$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3233382e302f32342d3234203d3e203633363431.roa File: 3132332e34392e3233382e302f32342d3234203d3e203633363431.roa (raw, json) Hash identifier: Ovge1BHwJ+0B8WACpk7DDlRiqeC+FDIoJ2fIqWnT0qc= Subject key identifier: F1:9B:33:56:B8:FD:95:2E:B7:9D:7E:7C:A1:9C:C7:D4:89:1E:69:46 Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 5627C5E7474CEFFCEC55644100BFEFFD9C514B85 Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3233382e302f32342d3234203d3e203633363431.roa Signing time: Wed 22 Apr 2026 13:48:18 +0000 ROA not before: Wed 22 Apr 2026 13:43:18 +0000 ROA not after: Wed 21 Apr 2027 13:48:18 +0000 asID: 63641 IP address blocks: 123.49.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 10:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:27:c5:e7:47:4c:ef:fc:ec:55:64:41:00:bf:ef:fd:9c:51:4b:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Apr 22 13:43:18 2026 GMT Not After : Apr 21 13:48:18 2027 GMT Subject: CN=F19B3356B8FD952EB79D7E7CA19CC7D4891E6946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:97:a6:a1:0e:27:0c:46:e2:74:3e:53:fa:a2: cd:ad:3b:a4:4e:e7:c3:ef:62:6e:ef:12:d6:03:5d: d9:7e:48:8c:93:9b:83:12:e7:d3:cd:31:65:0b:de: 9f:d7:e6:38:0d:e1:ea:ea:6f:38:d4:61:9c:df:9d: f9:3b:7e:38:a8:43:4d:e4:46:e2:76:56:03:aa:d9: f6:ac:b0:6d:c9:53:e6:ff:99:bb:3a:d6:c5:eb:01: 7e:fc:8b:60:c8:15:ba:45:11:e0:53:5e:2f:55:75: 36:f8:6a:bb:c4:09:6d:f4:37:37:47:4b:d3:23:64: b4:0a:fd:f4:03:d0:b8:08:0c:13:0e:c3:72:46:20: 33:50:0d:53:d7:df:e7:22:7d:2b:39:1b:7f:bc:e6: 2b:0b:ac:d6:99:19:40:6c:7d:c0:96:20:4b:dc:f9: 6c:ee:89:8b:72:88:0f:dd:7f:4e:47:8c:fe:ac:14: 4d:a2:a9:29:a4:62:5b:39:69:e9:ba:0c:19:23:16: 2d:cf:b3:f4:f2:cc:76:af:76:1f:db:eb:da:7b:8f: af:cb:dc:40:33:0b:5b:08:15:67:dd:18:8f:97:a0: 54:8b:f4:ff:81:fd:bc:a6:54:7f:31:e3:4c:0c:41: a6:be:0f:ab:47:d0:aa:51:6d:08:67:c7:9b:7c:05: cf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:9B:33:56:B8:FD:95:2E:B7:9D:7E:7C:A1:9C:C7:D4:89:1E:69:46 X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3233382e302f32342d3234203d3e203633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.49.238.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:eb:4d:f5:9d:c0:7f:e3:84:98:23:8b:0a:b4:02:45:c2:98: 91:49:46:b4:0a:60:eb:3c:44:14:9c:a9:a5:24:6c:94:e9:f6: 67:10:c5:e8:91:55:17:26:65:ec:94:01:da:59:41:94:87:14: 2a:92:d2:b3:f0:81:80:c1:a4:54:e5:a4:4c:e3:b3:75:01:73: 6f:3d:1b:3a:9e:25:ce:37:2e:05:e5:57:d6:b9:8c:a6:2b:96: 70:08:e5:52:a0:4c:26:e9:71:d8:a7:58:3d:fc:db:42:2a:9f: 45:5a:38:c0:cf:67:b2:b9:4f:6d:57:52:6e:4b:62:c3:7a:e7: c0:03:f7:55:69:96:02:38:16:6f:83:27:ba:5c:c8:88:96:b0: ab:bc:fc:29:08:9a:82:47:fc:2f:ba:d2:c2:a7:a7:cf:73:c5: f4:ac:12:b4:08:8b:71:2e:d7:81:03:f3:51:af:58:f0:4a:79: 22:87:aa:f9:a9:73:26:9d:96:55:31:e6:3d:62:45:88:95:f1: 8f:ab:2e:41:f7:7b:0e:d7:12:51:3f:36:c1:93:4e:67:b1:22: a4:bc:a0:1e:d6:b2:9a:9c:90:4e:ab:a8:1a:ac:39:ed:1e:ce: 48:41:6f:06:c7:03:cf:e7:2e:e2:4f:f9:66:ff:ee:4b:6f:94: 49:75:1c:c7 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUVifF50dM7/zsVWRBAL/v/ZxRS4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjA0MjIxMzQzMThaFw0yNzA0MjExMzQ4MThaMDMxMTAvBgNV BAMTKEYxOUIzMzU2QjhGRDk1MkVCNzlEN0U3Q0ExOUNDN0Q0ODkxRTY5NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCml6ahDicMRuJ0PlP6os2tO6RO 58PvYm7vEtYDXdl+SIyTm4MS59PNMWUL3p/X5jgN4erqbzjUYZzfnfk7fjioQ03k RuJ2VgOq2fassG3JU+b/mbs61sXrAX78i2DIFbpFEeBTXi9VdTb4arvECW30NzdH S9MjZLQK/fQD0LgIDBMOw3JGIDNQDVPX3+cifSs5G3+85isLrNaZGUBsfcCWIEvc +WzuiYtyiA/df05HjP6sFE2iqSmkYls5aem6DBkjFi3Ps/TyzHavdh/b69p7j6/L 3EAzC1sIFWfdGI+XoFSL9P+B/bymVH8x40wMQaa+D6tH0KpRbQhnx5t8Bc+BAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU8ZszVrj9lS63nX58oZzH1IkeaUYwHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzMxMzIzMzJlMzQz OTJlMzIzMzM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHsx7jANBgkqhkiG9w0BAQsFAAOCAQEATOtN9Z3Af+OEmCOLCrQCRcKY kUlGtApg6zxEFJyppSRslOn2ZxDF6JFVFyZl7JQB2llBlIcUKpLSs/CBgMGkVOWk TOOzdQFzbz0bOp4lzjcuBeVX1rmMpiuWcAjlUqBMJulx2KdYPfzbQiqfRVo4wM9n srlPbVdSbktiw3rnwAP3VWmWAjgWb4MnulzIiJawq7z8KQiagkf8L7rSwqenz3PF 9KwStAiLcS7XgQPzUa9Y8Ep5Ioeq+alzJp2WVTHmPWJFiJXxj6suQfd7DtcSUT82 wZNOZ7EipLygHtaympyQTquoGqw57R7OSEFvBscDz+cu4k/5Zv/uS2+USXUcxw== -----END CERTIFICATE-----Generated at Mon Apr 27 11:06:28 2026 by rpki-client