$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139382e302f32342d3234203d3e203633363431.roa File: 3132332e34392e3139382e302f32342d3234203d3e203633363431.roa (raw, json) Hash identifier: m4c/8OPS2G/2mASy1kflRJ5CZtfDGAkc49FrYz68Z/g= Subject key identifier: A6:2C:59:87:60:16:B8:E8:A7:DD:E0:9D:A1:8C:5B:60:DE:C2:5D:AD Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 3A48C68508D99D3B295363BCD008B2BCD9C5F0C8 Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139382e302f32342d3234203d3e203633363431.roa Signing time: Wed 22 Apr 2026 14:13:57 +0000 ROA not before: Wed 22 Apr 2026 14:08:57 +0000 ROA not after: Wed 21 Apr 2027 14:13:57 +0000 asID: 63641 IP address blocks: 123.49.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 10:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:48:c6:85:08:d9:9d:3b:29:53:63:bc:d0:08:b2:bc:d9:c5:f0:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Apr 22 14:08:57 2026 GMT Not After : Apr 21 14:13:57 2027 GMT Subject: CN=A62C59876016B8E8A7DDE09DA18C5B60DEC25DAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2a:9c:0f:1e:92:bf:d8:32:ee:e4:60:aa:0b: 67:69:f4:39:8a:14:06:33:1f:89:35:b5:6f:a1:9d: 31:1d:ed:55:7c:c5:67:ce:7b:aa:b2:3d:58:ed:0d: cb:c8:18:3d:fc:97:bc:7b:f1:a3:9a:ec:cd:3f:de: c1:a5:be:d8:b9:48:af:e2:df:13:ba:20:0a:55:a3: 30:b5:bb:6d:e3:ff:d2:47:25:26:8e:c8:5b:2e:7a: 65:c4:be:d5:92:b0:60:e6:a0:79:99:50:98:43:a9: 24:18:9b:1b:bc:91:ef:4a:ca:ea:e0:af:4d:78:8e: 23:a3:51:92:07:f2:25:a7:05:b4:01:7e:5e:f8:eb: 78:30:dd:71:88:a4:e5:4e:c2:fc:65:c6:ec:7e:40: cd:e3:71:26:e7:cf:fd:19:71:36:0c:19:23:be:cb: 2d:d9:c3:03:1b:51:7d:4e:ac:59:05:e3:73:1d:e9: 7c:a8:1c:e0:b9:2e:34:20:20:57:a3:a7:9a:dc:57: 7e:b1:8c:cf:d7:1b:32:9c:1f:3a:4d:60:e7:32:52: 0d:39:f4:41:94:4b:f1:4c:ad:e9:f2:48:17:f2:4f: d4:ad:f2:d5:1d:22:41:56:db:aa:cf:e3:01:06:0b: 91:9b:f7:35:f3:dc:36:66:97:1a:18:15:a9:9c:4f: bd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:2C:59:87:60:16:B8:E8:A7:DD:E0:9D:A1:8C:5B:60:DE:C2:5D:AD X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139382e302f32342d3234203d3e203633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.49.198.0/24 Signature Algorithm: sha256WithRSAEncryption d8:5e:18:01:4c:40:73:bd:d5:4c:b7:2b:ae:94:d2:d7:25:d5: 7d:10:82:e5:89:8d:99:9c:86:3d:6b:92:dc:a4:73:a4:ee:ca: 0c:a3:78:6b:68:ce:ec:e5:48:2f:49:6f:0b:88:85:be:02:56: 7e:5f:97:7c:01:db:f4:92:41:eb:fc:1a:34:8c:c4:6d:65:e6: ff:4b:4c:53:ff:6d:9f:8a:ad:03:e8:9b:00:ae:7d:a4:d1:6e: 4e:93:8f:a2:34:cb:44:94:8f:b7:6e:03:65:b9:c3:e4:72:f9: 62:34:5f:97:c7:0d:84:47:2e:06:41:70:f7:09:d1:68:6c:60: 18:fc:6f:a6:db:96:a3:2b:4c:97:e2:75:6d:03:d9:1f:8c:98: f6:60:e5:e4:bc:df:ca:4d:7b:07:ba:5b:82:7e:a3:29:10:82: 51:fe:4e:50:c7:64:c1:54:0a:8c:72:10:5f:be:d9:43:40:b5: b9:d4:f0:5d:aa:0e:88:d9:0b:67:d2:72:77:8d:95:6a:8b:86: 19:a3:4a:1f:1d:e3:97:01:1b:76:48:57:5c:02:3b:af:f3:ec: d5:ac:f9:dd:f3:e4:26:6b:7d:22:1f:d3:d4:fc:2c:eb:eb:e9: 96:72:f2:24:f0:e4:01:57:e4:bd:d0:1a:78:d8:e9:81:26:4b: af:41:1a:13 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUOkjGhQjZnTspU2O80AiyvNnF8MgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjA0MjIxNDA4NTdaFw0yNzA0MjExNDEzNTdaMDMxMTAvBgNV BAMTKEE2MkM1OTg3NjAxNkI4RThBN0RERTA5REExOEM1QjYwREVDMjVEQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0KpwPHpK/2DLu5GCqC2dp9DmK FAYzH4k1tW+hnTEd7VV8xWfOe6qyPVjtDcvIGD38l7x78aOa7M0/3sGlvti5SK/i 3xO6IApVozC1u23j/9JHJSaOyFsuemXEvtWSsGDmoHmZUJhDqSQYmxu8ke9Kyurg r014jiOjUZIH8iWnBbQBfl7463gw3XGIpOVOwvxlxux+QM3jcSbnz/0ZcTYMGSO+ yy3ZwwMbUX1OrFkF43Md6XyoHOC5LjQgIFejp5rcV36xjM/XGzKcHzpNYOcyUg05 9EGUS/FMrenySBfyT9St8tUdIkFW26rP4wEGC5Gb9zXz3DZmlxoYFamcT72fAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUpixZh2AWuOin3eCdoYxbYN7CXa0wHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzMxMzIzMzJlMzQz OTJlMzEzOTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHsxxjANBgkqhkiG9w0BAQsFAAOCAQEA2F4YAUxAc73VTLcrrpTS1yXV fRCC5YmNmZyGPWuS3KRzpO7KDKN4a2jO7OVIL0lvC4iFvgJWfl+XfAHb9JJB6/wa NIzEbWXm/0tMU/9tn4qtA+ibAK59pNFuTpOPojTLRJSPt24DZbnD5HL5YjRfl8cN hEcuBkFw9wnRaGxgGPxvptuWoytMl+J1bQPZH4yY9mDl5Lzfyk17B7pbgn6jKRCC Uf5OUMdkwVQKjHIQX77ZQ0C1udTwXaoOiNkLZ9Jyd42VaouGGaNKHx3jlwEbdkhX XAI7r/Ps1az53fPkJmt9Ih/T1Pws6+vplnLyJPDkAVfkvdAaeNjpgSZLr0EaEw== -----END CERTIFICATE-----Generated at Mon Apr 27 11:07:23 2026 by rpki-client