$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3230352e302f32342d3234203d3e203633363431.roa File: 3132332e34392e3230352e302f32342d3234203d3e203633363431.roa (raw, json) Hash identifier: 8SIWJaav51zQhDzUVhXWyXNACL1/r1M8nUNNxcSkRLU= Subject key identifier: 47:5E:DA:3E:37:EC:46:E6:C6:E7:5A:AD:ED:1C:5E:9F:E6:6A:E8:E4 Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 5F4D6FA8BB04628F8CBCBF0EE370B7A9860FC3E0 Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3230352e302f32342d3234203d3e203633363431.roa Signing time: Wed 22 Apr 2026 14:15:56 +0000 ROA not before: Wed 22 Apr 2026 14:10:56 +0000 ROA not after: Wed 21 Apr 2027 14:15:56 +0000 asID: 63641 IP address blocks: 123.49.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 10:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:4d:6f:a8:bb:04:62:8f:8c:bc:bf:0e:e3:70:b7:a9:86:0f:c3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Apr 22 14:10:56 2026 GMT Not After : Apr 21 14:15:56 2027 GMT Subject: CN=475EDA3E37EC46E6C6E75AADED1C5E9FE66AE8E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3c:b8:ee:b2:a3:17:0b:d7:85:62:49:e9:76: 93:3f:09:2c:29:46:83:fb:b4:ee:c8:ef:64:a1:8d: b9:5d:23:c1:03:9b:42:3c:29:43:68:57:c4:c7:08: c7:f7:e9:a6:90:a2:cd:f3:bb:8b:eb:bc:5e:fa:37: 3b:7d:7c:8d:be:0b:a8:b7:48:08:b3:db:65:1f:2b: 89:30:d8:b0:d8:21:30:6f:05:a2:9e:d3:24:e4:de: 7a:b3:ce:91:bb:fc:8d:f9:8b:cb:67:33:1c:fd:f1: bc:0d:af:f5:68:eb:6c:6f:b8:84:18:ee:fa:7b:0c: 4e:87:46:f6:50:d2:eb:f1:b1:65:f9:89:d0:3c:69: c8:1e:2f:51:bf:50:34:87:44:9f:31:de:92:2a:48: 49:7f:d1:68:58:22:55:f9:39:8e:ee:3d:e1:c8:21: 11:13:e5:1d:f4:ee:a5:26:0e:b3:06:47:88:0a:b9: 1a:19:73:ec:0b:b8:09:4d:75:ee:8b:9c:4b:6a:30: d7:a1:47:89:9e:08:2a:65:0f:ac:87:41:22:a0:c7: 6b:53:28:98:d7:d9:19:f6:62:3f:e8:48:76:b9:a8: 06:b7:bc:e7:14:13:3e:bd:09:41:b6:ec:a0:40:1e: da:e1:f5:07:6e:19:69:c6:c9:19:08:73:b4:c5:32: a3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:5E:DA:3E:37:EC:46:E6:C6:E7:5A:AD:ED:1C:5E:9F:E6:6A:E8:E4 X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3230352e302f32342d3234203d3e203633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.49.205.0/24 Signature Algorithm: sha256WithRSAEncryption 16:ac:e3:ec:44:8e:98:99:1a:98:6b:11:82:1a:93:60:ff:b0: 72:d2:70:d7:59:fa:65:ad:59:1b:60:4a:43:e3:da:0d:3c:9c: 7c:65:0d:f2:c8:d7:ae:67:4d:03:34:44:60:d9:fb:36:00:f2: 60:e6:67:d0:6b:7f:94:a2:3d:4b:be:1e:37:94:16:f0:74:02: 63:43:fc:7c:b9:5e:43:b9:ca:9f:2b:52:20:7a:51:c8:7b:b9: 10:22:23:0f:a7:db:f6:e0:74:a5:d2:3a:a7:28:e0:05:6c:ac: 4e:d5:12:0a:b9:94:14:42:26:74:53:0a:f5:f7:c8:ba:bb:23: 76:50:b6:ec:76:74:76:7a:d6:06:b0:c5:ab:8c:12:13:61:3f: f1:24:c2:6e:46:63:25:cc:4a:9a:c5:89:d7:b9:b2:c9:0b:77: 37:f0:86:47:a3:39:e8:4c:ff:0e:83:cd:f4:d5:69:02:eb:61: e9:d8:7c:14:f6:ad:b3:19:81:3d:99:54:58:57:8b:b3:ee:b7: c4:12:73:12:1a:e8:ce:36:41:11:cc:43:cf:45:9f:36:da:b2: 69:f9:be:b9:ab:7d:dd:70:44:7b:ff:20:85:80:a6:69:b7:65: 66:f4:1a:6a:59:b5:e6:94:26:b6:03:ab:89:8c:3e:ec:48:c5: f5:9b:3a:11 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUX01vqLsEYo+MvL8O43C3qYYPw+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjA0MjIxNDEwNTZaFw0yNzA0MjExNDE1NTZaMDMxMTAvBgNV BAMTKDQ3NUVEQTNFMzdFQzQ2RTZDNkU3NUFBREVEMUM1RTlGRTY2QUU4RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6PLjusqMXC9eFYknpdpM/CSwp RoP7tO7I72ShjbldI8EDm0I8KUNoV8THCMf36aaQos3zu4vrvF76Nzt9fI2+C6i3 SAiz22UfK4kw2LDYITBvBaKe0yTk3nqzzpG7/I35i8tnMxz98bwNr/Vo62xvuIQY 7vp7DE6HRvZQ0uvxsWX5idA8acgeL1G/UDSHRJ8x3pIqSEl/0WhYIlX5OY7uPeHI IRET5R307qUmDrMGR4gKuRoZc+wLuAlNde6LnEtqMNehR4meCCplD6yHQSKgx2tT KJjX2Rn2Yj/oSHa5qAa3vOcUEz69CUG27KBAHtrh9QduGWnGyRkIc7TFMqMdAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUR17aPjfsRubG51qt7Rxen+Zq6OQwHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzMxMzIzMzJlMzQz OTJlMzIzMDM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHsxzTANBgkqhkiG9w0BAQsFAAOCAQEAFqzj7ESOmJkamGsRghqTYP+w ctJw11n6Za1ZG2BKQ+PaDTycfGUN8sjXrmdNAzREYNn7NgDyYOZn0Gt/lKI9S74e N5QW8HQCY0P8fLleQ7nKnytSIHpRyHu5ECIjD6fb9uB0pdI6pyjgBWysTtUSCrmU FEImdFMK9ffIursjdlC27HZ0dnrWBrDFq4wSE2E/8STCbkZjJcxKmsWJ17myyQt3 N/CGR6M56Ez/DoPN9NVpAuth6dh8FPatsxmBPZlUWFeLs+63xBJzEhrozjZBEcxD z0WfNtqyafm+uat93XBEe/8ghYCmabdlZvQaalm15pQmtgOriYw+7EjF9Zs6EQ== -----END CERTIFICATE-----Generated at Mon Apr 27 11:06:07 2026 by rpki-client