$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3132302e3133362e3138302e302f32322d3234203d3e203233383533.roa File: 3132302e3133362e3138302e302f32322d3234203d3e203233383533.roa (raw, json) Hash identifier: xG1I6r6UAJfACKwK5sIgDn22lg/beJ2nLiIhCgnhcBM= Subject key identifier: B4:42:7F:5C:54:4A:74:05:8F:C3:51:84:31:C9:FB:1D:11:84:FC:AD Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434 Certificate serial: 7498A6D03CCE439244F7F81D52CFF9C860D6799C Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3132302e3133362e3138302e302f32322d3234203d3e203233383533.roa Signing time: Sat 18 Apr 2026 10:18:32 +0000 ROA not before: Sat 18 Apr 2026 10:13:32 +0000 ROA not after: Sat 17 Apr 2027 10:18:32 +0000 asID: 23853 IP address blocks: 120.136.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 09:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:98:a6:d0:3c:ce:43:92:44:f7:f8:1d:52:cf:f9:c8:60:d6:79:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434 Validity Not Before: Apr 18 10:13:32 2026 GMT Not After : Apr 17 10:18:32 2027 GMT Subject: CN=B4427F5C544A74058FC3518431C9FB1D1184FCAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4d:0e:91:f8:7e:64:a2:e8:2d:0f:e6:3c:e7: cb:92:4f:df:3b:ec:14:3e:e3:4f:f8:cc:a3:ce:a2: 4d:37:c9:aa:d8:c3:ed:a0:db:6d:7e:9a:ab:77:a3: 29:c4:fd:ac:00:5e:c4:68:0b:6d:d4:aa:66:5b:a5: a1:64:74:70:28:48:90:19:1e:ee:96:19:5e:d0:20: 2d:f7:80:e8:23:10:80:36:e9:0c:05:1c:48:9c:ba: 0b:e0:ff:3c:a6:dc:12:a6:d9:95:ff:28:6d:f2:ca: 48:56:a6:23:d8:0a:30:60:6c:95:7f:3a:9e:82:80: 0f:c1:05:b4:43:94:72:76:69:4f:28:c1:aa:44:f1: 4d:89:03:41:3a:92:40:ff:86:1e:03:37:e1:5a:39: 51:11:ff:29:49:47:73:20:71:77:01:f5:33:18:1a: 32:f1:02:97:73:ef:2b:69:94:08:7d:d8:bf:b9:58: 4f:14:10:ef:9c:53:02:9f:08:b2:62:b7:05:db:c7: 45:db:70:46:2a:c5:34:bd:05:f8:8b:47:31:71:fa: d1:13:45:ec:fb:f0:c5:9b:90:e8:46:32:f2:3d:0f: 9f:eb:b5:c9:c4:cc:c5:bf:09:2b:f2:48:9c:34:fd: 1f:02:4b:c1:ea:9b:09:8b:ce:9c:54:27:96:30:b6: 94:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:42:7F:5C:54:4A:74:05:8F:C3:51:84:31:C9:FB:1D:11:84:FC:AD X509v3 Authority Key Identifier: keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3132302e3133362e3138302e302f32322d3234203d3e203233383533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.136.180.0/22 Signature Algorithm: sha256WithRSAEncryption 39:3f:d0:40:d9:ed:d7:fb:aa:4b:5e:5e:b1:53:5e:b1:59:34: 1c:4c:05:a3:74:42:1f:41:47:e8:5c:01:dc:d7:38:a3:ff:8d: 0d:cd:4b:5b:d6:6d:ab:c8:00:37:32:79:60:e6:c2:a5:e3:65: 80:87:9c:0c:50:44:31:78:36:2f:90:d2:ae:fa:15:11:c5:83: 8c:de:c4:ac:03:e0:0c:7d:dd:ce:e0:4c:de:66:0c:55:f1:27: 24:23:66:a0:a4:93:9d:93:7e:bf:97:70:c0:57:ed:30:1f:ef: 5c:2a:45:44:d8:4f:8a:8a:4d:52:02:88:ad:41:19:89:2e:0c: e9:cd:87:b7:c0:17:25:0b:bc:10:c9:3f:c5:e7:c0:a1:f5:b5: 2d:34:f0:eb:1e:48:f2:10:27:d7:d6:48:ab:d5:88:26:46:84: 99:78:78:07:06:4b:19:1f:7a:81:32:99:b7:1f:ed:1a:da:33: 8d:c0:cb:fd:fc:27:21:d4:e7:34:46:1f:2d:df:3c:5f:af:85: 43:cb:8e:81:39:16:8d:47:dd:2e:73:be:d2:4f:70:a1:09:0d: 5d:3b:f4:0a:77:72:2e:77:3d:ba:ad:5a:40:56:33:71:1d:12: 6f:5c:b2:66:b1:f6:7a:32:b1:81:e3:98:4b:7b:d8:6d:74:f5: 13:78:53:b5 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUdJim0DzOQ5JE9/gdUs/5yGDWeZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz Rjc0NzQzNDAeFw0yNjA0MTgxMDEzMzJaFw0yNzA0MTcxMDE4MzJaMDMxMTAvBgNV BAMTKEI0NDI3RjVDNTQ0QTc0MDU4RkMzNTE4NDMxQzlGQjFEMTE4NEZDQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeTQ6R+H5kougtD+Y858uST987 7BQ+40/4zKPOok03yarYw+2g221+mqt3oynE/awAXsRoC23UqmZbpaFkdHAoSJAZ Hu6WGV7QIC33gOgjEIA26QwFHEicugvg/zym3BKm2ZX/KG3yykhWpiPYCjBgbJV/ Op6CgA/BBbRDlHJ2aU8owapE8U2JA0E6kkD/hh4DN+FaOVER/ylJR3MgcXcB9TMY GjLxApdz7ytplAh92L+5WE8UEO+cUwKfCLJitwXbx0XbcEYqxTS9BfiLRzFx+tET Rez78MWbkOhGMvI9D5/rtcnEzMW/CSvySJw0/R8CS8HqmwmLzpxUJ5YwtpStAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUtEJ/XFRKdAWPw1GEMcn7HRGE/K0wHwYDVR0j BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2 NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE3ODYyNDIvMC8zMTMyMzAyZTMx MzMzNjJlMzEzODMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMzM4MzUzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAniItDANBgkqhkiG9w0BAQsFAAOCAQEAOT/QQNnt1/uqS15esVNe sVk0HEwFo3RCH0FH6FwB3Nc4o/+NDc1LW9Ztq8gANzJ5YObCpeNlgIecDFBEMXg2 L5DSrvoVEcWDjN7ErAPgDH3dzuBM3mYMVfEnJCNmoKSTnZN+v5dwwFftMB/vXCpF RNhPiopNUgKIrUEZiS4M6c2Ht8AXJQu8EMk/xefAofW1LTTw6x5I8hAn19ZIq9WI JkaEmXh4BwZLGR96gTKZtx/tGtozjcDL/fwnIdTnNEYfLd88X6+FQ8uOgTkWjUfd LnO+0k9woQkNXTv0CndyLnc9uq1aQFYzcR0Sb1yyZrH2ejKxgeOYS3vYbXT1E3hT tQ== -----END CERTIFICATE-----Generated at Mon Apr 27 11:16:21 2026 by rpki-client