$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139342e302f32342d3234203d3e2034383132.roa File: 3132332e34392e3139342e302f32342d3234203d3e2034383132.roa (raw, json) Hash identifier: uOpERi6fZ1qb9dTYcNvPLiMlhcAkHWYNaKM0ve9PWZo= Subject key identifier: A7:4A:AD:B7:FC:3E:49:3C:AF:8E:2C:2C:19:3A:86:52:DA:FB:7D:8F Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 5EF2901D59FCABF6C86FDE4EB94598E12C5A4E7E Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139342e302f32342d3234203d3e2034383132.roa Signing time: Wed 22 Apr 2026 14:12:20 +0000 ROA not before: Wed 22 Apr 2026 14:07:20 +0000 ROA not after: Wed 21 Apr 2027 14:12:20 +0000 asID: 4812 IP address blocks: 123.49.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 07:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f2:90:1d:59:fc:ab:f6:c8:6f:de:4e:b9:45:98:e1:2c:5a:4e:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Apr 22 14:07:20 2026 GMT Not After : Apr 21 14:12:20 2027 GMT Subject: CN=A74AADB7FC3E493CAF8E2C2C193A8652DAFB7D8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:74:d2:83:80:c4:c9:ae:1f:47:bf:36:cb:2f: b5:b7:01:02:7c:cf:23:37:2e:44:e4:8b:c4:0d:09: 51:94:c2:83:78:23:fc:fb:4b:a5:eb:ad:80:b2:63: 55:54:ed:7d:8e:66:0b:73:6b:5a:11:a4:34:7c:48: 96:3c:19:df:75:17:cc:bf:2b:53:e1:47:a8:d9:01: 2d:28:0c:fb:02:14:25:25:09:51:1c:ec:21:ac:18: 28:01:1b:72:1a:8b:d3:7e:8d:38:8c:2e:07:29:27: eb:c8:62:fc:4a:4d:d9:c5:7e:da:e0:0d:a1:c6:b2: c8:1e:42:81:3a:2c:d7:20:1e:8f:a8:8e:14:71:90: d2:5c:03:6f:36:f9:fe:84:ab:b3:15:6b:ee:02:cc: 88:cf:ff:ea:7c:6b:0f:3d:6b:15:7a:0c:96:05:7a: e8:1a:c6:02:8e:e0:9e:18:45:54:21:7b:76:8c:ef: f4:f2:ff:7e:87:22:40:9a:3b:9b:72:06:06:85:4a: 64:a7:85:c2:d0:f2:38:bb:02:fe:ed:61:66:c3:31: f7:a2:5f:88:49:d3:0a:7c:d9:30:cf:01:80:d5:48: 27:20:f1:20:e6:de:ce:dc:d0:f3:d1:28:59:87:7e: cd:c8:32:7a:93:79:9c:90:cc:5c:1a:57:d7:27:65: 9a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4A:AD:B7:FC:3E:49:3C:AF:8E:2C:2C:19:3A:86:52:DA:FB:7D:8F X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139342e302f32342d3234203d3e2034383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.49.194.0/24 Signature Algorithm: sha256WithRSAEncryption 23:9a:c8:4d:39:fd:cd:ad:cf:e1:df:a8:87:4b:2e:25:57:b6: 2f:53:02:0d:ff:ee:5c:a3:54:c2:97:3a:97:eb:16:4d:b7:18: c0:ba:b4:ea:98:bc:8e:cd:a3:8b:a3:68:87:21:e2:3a:57:c7: 7d:7d:7e:d8:4c:25:a2:e3:4d:7f:9e:de:31:3e:50:ef:00:e2: 7c:b0:e1:76:ba:35:1c:5f:5f:f4:5c:fe:da:37:e9:06:ac:4f: e4:f3:cb:1c:86:7a:40:f1:8c:2b:d7:bc:19:40:20:7d:4c:cd: 0e:8b:5f:d9:f9:ab:eb:85:d5:dd:04:c3:65:05:ab:cd:be:b7: a2:29:c6:ad:eb:37:72:47:be:c1:f8:c0:c3:d6:20:2a:aa:c6: b2:75:c4:f8:72:83:a2:a5:b3:c7:46:60:79:0e:54:f8:19:c8: 06:2b:d2:82:53:0a:7c:9b:12:2f:34:db:87:6a:53:dd:dc:2c: 84:e1:d6:09:7d:23:da:a9:4f:be:2c:12:49:74:3b:cf:d4:34: 39:17:e3:73:b5:0b:cb:6b:91:06:03:63:4e:5e:88:96:ea:f6: cd:37:51:b3:2e:21:aa:d4:d9:48:c2:37:7b:30:70:89:9e:3d: 7f:32:36:1c:09:5d:11:c7:75:d7:e9:fa:64:3b:b2:f8:e1:57: 9f:7c:37:38 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUXvKQHVn8q/bIb95OuUWY4SxaTn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjA0MjIxNDA3MjBaFw0yNzA0MjExNDEyMjBaMDMxMTAvBgNV BAMTKEE3NEFBREI3RkMzRTQ5M0NBRjhFMkMyQzE5M0E4NjUyREFGQjdEOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIdNKDgMTJrh9HvzbLL7W3AQJ8 zyM3LkTki8QNCVGUwoN4I/z7S6XrrYCyY1VU7X2OZgtza1oRpDR8SJY8Gd91F8y/ K1PhR6jZAS0oDPsCFCUlCVEc7CGsGCgBG3Iai9N+jTiMLgcpJ+vIYvxKTdnFftrg DaHGssgeQoE6LNcgHo+ojhRxkNJcA282+f6Eq7MVa+4CzIjP/+p8aw89axV6DJYF eugaxgKO4J4YRVQhe3aM7/Ty/36HIkCaO5tyBgaFSmSnhcLQ8ji7Av7tYWbDMfei X4hJ0wp82TDPAYDVSCcg8SDm3s7c0PPRKFmHfs3IMnqTeZyQzFwaV9cnZZqRAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUp0qtt/w+STyvjiwsGTqGUtr7fY8wHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ2Nzk5MTA1LzAvMzEzMjMzMmUzNDM5 MmUzMTM5MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzEzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHsxwjANBgkqhkiG9w0BAQsFAAOCAQEAI5rITTn9za3P4d+oh0suJVe2L1MC Df/uXKNUwpc6l+sWTbcYwLq06pi8js2ji6NohyHiOlfHfX1+2EwlouNNf57eMT5Q 7wDifLDhdro1HF9f9Fz+2jfpBqxP5PPLHIZ6QPGMK9e8GUAgfUzNDotf2fmr64XV 3QTDZQWrzb63oinGres3cke+wfjAw9YgKqrGsnXE+HKDoqWzx0ZgeQ5U+BnIBivS glMKfJsSLzTbh2pT3dwshOHWCX0j2qlPviwSSXQ7z9Q0ORfjc7ULy2uRBgNjTl6I lur2zTdRsy4hqtTZSMI3ezBwiZ49fzI2HAldEcd11+n6ZDuy+OFXn3w3OA== -----END CERTIFICATE-----Generated at Mon Apr 27 08:24:34 2026 by rpki-client