$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139392e302f32342d3234203d3e203633363431.roa File: 3132332e34392e3139392e302f32342d3234203d3e203633363431.roa (raw, json) Hash identifier: uuyT9S+shdfgU2+GQPCaddOpB3+yrP3MOjBG7EyNAp0= Subject key identifier: 24:36:60:D8:6F:4F:E1:66:7B:33:2F:4A:A1:1F:FA:85:33:08:E8:71 Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 7F19FBD1EEFF59BDBEFC7BCF7E80A7A5AC8B1DA2 Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139392e302f32342d3234203d3e203633363431.roa Signing time: Wed 22 Apr 2026 14:14:11 +0000 ROA not before: Wed 22 Apr 2026 14:09:11 +0000 ROA not after: Wed 21 Apr 2027 14:14:11 +0000 asID: 63641 IP address blocks: 123.49.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 10:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:19:fb:d1:ee:ff:59:bd:be:fc:7b:cf:7e:80:a7:a5:ac:8b:1d:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Apr 22 14:09:11 2026 GMT Not After : Apr 21 14:14:11 2027 GMT Subject: CN=243660D86F4FE1667B332F4AA11FFA853308E871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:eb:18:2a:91:5d:38:66:ef:6e:86:26:04:28: 69:de:89:1f:c6:75:da:10:bb:7e:8b:51:6a:32:85: f5:40:c5:8d:16:a7:c5:6f:51:1f:28:fb:d1:d9:b9: 35:0a:33:4f:2e:30:62:db:ee:e5:40:c9:fa:75:57: 6d:61:df:1a:b7:aa:38:33:67:c3:b7:07:9f:af:9a: 93:88:50:d8:2a:ab:22:c8:c7:0b:bd:39:25:ed:b1: 02:fc:ab:d1:30:25:98:42:bc:fa:dd:3a:a9:4e:9d: 81:fa:da:e4:74:dd:b1:69:fa:6b:ae:13:8a:c2:a3: 9c:06:06:06:29:c1:e8:33:9e:21:92:ac:69:5e:dc: 98:70:88:27:2b:2a:a5:78:8f:7d:92:89:10:71:46: 8e:65:ef:0a:88:f8:75:8b:2b:45:ea:d3:0b:e8:37: db:86:38:1c:b0:bd:b5:83:e1:0c:df:d4:18:b4:5c: f7:df:c7:14:7b:e2:53:33:5a:63:7f:5a:8d:06:ab: 09:3f:e7:b5:37:e8:c2:8f:b5:e5:49:64:d2:c3:f8: ba:f4:77:2b:9f:cc:c5:95:0f:92:da:5e:c9:aa:40: ca:23:6b:75:90:b0:ff:cb:eb:1f:1f:46:f7:d6:a5: df:b3:d3:ec:a0:49:e0:24:40:66:68:6a:6f:28:b5: 8e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:36:60:D8:6F:4F:E1:66:7B:33:2F:4A:A1:1F:FA:85:33:08:E8:71 X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139392e302f32342d3234203d3e203633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.49.199.0/24 Signature Algorithm: sha256WithRSAEncryption 72:e5:cd:e8:de:37:1c:00:aa:fc:2e:54:cf:c8:15:96:38:05: 2f:c7:3e:f4:be:b2:de:1d:7d:91:c0:12:20:f2:a9:a6:e9:7b: d5:40:23:39:9d:77:7d:87:00:65:86:dc:5d:21:c6:ad:10:33: 8e:90:af:35:f2:69:50:0c:5e:b4:9f:4c:14:2e:b2:c1:1c:b8: 99:83:a6:00:4e:e4:ed:4a:72:39:9c:a1:34:b4:57:56:77:47: c8:56:d7:27:d2:95:38:e2:0b:5b:05:cc:7a:63:61:8f:e0:68: 99:a6:4c:19:03:91:34:d8:a8:c7:81:dc:35:89:9c:90:8a:50: 8d:5c:34:77:28:cc:94:7a:03:a0:61:db:7d:95:e4:49:c7:89: 87:37:cf:df:a8:e7:41:0c:a7:18:a8:18:d9:c4:4c:22:b8:10: d2:ce:16:8c:a9:09:30:b1:69:33:6a:3a:9c:55:3d:75:fb:6b: e1:e5:28:2a:e7:85:54:e5:0c:65:07:cb:c2:ac:62:25:2c:57: 2a:f2:4b:70:0e:e9:4f:be:5e:b6:e2:4f:be:cd:f0:5a:f9:a7: 7c:3d:09:e9:d7:ac:c7:0f:c0:7e:4f:21:b9:47:0f:42:db:c7: 06:ad:06:5a:74:98:5c:f8:c7:e3:ae:ea:55:2a:69:00:47:c1: 3f:2e:da:f8 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUfxn70e7/Wb2+/HvPfoCnpayLHaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjA0MjIxNDA5MTFaFw0yNzA0MjExNDE0MTFaMDMxMTAvBgNV BAMTKDI0MzY2MEQ4NkY0RkUxNjY3QjMzMkY0QUExMUZGQTg1MzMwOEU4NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo6xgqkV04Zu9uhiYEKGneiR/G ddoQu36LUWoyhfVAxY0Wp8VvUR8o+9HZuTUKM08uMGLb7uVAyfp1V21h3xq3qjgz Z8O3B5+vmpOIUNgqqyLIxwu9OSXtsQL8q9EwJZhCvPrdOqlOnYH62uR03bFp+muu E4rCo5wGBgYpwegzniGSrGle3JhwiCcrKqV4j32SiRBxRo5l7wqI+HWLK0Xq0wvo N9uGOBywvbWD4Qzf1Bi0XPffxxR74lMzWmN/Wo0Gqwk/57U36MKPteVJZNLD+Lr0 dyufzMWVD5LaXsmqQMoja3WQsP/L6x8fRvfWpd+z0+ygSeAkQGZoam8otY6TAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUJDZg2G9P4WZ7My9KoR/6hTMI6HEwHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzMxMzIzMzJlMzQz OTJlMzEzOTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHsxxzANBgkqhkiG9w0BAQsFAAOCAQEAcuXN6N43HACq/C5Uz8gVljgF L8c+9L6y3h19kcASIPKppul71UAjOZ13fYcAZYbcXSHGrRAzjpCvNfJpUAxetJ9M FC6ywRy4mYOmAE7k7UpyOZyhNLRXVndHyFbXJ9KVOOILWwXMemNhj+BomaZMGQOR NNiox4HcNYmckIpQjVw0dyjMlHoDoGHbfZXkSceJhzfP36jnQQynGKgY2cRMIrgQ 0s4WjKkJMLFpM2o6nFU9dftr4eUoKueFVOUMZQfLwqxiJSxXKvJLcA7pT75etuJP vs3wWvmnfD0J6desxw/Afk8huUcPQtvHBq0GWnSYXPjH467qVSppAEfBPy7a+A== -----END CERTIFICATE-----Generated at Mon Apr 27 11:07:22 2026 by rpki-client