$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139322e302f32342d3234203d3e2034383132.roa File: 3132332e34392e3139322e302f32342d3234203d3e2034383132.roa (raw, json) Hash identifier: iRlEATAv+3iZpFCXGGvjKRkQpzTKggid2TUNKi8fmvQ= Subject key identifier: 48:06:51:1E:F9:63:37:51:CA:3E:80:E5:F2:27:D7:99:2B:FA:64:29 Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 1BDD41B938E5E427924FCE17FD621D2AF832AA6F Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139322e302f32342d3234203d3e2034383132.roa Signing time: Wed 22 Apr 2026 14:11:10 +0000 ROA not before: Wed 22 Apr 2026 14:06:10 +0000 ROA not after: Wed 21 Apr 2027 14:11:10 +0000 asID: 4812 IP address blocks: 123.49.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 07:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:dd:41:b9:38:e5:e4:27:92:4f:ce:17:fd:62:1d:2a:f8:32:aa:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Apr 22 14:06:10 2026 GMT Not After : Apr 21 14:11:10 2027 GMT Subject: CN=4806511EF9633751CA3E80E5F227D7992BFA6429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e3:ae:8d:d7:65:a6:01:7e:38:c3:c8:5c:66: d9:3f:73:00:3e:ba:e0:d6:68:50:3c:81:bc:a2:56: d6:78:62:4c:fb:83:42:c8:b6:5a:c6:57:9c:eb:9a: b2:79:01:6b:da:a6:9f:cc:39:01:af:19:20:99:9d: 93:23:93:10:1a:3e:45:f4:9b:36:ce:a4:d0:40:10: 48:64:bd:b2:f0:33:7c:a1:aa:2a:a8:33:50:53:7c: 12:c2:d1:91:bb:35:7b:57:3a:ea:cb:7f:f9:c1:9b: ba:e0:38:79:7d:e2:04:e4:72:b8:90:9c:4e:ba:2b: 49:dd:b7:8c:15:35:f0:0b:37:eb:7e:0a:ca:58:be: a2:11:36:76:d3:7f:d6:3d:6e:56:46:64:c4:86:b9: 30:bb:28:46:fa:03:35:7c:79:0f:d7:17:85:b1:65: e0:a8:06:46:5b:3f:9c:22:2c:0b:35:44:55:52:c6: 42:40:ad:2d:82:34:81:d8:21:de:5c:f0:ef:7d:33: a7:72:dc:bc:40:98:ce:f4:2d:4d:46:c5:42:74:2f: 99:7d:c4:05:bf:fb:45:67:6c:ff:31:f6:3e:73:ef: ad:19:a9:94:78:da:1c:f8:d0:43:d3:9e:35:7e:c0: 3b:96:04:09:55:12:60:6e:e6:6f:26:44:58:2d:e2: fa:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:06:51:1E:F9:63:37:51:CA:3E:80:E5:F2:27:D7:99:2B:FA:64:29 X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139322e302f32342d3234203d3e2034383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.49.192.0/24 Signature Algorithm: sha256WithRSAEncryption 45:7f:fb:50:b3:e3:ad:d5:a0:d5:7e:ea:6f:f6:42:46:3a:a2: fb:d3:64:16:d0:83:4f:18:72:7b:d8:d1:be:d4:d4:74:4b:a5: f4:5d:29:1b:f2:20:ff:45:27:fc:e8:55:28:db:1a:cf:af:69: ee:13:bc:4e:7b:ad:58:d4:b9:ec:f6:7d:50:32:d6:f0:4a:54: 14:1e:25:3b:2f:eb:b0:ec:e4:10:9f:43:e5:68:39:d7:4a:43: 2d:b5:5b:c5:bd:b1:05:5b:81:ad:14:3a:ad:b0:30:45:9b:98: eb:f3:b0:c9:40:a3:54:2c:2f:ea:26:c5:88:a8:4a:48:00:a0: b9:38:f3:da:77:24:72:78:9c:97:06:26:f8:17:fe:eb:a7:56: c6:80:dc:94:ff:f6:81:81:f7:69:26:b4:9a:9d:0e:ad:18:c7: c7:f8:e8:fc:fd:93:dc:67:5d:da:c2:90:73:5e:5c:18:b8:ed: 11:6c:7c:66:b1:fe:5d:89:49:45:84:91:42:46:9b:0a:e2:f2: 48:e6:53:be:dd:23:c9:13:f3:36:09:8b:a5:b7:22:d5:f7:89: 06:3e:87:42:cf:9b:c3:a0:85:bf:ae:d4:47:26:90:db:0f:59: 33:7f:ec:fa:13:fe:74:40:37:25:7d:f3:f0:f5:e4:80:5e:ab: ab:1d:9a:80 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUG91BuTjl5CeST84X/WIdKvgyqm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjA0MjIxNDA2MTBaFw0yNzA0MjExNDExMTBaMDMxMTAvBgNV BAMTKDQ4MDY1MTFFRjk2MzM3NTFDQTNFODBFNUYyMjdENzk5MkJGQTY0MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf466N12WmAX44w8hcZtk/cwA+ uuDWaFA8gbyiVtZ4Ykz7g0LItlrGV5zrmrJ5AWvapp/MOQGvGSCZnZMjkxAaPkX0 mzbOpNBAEEhkvbLwM3yhqiqoM1BTfBLC0ZG7NXtXOurLf/nBm7rgOHl94gTkcriQ nE66K0ndt4wVNfALN+t+CspYvqIRNnbTf9Y9blZGZMSGuTC7KEb6AzV8eQ/XF4Wx ZeCoBkZbP5wiLAs1RFVSxkJArS2CNIHYId5c8O99M6dy3LxAmM70LU1GxUJ0L5l9 xAW/+0VnbP8x9j5z760ZqZR42hz40EPTnjV+wDuWBAlVEmBu5m8mRFgt4vrvAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUSAZRHvljN1HKPoDl8ifXmSv6ZCkwHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ2Nzk5MTA1LzAvMzEzMjMzMmUzNDM5 MmUzMTM5MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzEzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHsxwDANBgkqhkiG9w0BAQsFAAOCAQEARX/7ULPjrdWg1X7qb/ZCRjqi+9Nk FtCDTxhye9jRvtTUdEul9F0pG/Ig/0Un/OhVKNsaz69p7hO8TnutWNS57PZ9UDLW 8EpUFB4lOy/rsOzkEJ9D5Wg510pDLbVbxb2xBVuBrRQ6rbAwRZuY6/OwyUCjVCwv 6ibFiKhKSACguTjz2nckcniclwYm+Bf+66dWxoDclP/2gYH3aSa0mp0OrRjHx/jo /P2T3Gdd2sKQc15cGLjtEWx8ZrH+XYlJRYSRQkabCuLySOZTvt0jyRPzNgmLpbci 1feJBj6HQs+bw6CFv67URyaQ2w9ZM3/s+hP+dEA3JX3z8PXkgF6rqx2agA== -----END CERTIFICATE-----Generated at Mon Apr 27 08:24:35 2026 by rpki-client