$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3232302e302f32342d3234203d3e203633363431.roa File: 3132332e34392e3232302e302f32342d3234203d3e203633363431.roa (raw, json) Hash identifier: jgMc3jreAdETa/68JpZWGW5vT1MlLLzWXZ3tH3DMhqU= Subject key identifier: 3C:23:1F:BA:F1:7B:53:6D:85:A6:45:F1:E8:02:23:0C:4C:14:D8:67 Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 02F3C8E28C63CF3F9B4F820604448FF2E126657C Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3232302e302f32342d3234203d3e203633363431.roa Signing time: Wed 22 Apr 2026 14:20:23 +0000 ROA not before: Wed 22 Apr 2026 14:15:23 +0000 ROA not after: Wed 21 Apr 2027 14:20:23 +0000 asID: 63641 IP address blocks: 123.49.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 10:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:f3:c8:e2:8c:63:cf:3f:9b:4f:82:06:04:44:8f:f2:e1:26:65:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Apr 22 14:15:23 2026 GMT Not After : Apr 21 14:20:23 2027 GMT Subject: CN=3C231FBAF17B536D85A645F1E802230C4C14D867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0e:64:e9:e1:6d:14:f7:80:34:e1:b9:00:41: 30:07:a9:c2:fb:aa:ea:4a:b5:84:ec:ff:99:63:75: 1b:b3:60:92:8b:14:5f:ef:7d:1c:5c:de:2b:32:e0: 8d:30:d8:c5:27:86:19:c0:95:d5:32:44:18:b2:24: b8:cf:15:51:48:49:da:e9:c6:8f:ee:84:2d:57:5d: b1:24:c2:54:cf:63:ec:ae:aa:54:1a:48:cd:de:65: 98:6b:77:b2:68:3c:b1:48:90:34:ac:45:21:b2:b9: cd:35:70:70:4d:24:57:f7:75:5d:41:a1:b8:98:c1: 12:51:4f:82:4c:1a:11:a1:e3:33:ed:8c:97:a6:a0: ba:64:90:6f:54:37:48:d4:6d:73:d9:7b:da:a7:32: 97:07:52:7e:3b:36:9b:79:65:ca:aa:e2:1b:b5:ec: 3f:4e:2a:4a:56:2b:44:32:b8:d5:15:33:19:a0:b7: b8:50:f3:44:ac:14:4e:81:54:4a:4f:1f:0d:3e:a1: 27:05:9d:17:1e:fd:91:e9:d4:21:c3:ac:a3:ff:81: 2d:62:d0:4e:23:9c:31:26:2b:05:30:17:ac:19:06: 1e:b8:74:e7:a6:7c:7e:f5:3b:ba:f6:b1:84:37:25: fb:c8:aa:22:c7:5e:2b:e6:95:b6:4b:1b:db:14:be: 4e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:23:1F:BA:F1:7B:53:6D:85:A6:45:F1:E8:02:23:0C:4C:14:D8:67 X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3232302e302f32342d3234203d3e203633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.49.220.0/24 Signature Algorithm: sha256WithRSAEncryption 76:35:bb:3d:ee:92:84:d6:c0:38:9d:a4:50:ee:fd:9e:d0:13: 4e:24:0d:eb:9f:d4:6b:92:31:b6:36:17:6e:e1:22:3f:57:56: 1c:47:11:99:74:ea:94:32:02:ed:d8:42:61:ad:47:c8:46:d9: 2d:49:04:38:54:da:19:cb:42:33:36:96:7d:f5:1a:d6:67:3f: 69:d9:ce:9d:f2:9f:2a:e7:8a:ef:d7:60:55:a3:04:3c:27:0e: db:46:11:d6:1a:6e:02:6b:ef:93:bf:ae:70:78:ef:bf:ee:3d: b6:d0:fa:f8:70:fd:fa:ae:1b:47:e0:af:01:f7:a8:c5:88:de: 85:cc:73:1a:d0:08:1a:98:e6:dc:5f:e4:78:ac:d0:7f:3b:fe: f9:7b:c0:d1:5f:02:a5:b8:27:43:bf:2f:ad:be:fe:f8:0f:fd: d7:2a:d1:18:a1:8b:3a:01:8b:e4:9f:3c:44:0d:f7:c6:c6:53: 5c:83:fc:6d:a4:da:75:e0:86:e7:3b:a2:e3:67:fc:fc:2f:62: 47:ab:67:cd:04:28:92:95:a7:64:8e:c1:25:96:07:84:a0:31: 3c:36:85:07:82:82:5e:ef:c6:b5:a4:60:a7:35:67:f7:86:9e: c8:46:aa:67:8b:2a:76:37:a5:a3:3c:34:8d:dd:b3:3c:5a:0b: 43:68:74:ec -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUAvPI4oxjzz+bT4IGBESP8uEmZXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjA0MjIxNDE1MjNaFw0yNzA0MjExNDIwMjNaMDMxMTAvBgNV BAMTKDNDMjMxRkJBRjE3QjUzNkQ4NUE2NDVGMUU4MDIyMzBDNEMxNEQ4NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrDmTp4W0U94A04bkAQTAHqcL7 qupKtYTs/5ljdRuzYJKLFF/vfRxc3isy4I0w2MUnhhnAldUyRBiyJLjPFVFISdrp xo/uhC1XXbEkwlTPY+yuqlQaSM3eZZhrd7JoPLFIkDSsRSGyuc01cHBNJFf3dV1B obiYwRJRT4JMGhGh4zPtjJemoLpkkG9UN0jUbXPZe9qnMpcHUn47Npt5Zcqq4hu1 7D9OKkpWK0QyuNUVMxmgt7hQ80SsFE6BVEpPHw0+oScFnRce/ZHp1CHDrKP/gS1i 0E4jnDEmKwUwF6wZBh64dOemfH71O7r2sYQ3JfvIqiLHXivmlbZLG9sUvk4XAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUPCMfuvF7U22FpkXx6AIjDEwU2GcwHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzMxMzIzMzJlMzQz OTJlMzIzMjMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHsx3DANBgkqhkiG9w0BAQsFAAOCAQEAdjW7Pe6ShNbAOJ2kUO79ntAT TiQN65/Ua5IxtjYXbuEiP1dWHEcRmXTqlDIC7dhCYa1HyEbZLUkEOFTaGctCMzaW ffUa1mc/adnOnfKfKueK79dgVaMEPCcO20YR1hpuAmvvk7+ucHjvv+49ttD6+HD9 +q4bR+CvAfeoxYjehcxzGtAIGpjm3F/keKzQfzv++XvA0V8CpbgnQ78vrb7++A/9 1yrRGKGLOgGL5J88RA33xsZTXIP8baTadeCG5zui42f8/C9iR6tnzQQokpWnZI7B JZYHhKAxPDaFB4KCXu/GtaRgpzVn94aeyEaqZ4sqdjelozw0jd2zPFoLQ2h07A== -----END CERTIFICATE-----Generated at Mon Apr 27 11:06:28 2026 by rpki-client