$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3233382e302f32342d3234203d3e2034353135.roa File: 3132332e34392e3233382e302f32342d3234203d3e2034353135.roa (raw, json) Hash identifier: RvF63P61zA/MjO9IUOpcZgEHuwb+b38BY6FNTYYu6FA= Subject key identifier: 22:AE:F4:4A:6B:C4:83:85:6F:CE:7D:A0:10:98:98:D8:06:58:38:09 Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 2261E561FAC765F8B3046123CBFD8A4CD30E6B07 Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3233382e302f32342d3234203d3e2034353135.roa Signing time: Wed 22 Apr 2026 13:48:18 +0000 ROA not before: Wed 22 Apr 2026 13:43:18 +0000 ROA not after: Wed 21 Apr 2027 13:48:18 +0000 asID: 4515 IP address blocks: 123.49.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 10:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:61:e5:61:fa:c7:65:f8:b3:04:61:23:cb:fd:8a:4c:d3:0e:6b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Apr 22 13:43:18 2026 GMT Not After : Apr 21 13:48:18 2027 GMT Subject: CN=22AEF44A6BC483856FCE7DA0109898D806583809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c6:1f:41:92:b9:dd:f8:be:ca:9d:cb:a6:64: 9a:a7:bb:1d:51:62:99:42:b0:4f:d5:a5:70:af:ad: e1:d2:1d:dc:e8:2a:b2:c8:4e:ef:88:71:31:cb:cc: 32:34:db:cb:8d:bd:98:60:7c:04:16:11:fa:1f:1d: 37:b5:1a:2a:f7:17:50:93:61:68:ad:2b:f2:e0:4c: 5b:18:6a:b4:43:b9:4a:46:ff:5e:00:21:df:19:da: 56:f5:95:04:88:ce:74:c1:60:6d:1f:67:d5:72:66: da:c0:d1:11:e8:86:77:9c:75:f1:77:be:06:56:e3: 8e:ed:aa:89:5b:e9:96:5b:ca:c9:31:64:76:ca:63: 5e:91:9a:26:34:a3:3c:76:32:d2:88:e1:7d:6e:dc: de:49:67:03:18:a4:ab:0d:2c:93:7c:b9:ad:7f:56: de:0d:87:ab:9b:ae:3d:87:2f:92:f5:5f:a5:c8:19: ab:3b:f5:bf:80:e6:36:59:a2:6a:35:fd:c9:16:6a: 5c:3e:55:b1:f0:7e:2e:eb:77:44:cc:fb:4c:ab:c5: 25:a1:8e:f6:68:09:23:4c:16:fc:80:7f:27:bb:8b: df:04:09:74:53:52:8d:59:42:b6:5a:3b:7a:5a:15: 28:29:47:a7:4c:b3:9b:0d:04:bd:ba:60:e1:f6:79: d5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AE:F4:4A:6B:C4:83:85:6F:CE:7D:A0:10:98:98:D8:06:58:38:09 X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3233382e302f32342d3234203d3e2034353135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.49.238.0/24 Signature Algorithm: sha256WithRSAEncryption bb:0b:38:56:28:ce:83:9e:39:ca:3c:0e:7e:a1:ac:be:45:fb: fe:c6:6c:f2:23:c9:23:9b:0d:9c:c4:bd:ec:2e:23:6d:f1:eb: cf:a6:11:5a:88:9a:5c:98:b2:b6:b1:5c:84:fd:94:42:38:00: 49:ed:11:13:37:08:10:38:19:66:ae:04:ad:8b:de:a2:45:cd: 4b:f1:1d:e3:6a:cd:97:2b:62:21:08:8d:98:bf:00:b5:a5:0c: e1:a2:97:e5:a4:0a:12:c7:e0:4e:84:24:df:9f:eb:34:04:57: 4e:de:31:01:ea:82:bc:ab:27:99:57:d7:16:a2:4e:5a:f2:5b: 5c:83:31:e3:a7:3d:66:c4:62:7e:f1:9f:3e:75:80:72:81:9b: 49:80:8a:59:a3:ca:ba:b2:a9:2a:c3:6c:35:15:84:57:02:82: 80:6d:a0:b1:b6:31:74:55:ce:35:9c:f2:54:2b:55:46:17:1b: 4b:9a:50:ee:df:c5:9d:b6:ed:d3:09:2d:10:18:0b:50:1a:db: d1:29:3a:b1:60:2b:c0:53:99:a8:bb:ef:93:f5:7f:d5:6f:52: df:9f:fe:e1:38:cd:6b:4c:a9:1b:b1:17:42:1c:20:73:b6:c4: d4:ce:1b:bb:45:b8:d4:3f:bd:09:c0:6f:19:83:59:fd:68:0c: 77:c1:2d:f9 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUImHlYfrHZfizBGEjy/2KTNMOawcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjA0MjIxMzQzMThaFw0yNzA0MjExMzQ4MThaMDMxMTAvBgNV BAMTKDIyQUVGNDRBNkJDNDgzODU2RkNFN0RBMDEwOTg5OEQ4MDY1ODM4MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6xh9Bkrnd+L7KncumZJqnux1R YplCsE/VpXCvreHSHdzoKrLITu+IcTHLzDI028uNvZhgfAQWEfofHTe1Gir3F1CT YWitK/LgTFsYarRDuUpG/14AId8Z2lb1lQSIznTBYG0fZ9VyZtrA0RHohnecdfF3 vgZW447tqolb6ZZbyskxZHbKY16RmiY0ozx2MtKI4X1u3N5JZwMYpKsNLJN8ua1/ Vt4Nh6ubrj2HL5L1X6XIGas79b+A5jZZomo1/ckWalw+VbHwfi7rd0TM+0yrxSWh jvZoCSNMFvyAfye7i98ECXRTUo1ZQrZaO3paFSgpR6dMs5sNBL26YOH2edW3AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUIq70SmvEg4Vvzn2gEJiY2AZYOAkwHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ2Nzk5MTA1LzAvMzEzMjMzMmUzNDM5 MmUzMjMzMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM1MzEzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHsx7jANBgkqhkiG9w0BAQsFAAOCAQEAuws4VijOg545yjwOfqGsvkX7/sZs 8iPJI5sNnMS97C4jbfHrz6YRWoiaXJiytrFchP2UQjgASe0REzcIEDgZZq4ErYve okXNS/Ed42rNlytiIQiNmL8AtaUM4aKX5aQKEsfgToQk35/rNARXTt4xAeqCvKsn mVfXFqJOWvJbXIMx46c9ZsRifvGfPnWAcoGbSYCKWaPKurKpKsNsNRWEVwKCgG2g sbYxdFXONZzyVCtVRhcbS5pQ7t/Fnbbt0wktEBgLUBrb0Sk6sWArwFOZqLvvk/V/ 1W9S35/+4TjNa0ypG7EXQhwgc7bE1M4bu0W41D+9CcBvGYNZ/WgMd8Et+Q== -----END CERTIFICATE-----Generated at Mon Apr 27 11:06:28 2026 by rpki-client