$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1088385455558230017/0/3136332e35332e35322e302f32322d3234203d3e20313439303537.roa File: 3136332e35332e35322e302f32322d3234203d3e20313439303537.roa (raw, json) Hash identifier: uICx57p5+jtBkGMOR0tDJ+Anre9HEKQERsFBp0N7f88= Subject key identifier: BF:AE:AC:11:D9:53:D5:35:88:05:71:B7:B1:3A:DC:54:5C:F8:75:35 Certificate issuer: /CN=CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9 Certificate serial: 189D616C72B62F17C670C9C0318EDC2FF327C961 Authority key identifier: CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/3136332e35332e35322e302f32322d3234203d3e20313439303537.roa Signing time: Mon 23 Mar 2026 08:58:22 +0000 ROA not before: Mon 23 Mar 2026 08:53:22 +0000 ROA not after: Mon 22 Mar 2027 08:58:22 +0000 asID: 149057 IP address blocks: 163.53.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:9d:61:6c:72:b6:2f:17:c6:70:c9:c0:31:8e:dc:2f:f3:27:c9:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9 Validity Not Before: Mar 23 08:53:22 2026 GMT Not After : Mar 22 08:58:22 2027 GMT Subject: CN=BFAEAC11D953D535880571B7B13ADC545CF87535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:94:93:a1:5b:61:73:a1:ae:07:49:c3:0a:37: 4f:b7:f8:9e:7e:cd:65:9d:c3:2e:d8:5a:a0:c8:c7: 77:5d:13:42:93:c4:81:42:38:5a:11:73:29:29:23: cc:21:bc:1e:7e:f2:c6:d7:98:53:a1:f0:47:68:df: 4d:81:2a:41:dc:52:6f:19:31:38:7d:ce:45:34:5b: 22:7b:44:36:1e:2d:65:8d:4f:44:25:05:48:60:2b: 80:63:6e:e1:b1:6c:be:cd:65:d8:e6:52:a9:fa:93: 49:fb:fe:75:be:1a:70:d0:c8:65:7f:97:92:93:41: 56:b3:95:f7:80:0b:9e:de:11:30:5e:c0:76:ad:87: 05:40:0a:06:fe:53:e5:3a:95:0d:30:c1:ba:5e:78: 4f:ce:67:74:cc:f9:4a:06:b2:7e:93:4d:60:48:e2: f9:69:d0:7c:61:1b:eb:d5:b5:ea:89:d5:db:a4:21: f5:8a:98:ec:ea:85:7b:5c:ca:ad:4b:ab:6b:95:23: 7b:52:7f:c3:a9:76:16:e2:ae:44:20:db:ed:0c:af: 1a:b2:31:4f:4a:c5:1b:23:e2:78:e3:4b:61:9e:cb: f0:03:17:61:8f:59:8c:ea:a7:fb:1c:fd:b2:bf:61: 18:52:7b:81:63:33:e4:20:3d:19:5a:6b:82:bc:6d: fe:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AE:AC:11:D9:53:D5:35:88:05:71:B7:B1:3A:DC:54:5C:F8:75:35 X509v3 Authority Key Identifier: keyid:CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/3136332e35332e35322e302f32322d3234203d3e20313439303537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.53.52.