$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3233342e302f32342d3234203d3e203633363431.roa File: 3132332e34392e3233342e302f32342d3234203d3e203633363431.roa (raw, json) Hash identifier: 1vfXu428jh3NYkF4Bjt4kC157U3JSXHGQ8UV9uCn0Bk= Subject key identifier: 89:97:75:17:7E:2C:90:C0:B8:4F:3B:60:16:0E:B4:56:03:11:CB:17 Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 31372D3F75B6198470051BB10B8F50B38C487212 Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3233342e302f32342d3234203d3e203633363431.roa Signing time: Wed 22 Apr 2026 14:09:38 +0000 ROA not before: Wed 22 Apr 2026 14:04:38 +0000 ROA not after: Wed 21 Apr 2027 14:09:38 +0000 asID: 63641 IP address blocks: 123.49.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 10:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:37:2d:3f:75:b6:19:84:70:05:1b:b1:0b:8f:50:b3:8c:48:72:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Apr 22 14:04:38 2026 GMT Not After : Apr 21 14:09:38 2027 GMT Subject: CN=899775177E2C90C0B84F3B60160EB4560311CB17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:01:2b:4b:70:44:a0:0f:dc:c9:d9:66:fb:f4: c8:ea:1a:9e:b8:28:77:14:39:f1:27:d6:28:c7:72: 9e:9b:19:59:06:25:38:5c:7e:08:8b:2f:c1:54:23: a7:3e:e4:e3:9c:9e:ae:e0:f7:53:39:a1:4a:4c:29: 0c:39:1f:92:5c:28:be:dd:f8:c4:bb:48:84:f5:bd: b0:1e:fc:d4:ed:b8:8a:c3:ee:43:8e:77:d6:bd:be: c7:97:70:85:f8:ed:10:d5:4f:3a:88:fb:8f:4f:2d: 68:11:32:9b:81:2f:04:20:9f:31:dc:43:af:ea:c9: 5a:6b:3e:c5:73:73:bc:90:1a:98:33:85:65:96:f8: 4f:1c:0d:8f:6c:d6:4d:f7:02:32:ce:76:d7:06:e6: df:23:02:c0:31:ed:45:40:49:89:b0:5c:41:0b:7d: 91:ff:e1:27:5d:07:54:5e:c1:be:19:2e:b3:bd:01: 9d:a6:36:28:24:51:c0:56:1b:b2:83:02:ac:ac:4b: dc:08:eb:df:bf:d6:99:2a:f2:20:0a:fe:c7:b5:fd: 16:82:6e:ae:e3:a4:c1:91:f9:88:bd:37:a4:81:54: 50:ce:83:a7:7c:e3:ae:91:65:54:fa:e2:77:f7:b2: 53:70:dd:a6:b0:78:03:b2:9b:ee:34:ea:d6:c2:cc: 39:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:97:75:17:7E:2C:90:C0:B8:4F:3B:60:16:0E:B4:56:03:11:CB:17 X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3233342e302f32342d3234203d3e203633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.49.234.0/24 Signature Algorithm: sha256WithRSAEncryption c9:4b:73:80:f3:4e:7e:82:45:4e:0a:41:42:5e:1b:d0:ed:e0: 7c:29:91:ee:94:ee:8b:68:a3:48:4a:b4:5d:68:04:e5:0e:74: f3:2d:98:ec:ba:ce:84:c8:de:fb:81:30:5b:3d:e3:8d:dc:52: 37:0a:54:4a:c1:3f:a7:39:8b:55:c4:2f:53:bb:8c:1b:e9:7f: 71:d9:ed:ff:b8:0d:ee:51:47:7e:19:af:30:66:75:e7:d6:5b: 94:54:af:34:5a:e8:70:f1:a0:25:7f:fe:c3:f9:33:90:79:d7: 6b:6f:62:c6:06:f7:67:a8:b7:96:45:6f:53:32:19:d7:57:96: 1d:1d:90:1d:1e:d6:47:a7:92:2f:cf:aa:09:bb:4a:4e:5d:87: 55:12:28:5e:f4:2b:94:22:c3:35:6d:41:90:1d:34:61:aa:e5: eb:1e:29:2f:a1:29:4e:d9:4d:68:4d:a0:c0:5f:b7:29:fc:13: 46:63:6f:bf:f0:8c:1a:ef:4f:46:6e:7b:76:ef:37:64:b1:2f: f7:0b:5a:27:98:bf:b0:27:75:a6:4f:d5:81:d8:7f:c3:c8:8c: 97:43:78:98:84:f0:02:af:24:07:46:18:4d:3d:98:e0:92:36: 95:a5:80:99:07:3b:be:e6:2e:a6:7b:c2:14:ac:75:ee:32:54: 37:b4:b6:44 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUMTctP3W2GYRwBRuxC49Qs4xIchIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjA0MjIxNDA0MzhaFw0yNzA0MjExNDA5MzhaMDMxMTAvBgNV BAMTKDg5OTc3NTE3N0UyQzkwQzBCODRGM0I2MDE2MEVCNDU2MDMxMUNCMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiAStLcESgD9zJ2Wb79MjqGp64 KHcUOfEn1ijHcp6bGVkGJThcfgiLL8FUI6c+5OOcnq7g91M5oUpMKQw5H5JcKL7d +MS7SIT1vbAe/NTtuIrD7kOOd9a9vseXcIX47RDVTzqI+49PLWgRMpuBLwQgnzHc Q6/qyVprPsVzc7yQGpgzhWWW+E8cDY9s1k33AjLOdtcG5t8jAsAx7UVASYmwXEEL fZH/4SddB1Rewb4ZLrO9AZ2mNigkUcBWG7KDAqysS9wI69+/1pkq8iAK/se1/RaC bq7jpMGR+Yi9N6SBVFDOg6d8466RZVT64nf3slNw3aaweAOym+406tbCzDmXAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUiZd1F34skMC4TztgFg60VgMRyxcwHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzMxMzIzMzJlMzQz OTJlMzIzMzM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHsx6jANBgkqhkiG9w0BAQsFAAOCAQEAyUtzgPNOfoJFTgpBQl4b0O3g fCmR7pTui2ijSEq0XWgE5Q508y2Y7LrOhMje+4EwWz3jjdxSNwpUSsE/pzmLVcQv U7uMG+l/cdnt/7gN7lFHfhmvMGZ159ZblFSvNFrocPGgJX/+w/kzkHnXa29ixgb3 Z6i3lkVvUzIZ11eWHR2QHR7WR6eSL8+qCbtKTl2HVRIoXvQrlCLDNW1BkB00Yarl 6x4pL6EpTtlNaE2gwF+3KfwTRmNvv/CMGu9PRm57du83ZLEv9wtaJ5i/sCd1pk/V gdh/w8iMl0N4mITwAq8kB0YYTT2Y4JI2laWAmQc7vuYupnvCFKx17jJUN7S2RA== -----END CERTIFICATE-----Generated at Mon Apr 27 11:06:04 2026 by rpki-client