$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3233322e302f32342d3234203d3e203633363431.roa File: 3132332e34392e3233322e302f32342d3234203d3e203633363431.roa (raw, json) Hash identifier: j1tvuUvSwoftsrt3Ac8dVEFakNUk4hVYxh9s5xSIGRs= Subject key identifier: 64:6A:89:52:A2:E7:DA:00:36:E2:07:21:8E:7B:23:79:7E:C5:10:D1 Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 51900BA9CCF21A8AAFF9757AC0366F86726E6185 Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3233322e302f32342d3234203d3e203633363431.roa Signing time: Wed 22 Apr 2026 14:09:00 +0000 ROA not before: Wed 22 Apr 2026 14:04:00 +0000 ROA not after: Wed 21 Apr 2027 14:09:00 +0000 asID: 63641 IP address blocks: 123.49.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 10:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:90:0b:a9:cc:f2:1a:8a:af:f9:75:7a:c0:36:6f:86:72:6e:61:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Apr 22 14:04:00 2026 GMT Not After : Apr 21 14:09:00 2027 GMT Subject: CN=646A8952A2E7DA0036E207218E7B23797EC510D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:28:b3:fa:d7:1d:2e:bd:c8:90:fa:66:5b:3a: 51:5f:07:12:fa:80:a2:e2:49:15:17:c2:8c:0b:8f: 5b:a3:1d:f3:51:15:e1:1e:4e:e0:8b:05:c9:2a:1f: e5:04:2b:07:85:da:8f:26:3f:07:14:f9:89:46:be: 3c:47:3f:38:a2:bb:5b:b1:67:bd:2c:46:22:53:29: cf:c3:61:4a:18:23:2d:38:5c:20:3e:d9:ca:6c:cf: d6:78:77:c3:88:6a:ad:46:66:06:3c:02:0b:4f:d8: 42:06:d1:dd:6a:e3:34:44:19:5e:5a:07:5d:57:9c: 33:8a:92:f6:82:71:9a:91:d3:13:2b:b2:56:6b:4f: a7:52:27:88:77:b8:ee:2d:73:42:7b:b3:af:cf:ce: 7d:f2:7a:4e:d5:56:e8:45:c2:a6:d9:02:7b:98:6c: cc:df:96:8a:0b:3a:4d:08:5c:81:ef:8e:a9:6d:6e: 94:6a:94:1f:31:a6:ff:ff:b2:05:d0:20:0f:e0:7a: 3b:87:a4:0f:d4:d0:f2:24:32:f3:16:39:c2:0c:de: a9:01:5f:1c:6c:9a:73:73:6a:14:0a:e9:b2:c7:ba: a0:9c:34:bb:2a:4c:9c:80:71:a9:b4:f3:d7:c8:e5: 84:83:a0:5c:2c:30:bb:a4:b1:70:c3:fb:76:a3:82: 73:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6A:89:52:A2:E7:DA:00:36:E2:07:21:8E:7B:23:79:7E:C5:10:D1 X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3233322e302f32342d3234203d3e203633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.49.232.0/24 Signature Algorithm: sha256WithRSAEncryption 85:a4:7d:ce:65:01:42:87:a1:2e:ab:1a:64:91:45:29:95:13: 8f:bd:6e:a9:e5:21:e8:6a:95:61:af:10:64:e4:30:f5:f7:a8: 2f:ce:54:b8:fc:a3:09:f0:19:42:23:eb:bf:8a:64:ae:43:81: e4:98:93:48:a3:2c:0d:b8:cc:65:04:c1:4e:c7:8f:f6:23:9d: 47:13:98:46:01:ea:22:13:99:68:a6:f5:e9:6b:82:23:db:51: 6d:a3:04:f1:f5:65:ec:ef:f7:14:4f:60:3d:29:dc:d3:91:2d: 5c:ec:f9:b5:71:81:49:88:ee:31:29:99:95:d5:4c:f7:f0:ba: e5:85:da:65:39:b8:fb:e0:dd:cc:88:5a:f5:b4:46:31:12:44: b7:e1:5a:fc:95:cf:79:ad:b6:1b:ae:a7:55:2a:1d:fe:96:c0: 82:5a:10:c5:ee:4d:b1:b4:9e:76:6d:fb:f6:a1:00:b0:d8:b5: be:f4:72:ff:ab:03:ba:69:20:ee:b2:d6:64:42:12:96:c4:4b: f0:fa:43:b2:a0:e0:3e:17:31:a5:38:f4:7e:92:3f:25:aa:1d: 70:6d:b4:5a:9e:6f:7b:4c:30:37:d7:4a:4b:a1:64:ad:73:25: c7:96:06:e9:11:53:9a:00:76:9d:c7:b3:dc:25:2b:51:e7:e6: 47:b3:38:c4 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUUZALqczyGoqv+XV6wDZvhnJuYYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjA0MjIxNDA0MDBaFw0yNzA0MjExNDA5MDBaMDMxMTAvBgNV BAMTKDY0NkE4OTUyQTJFN0RBMDAzNkUyMDcyMThFN0IyMzc5N0VDNTEwRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcKLP61x0uvciQ+mZbOlFfBxL6 gKLiSRUXwowLj1ujHfNRFeEeTuCLBckqH+UEKweF2o8mPwcU+YlGvjxHPziiu1ux Z70sRiJTKc/DYUoYIy04XCA+2cpsz9Z4d8OIaq1GZgY8AgtP2EIG0d1q4zREGV5a B11XnDOKkvaCcZqR0xMrslZrT6dSJ4h3uO4tc0J7s6/Pzn3yek7VVuhFwqbZAnuY bMzflooLOk0IXIHvjqltbpRqlB8xpv//sgXQIA/gejuHpA/U0PIkMvMWOcIM3qkB XxxsmnNzahQK6bLHuqCcNLsqTJyAcam089fI5YSDoFwsMLuksXDD+3ajgnO/AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUZGqJUqLn2gA24gchjnsjeX7FENEwHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzMxMzIzMzJlMzQz OTJlMzIzMzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHsx6DANBgkqhkiG9w0BAQsFAAOCAQEAhaR9zmUBQoehLqsaZJFFKZUT j71uqeUh6GqVYa8QZOQw9feoL85UuPyjCfAZQiPrv4pkrkOB5JiTSKMsDbjMZQTB TseP9iOdRxOYRgHqIhOZaKb16WuCI9tRbaME8fVl7O/3FE9gPSnc05EtXOz5tXGB SYjuMSmZldVM9/C65YXaZTm4++DdzIha9bRGMRJEt+Fa/JXPea22G66nVSod/pbA gloQxe5NsbSedm379qEAsNi1vvRy/6sDumkg7rLWZEISlsRL8PpDsqDgPhcxpTj0 fpI/JaodcG20Wp5ve0wwN9dKS6FkrXMlx5YG6RFTmgB2ncez3CUrUefmR7M4xA== -----END CERTIFICATE-----Generated at Mon Apr 27 11:06:38 2026 by rpki-client