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:94:67:e8:25:90:70:aa:85:2b:45:68:2a:88:63:80:b0:7d: 80:71:c0:9d:d1:df:bf:d4:68:74:06:a0:53:52:c2:9c:f6:3c: 7f:4b:88:01:58:c8:b1:39:63:9b:e5:75:eb:cf:12:94:0a:1d: 75:6d:77:eb:9c:2e:af:de:fd:26:56:06:87:7c:b3:68:12:28: e5:11:57:35:3b:51:e7:2a:1c:30:d5:ff:40:0f:c8:06:3e:d2: 61:65:c3:83:2c:b4:bb:d5:72:29:75:b3:e8:0e:d9:e5:dc:e5: 03:74:2b:3d:9d:66:f8:f3:c4:79:9e:57:c8:33:1c:b0:2b:fc: ce:75:a0:27:7e:9f:eb:76:61:af:8c:1d:1d:6b:3a:ed:f1:cb: a5:ab:41:0f:3c:31:d2:b7:58:23:51:5a:6b:9a:41:5d:c2:5b: 8a:e2:46:b5:f8:fb:29:9a:ad:8a:4e:79:01:7b:f2:6c:b2:90: bd:1b:da:7c:da:e8:94:73:f6:40:b1:29:73:63:24:16:ad:0b: b3:49:52:d5:25:60:71:93:c9:6e:3e:a2:b7:a9:f2:08:7e:48: b9:b8:b7:72:04:ef:81:b0:5f:14:ca:02:9b:f8:58:0d:4b:91: 8f:78:aa:77:71:5d:81:22:81:73:ed:ad:52:15:53:06:30:7b: 31:53:5b:16 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUGJ1hbHK2LxfGcMnAMY7cL/MnyWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NBM0JCNzM4OTlGNzgzMzRDQTAzRDZEQTREOEZEM0Y5 NEQ2OUJCOTAeFw0yNjAzMjMwODUzMjJaFw0yNzAzMjIwODU4MjJaMDMxMTAvBgNV BAMTKEJGQUVBQzExRDk1M0Q1MzU4ODA1NzFCN0IxM0FEQzU0NUNGODc1MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVlJOhW2Fzoa4HScMKN0+3+J5+ zWWdwy7YWqDIx3ddE0KTxIFCOFoRcykpI8whvB5+8sbXmFOh8Edo302BKkHcUm8Z MTh9zkU0WyJ7RDYeLWWNT0QlBUhgK4BjbuGxbL7NZdjmUqn6k0n7/nW+GnDQyGV/ l5KTQVazlfeAC57eETBewHathwVACgb+U+U6lQ0wwbpeeE/OZ3TM+UoGsn6TTWBI 4vlp0HxhG+vVteqJ1dukIfWKmOzqhXtcyq1Lq2uVI3tSf8OpdhbirkQg2+0Mrxqy MU9KxRsj4njjS2Gey/ADF2GPWYzqp/sc/bK/YRhSe4FjM+QgPRlaa4K8bf6tAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUv66sEdlT1TWIBXG3sTrcVFz4dTUwHwYDVR0j BBgwFoAUzKO7c4mfeDNMoD1tpNj9P5TWm7kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 ODM4NTQ1NTU1ODIzMDAxNy8wL0NDQTNCQjczODk5Rjc4MzM0Q0EwM0Q2REE0RDhG RDNGOTRENjlCQjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0NBM0JCNzM4OTlGNzgzMzRDQTAzRDZEQTREOEZEM0Y5NEQ2OUJCOS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA4ODM4NTQ1NTU1ODIzMDAxNy8wLzMxMzYzMzJlMzUz MzJlMzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzQzOTMwMzUzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAqM1NDANBgkqhkiG9w0BAQsFAAOCAQEAXZRn6CWQcKqFK0VoKohjgLB9 gHHAndHfv9RodAagU1LCnPY8f0uIAVjIsTljm+V1688SlAoddW1365wur979JlYG h3yzaBIo5RFXNTtR5yocMNX/QA/IBj7SYWXDgyy0u9VyKXWz6A7Z5dzlA3QrPZ1m +PPEeZ5XyDMcsCv8znWgJ36f63Zhr4wdHWs67fHLpatBDzwx0rdYI1Faa5pBXcJb iuJGtfj7KZqtik55AXvybLKQvRvafNrolHP2QLEpc2MkFq0Ls0lS1SVgcZPJbj6i t6nyCH5Iubi3cgTvgbBfFMoCm/hYDUuRj3iqd3FdgSKBc+2tUhVTBjB7MVNbFg== -----END CERTIFICATE-----Generated at Thu Mar 26 20:58:09 2026 by rpki-client