$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3231372e302f32342d3234203d3e203633363431.roa File: 3132332e34392e3231372e302f32342d3234203d3e203633363431.roa (raw, json) Hash identifier: /vtp6ua2XZrRffwv4hkHSGBHMB7rRJs9e31NYRWGfL8= Subject key identifier: DE:DD:4F:50:CA:86:01:6D:86:A4:EC:BA:1A:31:63:93:63:0C:3D:53 Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 2ADFF9D26FD12DD4B3802087DE31B59B44726F00 Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3231372e302f32342d3234203d3e203633363431.roa Signing time: Wed 22 Apr 2026 14:19:22 +0000 ROA not before: Wed 22 Apr 2026 14:14:22 +0000 ROA not after: Wed 21 Apr 2027 14:19:22 +0000 asID: 63641 IP address blocks: 123.49.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 10:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:df:f9:d2:6f:d1:2d:d4:b3:80:20:87:de:31:b5:9b:44:72:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Apr 22 14:14:22 2026 GMT Not After : Apr 21 14:19:22 2027 GMT Subject: CN=DEDD4F50CA86016D86A4ECBA1A316393630C3D53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:03:30:04:65:4e:95:3a:bc:1f:5c:ac:ef:5b: 58:50:b0:34:4d:c6:c9:c7:ad:db:86:ea:5a:a4:25: ec:2a:49:28:50:3a:fa:7d:e3:6f:50:42:3d:63:45: 32:80:54:de:2b:5e:58:72:5d:63:bd:23:11:25:6b: 5a:2e:d4:a1:cb:44:63:d5:b8:c0:fd:ab:bc:86:0b: be:b2:6b:83:d0:69:45:eb:1d:45:16:df:01:d1:d1: 2d:39:11:c2:fa:01:87:18:c1:9a:44:30:ce:71:98: 46:f9:d5:8b:03:b3:d3:dc:8f:c1:db:74:a6:7a:2b: 58:7f:e8:d4:39:d2:e0:b5:9e:ae:01:3e:32:4c:af: f0:39:37:a3:39:1b:1c:23:cb:a2:51:8a:c1:78:45: 71:94:a2:aa:a9:82:dc:9c:04:77:0f:92:d0:0e:41: 0f:d4:ea:e6:99:f1:b7:37:6d:a6:dc:aa:78:42:85: 5f:74:0b:81:88:a7:03:b0:b9:6c:f0:aa:7c:14:5c: 08:f4:ef:5e:b1:29:1f:bc:7a:4e:1a:ad:5a:b3:c0: ae:34:e2:1e:7f:5f:a7:6a:84:4a:b0:ca:51:5a:22: fe:22:eb:9b:d7:ee:3f:d6:fc:13:2b:95:cc:84:06: 27:db:de:eb:8c:7b:4d:ec:07:99:1d:6a:d3:14:ed: 21:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DD:4F:50:CA:86:01:6D:86:A4:EC:BA:1A:31:63:93:63:0C:3D:53 X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3231372e302f32342d3234203d3e203633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.49.217.0/24 Signature Algorithm: sha256WithRSAEncryption 77:bb:bb:37:d5:a0:4d:20:bd:4a:53:16:1f:9d:06:51:62:86: 2d:14:98:4c:e4:0f:f4:2e:23:24:c1:3d:c0:0b:be:85:1c:52: f9:e4:d0:8f:ba:f8:40:88:d7:4d:38:8f:66:8b:c2:3d:e9:17: 5b:3e:81:06:0a:ff:fb:4a:62:c8:0a:84:75:72:4d:92:10:f4: ae:56:4a:d5:8b:0f:8c:f6:a2:3d:17:f1:39:27:43:fb:6a:d7: 41:a2:5a:76:bc:06:d5:f4:61:15:77:4b:75:9d:18:b0:9f:74: d7:0c:2f:8a:08:d7:d3:c8:08:a3:90:02:99:e4:71:b2:a0:16: 92:f0:b6:b6:41:9b:27:e1:84:e9:08:cf:82:68:63:66:7e:96: e2:b6:40:09:5c:ed:90:4a:71:36:ae:e6:24:25:83:e6:f2:0a: dd:1d:a2:13:2d:d7:5a:d2:c9:b7:62:94:2b:cb:ab:82:cc:72: b9:bf:71:ec:b3:a1:b8:26:98:8f:d7:20:41:27:a2:70:d4:1f: 65:80:00:4a:ba:9c:5e:5a:eb:f2:60:a1:12:e2:28:fc:c1:1f: bd:fa:08:8d:3d:1f:01:f7:75:d9:17:d1:85:9c:c0:5c:41:5d: 85:63:a0:43:ea:5e:0a:42:8b:af:24:d6:fe:0d:b8:ba:f8:99: ba:a6:5e:69 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUKt/50m/RLdSzgCCH3jG1m0RybwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjA0MjIxNDE0MjJaFw0yNzA0MjExNDE5MjJaMDMxMTAvBgNV BAMTKERFREQ0RjUwQ0E4NjAxNkQ4NkE0RUNCQTFBMzE2MzkzNjMwQzNENTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGAzAEZU6VOrwfXKzvW1hQsDRN xsnHrduG6lqkJewqSShQOvp9429QQj1jRTKAVN4rXlhyXWO9IxEla1ou1KHLRGPV uMD9q7yGC76ya4PQaUXrHUUW3wHR0S05EcL6AYcYwZpEMM5xmEb51YsDs9Pcj8Hb dKZ6K1h/6NQ50uC1nq4BPjJMr/A5N6M5Gxwjy6JRisF4RXGUoqqpgtycBHcPktAO QQ/U6uaZ8bc3babcqnhChV90C4GIpwOwuWzwqnwUXAj0716xKR+8ek4arVqzwK40 4h5/X6dqhEqwylFaIv4i65vX7j/W/BMrlcyEBifb3uuMe03sB5kdatMU7SEHAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU3t1PUMqGAW2GpOy6GjFjk2MMPVMwHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzMxMzIzMzJlMzQz OTJlMzIzMTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHsx2TANBgkqhkiG9w0BAQsFAAOCAQEAd7u7N9WgTSC9SlMWH50GUWKG LRSYTOQP9C4jJME9wAu+hRxS+eTQj7r4QIjXTTiPZovCPekXWz6BBgr/+0piyAqE dXJNkhD0rlZK1YsPjPaiPRfxOSdD+2rXQaJadrwG1fRhFXdLdZ0YsJ901wwvigjX 08gIo5ACmeRxsqAWkvC2tkGbJ+GE6QjPgmhjZn6W4rZACVztkEpxNq7mJCWD5vIK 3R2iEy3XWtLJt2KUK8urgsxyub9x7LOhuCaYj9cgQSeicNQfZYAASrqcXlrr8mCh EuIo/MEfvfoIjT0fAfd12RfRhZzAXEFdhWOgQ+peCkKLryTW/g24uviZuqZeaQ== -----END CERTIFICATE-----Generated at Mon Apr 27 11:06:37 2026 by rpki-client