$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139332e302f32342d3234203d3e203137363231.roa File: 3132332e34392e3139332e302f32342d3234203d3e203137363231.roa (raw, json) Hash identifier: oKWTvD0UBzvNyJF3VDU6rr254HIEs0VGgzJUGUEFhPo= Subject key identifier: 39:DD:3D:D9:FE:3F:6E:13:76:99:07:58:98:DF:E8:62:B1:BA:B4:C4 Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 68719D0D91AD94C297E24899DD46CA0A5DC23849 Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139332e302f32342d3234203d3e203137363231.roa Signing time: Wed 22 Apr 2026 14:11:39 +0000 ROA not before: Wed 22 Apr 2026 14:06:39 +0000 ROA not after: Wed 21 Apr 2027 14:11:39 +0000 asID: 17621 IP address blocks: 123.49.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 10:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:71:9d:0d:91:ad:94:c2:97:e2:48:99:dd:46:ca:0a:5d:c2:38:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Apr 22 14:06:39 2026 GMT Not After : Apr 21 14:11:39 2027 GMT Subject: CN=39DD3DD9FE3F6E137699075898DFE862B1BAB4C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3e:ac:74:32:a7:05:ae:8d:47:2b:c5:dd:94: 5c:a0:8a:e2:b6:1f:8c:3b:b4:07:b0:d7:40:a6:07: 7a:4a:4b:d5:06:a4:eb:4b:65:26:3c:da:12:ff:a9: f0:7e:ec:28:04:52:8b:63:8c:8f:77:04:62:73:ab: 8f:57:78:59:a7:1d:13:3f:47:a6:bf:bf:0f:0d:7d: ad:f7:97:2e:33:be:6a:5e:fb:4e:6e:2d:e5:b8:b7: ed:59:6e:74:b0:13:44:1d:f6:90:e1:11:ef:04:d0: de:7f:d6:35:d7:48:d0:e1:45:91:ee:43:7a:bb:58: 09:fc:34:05:8f:a3:82:0f:fd:e7:b9:1c:34:e7:b8: 6a:d1:e4:ba:0e:a2:f7:f7:d2:4b:7b:6b:03:63:2c: 48:ce:a7:68:1d:d7:07:39:65:91:f4:bd:cf:5a:ec: 5e:0b:fc:1f:e9:80:ca:f2:4a:5a:f7:0f:86:68:bb: fb:84:c6:10:43:e9:2f:87:a4:94:9a:2a:63:db:95: c3:81:c5:3b:a6:53:a3:a0:a7:88:1f:95:60:db:2e: d3:33:89:ef:5c:38:c3:58:9f:50:6b:24:ed:27:18: 68:42:25:ad:3f:55:f5:07:b7:c7:26:44:1e:7b:f1: f4:1c:e0:f0:5e:2f:15:75:81:61:34:27:a9:64:b1: 19:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DD:3D:D9:FE:3F:6E:13:76:99:07:58:98:DF:E8:62:B1:BA:B4:C4 X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139332e302f32342d3234203d3e203137363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.49.193.0/24 Signature Algorithm: sha256WithRSAEncryption 60:e1:63:62:63:32:56:0e:49:ec:d5:51:25:f2:f0:2d:bb:1c: 16:2b:34:1e:53:a0:a9:48:10:7f:01:46:70:55:eb:4d:e0:a2: 2a:14:44:86:5a:4f:52:e8:47:88:dc:60:2b:d5:41:4c:f5:16: de:e1:58:da:72:77:f9:18:78:c8:f3:52:af:4a:27:85:06:26: 6b:46:5a:d4:32:77:72:0a:8e:62:13:e5:ae:64:cb:ec:61:b6: 0c:79:1b:05:bf:f6:ec:cf:e9:b1:20:63:c1:91:0c:77:92:96: 07:9a:e5:5b:95:e2:0a:dd:eb:8f:e1:78:22:49:b7:45:ea:d1: f6:84:82:88:81:1a:04:5d:e8:19:1a:77:7a:04:3d:e9:2b:d7: 50:d7:fb:e8:f7:70:dc:aa:fa:62:95:81:98:2d:6a:6c:b6:9d: 73:8a:57:37:4f:f1:58:b6:97:86:55:b6:1e:1c:2f:88:2f:98: ef:93:a5:f3:8e:0d:e8:d4:23:5c:02:ea:12:49:4c:e9:5d:79: 6c:1f:d5:55:63:db:87:e9:77:e9:30:cf:8e:33:a1:68:0e:b4: 28:31:f0:02:5d:a5:3d:1e:68:24:d8:dd:3a:bd:48:8a:44:68: ca:c2:b1:59:ff:81:55:ba:c9:d1:43:27:e1:37:45:7a:9f:1f: d7:65:f8:61 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUaHGdDZGtlMKX4kiZ3UbKCl3COEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjA0MjIxNDA2MzlaFw0yNzA0MjExNDExMzlaMDMxMTAvBgNV BAMTKDM5REQzREQ5RkUzRjZFMTM3Njk5MDc1ODk4REZFODYyQjFCQUI0QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPPqx0MqcFro1HK8XdlFygiuK2 H4w7tAew10CmB3pKS9UGpOtLZSY82hL/qfB+7CgEUotjjI93BGJzq49XeFmnHRM/ R6a/vw8Nfa33ly4zvmpe+05uLeW4t+1ZbnSwE0Qd9pDhEe8E0N5/1jXXSNDhRZHu Q3q7WAn8NAWPo4IP/ee5HDTnuGrR5LoOovf30kt7awNjLEjOp2gd1wc5ZZH0vc9a 7F4L/B/pgMrySlr3D4Zou/uExhBD6S+HpJSaKmPblcOBxTumU6Ogp4gflWDbLtMz ie9cOMNYn1BrJO0nGGhCJa0/VfUHt8cmRB578fQc4PBeLxV1gWE0J6lksRmLAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUOd092f4/bhN2mQdYmN/oYrG6tMQwHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzMxMzIzMzJlMzQz OTJlMzEzOTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM2MzIzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHsxwTANBgkqhkiG9w0BAQsFAAOCAQEAYOFjYmMyVg5J7NVRJfLwLbsc Fis0HlOgqUgQfwFGcFXrTeCiKhREhlpPUuhHiNxgK9VBTPUW3uFY2nJ3+Rh4yPNS r0onhQYma0Za1DJ3cgqOYhPlrmTL7GG2DHkbBb/27M/psSBjwZEMd5KWB5rlW5Xi Ct3rj+F4Ikm3RerR9oSCiIEaBF3oGRp3egQ96SvXUNf76Pdw3Kr6YpWBmC1qbLad c4pXN0/xWLaXhlW2HhwviC+Y75Ol844N6NQjXALqEklM6V15bB/VVWPbh+l36TDP jjOhaA60KDHwAl2lPR5oJNjdOr1IikRoysKxWf+BVbrJ0UMn4TdFep8f12X4YQ== -----END CERTIFICATE-----Generated at Mon Apr 27 11:06:43 2026 by rpki-client