$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3232392e302f32342d3234203d3e203633363431.roa File: 3132332e34392e3232392e302f32342d3234203d3e203633363431.roa (raw, json) Hash identifier: Pd9kT1bQQ78cL6zUXTeQ+THRa30+5rK8m0URlsUF2j8= Subject key identifier: 16:89:2E:50:BC:57:AF:62:52:43:F9:49:D5:BC:27:91:90:97:A9:D7 Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 44664B971835EE4654F13C0B44BC29A29B3D1B5A Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3232392e302f32342d3234203d3e203633363431.roa Signing time: Wed 22 Apr 2026 14:08:06 +0000 ROA not before: Wed 22 Apr 2026 14:03:06 +0000 ROA not after: Wed 21 Apr 2027 14:08:06 +0000 asID: 63641 IP address blocks: 123.49.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 10:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:66:4b:97:18:35:ee:46:54:f1:3c:0b:44:bc:29:a2:9b:3d:1b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Apr 22 14:03:06 2026 GMT Not After : Apr 21 14:08:06 2027 GMT Subject: CN=16892E50BC57AF625243F949D5BC27919097A9D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:09:1c:f2:18:5e:e1:07:92:48:c7:62:6a:8a: bb:dd:90:9b:92:2e:57:e6:0e:2d:d7:b6:c4:9a:0f: 16:6b:3d:64:37:97:de:4e:af:b9:65:93:9d:a7:f4: 1e:88:4e:d9:79:3b:72:6e:69:b8:8d:2f:3c:e5:f8: ca:33:ce:2c:05:4c:ad:9d:a0:c2:c1:83:62:51:ba: c7:14:a3:4a:bb:ff:72:5e:db:34:8e:ac:04:c6:23: d4:e2:4a:9d:1a:fc:b5:82:71:1a:72:2c:d0:57:2b: a1:fe:17:96:4f:c4:83:f6:55:ed:a6:45:fa:76:e4: e7:d7:55:22:c9:e5:dd:c0:ef:5f:ad:e1:b5:0b:38: 55:78:7f:e7:5c:4b:09:de:86:bd:e0:91:e6:47:44: 1a:fe:25:ce:b8:53:7c:f8:b5:da:ba:e1:b9:8a:f3: 66:52:68:c0:3c:c1:99:e2:35:4a:af:32:a5:08:c2: 95:4e:e3:ed:e7:80:3b:e9:3a:f5:e8:9a:6f:13:b5: fa:df:88:93:b6:f4:7a:d3:c9:9d:1a:de:57:fd:ff: 02:f1:89:f8:53:84:21:92:b7:40:56:51:92:ba:0f: 02:43:d9:76:d4:60:8f:74:31:21:34:dc:d1:c9:90: 19:9e:cf:83:ad:49:d8:61:8f:ac:a6:31:f0:ea:69: 3d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:89:2E:50:BC:57:AF:62:52:43:F9:49:D5:BC:27:91:90:97:A9:D7 X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3232392e302f32342d3234203d3e203633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.49.229.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:e7:2f:9e:68:05:fb:6f:cf:e7:a2:ce:02:a6:e2:e4:b8:28: d5:a2:eb:f9:0c:2f:e8:ae:31:eb:cb:a2:f1:2d:33:07:fa:bf: aa:b6:31:51:db:a7:ca:e5:58:cd:f5:1c:ac:4a:f5:65:be:03: 73:56:fb:f2:21:bc:cf:52:60:38:ff:bf:ae:8a:f9:d6:81:9b: 77:2c:6b:c6:ad:c9:27:c1:bf:a5:fc:e1:4d:5c:56:22:e5:b2: 69:21:e6:37:34:69:49:40:32:4c:1f:ce:b4:71:f0:df:19:cb: 40:dd:f3:ce:6e:ea:02:a9:92:e4:d6:76:4e:4b:ce:0b:83:c2: 4a:ff:80:79:b0:6d:a1:d0:74:72:0f:c2:58:32:5f:48:0b:02: 4d:0d:a0:bc:01:89:45:32:66:7c:5a:dd:ed:97:e6:57:e2:12: 27:e3:02:3e:f1:b2:c6:4c:83:95:03:09:60:7e:cc:7e:ed:d4: 7e:d1:25:82:12:e5:a2:1c:35:b3:17:02:0e:9f:95:60:b0:78: b7:76:d2:52:3b:12:e7:14:3a:d1:fb:bd:6a:37:de:a9:95:e6: 82:5d:de:79:47:d3:83:f2:7c:1c:ca:01:7f:44:49:b4:5b:c3: ab:cb:c7:bd:34:1d:cc:c6:bb:35:02:d1:4b:08:f0:ce:ee:1e: 79:ee:3a:e5 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIURGZLlxg17kZU8TwLRLwpops9G1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjA0MjIxNDAzMDZaFw0yNzA0MjExNDA4MDZaMDMxMTAvBgNV BAMTKDE2ODkyRTUwQkM1N0FGNjI1MjQzRjk0OUQ1QkMyNzkxOTA5N0E5RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYCRzyGF7hB5JIx2JqirvdkJuS LlfmDi3XtsSaDxZrPWQ3l95Or7llk52n9B6ITtl5O3JuabiNLzzl+MozziwFTK2d oMLBg2JRuscUo0q7/3Je2zSOrATGI9TiSp0a/LWCcRpyLNBXK6H+F5ZPxIP2Ve2m Rfp25OfXVSLJ5d3A71+t4bULOFV4f+dcSwnehr3gkeZHRBr+Jc64U3z4tdq64bmK 82ZSaMA8wZniNUqvMqUIwpVO4+3ngDvpOvXomm8TtfrfiJO29HrTyZ0a3lf9/wLx ifhThCGSt0BWUZK6DwJD2XbUYI90MSE03NHJkBmez4OtSdhhj6ymMfDqaT0DAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUFokuULxXr2JSQ/lJ1bwnkZCXqdcwHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzMxMzIzMzJlMzQz OTJlMzIzMjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHsx5TANBgkqhkiG9w0BAQsFAAOCAQEAn+cvnmgF+2/P56LOAqbi5Lgo 1aLr+Qwv6K4x68ui8S0zB/q/qrYxUdunyuVYzfUcrEr1Zb4Dc1b78iG8z1JgOP+/ ror51oGbdyxrxq3JJ8G/pfzhTVxWIuWyaSHmNzRpSUAyTB/OtHHw3xnLQN3zzm7q AqmS5NZ2TkvOC4PCSv+AebBtodB0cg/CWDJfSAsCTQ2gvAGJRTJmfFrd7ZfmV+IS J+MCPvGyxkyDlQMJYH7Mfu3UftElghLlohw1sxcCDp+VYLB4t3bSUjsS5xQ60fu9 ajfeqZXmgl3eeUfTg/J8HMoBf0RJtFvDq8vHvTQdzMa7NQLRSwjwzu4eee465Q== -----END CERTIFICATE-----Generated at Mon Apr 27 11:06:38 2026 by rpki-client