$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3132302e3133362e3134302e302f32322d3234203d3e203233383533.roa File: 3132302e3133362e3134302e302f32322d3234203d3e203233383533.roa (raw, json) Hash identifier: sJNFmFXoGKjrXXYM8WkTLWH9FsRgIw0tU5UB7xfQNtw= Subject key identifier: 76:23:70:40:D8:E7:18:91:2B:8E:34:FF:14:FD:AA:24:0F:C4:02:B2 Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434 Certificate serial: 7F63257EDB00048D5BF9328D27CDC4DDAA9013F3 Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3132302e3133362e3134302e302f32322d3234203d3e203233383533.roa Signing time: Sat 18 Apr 2026 10:18:32 +0000 ROA not before: Sat 18 Apr 2026 10:13:32 +0000 ROA not after: Sat 17 Apr 2027 10:18:32 +0000 asID: 23853 IP address blocks: 120.136.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 09:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:63:25:7e:db:00:04:8d:5b:f9:32:8d:27:cd:c4:dd:aa:90:13:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434 Validity Not Before: Apr 18 10:13:32 2026 GMT Not After : Apr 17 10:18:32 2027 GMT Subject: CN=76237040D8E718912B8E34FF14FDAA240FC402B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:61:6a:af:d1:2c:ae:ea:1d:2c:43:ba:f6:f8: 7c:31:81:47:40:e6:9c:49:d5:da:45:49:6d:39:c4: 83:da:13:8a:4d:65:9b:c3:9e:8a:4c:2b:cd:35:e9: ac:d3:4a:40:94:3c:c4:4e:c1:49:06:77:c4:cd:91: 7d:71:9c:20:bd:3c:4d:a0:c3:59:ab:51:ac:d5:0d: d3:f6:fb:76:3e:03:9f:73:a7:4f:f3:32:0c:21:67: f5:1f:e8:83:2b:8d:e3:b6:72:fa:b1:20:2e:31:5f: bd:39:51:52:2d:e5:3b:56:3a:21:92:93:59:e1:d1: 8f:33:b5:0e:5c:22:ed:0d:8a:66:6c:1c:3b:bc:e6: 43:df:06:fd:42:37:65:4d:50:87:f7:b8:b8:44:c5: 12:e3:aa:b2:a1:80:11:6d:65:b8:aa:43:53:41:06: 99:eb:d4:23:60:25:6b:41:5a:8c:be:0e:8f:54:78: 39:f3:e3:4c:ca:52:2c:53:47:b3:f9:4f:f8:2e:51: 49:79:97:a8:d5:bd:cc:82:02:90:85:77:20:56:3a: 08:3a:da:5a:e7:b1:3e:d1:44:c6:be:cb:52:6c:6b: 1e:4d:4a:4a:56:4e:05:f4:3b:89:b3:32:22:bc:67: 7a:95:44:f8:bd:79:05:23:1a:17:cb:3a:73:04:1a: a6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:23:70:40:D8:E7:18:91:2B:8E:34:FF:14:FD:AA:24:0F:C4:02:B2 X509v3 Authority Key Identifier: keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3132302e3133362e3134302e302f32322d3234203d3e203233383533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.136.140.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:02:44:70:c9:ff:8b:0a:04:4c:77:d1:15:71:ad:82:5b:bf: ff:83:c9:80:3d:a4:a1:e3:91:9e:88:bd:f8:44:81:e9:f6:7f: 43:4a:eb:ab:cb:e4:15:42:00:04:9a:0d:f8:4e:1d:38:b1:78: 97:b8:4c:9c:31:25:6f:d8:9d:e8:fe:c2:c0:f1:54:44:4d:e0: 85:74:77:38:74:ca:9c:4b:19:32:47:b4:36:f9:3b:8a:6a:84: ff:b2:01:ca:08:b2:bb:d1:d4:f7:50:03:40:d4:2a:19:5c:2d: c7:d0:62:ef:f6:d3:fe:62:9c:f3:9a:42:ec:a4:2f:d0:e7:de: 1e:2b:17:51:d5:83:ff:2a:ff:8f:10:b6:df:fb:8e:c8:6d:c9: 2a:86:cb:79:20:1f:93:2a:6c:0b:4c:c8:02:32:c9:7f:c4:d7: c4:c4:97:a8:00:df:25:23:a3:18:38:95:56:70:c4:28:ce:a1: 0b:60:d5:b6:f6:de:9f:2e:10:40:8c:43:d8:b4:af:ca:c8:b6: a8:fc:80:ae:2a:c8:6e:f3:a6:f4:d7:b6:ef:8a:7f:ee:fd:9a: b3:3a:4d:9d:66:6a:08:a6:27:4f:95:b5:16:fc:a6:b7:ff:ef: 07:11:a2:e7:c3:a9:cb:9e:e5:09:5c:7e:d3:11:19:f1:97:c0: 3e:b0:fd:38 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUf2MlftsABI1b+TKNJ83E3aqQE/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz Rjc0NzQzNDAeFw0yNjA0MTgxMDEzMzJaFw0yNzA0MTcxMDE4MzJaMDMxMTAvBgNV BAMTKDc2MjM3MDQwRDhFNzE4OTEyQjhFMzRGRjE0RkRBQTI0MEZDNDAyQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDYWqv0Syu6h0sQ7r2+HwxgUdA 5pxJ1dpFSW05xIPaE4pNZZvDnopMK8016azTSkCUPMROwUkGd8TNkX1xnCC9PE2g w1mrUazVDdP2+3Y+A59zp0/zMgwhZ/Uf6IMrjeO2cvqxIC4xX705UVIt5TtWOiGS k1nh0Y8ztQ5cIu0NimZsHDu85kPfBv1CN2VNUIf3uLhExRLjqrKhgBFtZbiqQ1NB Bpnr1CNgJWtBWoy+Do9UeDnz40zKUixTR7P5T/guUUl5l6jVvcyCApCFdyBWOgg6 2lrnsT7RRMa+y1Jsax5NSkpWTgX0O4mzMiK8Z3qVRPi9eQUjGhfLOnMEGqZhAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUdiNwQNjnGJErjjT/FP2qJA/EArIwHwYDVR0j BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2 NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE3ODYyNDIvMC8zMTMyMzAyZTMx MzMzNjJlMzEzNDMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMzM4MzUzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAniIjDANBgkqhkiG9w0BAQsFAAOCAQEASgJEcMn/iwoETHfRFXGt glu//4PJgD2koeORnoi9+ESB6fZ/Q0rrq8vkFUIABJoN+E4dOLF4l7hMnDElb9id 6P7CwPFURE3ghXR3OHTKnEsZMke0Nvk7imqE/7IBygiyu9HU91ADQNQqGVwtx9Bi 7/bT/mKc85pC7KQv0OfeHisXUdWD/yr/jxC23/uOyG3JKobLeSAfkypsC0zIAjLJ f8TXxMSXqADfJSOjGDiVVnDEKM6hC2DVtvbeny4QQIxD2LSvysi2qPyArirIbvOm 9Ne274p/7v2aszpNnWZqCKYnT5W1Fvymt//vBxGi58Opy57lCVx+0xEZ8ZfAPrD9 OA== -----END CERTIFICATE-----Generated at Mon Apr 27 11:16:21 2026 by rpki-client