$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e33322e302f32312d3231203d3e2034383038.roa File: 3132322e31312e33322e302f32312d3231203d3e2034383038.roa (raw, json) Hash identifier: wKnPfEKTLOcoPxcoU4igzvQtVEKsTlIE9YwzFVgOuGs= Subject key identifier: FE:09:B1:FF:42:C1:6E:B2:0F:1C:4C:E1:22:F8:54:05:C4:CA:12:7D Certificate issuer: /CN=098D421CB46F292F13CE71DF3D685D5E82893289 Certificate serial: 32D887BEB0A8D243B2958C6679FCB0615AC2650C Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e33322e302f32312d3231203d3e2034383038.roa Signing time: Tue 02 Jun 2026 07:45:09 +0000 ROA not before: Tue 02 Jun 2026 07:40:09 +0000 ROA not after: Tue 01 Jun 2027 07:45:09 +0000 asID: 4808 IP address blocks: 122.11.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d8:87:be:b0:a8:d2:43:b2:95:8c:66:79:fc:b0:61:5a:c2:65:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289 Validity Not Before: Jun 2 07:40:09 2026 GMT Not After : Jun 1 07:45:09 2027 GMT Subject: CN=FE09B1FF42C16EB20F1C4CE122F85405C4CA127D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:28:b9:7d:1c:63:9d:9a:22:1a:b2:02:d5:77: 3f:2b:90:b6:15:c7:f2:63:7b:ab:90:0d:aa:40:a7: e1:c9:17:1f:be:fd:c7:4a:b2:b3:e5:ca:4c:0b:a5: 20:ea:19:78:d3:d4:57:6c:23:de:c9:79:b1:fe:3e: bc:7b:11:d8:a4:76:ce:6b:36:f1:70:b2:4a:34:89: 5e:fa:b5:f3:af:78:60:a5:c2:d0:0c:21:cf:4a:67: ba:b7:41:f5:d8:f3:de:72:d9:ea:27:a5:c9:54:58: f9:56:1a:6f:d1:32:02:8c:ae:43:62:fd:f2:46:39: 6d:98:47:f9:d1:5c:70:f0:b6:8a:93:6e:67:9e:36: c1:d8:c2:92:55:a5:5c:69:08:2e:90:9b:f8:b7:0a: 64:4c:7d:69:57:f0:95:d4:8b:f4:db:aa:73:10:aa: 23:a2:41:00:bf:b3:d9:af:47:5f:ba:7b:c0:1f:ca: 52:23:36:eb:a8:56:2b:d7:40:c6:94:d2:df:3f:bb: 8f:26:7c:d3:fc:dd:cf:d0:78:c8:e9:05:8c:8b:b6: a5:f9:15:3a:d3:1b:7d:99:8c:1b:ac:71:a2:09:cb: 6a:ee:c4:a7:12:58:58:6a:6e:25:19:f7:9b:54:91: ee:f0:44:32:8b:c5:4a:1d:7c:9c:79:6a:3e:7c:7c: 9b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:09:B1:FF:42:C1:6E:B2:0F:1C:4C:E1:22:F8:54:05:C4:CA:12:7D X509v3 Authority Key Identifier: keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e33322e302f32312d3231203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.11.32.0/21 Signature Algorithm: sha256WithRSAEncryption aa:f9:ec:fe:c5:a5:e5:c6:51:1b:a7:f9:5e:70:b2:4d:f0:06: 05:bc:82:1a:f6:00:4a:95:43:cb:82:97:3d:da:57:ed:e1:6a: fa:89:8c:b9:ab:6a:e0:e4:dc:20:a5:6a:fd:d3:75:c2:ba:81: 7a:c2:11:85:5f:d0:66:99:a5:02:f7:68:26:43:3f:c0:db:0f: b8:62:e2:09:67:c0:94:b4:02:7d:50:84:ad:58:25:7f:e6:9b: ac:71:56:8d:21:00:36:a0:1a:eb:3b:7d:2b:92:c6:75:e5:a8: 0a:65:f5:25:d1:2f:7c:d7:b2:1e:54:bc:fd:ca:6a:06:db:11: 93:b7:14:93:49:f6:cb:7c:a8:c6:9e:3c:a9:85:1b:b5:21:ed: 0b:93:06:58:8b:5b:0c:bc:fc:9b:ca:8a:a7:ae:f4:bf:19:e0: c3:23:2d:d1:4e:00:e5:21:d2:29:82:be:d2:bc:1b:7a:85:58: cc:50:a2:be:de:ba:04:a6:1b:62:e2:1c:38:c8:4c:57:de:6b: 23:21:09:ef:14:e0:ac:58:f1:c9:3f:25:03:9c:06:df:70:67: 12:57:ef:2a:5d:f6:67:c4:cb:f9:50:b5:07:11:48:58:ac:74: a5:ed:b0:ef:85:1c:51:7d:19:2c:69:14:51:a5:7a:26:60:54: 3b:66:3b:79 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUMtiHvrCo0kOylYxmefywYVrCZQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4 Mjg5MzI4OTAeFw0yNjA2MDIwNzQwMDlaFw0yNzA2MDEwNzQ1MDlaMDMxMTAvBgNV BAMTKEZFMDlCMUZGNDJDMTZFQjIwRjFDNENFMTIyRjg1NDA1QzRDQTEyN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkKLl9HGOdmiIasgLVdz8rkLYV x/Jje6uQDapAp+HJFx++/cdKsrPlykwLpSDqGXjT1FdsI97JebH+Prx7Edikds5r NvFwsko0iV76tfOveGClwtAMIc9KZ7q3QfXY895y2eonpclUWPlWGm/RMgKMrkNi /fJGOW2YR/nRXHDwtoqTbmeeNsHYwpJVpVxpCC6Qm/i3CmRMfWlX8JXUi/TbqnMQ qiOiQQC/s9mvR1+6e8AfylIjNuuoVivXQMaU0t8/u48mfNP83c/QeMjpBYyLtqX5 FTrTG32ZjBuscaIJy2ruxKcSWFhqbiUZ95tUke7wRDKLxUodfJx5aj58fJt5AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQU/gmx/0LBbrIPHEzhIvhUBcTKEn0wHwYDVR0j BBgwFoAUCY1CHLRvKS8TznHfPWhdXoKJMokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzY2MjQ2Ni8wLzA5OEQ0MjFDQjQ2RjI5MkYxM0NFNzFERjNENjg1 RDVFODI4OTMyODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4Mjg5MzI4OS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3NjYyNDY2LzAvMzEzMjMyMmUzMTMx MmUzMzMyMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAN6CyAwDQYJKoZIhvcNAQELBQADggEBAKr57P7FpeXGURun+V5wsk3wBgW8ghr2 AEqVQ8uClz3aV+3havqJjLmrauDk3CClav3TdcK6gXrCEYVf0GaZpQL3aCZDP8Db D7hi4glnwJS0An1QhK1YJX/mm6xxVo0hADagGus7fSuSxnXlqApl9SXRL3zXsh5U vP3KagbbEZO3FJNJ9st8qMaePKmFG7Uh7QuTBliLWwy8/JvKiqeu9L8Z4MMjLdFO AOUh0imCvtK8G3qFWMxQor7eugSmG2LiHDjITFfeayMhCe8U4KxY8ck/JQOcBt9w ZxJX7ypd9mfEy/lQtQcRSFisdKXtsO+FHFF9GSxpFFGleiZgVDtmO3k= -----END CERTIFICATE-----Generated at Fri Jun 12 02:24:09 2026 by rpki-client