$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e34302e302f32312d3231203d3e2034383038.roa File: 3132322e31312e34302e302f32312d3231203d3e2034383038.roa (raw, json) Hash identifier: XDT9ktasaOET17rRRzYq/yK1DlnIymI/BRvWecxJGWQ= Subject key identifier: 32:8E:7E:49:79:0A:34:33:D3:38:DC:D1:C2:25:37:69:DF:F1:95:EE Certificate issuer: /CN=098D421CB46F292F13CE71DF3D685D5E82893289 Certificate serial: 33098D9B788255CF0EA5A4742BA3FC889A10F889 Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e34302e302f32312d3231203d3e2034383038.roa Signing time: Tue 02 Jun 2026 07:45:09 +0000 ROA not before: Tue 02 Jun 2026 07:40:09 +0000 ROA not after: Tue 01 Jun 2027 07:45:09 +0000 asID: 4808 IP address blocks: 122.11.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:09:8d:9b:78:82:55:cf:0e:a5:a4:74:2b:a3:fc:88:9a:10:f8:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289 Validity Not Before: Jun 2 07:40:09 2026 GMT Not After : Jun 1 07:45:09 2027 GMT Subject: CN=328E7E49790A3433D338DCD1C2253769DFF195EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e9:b8:48:e6:cc:6b:53:cb:ab:3b:c2:03:d3: 9d:c5:3b:9b:14:03:8b:05:ee:fb:a9:e4:31:76:20: 02:37:af:15:73:42:8e:f6:9b:31:02:4e:2a:6f:4e: f0:9a:77:af:4e:16:3f:86:67:e6:80:1d:b2:af:89: c1:e7:8f:70:10:28:28:3f:fd:aa:f9:31:e6:0b:63: 48:46:5f:dc:f1:8b:1b:00:9e:69:06:b6:fc:ea:9c: 5e:6d:74:5b:7b:ef:84:5d:d4:59:ad:c8:f8:40:35: f7:3b:a7:3e:d6:c4:d5:66:fc:e9:61:11:50:78:60: c5:47:d3:f1:cc:8b:81:54:62:27:50:d6:8d:9b:46: eb:47:0d:7b:80:51:54:7d:e8:c4:f6:25:d1:87:3e: 60:49:f1:6d:19:2d:67:59:51:ec:8d:5f:7c:73:dc: 0a:ba:b6:c0:0f:6e:35:fd:f1:8b:fb:90:4a:05:88: d3:8c:89:3d:02:97:63:e4:98:c7:f3:cb:ed:d3:ea: c8:60:ae:5e:cb:95:b3:be:f5:15:29:a2:a8:20:84: ea:d2:6f:67:81:7f:5d:56:e7:e8:77:5f:c3:c7:92: 79:62:c0:15:b4:1c:f0:e4:25:ce:99:31:54:df:6b: 0e:91:fc:c8:54:33:80:65:80:22:af:4f:06:49:6f: ab:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8E:7E:49:79:0A:34:33:D3:38:DC:D1:C2:25:37:69:DF:F1:95:EE X509v3 Authority Key Identifier: keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e34302e302f32312d3231203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.11.40.0/21 Signature Algorithm: sha256WithRSAEncryption 08:5c:49:c0:87:69:fb:6f:9a:a8:d9:84:74:33:27:1f:3b:b2: f5:fb:6c:0f:14:36:e1:43:d2:b3:1f:65:46:c7:36:98:7f:42: bd:49:ca:c1:39:d6:4d:05:c8:b3:a4:81:a8:e1:b6:c2:e4:26: 0a:b3:81:38:c0:ea:8e:80:9b:b2:f4:5a:26:56:f1:e8:54:0d: b3:70:62:a8:b9:cc:36:d2:51:0b:1c:c1:5e:45:4e:82:a6:2f: 2c:d6:c4:9a:08:65:7e:2d:56:3c:65:43:ee:65:cb:83:3c:f3: ed:ef:a8:2d:2c:62:df:e2:18:ba:95:31:09:3e:89:fe:f8:e6: 44:82:3d:45:62:c0:fa:c4:86:6c:54:10:db:ed:98:ba:f2:4c: 7f:9c:bc:23:df:88:c4:ee:3a:60:15:d9:db:78:01:4a:0d:81: 5a:7f:4f:04:5f:bb:0a:17:15:6b:ee:5d:a9:d3:fc:12:ff:ca: ae:76:08:a9:3c:81:5d:1e:bd:6a:1c:83:80:47:a3:78:1b:f1: d7:e6:d0:d8:8b:51:d9:ab:cf:60:91:e1:4d:b0:30:80:b6:dc: 17:4a:17:a0:91:c0:01:a6:e3:90:34:bb:37:cc:5a:e5:5a:85: 57:8b:ba:e7:77:60:c5:6e:d8:6f:ef:21:1d:e4:fd:75:24:8d: 38:b4:8c:d4 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUMwmNm3iCVc8OpaR0K6P8iJoQ+IkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4 Mjg5MzI4OTAeFw0yNjA2MDIwNzQwMDlaFw0yNzA2MDEwNzQ1MDlaMDMxMTAvBgNV BAMTKDMyOEU3RTQ5NzkwQTM0MzNEMzM4RENEMUMyMjUzNzY5REZGMTk1RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk6bhI5sxrU8urO8ID053FO5sU A4sF7vup5DF2IAI3rxVzQo72mzECTipvTvCad69OFj+GZ+aAHbKvicHnj3AQKCg/ /ar5MeYLY0hGX9zxixsAnmkGtvzqnF5tdFt774Rd1FmtyPhANfc7pz7WxNVm/Olh EVB4YMVH0/HMi4FUYidQ1o2bRutHDXuAUVR96MT2JdGHPmBJ8W0ZLWdZUeyNX3xz 3Aq6tsAPbjX98Yv7kEoFiNOMiT0Cl2PkmMfzy+3T6shgrl7LlbO+9RUpoqgghOrS b2eBf11W5+h3X8PHknliwBW0HPDkJc6ZMVTfaw6R/MhUM4BlgCKvTwZJb6vhAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUMo5+SXkKNDPTONzRwiU3ad/xle4wHwYDVR0j BBgwFoAUCY1CHLRvKS8TznHfPWhdXoKJMokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzY2MjQ2Ni8wLzA5OEQ0MjFDQjQ2RjI5MkYxM0NFNzFERjNENjg1 RDVFODI4OTMyODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4Mjg5MzI4OS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3NjYyNDY2LzAvMzEzMjMyMmUzMTMx MmUzNDMwMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAN6CygwDQYJKoZIhvcNAQELBQADggEBAAhcScCHaftvmqjZhHQzJx87svX7bA8U NuFD0rMfZUbHNph/Qr1JysE51k0FyLOkgajhtsLkJgqzgTjA6o6Am7L0WiZW8ehU DbNwYqi5zDbSUQscwV5FToKmLyzWxJoIZX4tVjxlQ+5ly4M88+3vqC0sYt/iGLqV MQk+if745kSCPUViwPrEhmxUENvtmLryTH+cvCPfiMTuOmAV2dt4AUoNgVp/TwRf uwoXFWvuXanT/BL/yq52CKk8gV0evWocg4BHo3gb8dfm0NiLUdmrz2CR4U2wMIC2 3BdKF6CRwAGm45A0uzfMWuVahVeLuud3YMVu2G/vIR3k/XUkjTi0jNQ= -----END CERTIFICATE-----Generated at Fri Jun 12 02:24:14 2026 by rpki-client