$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3233352e302f32342d3234203d3e203633363431.roa File: 3132332e34392e3233352e302f32342d3234203d3e203633363431.roa (raw, json) Hash identifier: K50vFpLSbJTaf6J6iIAaC8NwlGg4dlFWeFDoCPgDkfU= Subject key identifier: F9:14:AB:8B:F8:12:1F:C1:99:9D:16:3F:A5:D2:66:34:4E:54:39:3A Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 0F6CD4D59B7FF04D69EAFEB49AF170FE6BD1F9F4 Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3233352e302f32342d3234203d3e203633363431.roa Signing time: Wed 22 Apr 2026 14:10:04 +0000 ROA not before: Wed 22 Apr 2026 14:05:04 +0000 ROA not after: Wed 21 Apr 2027 14:10:04 +0000 asID: 63641 IP address blocks: 123.49.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 10:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:6c:d4:d5:9b:7f:f0:4d:69:ea:fe:b4:9a:f1:70:fe:6b:d1:f9:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Apr 22 14:05:04 2026 GMT Not After : Apr 21 14:10:04 2027 GMT Subject: CN=F914AB8BF8121FC1999D163FA5D266344E54393A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9e:b5:95:92:81:f7:60:bf:c4:4c:b1:7b:37: 98:4c:50:b4:db:91:f9:da:9d:e4:35:dd:e1:33:fa: d8:0c:58:5e:f5:7f:fc:07:e0:0f:98:a6:91:98:47: 6b:4e:6b:60:7d:df:b3:32:28:b0:e7:df:9a:25:93: 52:ef:ed:2c:1c:29:fc:ed:60:e8:f8:f2:56:c9:83: 48:a8:fb:35:d4:04:b3:11:56:c3:21:26:35:33:59: 0d:3b:4f:6e:58:e3:97:5f:2b:46:6e:52:7c:06:13: 70:7e:eb:aa:ab:18:2c:4c:39:2f:c5:97:59:81:90: a4:15:78:e2:6e:60:a7:e9:02:85:3e:fe:ca:47:0f: 00:af:0c:79:24:60:a1:d8:c1:52:d0:6e:ff:23:d8: 6a:91:2c:86:0c:ee:48:c9:d6:fd:2d:ab:5c:5d:5f: ab:ed:4d:f8:9d:ad:e1:4e:f4:83:b3:40:33:07:e5: 41:cc:c4:3e:83:f2:0f:24:46:b5:03:4d:87:98:9a: f9:c4:ff:f4:ad:13:c2:0a:31:08:67:79:de:5e:ff: ac:96:aa:ec:be:bc:65:24:88:2e:a9:af:45:3b:1a: a7:cd:e4:39:a1:ac:96:47:a5:2e:4b:28:95:f9:02: e9:db:06:61:32:4b:ff:ed:3e:ca:84:b7:d8:d2:e7: 7d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:14:AB:8B:F8:12:1F:C1:99:9D:16:3F:A5:D2:66:34:4E:54:39:3A X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3233352e302f32342d3234203d3e203633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.49.235.0/24 Signature Algorithm: sha256WithRSAEncryption 63:a4:33:7c:66:b6:7a:b5:68:33:62:d6:0d:25:76:76:52:71: 5f:68:d2:11:f6:97:99:51:93:5f:f1:a9:4d:16:67:5d:66:12: 11:5f:b7:79:ac:bb:72:9a:33:5b:2a:6b:6e:f5:04:9e:31:ac: 3c:03:50:ac:4b:e8:2a:eb:c1:d8:e7:91:7b:13:e9:d7:d5:06: 91:b5:15:1b:1d:dc:dd:86:61:bb:4f:88:47:63:2a:16:c7:62: f8:0e:9e:bb:56:66:a1:66:e8:ae:56:97:8e:92:c4:3c:57:3a: a8:7c:00:6e:73:14:63:3b:bc:2c:86:12:79:0a:c8:6d:c8:1d: 48:c0:cc:cc:d6:e2:cf:8f:72:46:28:ab:32:47:b0:cd:27:5b: a5:bd:23:6a:21:75:9e:7f:98:45:ba:da:57:e0:71:13:2f:28: 36:c1:24:c8:f6:62:5c:3e:d8:e4:59:c5:cc:fd:7a:b6:c9:6c: 67:d9:ed:57:24:f3:10:79:d3:d7:0c:35:6e:09:61:ed:e2:be: 88:32:91:f4:0b:32:72:d2:6f:5c:d6:10:fe:37:0b:8a:3d:16: 56:e0:f1:52:ce:77:28:d2:a5:fa:d7:d9:38:5e:32:a4:96:ac: 7b:37:bd:65:da:ec:ad:53:c9:2a:62:78:c6:fb:c9:2b:d3:3f: 7c:4a:d6:5d -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUD2zU1Zt/8E1p6v60mvFw/mvR+fQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjA0MjIxNDA1MDRaFw0yNzA0MjExNDEwMDRaMDMxMTAvBgNV BAMTKEY5MTRBQjhCRjgxMjFGQzE5OTlEMTYzRkE1RDI2NjM0NEU1NDM5M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdnrWVkoH3YL/ETLF7N5hMULTb kfnaneQ13eEz+tgMWF71f/wH4A+YppGYR2tOa2B937MyKLDn35olk1Lv7SwcKfzt YOj48lbJg0io+zXUBLMRVsMhJjUzWQ07T25Y45dfK0ZuUnwGE3B+66qrGCxMOS/F l1mBkKQVeOJuYKfpAoU+/spHDwCvDHkkYKHYwVLQbv8j2GqRLIYM7kjJ1v0tq1xd X6vtTfidreFO9IOzQDMH5UHMxD6D8g8kRrUDTYeYmvnE//StE8IKMQhned5e/6yW quy+vGUkiC6pr0U7GqfN5DmhrJZHpS5LKJX5AunbBmEyS//tPsqEt9jS532zAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU+RSri/gSH8GZnRY/pdJmNE5UOTowHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzMxMzIzMzJlMzQz OTJlMzIzMzM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHsx6zANBgkqhkiG9w0BAQsFAAOCAQEAY6QzfGa2erVoM2LWDSV2dlJx X2jSEfaXmVGTX/GpTRZnXWYSEV+3eay7cpozWyprbvUEnjGsPANQrEvoKuvB2OeR exPp19UGkbUVGx3c3YZhu0+IR2MqFsdi+A6eu1ZmoWborlaXjpLEPFc6qHwAbnMU Yzu8LIYSeQrIbcgdSMDMzNbiz49yRiirMkewzSdbpb0jaiF1nn+YRbraV+BxEy8o NsEkyPZiXD7Y5FnFzP16tslsZ9ntVyTzEHnT1ww1bglh7eK+iDKR9AsyctJvXNYQ /jcLij0WVuDxUs53KNKl+tfZOF4ypJaseze9ZdrsrVPJKmJ4xvvJK9M/fErWXQ== -----END CERTIFICATE-----Generated at Mon Apr 27 11:06:27 2026 by rpki-client