$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3230302e302f32342d3234203d3e203633363431.roa File: 3132332e34392e3230302e302f32342d3234203d3e203633363431.roa (raw, json) Hash identifier: btGZoGUti2/phtF2NL8rdYP/H5jtLLR1L1Feqn5ELiY= Subject key identifier: C1:C9:96:3C:17:12:31:CF:64:B7:EA:9F:35:83:84:EE:65:B8:62:45 Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 3B31DF2A7B0CE6D3CC4ABEBBC8AFDAE07355BEB9 Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3230302e302f32342d3234203d3e203633363431.roa Signing time: Wed 22 Apr 2026 14:14:28 +0000 ROA not before: Wed 22 Apr 2026 14:09:28 +0000 ROA not after: Wed 21 Apr 2027 14:14:28 +0000 asID: 63641 IP address blocks: 123.49.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 10:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:31:df:2a:7b:0c:e6:d3:cc:4a:be:bb:c8:af:da:e0:73:55:be:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Apr 22 14:09:28 2026 GMT Not After : Apr 21 14:14:28 2027 GMT Subject: CN=C1C9963C171231CF64B7EA9F358384EE65B86245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c0:c4:95:f3:ea:cf:57:96:be:f7:1a:2f:42: f6:bb:7a:0d:18:a9:1c:4d:6e:f4:80:f0:c2:ac:8c: 6f:76:37:67:5d:df:f6:4c:72:e8:c1:50:3e:6a:b2: b1:2b:1a:c2:ae:f0:3e:fb:97:15:e7:3f:58:6f:06: 26:36:7f:ba:01:81:ec:03:52:25:32:da:ef:49:1c: d0:35:51:1a:85:d7:a9:40:03:7f:7c:be:01:cb:55: a0:bb:05:56:3a:06:9e:07:b5:59:1f:77:bb:ca:72: c8:89:9d:36:54:96:91:52:a9:44:41:40:70:f2:34: 5e:99:4e:ce:0a:96:4b:fd:38:cf:03:67:50:41:22: 24:a4:83:93:13:f8:6f:cc:92:f2:ee:6c:e8:93:d7: 15:0b:53:37:91:4e:dc:21:21:c5:66:51:b8:a2:f4: ee:ce:ee:68:8b:09:6a:40:cb:04:32:c1:b0:b5:35: 14:50:90:00:87:75:c9:14:ed:dd:cc:6f:ee:ca:b7: a6:33:68:99:91:60:bc:54:d6:f9:fe:3e:2e:1d:0c: 6a:30:8f:4b:51:13:d0:58:e5:68:d6:5e:bc:ae:d7: 0e:d0:38:23:99:20:c9:51:9b:2f:e3:9a:55:19:2b: 1b:3c:0a:ac:89:a0:0d:2f:4f:a6:26:b1:1a:9a:0b: 9b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C9:96:3C:17:12:31:CF:64:B7:EA:9F:35:83:84:EE:65:B8:62:45 X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3230302e302f32342d3234203d3e203633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.49.200.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:12:24:a5:93:fa:bd:6f:2b:8c:cf:23:b3:4e:22:7f:93:22: 2e:cc:a5:d0:6c:e9:45:de:43:b8:ae:f9:a1:fe:77:7a:f2:43: aa:66:e0:34:67:aa:a9:7f:d7:61:c4:1e:c3:e7:06:39:3d:42: e1:78:6e:38:b4:8b:b6:d8:43:53:ec:f9:b5:53:fd:15:47:ca: 24:95:f7:3f:c3:72:83:c1:3d:31:03:83:bc:93:52:45:0b:25: b9:68:19:d3:01:ca:1d:e8:e9:d5:52:15:ad:6b:47:e1:2d:3e: 8f:99:71:42:af:c7:b8:4c:2d:fe:15:e1:73:41:58:7c:48:89: 25:a5:f6:a8:8c:fd:fc:97:2f:e5:48:a8:79:65:1a:ed:f1:c9: 68:cc:e4:d7:31:13:21:6a:7e:0c:4e:a3:e7:70:54:b6:30:4b: e5:75:9c:a8:16:37:e9:ed:76:eb:51:c1:65:2f:8e:d7:46:e8: 47:d4:08:0a:84:e6:be:b0:a1:be:ef:4d:45:ac:10:14:9f:a0: 36:82:75:ca:90:fb:d4:1b:a4:f9:1e:8a:3d:3c:58:71:cc:0b: 33:83:19:21:0b:30:d1:08:3d:74:7d:b1:79:59:7e:63:ce:9d: 76:76:e2:e8:33:5b:fd:55:4e:9f:3f:e3:7b:80:a7:84:6f:78: 11:60:3b:b0 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUOzHfKnsM5tPMSr67yK/a4HNVvrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjA0MjIxNDA5MjhaFw0yNzA0MjExNDE0MjhaMDMxMTAvBgNV BAMTKEMxQzk5NjNDMTcxMjMxQ0Y2NEI3RUE5RjM1ODM4NEVFNjVCODYyNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtwMSV8+rPV5a+9xovQva7eg0Y qRxNbvSA8MKsjG92N2dd3/ZMcujBUD5qsrErGsKu8D77lxXnP1hvBiY2f7oBgewD UiUy2u9JHNA1URqF16lAA398vgHLVaC7BVY6Bp4HtVkfd7vKcsiJnTZUlpFSqURB QHDyNF6ZTs4Klkv9OM8DZ1BBIiSkg5MT+G/MkvLubOiT1xULUzeRTtwhIcVmUbii 9O7O7miLCWpAywQywbC1NRRQkACHdckU7d3Mb+7Kt6YzaJmRYLxU1vn+Pi4dDGow j0tRE9BY5WjWXryu1w7QOCOZIMlRmy/jmlUZKxs8CqyJoA0vT6YmsRqaC5upAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUwcmWPBcSMc9kt+qfNYOE7mW4YkUwHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzMxMzIzMzJlMzQz OTJlMzIzMDMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHsxyDANBgkqhkiG9w0BAQsFAAOCAQEAjhIkpZP6vW8rjM8js04if5Mi Lsyl0GzpRd5DuK75of53evJDqmbgNGeqqX/XYcQew+cGOT1C4XhuOLSLtthDU+z5 tVP9FUfKJJX3P8Nyg8E9MQODvJNSRQsluWgZ0wHKHejp1VIVrWtH4S0+j5lxQq/H uEwt/hXhc0FYfEiJJaX2qIz9/Jcv5UioeWUa7fHJaMzk1zETIWp+DE6j53BUtjBL 5XWcqBY36e1261HBZS+O10boR9QICoTmvrChvu9NRawQFJ+gNoJ1ypD71Buk+R6K PTxYccwLM4MZIQsw0Qg9dH2xeVl+Y86ddnbi6DNb/VVOnz/je4CnhG94EWA7sA== -----END CERTIFICATE-----Generated at Mon Apr 27 11:06:07 2026 by rpki-client