$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3230382e302f32342d3234203d3e203633363431.roa File: 3132332e34392e3230382e302f32342d3234203d3e203633363431.roa (raw, json) Hash identifier: s/W3bm8CTakiQgdfxdo7wFjCV86OyR3bnDlWrESXNYw= Subject key identifier: 8B:9D:23:7B:D1:41:D4:59:3A:A9:D2:EA:78:46:9B:57:89:D7:11:41 Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 53C282CE8FB008CC26A6D1EDAF1EAAED11F37E14 Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3230382e302f32342d3234203d3e203633363431.roa Signing time: Wed 22 Apr 2026 14:16:47 +0000 ROA not before: Wed 22 Apr 2026 14:11:47 +0000 ROA not after: Wed 21 Apr 2027 14:16:47 +0000 asID: 63641 IP address blocks: 123.49.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 10:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:c2:82:ce:8f:b0:08:cc:26:a6:d1:ed:af:1e:aa:ed:11:f3:7e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Apr 22 14:11:47 2026 GMT Not After : Apr 21 14:16:47 2027 GMT Subject: CN=8B9D237BD141D4593AA9D2EA78469B5789D71141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7d:8f:23:86:db:de:b9:2f:7e:78:db:87:fd: 4c:0d:80:b9:c0:92:fc:52:76:4c:44:3c:21:91:ab: 9e:e3:bd:7e:03:4a:78:20:f2:9e:06:f0:4a:fd:54: a1:21:e4:8f:ad:cd:93:b6:b5:f2:cb:17:3e:0b:42: 47:48:47:93:80:37:2b:d1:5f:11:84:f9:d0:b6:be: 7e:10:b5:a8:c3:87:c2:da:48:9b:94:cc:a0:60:8f: a6:21:b2:ca:ef:1f:b3:d1:cd:7e:07:60:e1:dd:51: ce:26:9b:07:34:9f:c1:7b:35:1b:da:d3:43:c4:16: 1a:38:bc:51:25:36:56:c5:25:16:c1:2c:2c:c4:5d: 2c:8d:41:b9:95:2d:4c:a6:96:0c:b6:e7:d0:c8:a9: 2e:f7:fe:6a:52:83:9c:26:87:1e:3e:fe:f4:dd:4d: b6:5d:12:1c:13:cf:ee:7a:f1:60:9d:e9:7f:ca:b4: 4c:e6:c7:d9:5c:3b:35:e9:ed:c9:30:34:5f:22:f2: 0a:f4:fd:e6:f3:db:93:8e:6c:e9:3c:c0:67:d6:9f: dc:d8:1d:89:be:f4:46:b4:4b:59:9e:ea:c2:2f:a8: c0:2d:e3:63:cc:56:a5:8a:39:be:c7:df:a6:37:51: 9d:d1:61:0b:ea:15:3d:fc:c9:03:37:dc:07:e6:d9: b0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:9D:23:7B:D1:41:D4:59:3A:A9:D2:EA:78:46:9B:57:89:D7:11:41 X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3230382e302f32342d3234203d3e203633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.49.208.0/24 Signature Algorithm: sha256WithRSAEncryption cc:44:58:8f:ea:38:d3:a6:73:ea:fc:0f:f9:98:e3:ac:0e:ec: e6:6f:0c:7d:06:11:81:58:88:6b:5b:d5:50:f1:ef:7d:7d:6c: 7f:19:b1:86:cb:e8:46:05:91:19:56:9c:8b:b0:d2:0b:fb:f2: 06:5c:5f:4d:43:1a:d0:10:f6:1b:8f:cf:94:0e:1d:8e:cd:e3: d1:c1:76:7c:2b:97:70:bd:99:94:e0:16:e0:95:bf:d8:34:64: e0:4e:bb:ad:b9:52:19:92:5d:8f:51:47:f5:85:dc:66:7a:5e: 13:ea:48:03:1f:42:11:38:9c:a3:5f:a6:29:20:f4:03:20:1e: 46:48:f8:e1:da:28:5a:32:14:1b:92:81:3a:9b:e7:f6:b4:60: 81:69:26:11:c6:8d:f5:76:7b:ab:e6:d7:a0:84:f3:dd:9f:54: 9e:ba:fa:a3:a4:dc:fc:6e:e9:89:ae:a2:66:74:6a:22:29:c1: 01:14:b3:26:c5:20:4b:7c:80:e7:2c:c1:96:37:7f:20:ab:b1: 6f:39:7d:99:27:4d:a9:77:26:f0:22:02:9c:9b:ee:fd:98:c9: 3a:2c:9e:b5:29:38:73:5e:68:ba:a7:94:9c:ed:cf:cd:2b:96: 8a:d7:ef:ff:01:f5:0c:e8:8d:bc:39:b2:16:ab:11:01:1e:b7: f4:27:2d:c0 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUU8KCzo+wCMwmptHtrx6q7RHzfhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjA0MjIxNDExNDdaFw0yNzA0MjExNDE2NDdaMDMxMTAvBgNV BAMTKDhCOUQyMzdCRDE0MUQ0NTkzQUE5RDJFQTc4NDY5QjU3ODlENzExNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClfY8jhtveuS9+eNuH/UwNgLnA kvxSdkxEPCGRq57jvX4DSngg8p4G8Er9VKEh5I+tzZO2tfLLFz4LQkdIR5OANyvR XxGE+dC2vn4QtajDh8LaSJuUzKBgj6YhssrvH7PRzX4HYOHdUc4mmwc0n8F7NRva 00PEFho4vFElNlbFJRbBLCzEXSyNQbmVLUymlgy259DIqS73/mpSg5wmhx4+/vTd TbZdEhwTz+568WCd6X/KtEzmx9lcOzXp7ckwNF8i8gr0/ebz25OObOk8wGfWn9zY HYm+9Ea0S1me6sIvqMAt42PMVqWKOb7H36Y3UZ3RYQvqFT38yQM33Afm2bD9AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUi50je9FB1Fk6qdLqeEabV4nXEUEwHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzMxMzIzMzJlMzQz OTJlMzIzMDM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHsx0DANBgkqhkiG9w0BAQsFAAOCAQEAzERYj+o406Zz6vwP+ZjjrA7s 5m8MfQYRgViIa1vVUPHvfX1sfxmxhsvoRgWRGVaci7DSC/vyBlxfTUMa0BD2G4/P lA4djs3j0cF2fCuXcL2ZlOAW4JW/2DRk4E67rblSGZJdj1FH9YXcZnpeE+pIAx9C ETico1+mKSD0AyAeRkj44dooWjIUG5KBOpvn9rRggWkmEcaN9XZ7q+bXoITz3Z9U nrr6o6Tc/G7pia6iZnRqIinBARSzJsUgS3yA5yzBljd/IKuxbzl9mSdNqXcm8CIC nJvu/ZjJOiyetSk4c15ouqeUnO3PzSuWitfv/wH1DOiNvDmyFqsRAR639CctwA== -----END CERTIFICATE-----Generated at Mon Apr 27 11:06:28 2026 by rpki-client