$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3132382e302f31382d3138203d3e203633363431.roa File: 3132332e34392e3132382e302f31382d3138203d3e203633363431.roa (raw, json) Hash identifier: DLjV7BUvM6azb+xj69InOrHK9Fax6ZNRgIJZwkte0R4= Subject key identifier: 8E:D8:3C:29:36:16:05:DF:A1:69:B7:67:0F:95:EC:85:46:AA:CB:0C Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 4BBC6EA513A117F0346316F7101A89A00BE6DDC5 Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3132382e302f31382d3138203d3e203633363431.roa Signing time: Wed 22 Apr 2026 14:22:00 +0000 ROA not before: Wed 22 Apr 2026 14:17:00 +0000 ROA not after: Wed 21 Apr 2027 14:22:00 +0000 asID: 63641 IP address blocks: 123.49.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 10:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:bc:6e:a5:13:a1:17:f0:34:63:16:f7:10:1a:89:a0:0b:e6:dd:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Apr 22 14:17:00 2026 GMT Not After : Apr 21 14:22:00 2027 GMT Subject: CN=8ED83C29361605DFA169B7670F95EC8546AACB0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:01:11:ef:e2:81:a6:fb:6e:06:86:9e:43:a5: eb:b5:44:e6:89:af:4c:bd:28:31:b8:17:7e:07:4a: 11:8b:bd:90:d4:ec:3a:1c:49:e0:32:69:47:0d:e7: f8:41:5f:51:80:45:85:08:39:d7:2d:22:23:bf:f9: 7a:cd:0b:b3:33:4e:ec:87:d5:fa:9d:8e:08:15:42: 26:39:34:db:28:b5:68:00:d9:00:e0:23:5d:59:52: 66:48:6e:0a:24:1b:10:16:cf:74:fd:b7:18:47:14: 4b:1c:6b:cf:ee:fd:eb:81:6c:f0:b5:5e:b6:1a:84: 2a:98:68:c6:32:41:7f:9e:41:8d:9f:6d:09:e8:1c: 17:24:f4:5a:63:e7:f7:85:9d:7c:c5:5c:a1:91:c9: d3:bd:6c:81:6d:6d:85:a0:13:16:c0:8b:b4:28:63: 0e:44:7c:0b:70:ae:0d:04:02:e7:87:48:a5:58:82: 6d:3a:c0:20:9e:a5:73:39:e2:5d:45:00:b8:46:a9: 09:61:75:75:9f:ea:12:14:68:45:e6:e0:36:c1:b0: 62:e6:5c:dd:8f:22:94:f9:ff:0f:b9:50:14:45:7b: 26:d9:d4:3f:41:8d:07:0b:c3:68:c5:02:1b:e9:3f: 96:70:10:0b:4e:a1:f5:fd:a3:0f:fc:af:7a:d6:cc: 51:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D8:3C:29:36:16:05:DF:A1:69:B7:67:0F:95:EC:85:46:AA:CB:0C X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3132382e302f31382d3138203d3e203633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.49.128.0/18 Signature Algorithm: sha256WithRSAEncryption 0b:b7:d0:f1:3a:50:9c:bc:08:15:bd:db:8a:a3:ac:68:7c:32: bd:2e:8e:51:b4:63:07:3d:f6:f4:c6:8b:1e:85:31:eb:db:b5: 60:49:1b:86:57:a1:c2:cd:b1:37:88:45:92:c7:2f:f9:65:29: ef:12:c6:fe:b7:f4:2d:a7:fa:5d:7a:40:0c:a3:66:fb:55:57: 02:c2:23:f5:86:67:32:4e:d7:c0:e4:e2:b7:5f:35:2c:5b:7b: 00:33:38:a2:a4:60:07:f7:96:42:2c:72:cf:51:58:ba:1a:ad: 5b:5c:a3:e0:90:d7:2f:56:37:58:b5:f9:63:d9:c7:f3:2c:d3: ee:64:a9:b3:a7:b6:16:7f:ef:69:c8:5f:b4:1f:33:02:47:de: 56:30:05:06:ee:2d:8a:6e:cb:be:13:36:b5:bb:fe:98:97:85: 40:9e:83:44:aa:33:6e:4d:f3:bd:de:c6:7f:3c:bd:c2:17:90: bf:c8:5e:77:29:fe:b5:00:6b:78:9a:45:66:4a:01:b9:54:f3: 2d:06:c6:d8:fc:bd:24:d5:1f:56:d6:63:a1:af:d3:5d:d6:7f: b0:68:89:c3:25:a6:f7:2d:59:77:92:19:34:41:8b:67:3c:29: 37:24:9b:5f:4f:12:39:e9:da:97:84:41:c3:4a:3e:f6:67:0e: 08:f3:b4:86 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUS7xupROhF/A0Yxb3EBqJoAvm3cUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjA0MjIxNDE3MDBaFw0yNzA0MjExNDIyMDBaMDMxMTAvBgNV BAMTKDhFRDgzQzI5MzYxNjA1REZBMTY5Qjc2NzBGOTVFQzg1NDZBQUNCMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLARHv4oGm+24Ghp5Dpeu1ROaJ r0y9KDG4F34HShGLvZDU7DocSeAyaUcN5/hBX1GARYUIOdctIiO/+XrNC7MzTuyH 1fqdjggVQiY5NNsotWgA2QDgI11ZUmZIbgokGxAWz3T9txhHFEsca8/u/euBbPC1 XrYahCqYaMYyQX+eQY2fbQnoHBck9Fpj5/eFnXzFXKGRydO9bIFtbYWgExbAi7Qo Yw5EfAtwrg0EAueHSKVYgm06wCCepXM54l1FALhGqQlhdXWf6hIUaEXm4DbBsGLm XN2PIpT5/w+5UBRFeybZ1D9BjQcLw2jFAhvpP5ZwEAtOofX9ow/8r3rWzFHzAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUjtg8KTYWBd+habdnD5XshUaqywwwHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzMxMzIzMzJlMzQz OTJlMzEzMjM4MmUzMDJmMzEzODJkMzEzODIwM2QzZTIwMzYzMzM2MzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBnsxgDANBgkqhkiG9w0BAQsFAAOCAQEAC7fQ8TpQnLwIFb3biqOsaHwy vS6OUbRjBz329MaLHoUx69u1YEkbhlehws2xN4hFkscv+WUp7xLG/rf0Laf6XXpA DKNm+1VXAsIj9YZnMk7XwOTit181LFt7ADM4oqRgB/eWQixyz1FYuhqtW1yj4JDX L1Y3WLX5Y9nH8yzT7mSps6e2Fn/vachftB8zAkfeVjAFBu4tim7LvhM2tbv+mJeF QJ6DRKozbk3zvd7Gfzy9wheQv8hedyn+tQBreJpFZkoBuVTzLQbG2Py9JNUfVtZj oa/TXdZ/sGiJwyWm9y1Zd5IZNEGLZzwpNySbX08SOenal4RBw0o+9mcOCPO0hg== -----END CERTIFICATE-----Generated at Mon Apr 27 11:06:28 2026 by rpki-client