$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3230322e302f32342d3234203d3e203633363431.roa File: 3132332e34392e3230322e302f32342d3234203d3e203633363431.roa (raw, json) Hash identifier: 0jzrAbUj6U09MS2pYgbG82lyHmpS4KWEWQBeh8ept5A= Subject key identifier: 7E:C7:13:52:D0:E4:0E:45:3E:33:CA:24:39:B2:37:27:FA:AC:5E:E4 Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 7F7773FE154D06FB25740F40C60D3EC4BC4A22E4 Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3230322e302f32342d3234203d3e203633363431.roa Signing time: Wed 22 Apr 2026 14:15:04 +0000 ROA not before: Wed 22 Apr 2026 14:10:04 +0000 ROA not after: Wed 21 Apr 2027 14:15:04 +0000 asID: 63641 IP address blocks: 123.49.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 10:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:77:73:fe:15:4d:06:fb:25:74:0f:40:c6:0d:3e:c4:bc:4a:22:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Apr 22 14:10:04 2026 GMT Not After : Apr 21 14:15:04 2027 GMT Subject: CN=7EC71352D0E40E453E33CA2439B23727FAAC5EE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f9:6a:21:1c:75:db:d4:bb:22:4c:e0:d2:3a: b3:f1:be:d6:7f:9d:66:01:5f:85:3d:81:9d:0c:a1: 14:dd:b9:07:02:eb:5f:1f:34:03:9d:3a:29:ee:c5: ae:6a:44:d3:15:91:ed:78:9a:66:bc:a4:33:97:98: 8e:18:6f:55:1e:15:19:bc:cc:5c:d0:28:6b:48:fe: 30:bf:25:ae:02:c1:3b:e8:20:69:85:9b:44:56:d1: e9:c5:dc:29:01:60:c2:f2:cd:96:cc:4c:12:18:59: dc:68:78:9d:a5:96:19:26:79:e2:e7:c4:a2:6a:9a: a1:2e:a4:3a:41:d2:2f:1c:61:fa:87:65:ef:4b:a5: 7e:1c:b8:5f:d2:5f:d9:b9:ff:f8:93:7c:bd:23:6c: 90:8a:45:fa:a7:e6:fa:56:74:99:04:1f:f2:ce:53: fe:65:6d:e7:6b:3b:d0:a8:55:9e:c8:61:9e:cf:4a: 81:6a:18:b1:06:d0:3e:1f:71:cf:6e:05:05:0f:42: f1:70:1f:2a:b3:05:0c:b8:69:ea:01:cc:bd:86:0f: 0a:be:5d:b0:5f:28:c8:54:c5:36:25:70:c0:a2:9d: 24:c1:a2:91:8c:d4:50:ca:da:5d:f0:b1:0d:bc:58: 4d:2d:38:45:ac:e3:28:ac:f5:8f:b7:88:7e:9a:fb: 42:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C7:13:52:D0:E4:0E:45:3E:33:CA:24:39:B2:37:27:FA:AC:5E:E4 X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3230322e302f32342d3234203d3e203633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.49.202.0/24 Signature Algorithm: sha256WithRSAEncryption 88:20:12:33:47:b3:3e:d7:23:fa:ed:aa:b5:c9:58:bc:51:07: 81:b9:49:9d:86:6d:9a:ef:f8:23:10:40:e8:67:46:71:6a:98: 1b:9f:1e:f1:b0:57:8e:84:0f:6c:ae:34:40:53:18:1f:6f:17: 79:ca:33:1c:48:2f:f0:9d:c9:c9:28:0b:eb:cb:26:a4:82:ad: 52:6a:42:c0:8f:6a:49:40:7a:99:3b:e5:20:f8:2c:0a:3c:78: b3:a1:01:fa:2c:97:f5:b4:22:db:b7:75:fd:72:57:d1:13:c3: 1f:ee:9c:f1:df:27:b3:88:3f:ea:e8:cc:c5:0c:b6:c7:c1:76: e4:35:ce:b9:26:b2:e9:1e:42:4a:4a:98:3e:98:5d:c7:99:40: 0d:70:7b:5b:a8:79:c9:8b:72:e7:d2:fe:cd:31:8e:4b:99:c3: 68:70:c9:95:6e:7b:e9:f3:77:ee:c9:81:e1:22:11:2a:e3:f9: 13:5a:37:e5:21:55:2c:18:57:7d:4f:0c:b6:29:0e:59:e1:8d: dd:4c:04:21:f8:6b:19:68:5f:68:e7:e2:20:a2:78:99:47:ab: 01:3d:55:03:ae:96:5c:fe:ea:12:48:c5:85:85:d1:d8:68:9b: 14:70:b6:b9:1e:d7:ce:bd:50:01:5f:24:c5:7e:c9:3a:3d:f2: dc:a6:54:47 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUf3dz/hVNBvsldA9Axg0+xLxKIuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjA0MjIxNDEwMDRaFw0yNzA0MjExNDE1MDRaMDMxMTAvBgNV BAMTKDdFQzcxMzUyRDBFNDBFNDUzRTMzQ0EyNDM5QjIzNzI3RkFBQzVFRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb+WohHHXb1LsiTODSOrPxvtZ/ nWYBX4U9gZ0MoRTduQcC618fNAOdOinuxa5qRNMVke14mma8pDOXmI4Yb1UeFRm8 zFzQKGtI/jC/Ja4CwTvoIGmFm0RW0enF3CkBYMLyzZbMTBIYWdxoeJ2llhkmeeLn xKJqmqEupDpB0i8cYfqHZe9LpX4cuF/SX9m5//iTfL0jbJCKRfqn5vpWdJkEH/LO U/5lbedrO9CoVZ7IYZ7PSoFqGLEG0D4fcc9uBQUPQvFwHyqzBQy4aeoBzL2GDwq+ XbBfKMhUxTYlcMCinSTBopGM1FDK2l3wsQ28WE0tOEWs4yis9Y+3iH6a+0I9AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUfscTUtDkDkU+M8okObI3J/qsXuQwHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzMxMzIzMzJlMzQz OTJlMzIzMDMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHsxyjANBgkqhkiG9w0BAQsFAAOCAQEAiCASM0ezPtcj+u2qtclYvFEH gblJnYZtmu/4IxBA6GdGcWqYG58e8bBXjoQPbK40QFMYH28XecozHEgv8J3JySgL 68smpIKtUmpCwI9qSUB6mTvlIPgsCjx4s6EB+iyX9bQi27d1/XJX0RPDH+6c8d8n s4g/6ujMxQy2x8F25DXOuSay6R5CSkqYPphdx5lADXB7W6h5yYty59L+zTGOS5nD aHDJlW576fN37smB4SIRKuP5E1o35SFVLBhXfU8MtikOWeGN3UwEIfhrGWhfaOfi IKJ4mUerAT1VA66WXP7qEkjFhYXR2GibFHC2uR7Xzr1QAV8kxX7JOj3y3KZURw== -----END CERTIFICATE-----Generated at Mon Apr 27 11:07:22 2026 by rpki-client