$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e36382e302f32322d3234203d3e20323034373635.roa File: 3132332e39382e36382e302f32322d3234203d3e20323034373635.roa (raw, json) Hash identifier: 4rSbbz5Ls0OIUwYFaFqEmoc2AvhxtxHJ10nQ5dOPf5s= Subject key identifier: 14:D1:4D:DC:C4:16:60:54:9B:CB:9D:9F:3A:80:86:C8:FF:6D:61:80 Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 4BC9672A72028B116F1A02FB38A99F6198D65A41 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e36382e302f32322d3234203d3e20323034373635.roa Signing time: Mon 13 Jul 2026 03:46:37 +0000 ROA not before: Mon 13 Jul 2026 03:41:37 +0000 ROA not after: Mon 12 Jul 2027 03:46:37 +0000 asID: 204765 IP address blocks: 123.98.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 03:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:c9:67:2a:72:02:8b:11:6f:1a:02:fb:38:a9:9f:61:98:d6:5a:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Jul 13 03:41:37 2026 GMT Not After : Jul 12 03:46:37 2027 GMT Subject: CN=14D14DDCC41660549BCB9D9F3A8086C8FF6D6180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b8:dc:c8:8c:b5:01:7a:ed:20:d7:37:29:b9: 60:58:50:56:e1:1d:47:4f:ee:66:5e:66:6e:2f:4d: 33:c7:f0:c0:f6:86:d9:e0:34:5d:14:6d:4f:0f:56: 24:a5:71:c2:f7:45:62:87:c2:53:d5:c5:c6:67:df: fb:8a:36:96:d5:b4:71:8e:05:70:80:34:ff:b8:8c: 7e:f0:52:90:62:e6:d9:78:07:49:cb:0d:97:f4:d8: ed:44:6a:5c:0a:09:a9:5f:b7:27:a7:2a:cd:eb:a8: 92:cd:5a:98:45:8e:c0:56:9f:de:8a:12:aa:18:0d: d9:03:7a:a6:ee:fb:33:ac:eb:80:c0:74:46:82:c5: 5b:e1:5b:0e:73:68:41:83:64:a1:83:a2:64:45:a3: d0:b9:c4:aa:9a:3f:f4:99:94:3c:59:26:23:92:2f: 8a:04:6e:77:75:da:3b:eb:ea:c4:92:d5:89:cb:e7: fa:a0:67:32:25:63:a9:01:06:93:47:b4:e2:5f:02: 92:e4:62:60:33:78:54:51:e5:44:8b:26:86:29:49: e5:69:f9:e0:6e:8b:12:40:1d:c5:da:ed:be:39:7f: cf:df:12:48:fa:2f:99:39:bb:b1:02:50:91:fc:dc: be:49:31:30:3f:42:49:81:e1:bc:1a:e2:fc:ac:48: 84:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D1:4D:DC:C4:16:60:54:9B:CB:9D:9F:3A:80:86:C8:FF:6D:61:80 X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e36382e302f32322d3234203d3e20323034373635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.98.68.0/22 Signature Algorithm: sha256WithRSAEncryption 26:39:c5:db:dd:d9:02:da:bb:29:33:18:ec:80:89:a9:fb:23: c0:e4:c7:d8:07:63:6b:c1:03:c8:15:ed:c4:29:d1:12:9d:69: a8:e7:23:71:51:69:50:77:51:44:ad:78:0a:8d:45:cb:dc:84: 9a:ab:60:7c:bc:b3:df:aa:4e:b0:e1:0d:3f:c8:4f:4f:76:88: 02:c3:01:86:6a:43:4f:d1:45:67:2c:c8:a2:b0:1e:28:45:4f: 0c:b8:5c:2f:5e:9f:89:ca:61:70:18:ff:fe:3d:f4:df:0c:5e: 1e:9b:90:ad:cc:14:a6:fc:df:ca:93:d1:bb:9d:06:6d:c2:98: ef:14:34:66:a4:aa:2a:e5:3a:57:d5:2d:f6:cb:46:4f:9b:63: f4:58:fc:9b:47:3c:d7:73:92:86:dc:5a:1f:00:a7:22:16:42: ba:17:c9:40:84:92:90:f5:68:aa:f1:77:24:53:47:90:9f:8f: a1:09:25:6c:89:83:f2:9e:5c:9a:b1:47:ba:ed:36:e0:40:e8: b8:92:e6:df:87:a9:8a:20:6b:cf:a7:64:5a:07:c5:d0:f7:a6: b3:b6:c3:21:5d:41:d3:ba:d4:88:63:70:c2:51:47:05:1d:8a: 73:f1:9d:d1:6c:a1:3f:c7:16:11:7e:34:86:a9:69:33:49:6e: 8f:29:9f:2d -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUS8lnKnICixFvGgL7OKmfYZjWWkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA3MTMwMzQxMzdaFw0yNzA3MTIwMzQ2MzdaMDMxMTAvBgNV BAMTKDE0RDE0RERDQzQxNjYwNTQ5QkNCOUQ5RjNBODA4NkM4RkY2RDYxODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzuNzIjLUBeu0g1zcpuWBYUFbh HUdP7mZeZm4vTTPH8MD2htngNF0UbU8PViSlccL3RWKHwlPVxcZn3/uKNpbVtHGO BXCANP+4jH7wUpBi5tl4B0nLDZf02O1EalwKCalftyenKs3rqJLNWphFjsBWn96K EqoYDdkDeqbu+zOs64DAdEaCxVvhWw5zaEGDZKGDomRFo9C5xKqaP/SZlDxZJiOS L4oEbnd12jvr6sSS1YnL5/qgZzIlY6kBBpNHtOJfApLkYmAzeFRR5USLJoYpSeVp +eBuixJAHcXa7b45f8/fEkj6L5k5u7ECUJH83L5JMTA/QkmB4bwa4vysSISLAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUFNFN3MQWYFSby52fOoCGyP9tYYAwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4ODU1MzEyOTUyNTI1MS8wLzMxMzIzMzJlMzkz ODJlMzYzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzYzNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAntiRDANBgkqhkiG9w0BAQsFAAOCAQEAJjnF293ZAtq7KTMY7ICJqfsj wOTH2Adja8EDyBXtxCnREp1pqOcjcVFpUHdRRK14Co1Fy9yEmqtgfLyz36pOsOEN P8hPT3aIAsMBhmpDT9FFZyzIorAeKEVPDLhcL16ficphcBj//j303wxeHpuQrcwU pvzfypPRu50GbcKY7xQ0ZqSqKuU6V9Ut9stGT5tj9Fj8m0c813OShtxaHwCnIhZC uhfJQISSkPVoqvF3JFNHkJ+PoQklbImD8p5cmrFHuu024EDouJLm34epiiBrz6dk WgfF0Pems7bDIV1B07rUiGNwwlFHBR2Kc/Gd0WyhP8cWEX40hqlpM0lujymfLQ== -----END CERTIFICATE-----Generated at Tue Jul 21 12:34:22 2026 by rpki-client