$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948337155/0/3230332e3131392e3132382e302f31372d3234203d3e203337393633.roa File: 3230332e3131392e3132382e302f31372d3234203d3e203337393633.roa (raw, json) Hash identifier: 4dPiVEIWMwNnjDFVe+7N27F9rWHSYbVtQLZRetNGi0o= Subject key identifier: 9D:51:BC:20:A8:13:BA:5A:AC:72:73:06:D9:C6:C2:74:9D:C0:AE:E8 Certificate issuer: /CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F Certificate serial: 306EA13198CBCABB1C4933594A284BB658F12309 Authority key identifier: 05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/3230332e3131392e3132382e302f31372d3234203d3e203337393633.roa Signing time: Tue 21 Apr 2026 08:00:40 +0000 ROA not before: Tue 21 Apr 2026 07:55:40 +0000 ROA not after: Tue 20 Apr 2027 08:00:40 +0000 asID: 37963 IP address blocks: 203.119.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 21:45:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:6e:a1:31:98:cb:ca:bb:1c:49:33:59:4a:28:4b:b6:58:f1:23:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F Validity Not Before: Apr 21 07:55:40 2026 GMT Not After : Apr 20 08:00:40 2027 GMT Subject: CN=9D51BC20A813BA5AAC727306D9C6C2749DC0AEE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:70:c7:ff:99:be:83:1f:2a:61:45:29:c3:0e: e4:da:2a:92:ef:e6:c5:e0:85:91:90:10:20:93:2e: 45:b0:b9:fb:f2:8d:a3:1b:d5:3d:b5:7c:46:a4:ad: a7:0e:0b:2b:7b:43:03:50:02:ba:b2:9d:5d:54:5d: 4e:52:5d:e3:35:46:96:88:df:32:26:99:8b:4b:37: 1a:0a:31:6d:fe:ee:93:32:f0:56:2d:43:bc:a4:d1: 42:2a:8a:e1:bf:40:1a:22:3e:e1:b8:1c:63:f1:35: 36:4c:d2:09:31:69:c5:4b:fd:f6:3d:50:f5:cf:b7: de:93:a4:d0:7c:dc:3b:57:f0:62:cb:2a:4a:36:2b: 92:9a:ab:f0:f5:69:28:d4:e6:65:17:0d:44:91:a6: 01:43:39:32:13:12:2d:8b:3f:02:83:f1:3c:5e:04: b3:08:df:f8:27:00:be:09:dd:3b:4e:a3:09:dc:55: 99:e1:58:89:d5:61:0a:e9:25:09:ad:1b:75:48:47: 9d:15:3d:c0:a1:fa:49:3f:cb:59:0a:f2:1e:f2:07: a6:cd:cf:75:92:d0:1b:88:55:66:79:29:4a:c9:38: 2e:d9:0b:c8:d8:ac:13:39:ec:69:0e:3b:d9:a9:34: ce:52:ea:09:2c:b7:d6:8e:57:7e:d8:f2:98:be:55: 4c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:51:BC:20:A8:13:BA:5A:AC:72:73:06:D9:C6:C2:74:9D:C0:AE:E8 X509v3 Authority Key Identifier: keyid:05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/3230332e3131392e3132382e302f31372d3234203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.119.128.0/17 Signature Algorithm: sha256WithRSAEncryption 20:88:79:ce:a5:c2:be:09:70:98:96:80:5f:72:ee:30:98:c6: 