$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3232312e302f32342d3234203d3e203633363431.roa File: 3132332e34392e3232312e302f32342d3234203d3e203633363431.roa (raw, json) Hash identifier: Xo1XTJB8LVtpghzGcZlC6liNGy1TMHxiYpsSzemZYDQ= Subject key identifier: 9D:AE:65:09:F9:67:0C:2C:33:EF:AF:A8:B4:EC:43:E5:32:8C:A9:16 Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 36FEED07F4D3B2858EDA193DC885F975534D69EC Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3232312e302f32342d3234203d3e203633363431.roa Signing time: Wed 22 Apr 2026 14:20:40 +0000 ROA not before: Wed 22 Apr 2026 14:15:40 +0000 ROA not after: Wed 21 Apr 2027 14:20:40 +0000 asID: 63641 IP address blocks: 123.49.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 10:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:fe:ed:07:f4:d3:b2:85:8e:da:19:3d:c8:85:f9:75:53:4d:69:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Apr 22 14:15:40 2026 GMT Not After : Apr 21 14:20:40 2027 GMT Subject: CN=9DAE6509F9670C2C33EFAFA8B4EC43E5328CA916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c9:cd:43:56:af:eb:1e:89:1b:f8:29:3e:0b: da:73:e8:39:85:25:da:2c:bb:33:a7:31:09:5e:7a: 08:0c:21:0f:e0:ee:24:e5:40:cc:f9:e6:d5:fb:dd: 8b:e2:ab:26:08:62:8c:ec:c4:78:ec:a0:4f:7a:a4: 8a:4d:4c:79:51:15:77:b3:f2:e2:cb:ba:eb:ab:1e: ff:96:c8:cc:1c:6d:24:68:15:d6:2f:bd:d8:3e:ad: c4:22:0e:be:5e:fc:b5:90:6c:d4:7b:78:ae:ae:81: f9:e2:00:f7:5e:92:93:30:f8:00:6f:45:87:68:70: 1b:7b:19:f3:67:02:c6:5f:2e:ee:4b:ea:14:30:21: e2:9f:e4:62:56:5c:e7:6b:d9:0b:87:29:32:8c:b2: be:42:22:02:7f:ca:2e:b1:45:52:8c:f9:91:3c:48: 1b:28:6e:43:73:c9:63:23:c5:55:f6:b4:74:14:37: 2e:eb:fe:49:8e:8f:40:a9:79:cd:33:1e:43:8b:2d: 83:5b:6e:76:05:58:e6:f6:b2:71:52:fa:ae:23:98: 13:f4:1b:26:3c:73:92:8a:19:63:74:bc:a7:f4:40: bf:1b:0c:4c:12:01:82:4c:af:56:73:49:fc:81:0c: a4:05:b1:52:e1:f6:7c:6b:cd:5f:d0:d4:95:d0:5c: e7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AE:65:09:F9:67:0C:2C:33:EF:AF:A8:B4:EC:43:E5:32:8C:A9:16 X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3232312e302f32342d3234203d3e203633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.49.221.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:6f:24:10:b6:0f:9c:9b:ae:60:b5:43:a4:63:1f:4e:8b:86: 0b:d6:02:dd:2b:5a:89:e2:8a:09:c1:0f:63:e0:64:ec:71:85: e2:e1:42:89:a9:44:a5:64:48:bc:6e:a1:24:7a:fb:26:55:2b: 34:f5:97:94:64:4d:7e:b3:b1:ee:8f:9b:2f:1a:07:89:48:d0: 22:5a:6c:10:4d:ab:49:49:f0:0e:98:ae:6b:af:cd:f2:65:35: 0f:b5:9f:d8:7a:22:c2:5f:65:9f:44:ed:be:8c:4b:ec:55:79: 9c:f6:dc:57:3b:cb:99:f5:8e:86:bc:6d:da:72:9d:83:19:6e: a6:9f:bb:8f:6c:cd:c2:3c:99:c1:00:b5:83:65:68:76:f7:6d: bd:f9:9e:3d:31:1c:b1:c7:3f:b5:d9:fc:c4:52:c0:0b:0d:1c: 29:1f:2d:0c:82:93:f4:1b:d5:56:e0:d0:4d:fd:1f:1e:d8:87: d8:01:a8:93:d6:86:ed:7f:05:a6:91:a1:aa:5b:3e:28:c0:0f: e4:83:ea:e0:65:4a:f9:dd:70:24:c7:97:98:51:25:8a:16:d2: c3:2d:be:e5:df:b7:dd:0f:c1:62:81:45:62:89:a1:3e:36:f8: a6:d2:ae:73:25:57:c5:12:93:c6:e8:b7:ea:85:d1:05:ab:e7: fe:40:63:2b -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUNv7tB/TTsoWO2hk9yIX5dVNNaewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjA0MjIxNDE1NDBaFw0yNzA0MjExNDIwNDBaMDMxMTAvBgNV BAMTKDlEQUU2NTA5Rjk2NzBDMkMzM0VGQUZBOEI0RUM0M0U1MzI4Q0E5MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvyc1DVq/rHokb+Ck+C9pz6DmF JdosuzOnMQleeggMIQ/g7iTlQMz55tX73YviqyYIYozsxHjsoE96pIpNTHlRFXez 8uLLuuurHv+WyMwcbSRoFdYvvdg+rcQiDr5e/LWQbNR7eK6ugfniAPdekpMw+ABv RYdocBt7GfNnAsZfLu5L6hQwIeKf5GJWXOdr2QuHKTKMsr5CIgJ/yi6xRVKM+ZE8 SBsobkNzyWMjxVX2tHQUNy7r/kmOj0Cpec0zHkOLLYNbbnYFWOb2snFS+q4jmBP0 GyY8c5KKGWN0vKf0QL8bDEwSAYJMr1ZzSfyBDKQFsVLh9nxrzV/Q1JXQXOdxAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUna5lCflnDCwz76+otOxD5TKMqRYwHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzMxMzIzMzJlMzQz OTJlMzIzMjMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHsx3TANBgkqhkiG9w0BAQsFAAOCAQEAnW8kELYPnJuuYLVDpGMfTouG C9YC3StaieKKCcEPY+Bk7HGF4uFCialEpWRIvG6hJHr7JlUrNPWXlGRNfrOx7o+b LxoHiUjQIlpsEE2rSUnwDpiua6/N8mU1D7Wf2Hoiwl9ln0TtvoxL7FV5nPbcVzvL mfWOhrxt2nKdgxlupp+7j2zNwjyZwQC1g2VodvdtvfmePTEcscc/tdn8xFLACw0c KR8tDIKT9BvVVuDQTf0fHtiH2AGok9aG7X8FppGhqls+KMAP5IPq4GVK+d1wJMeX mFElihbSwy2+5d+33Q/BYoFFYomhPjb4ptKucyVXxRKTxui36oXRBavn/kBjKw== -----END CERTIFICATE-----Generated at Mon Apr 27 11:06:38 2026 by rpki-client