$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3230362e302f32342d3234203d3e203633363431.roa File: 3132332e34392e3230362e302f32342d3234203d3e203633363431.roa (raw, json) Hash identifier: R41JvT9LEEMSAT7W6PRAdMFYi4KERcYGJdot3sgZm8s= Subject key identifier: 89:16:83:08:A5:F9:81:15:74:C4:84:B2:80:25:77:D9:DE:24:30:92 Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 3E3B430103FC798D1A12CDDA6E3E89097D2A56F2 Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3230362e302f32342d3234203d3e203633363431.roa Signing time: Wed 22 Apr 2026 14:16:12 +0000 ROA not before: Wed 22 Apr 2026 14:11:12 +0000 ROA not after: Wed 21 Apr 2027 14:16:12 +0000 asID: 63641 IP address blocks: 123.49.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 10:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:3b:43:01:03:fc:79:8d:1a:12:cd:da:6e:3e:89:09:7d:2a:56:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Apr 22 14:11:12 2026 GMT Not After : Apr 21 14:16:12 2027 GMT Subject: CN=89168308A5F9811574C484B2802577D9DE243092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:68:24:27:19:32:79:74:19:ce:7a:c0:77:f7: 1f:21:1b:3f:a2:f9:ef:5b:48:c6:f1:58:c4:81:a4: f9:4d:67:6e:18:1b:3c:4a:52:30:05:c2:fe:da:16: 77:9c:e4:dd:98:85:61:a2:10:80:1b:ce:7e:bf:78: d0:96:0a:e0:d7:be:99:30:cb:ac:66:16:65:56:91: 99:87:20:43:b3:94:4d:e1:ca:e5:35:90:ab:25:c5: 6d:86:8f:13:e5:51:78:e9:d5:be:f1:6c:51:27:d6: 3e:4a:fa:0e:57:d0:9f:40:12:3c:6b:85:92:1a:b9: 2e:7f:79:11:9e:4e:5a:70:a0:d2:ff:89:f8:22:ba: 5d:b7:b5:9f:61:c8:60:47:86:7e:1a:04:08:d1:a0: c4:32:a0:ec:4f:6b:e9:16:fa:22:af:84:42:19:88: ff:cd:29:5e:b8:8e:04:fb:b9:b5:66:eb:b0:2b:42: b8:43:be:cb:22:45:1b:9e:c2:5c:6b:18:7a:b3:e2: 8b:ca:bb:0f:f3:9d:a2:6a:37:1b:aa:4a:1a:76:76: 4b:88:31:13:45:5b:52:d0:fd:6e:22:70:86:2d:b6: 8c:13:6f:bb:d7:82:a8:91:01:d7:b5:e3:84:7a:7a: 08:4b:4b:a0:a0:a6:48:27:c4:b8:3e:f9:67:2d:30: e7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:16:83:08:A5:F9:81:15:74:C4:84:B2:80:25:77:D9:DE:24:30:92 X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3230362e302f32342d3234203d3e203633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.49.206.0/24 Signature Algorithm: sha256WithRSAEncryption 69:87:b4:cb:84:54:ef:c2:69:24:79:9a:d3:52:6a:86:4f:f3: 83:f6:d5:1c:fa:f7:2c:59:eb:8e:ac:c3:4e:ae:5d:8b:9e:a1: 7d:71:61:a2:b1:9e:88:e4:b9:74:bd:ea:19:38:bc:84:37:f2: ca:b9:17:84:79:cc:b7:98:a2:ab:a8:08:b0:bd:c6:7b:1b:ca: 00:15:f2:78:63:21:84:6e:88:10:90:ff:77:d7:ee:57:0c:79: bf:7c:98:84:7e:32:52:b6:cc:c1:6b:b7:f2:ca:31:41:15:19: a7:6a:a8:1c:7e:d3:0b:c3:5a:6d:5c:7f:c9:7b:ae:2f:17:8d: a8:94:5c:11:67:a2:ab:73:d4:9c:71:6d:7e:9c:d1:58:ae:63: 15:7f:24:6c:eb:9b:3e:5c:ef:98:8a:b9:69:96:d7:d1:58:75: 32:26:4b:04:58:d7:42:dc:21:fd:f9:c8:e2:5b:fd:00:b3:75: 62:16:06:9a:7a:3b:21:2e:a1:80:fa:5c:ca:8e:3a:8b:8b:92: 46:3f:ce:33:22:18:4f:f4:c6:f6:e7:7f:ca:e0:d1:da:c3:af: aa:70:7f:6b:8f:4f:37:b7:04:38:2d:e6:ac:b7:0f:47:7d:a8: 8e:2f:20:5a:be:f9:95:a4:63:1c:21:de:42:6f:97:f5:6a:9e: 81:1c:b5:8b -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUPjtDAQP8eY0aEs3abj6JCX0qVvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjA0MjIxNDExMTJaFw0yNzA0MjExNDE2MTJaMDMxMTAvBgNV BAMTKDg5MTY4MzA4QTVGOTgxMTU3NEM0ODRCMjgwMjU3N0Q5REUyNDMwOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHaCQnGTJ5dBnOesB39x8hGz+i +e9bSMbxWMSBpPlNZ24YGzxKUjAFwv7aFnec5N2YhWGiEIAbzn6/eNCWCuDXvpkw y6xmFmVWkZmHIEOzlE3hyuU1kKslxW2GjxPlUXjp1b7xbFEn1j5K+g5X0J9AEjxr hZIauS5/eRGeTlpwoNL/ifgiul23tZ9hyGBHhn4aBAjRoMQyoOxPa+kW+iKvhEIZ iP/NKV64jgT7ubVm67ArQrhDvssiRRuewlxrGHqz4ovKuw/znaJqNxuqShp2dkuI MRNFW1LQ/W4icIYttowTb7vXgqiRAde144R6eghLS6CgpkgnxLg++WctMOfjAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUiRaDCKX5gRV0xISygCV32d4kMJIwHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzMxMzIzMzJlMzQz OTJlMzIzMDM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHsxzjANBgkqhkiG9w0BAQsFAAOCAQEAaYe0y4RU78JpJHma01Jqhk/z g/bVHPr3LFnrjqzDTq5di56hfXFhorGeiOS5dL3qGTi8hDfyyrkXhHnMt5iiq6gI sL3GexvKABXyeGMhhG6IEJD/d9fuVwx5v3yYhH4yUrbMwWu38soxQRUZp2qoHH7T C8NabVx/yXuuLxeNqJRcEWeiq3PUnHFtfpzRWK5jFX8kbOubPlzvmIq5aZbX0Vh1 MiZLBFjXQtwh/fnI4lv9ALN1YhYGmno7IS6hgPpcyo46i4uSRj/OMyIYT/TG9ud/ yuDR2sOvqnB/a49PN7cEOC3mrLcPR32oji8gWr75laRjHCHeQm+X9WqegRy1iw== -----END CERTIFICATE-----Generated at Mon Apr 27 11:06:07 2026 by rpki-client