$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3136342e302f32322d3234203d3e203139373933.roa File: 3132342e34322e3136342e302f32322d3234203d3e203139373933.roa (raw, json) Hash identifier: 9jmRW4U6WZN1j6zpo6MiVW7+2pw9wXjpOOwCsRaysAQ= Subject key identifier: A8:CA:25:6B:B6:9E:BA:C5:F1:D4:CF:1C:E2:15:89:6E:6C:DC:13:AA Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 412F8D75B5D4705B4FCF018A4E34A76645FD96C9 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3136342e302f32322d3234203d3e203139373933.roa Signing time: Mon 13 Jul 2026 03:46:33 +0000 ROA not before: Mon 13 Jul 2026 03:41:33 +0000 ROA not after: Mon 12 Jul 2027 03:46:33 +0000 asID: 19793 IP address blocks: 124.42.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 10:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:2f:8d:75:b5:d4:70:5b:4f:cf:01:8a:4e:34:a7:66:45:fd:96:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Jul 13 03:41:33 2026 GMT Not After : Jul 12 03:46:33 2027 GMT Subject: CN=A8CA256BB69EBAC5F1D4CF1CE215896E6CDC13AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2e:13:e5:2d:38:dd:9d:b4:12:c8:1b:c2:a9: 1a:c7:2a:99:08:ea:52:0c:7f:37:e7:bf:31:cc:ae: 13:cd:15:7a:1d:e0:be:07:1f:1b:78:b6:4c:76:f0: 92:a3:e4:e9:54:a4:ae:54:f0:1f:f4:bf:97:9d:1e: 3c:3a:eb:5f:4b:06:92:0f:c9:01:ca:7f:a1:02:41: 94:ad:2f:01:25:63:19:a6:6f:1f:f3:5f:6a:1a:a9: cf:89:6e:8e:09:c4:52:3f:04:4a:53:92:9a:0a:ca: 6f:71:54:7b:43:19:59:21:69:ef:db:78:5e:50:4d: 8d:db:d3:34:7e:70:f5:66:5e:f6:f2:20:34:fb:63: 2d:29:a0:48:03:c5:da:0d:d3:7d:c2:84:99:fd:07: 33:8e:1f:38:5f:63:78:d2:f0:5d:b0:42:b2:a1:82: 6c:39:1b:77:c5:d7:3d:b2:3a:ef:15:08:7b:95:72: 52:d7:3e:95:e6:c5:1d:61:70:54:ff:fd:73:8f:14: a0:94:60:d3:ff:ea:88:2e:c9:20:e6:32:94:b9:ab: 60:b0:f6:6f:9f:da:68:1f:d0:c8:44:6b:64:e4:b6: 40:a5:34:d9:b9:e6:ce:91:c0:6d:6c:5c:e4:6b:6c: e5:a9:8c:4e:5e:c3:64:92:bb:91:2f:a5:66:0b:5b: 37:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CA:25:6B:B6:9E:BA:C5:F1:D4:CF:1C:E2:15:89:6E:6C:DC:13:AA X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3136342e302f32322d3234203d3e203139373933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.42.164.0/22 Signature Algorithm: sha256WithRSAEncryption 97:f8:61:cb:e2:a3:ea:99:cb:b0:52:13:28:cc:47:79:6f:25: 9c:f1:aa:a9:a3:ef:bc:a8:21:17:90:c6:fd:e0:be:e0:e0:63: 28:3f:60:bf:23:41:30:87:d7:b0:a1:15:4d:36:1a:c1:5e:15: 44:0c:8f:2a:08:d3:3d:66:21:13:27:da:b7:d8:b0:e2:fe:bb: a6:aa:3d:87:9e:f2:3a:de:d3:89:0d:8c:aa:cd:45:cb:60:f0: a3:bd:fc:65:19:e1:8a:2d:31:3d:3d:e9:f0:99:86:ba:99:ef: 2a:48:9d:ea:8f:29:7d:c9:1b:b9:a5:ce:07:c6:1f:57:b5:a7: eb:27:b5:db:08:8b:76:c3:92:8a:0d:dc:56:0d:b1:97:3d:d4: 9a:ec:67:bf:37:ce:cd:f4:9d:41:0b:93:dc:cb:9c:04:5b:a5: 8d:e5:9b:46:c3:dc:49:71:8d:e5:4b:1a:7d:55:7b:01:40:0f: c2:79:ce:03:b2:7a:ff:d2:f3:52:51:32:60:9f:05:80:04:f8: 47:71:b4:3d:e9:83:a5:11:b3:d8:52:4a:40:05:1f:a1:ee:e1: 8b:34:6b:df:43:bc:4f:2f:08:b7:98:f6:d2:01:df:5c:33:2d: 39:26:c3:50:1e:b8:dd:d1:e8:fd:c9:27:5b:ef:73:ad:1c:84: 29:9d:8b:9c -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUQS+NdbXUcFtPzwGKTjSnZkX9lskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA3MTMwMzQxMzNaFw0yNzA3MTIwMzQ2MzNaMDMxMTAvBgNV BAMTKEE4Q0EyNTZCQjY5RUJBQzVGMUQ0Q0YxQ0UyMTU4OTZFNkNEQzEzQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdLhPlLTjdnbQSyBvCqRrHKpkI 6lIMfzfnvzHMrhPNFXod4L4HHxt4tkx28JKj5OlUpK5U8B/0v5edHjw6619LBpIP yQHKf6ECQZStLwElYxmmbx/zX2oaqc+Jbo4JxFI/BEpTkpoKym9xVHtDGVkhae/b eF5QTY3b0zR+cPVmXvbyIDT7Yy0poEgDxdoN033ChJn9BzOOHzhfY3jS8F2wQrKh gmw5G3fF1z2yOu8VCHuVclLXPpXmxR1hcFT//XOPFKCUYNP/6oguySDmMpS5q2Cw 9m+f2mgf0MhEa2TktkClNNm55s6RwG1sXORrbOWpjE5ew2SSu5EvpWYLWzflAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUqMola7aeusXx1M8c4hWJbmzcE6owHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4ODU1MzEyOTUyNTI1MS8wLzMxMzIzNDJlMzQz MjJlMzEzNjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzOTM3MzkzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAnwqpDANBgkqhkiG9w0BAQsFAAOCAQEAl/hhy+Kj6pnLsFITKMxHeW8l nPGqqaPvvKghF5DG/eC+4OBjKD9gvyNBMIfXsKEVTTYawV4VRAyPKgjTPWYhEyfa t9iw4v67pqo9h57yOt7TiQ2Mqs1Fy2Dwo738ZRnhii0xPT3p8JmGupnvKkid6o8p fckbuaXOB8YfV7Wn6ye12wiLdsOSig3cVg2xlz3UmuxnvzfOzfSdQQuT3MucBFul jeWbRsPcSXGN5UsafVV7AUAPwnnOA7J6/9LzUlEyYJ8FgAT4R3G0PemDpRGz2FJK QAUfoe7hizRr30O8Ty8It5j20gHfXDMtOSbDUB643dHo/cknW+9zrRyEKZ2LnA== -----END CERTIFICATE-----Generated at Tue Jul 21 21:51:01 2026 by rpki-client