951BA8C82D66E86D2C22BD Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/3136312e3138392e302e302f31362d3234203d3e20313335363239.roa Signing time: Wed 18 Mar 2026 07:49:42 +0000 ROA not before: Wed 18 Mar 2026 07:44:42 +0000 ROA not after: Wed 17 Mar 2027 07:49:42 +0000 asID: 135629 IP address blocks: 161.189.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 04:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:69:9f:26:e3:31:86:ed:80:95:1b:a8:c8:2d:66:e8:6d:2c:22:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Mar 18 07:44:42 2026 GMT Not After : Mar 17 07:49:42 2027 GMT Subject: CN=9E348A29E65830D68A2993FA43E120FF54B8BC56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bf:d2:24:08:71:31:f3:a6:50:29:9a:e2:6f: bf:0b:35:c9:9b:ec:e1:61:e3:29:32:df:e0:ca:d6: 29:3e:90:7c:40:fb:a8:34:f8:67:9d:48:a1:6d:74: cf:cd:1c:fa:82:3a:e8:c0:f1:dc:1b:6a:83:54:dc: c8:50:b4:96:8c:46:a5:7d:1c:f3:3e:7e:4a:cb:32: 9e:c2:04:2d:10:4e:3c:9f:ad:fb:16:45:8d:a5:3f: 97:4a:f3:31:1c:b7:cc:92:3a:d2:a0:ac:93:a7:00: d1:4a:96:68:b9:82:18:8c:a7:78:b4:c2:4a:35:9f: e5:f5:c7:35:83:8f:d3:3e:11:6a:1d:b2:13:1c:c1: a1:74:2d:d5:a0:fd:6b:b3:d5:ba:41:a3:24:e0:a8: 92:e3:be:cb:c2:c8:43:da:f9:a0:a1:77:c5:2f:27: 8d:d2:a6:25:90:99:44:2c:03:91:ee:f2:1a:de:85: 4d:34:3c:a9:17:21:fc:9e:61:ea:35:9a:a7:48:65: 98:d4:cf:ba:c5:ce:a4:bd:39:1d:85:a9:2b:00:d9: 81:7d:bb:8a:37:81:4c:ca:a0:b0:0d:7d:8a:b0:63: 56:6f:c6:3e:a3:f1:37:25:e3:9f:b0:be:3d:4f:e9: 9f:f8:bd:37:e9:c4:f9:51:1b:a6:48:fb:e2:72:b3: e8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:34:8A:29:E6:58:30:D6:8A:29:93:FA:43:E1:20:FF:54:B8:BC:56 X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/3136312e3138392e302e302f31362d3234203d3e20313335363239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.189.0.0/16 Signature Algorithm: sha256WithRSAEncryption 51:f5:ca:e9:1d:83:85:6e:30:5f:3b:82:aa:27:cd:11:c0:5d: 9b:d5:0e:78:94:17:b6:f2:c1:21:79:88:c7:ca:b0:5e:23:88: 9b:b7:62:07:26:65:48:55:55:ba:52:56:e6:81:ac:5b:63:dc: 57:f9:4b:09:8c:92:f1:80:9e:ef:40:0a:49:a7:29:54:ab:d3: 21:14:a1:0e:35:e5:35:96:cd:82:a3:2d:48:44:1d:f3:14:4f: 54:bc:7e:2d:31:ab:27:06:7d:db:41:bc:b9:3b:a0:5c:93:6a: 22:15:6d:cb:50:7d:1b:1c:ea:6a:a0:44:78:fd:5b:17:e6:88: 1f:ab:5b:0f:2c:04:64:a9:50:30:ed:88:2f:02:0e:84:15:3a: 13:55:aa:1e:aa:92:99:ca:68:83:45:4d:c2:b2:f7:5c:30:cc: 20:38:17:4a:9b:0a:04:5d:ad:de:5c:a2:e0:ea:ee:5e:56:83: 92:0d:b9:70:7a:0e:e2:30:32:8b:1e:6b:e2:c6:b5:8a:ad:b1: e0:9b:b9:cd:ea:09:68:aa:0c:a5:86:1d:e2:89:49:b4:b9:46: c7:f9:fa:ae:ee:fa:22:05:34:6c:d5:c0:48:61:c2:14:0d:e2: 60:65:5d:67:fd:8d:e6:4e:18:de:62:e9:db:61:18:8b:3e:68: 6b:f7:9d:39 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIUP2mfJuMxhu2AlRuoyC1m6G0sIr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjAzMTgwNzQ0NDJaFw0yNzAzMTcwNzQ5NDJaMDMxMTAvBgNV BAMTKDlFMzQ4QTI5RTY1ODMwRDY4QTI5OTNGQTQzRTEyMEZGNTRCOEJDNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0v9IkCHEx86ZQKZrib78LNcmb 7OFh4yky3+DK1ik+kHxA+6g0+GedSKFtdM/NHPqCOujA8dwbaoNU3MhQtJaMRqV9 HPM+fkrLMp7CBC0QTjyfrfsWRY2lP5dK8zEct8ySOtKgrJOnANFKlmi5ghiMp3i0 wko1n+X1xzWDj9M+EWodshMcwaF0LdWg/Wuz1bpBoyTgqJLjvsvCyEPa+aChd8Uv J43SpiWQmUQsA5Hu8hrehU00PKkXIfyeYeo1mqdIZZjUz7rFzqS9OR2FqSsA2YF9 u4o3gUzKoLANfYqwY1Zvxj6j8Tcl45+wvj1P6Z/4vTfpxPlRG6ZI++Jys+iJAgMB AAGjggITMIICDzAdBgNVHQ4EFgQUnjSKKeZYMNaKKZP6Q+Eg/1S4vFYwHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDk4MjQwMy8xLzMxMzYzMTJlMzEz ODM5MmUzMDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMxMzMzNTM2MzIzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQC AAEwBQMDAKG9MA0GCSqGSIb3DQEBCwUAA4IBAQBR9crpHYOFbjBfO4KqJ80RwF2b 1Q54lBe28sEheYjHyrBeI4ibt2IHJmVIVVW6UlbmgaxbY9xX+UsJjJLxgJ7vQApJ pylUq9MhFKEONeU1ls2Coy1IRB3zFE9UvH4tMasnBn3bQby5O6Bck2oiFW3LUH0b HOpqoER4/VsX5ogfq1sPLARkqVAw7YgvAg6EFToTVaoeqpKZymiDRU3CsvdcMMwg OBdKmwoEXa3eXKLg6u5eVoOSDblweg7iMDKLHmvixrWKrbHgm7nN6gloqgylhh3i iUm0uUbH+fqu7voiBTRs1cBIYcIUDeJgZV1n/Y3mThjeYunbYRiLPmhr9505 -----END CERTIFICATE-----Generated at Thu Mar 26 19:36:18 2026 by rpki-client