7f:e1:13:57:b9:73:a3:41:37:ac:d2:20:fc:42:fe:06:d6:c2: 9e:28:6e:e5:3c:80:53:13:1c:a5:71:ea:d2:8e:6e:b3:2f:3e: 91:07:70:f9:b8:79:84:fa:01:c4:d7:d4:d8:d8:8a:60:ee:24: 18:d7:b2:d9:c1:ac:93:ff:a1:36:94:0a:84:7b:b3:28:c1:d7: c6:86:34:61:9f:16:2e:ff:9b:16:56:75:e4:e6:4d:e5:29:32: 25:92:5d:e0:d6:0f:40:1b:4b:95:6e:52:10:c0:21:af:6b:93: 1d:d9:58:32:a9:50:f6:4e:8e:24:af:e5:ea:0d:77:84:f3:d9: 4c:01:b5:1f:b2:9f:58:86:79:9c:6d:ae:2a:b2:6e:ae:1f:65: 93:d9:45:b1:13:34:df:a8:38:8d:96:28:e6:af:9f:af:dc:37: f6:72:ab:91:e9:a8:a9:98:bc:a7:aa:a0:f0:41:40:cb:5e:5d: fc:8b:53:04:7a:3c:cd:51:63:df:81:fd:5a:4f:8e:19:0d:03: 88:ee:d9:59:fb:86:d2:2b:54:b9:e2:c1:d4:bb:08:05:d8:0b: 50:18:08:a2:17:e9:19:10:91:17:af:78:f7:92:96:39:b7:9d: 38:ae:09:a1 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUMG6hMZjLyrscSTNZSihLtljxIwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2RjdGOUUwMzU4N0RERkVDNkEwNDlFQTBGMjBGQTFD MENGMTU3RjAeFw0yNjA0MjEwNzU1NDBaFw0yNzA0MjAwODAwNDBaMDMxMTAvBgNV BAMTKDlENTFCQzIwQTgxM0JBNUFBQzcyNzMwNkQ5QzZDMjc0OURDMEFFRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTcMf/mb6DHyphRSnDDuTaKpLv 5sXghZGQECCTLkWwufvyjaMb1T21fEakracOCyt7QwNQArqynV1UXU5SXeM1RpaI 3zImmYtLNxoKMW3+7pMy8FYtQ7yk0UIqiuG/QBoiPuG4HGPxNTZM0gkxacVL/fY9 UPXPt96TpNB83DtX8GLLKko2K5Kaq/D1aSjU5mUXDUSRpgFDOTITEi2LPwKD8Txe BLMI3/gnAL4J3TtOowncVZnhWInVYQrpJQmtG3VIR50VPcCh+kk/y1kK8h7yB6bN z3WS0BuIVWZ5KUrJOC7ZC8jYrBM57GkOO9mpNM5S6gkst9aOV37Y8pi+VUxhAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUnVG8IKgTulqscnMG2cbCdJ3ArugwHwYDVR0j BBgwFoAUBW9/ngNYfd/sagSeoPIPocDPFX8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODMzNzE1NS8wLzA1NkY3RjlFMDM1ODdEREZFQzZBMDQ5RUEwRjIw RkExQzBDRjE1N0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDU2RjdGOUUwMzU4N0RERkVDNkEwNDlFQTBGMjBGQTFDMENGMTU3Ri5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgzMzcxNTUvMC8zMjMwMzMyZTMx MzEzOTJlMzEzMjM4MmUzMDJmMzEzNzJkMzIzNDIwM2QzZTIwMzMzNzM5MzYzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEB8t3gDANBgkqhkiG9w0BAQsFAAOCAQEAIIh5zqXCvglwmJaAX3Lu MJjGf+ETV7lzo0E3rNIg/EL+BtbCnihu5TyAUxMcpXHq0o5usy8+kQdw+bh5hPoB xNfU2NiKYO4kGNey2cGsk/+hNpQKhHuzKMHXxoY0YZ8WLv+bFlZ15OZN5SkyJZJd 4NYPQBtLlW5SEMAhr2uTHdlYMqlQ9k6OJK/l6g13hPPZTAG1H7KfWIZ5nG2uKrJu rh9lk9lFsRM036g4jZYo5q+fr9w39nKrkemoqZi8p6qg8EFAy15d/ItTBHo8zVFj 34H9Wk+OGQ0DiO7ZWfuG0itUueLB1LsIBdgLUBgIohfpGRCRF69495KWObedOK4J oQ== -----END CERTIFICATE-----Generated at Tue Apr 28 05:44:42 2026 by rpki-client