$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139322e302f32342d3234203d3e203633363431.roa File: 3132332e34392e3139322e302f32342d3234203d3e203633363431.roa (raw, json) Hash identifier: 9fALYMm2/lB/ZPJucTv/pWG0a/j3h4LS+twhqPC8BVU= Subject key identifier: 4B:FC:08:97:AB:2A:D5:EB:94:2C:98:61:6C:53:CA:0C:9B:B4:37:58 Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 7B6CC2AAD6B57F136B61CC681D2317A9FA5AB160 Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139322e302f32342d3234203d3e203633363431.roa Signing time: Wed 22 Apr 2026 14:11:10 +0000 ROA not before: Wed 22 Apr 2026 14:06:10 +0000 ROA not after: Wed 21 Apr 2027 14:11:10 +0000 asID: 63641 IP address blocks: 123.49.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 10:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:6c:c2:aa:d6:b5:7f:13:6b:61:cc:68:1d:23:17:a9:fa:5a:b1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Apr 22 14:06:10 2026 GMT Not After : Apr 21 14:11:10 2027 GMT Subject: CN=4BFC0897AB2AD5EB942C98616C53CA0C9BB43758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a2:64:8d:78:f8:70:2b:e0:8a:26:22:6c:1a: 9b:5b:dc:f2:b3:0d:b1:3e:46:d6:54:e3:91:a7:74: 8a:07:56:6e:00:bc:3f:48:10:0f:02:d2:35:93:d0: 77:9e:9d:e3:85:ea:f4:26:c1:c5:71:9f:01:70:f7: e2:05:13:5c:3f:0e:76:71:ab:9d:12:76:2e:e7:69: 87:0e:d8:ad:76:88:81:23:d5:56:ca:d8:86:7a:0b: 89:06:45:42:4b:2c:7c:21:12:e3:2c:03:eb:fe:68: 5e:fa:7f:14:76:1b:00:1c:c9:1a:27:67:bd:7a:fb: 90:dc:75:af:ee:8f:7e:26:d1:0f:cd:c8:2c:95:ab: 5b:06:8a:9d:61:94:9e:30:f1:51:1d:5d:d3:02:94: a3:5a:d3:34:bb:78:ce:ae:a8:92:b8:ad:20:19:c9: 40:24:a3:ee:8b:b8:74:e2:70:9c:31:d9:1f:7f:0b: f1:0d:66:f6:be:97:46:8c:da:d4:3d:cd:d6:60:d8: 30:b6:e6:a1:b0:ea:be:8e:54:85:d8:bd:c7:1d:f2: 26:d6:e3:47:1a:30:b9:37:a3:c2:d6:53:21:88:46: 05:60:ce:7f:61:0b:36:82:98:4f:71:4b:71:0c:4d: ff:fb:9e:9b:be:67:a4:65:8c:fa:3f:1a:b5:be:79: 46:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FC:08:97:AB:2A:D5:EB:94:2C:98:61:6C:53:CA:0C:9B:B4:37:58 X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139322e302f32342d3234203d3e203633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.49.192.0/24 Signature Algorithm: sha256WithRSAEncryption 50:3a:34:dd:6b:b7:0a:2d:2c:c1:82:49:ac:2a:bd:c1:c3:f1: 15:cd:47:ce:88:cf:d5:1a:d1:b9:12:74:ec:0d:6b:a0:1b:3f: a8:ae:23:b8:ed:59:e8:52:07:29:ea:b3:ab:9b:85:41:6a:48: a6:94:f9:14:c0:86:f8:e4:a8:64:9e:30:36:ff:57:f2:94:2a: 6b:f2:5d:30:f4:b6:a6:5d:4e:95:83:a1:73:82:81:ac:26:9c: 39:e8:98:48:1b:e7:c6:82:76:f3:cc:64:d5:78:bd:c6:91:c0: 54:dc:33:ef:4b:f9:0b:c6:2f:92:73:cd:07:fa:d1:16:8c:ee: 3e:46:e1:92:5c:17:f4:c4:6b:f5:88:70:ba:a4:35:a1:ac:43: 85:b7:16:59:14:0e:70:d2:76:b3:96:41:db:de:a6:8f:3f:dd: 16:7f:21:4c:fc:f2:95:3c:d2:56:76:00:b2:25:5e:86:53:68: 30:18:5b:3d:c5:01:2c:1e:73:42:30:25:54:1d:93:4f:7f:64: ba:2b:44:6a:c3:b8:6c:85:b5:5a:ca:81:55:9c:1d:f6:5c:74: d7:c3:6f:38:93:c2:3a:3a:1e:45:6e:e9:cb:20:15:0b:a9:ee: 4d:9e:f3:dc:2b:29:15:97:da:44:79:34:47:a5:a0:21:ba:d9: a3:24:4e:3f -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUe2zCqta1fxNrYcxoHSMXqfpasWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjA0MjIxNDA2MTBaFw0yNzA0MjExNDExMTBaMDMxMTAvBgNV BAMTKDRCRkMwODk3QUIyQUQ1RUI5NDJDOTg2MTZDNTNDQTBDOUJCNDM3NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKomSNePhwK+CKJiJsGptb3PKz DbE+RtZU45GndIoHVm4AvD9IEA8C0jWT0HeeneOF6vQmwcVxnwFw9+IFE1w/DnZx q50Sdi7naYcO2K12iIEj1VbK2IZ6C4kGRUJLLHwhEuMsA+v+aF76fxR2GwAcyRon Z716+5Dcda/uj34m0Q/NyCyVq1sGip1hlJ4w8VEdXdMClKNa0zS7eM6uqJK4rSAZ yUAko+6LuHTicJwx2R9/C/ENZva+l0aM2tQ9zdZg2DC25qGw6r6OVIXYvccd8ibW 40caMLk3o8LWUyGIRgVgzn9hCzaCmE9xS3EMTf/7npu+Z6RljPo/GrW+eUYrAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUS/wIl6sq1euULJhhbFPKDJu0N1gwHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzMxMzIzMzJlMzQz OTJlMzEzOTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHsxwDANBgkqhkiG9w0BAQsFAAOCAQEAUDo03Wu3Ci0swYJJrCq9wcPx Fc1HzojP1RrRuRJ07A1roBs/qK4juO1Z6FIHKeqzq5uFQWpIppT5FMCG+OSoZJ4w Nv9X8pQqa/JdMPS2pl1OlYOhc4KBrCacOeiYSBvnxoJ288xk1Xi9xpHAVNwz70v5 C8YvknPNB/rRFozuPkbhklwX9MRr9YhwuqQ1oaxDhbcWWRQOcNJ2s5ZB296mjz/d Fn8hTPzylTzSVnYAsiVehlNoMBhbPcUBLB5zQjAlVB2TT39kuitEasO4bIW1WsqB VZwd9lx018NvOJPCOjoeRW7pyyAVC6nuTZ7z3CspFZfaRHk0R6WgIbrZoyROPw== -----END CERTIFICATE-----Generated at Mon Apr 27 11:06:38 2026 by rpki-client