$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e302e302f32342d3234203d3e20313937353430.roa File: 3132332e39382e302e302f32342d3234203d3e20313937353430.roa (raw, json) Hash identifier: f8C6VLPJ6OvFB09dBz6mz+VP2ro/1UGGvxqqWBCcEq8= Subject key identifier: D1:71:6F:8A:B3:9E:8D:40:9A:ED:47:7F:53:13:2F:64:7E:12:66:51 Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 2BAD630DB4A0398FB96D24C3CEB441BE3D8416F3 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e302e302f32342d3234203d3e20313937353430.roa Signing time: Wed 05 Aug 2026 07:29:18 +0000 ROA not before: Wed 05 Aug 2026 07:24:18 +0000 ROA not after: Wed 04 Aug 2027 07:29:18 +0000 asID: 197540 IP address blocks: 123.98.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 22:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ad:63:0d:b4:a0:39:8f:b9:6d:24:c3:ce:b4:41:be:3d:84:16:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Aug 5 07:24:18 2026 GMT Not After : Aug 4 07:29:18 2027 GMT Subject: CN=D1716F8AB39E8D409AED477F53132F647E126651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6d:51:fb:e7:5e:5e:02:45:0e:5a:f3:51:b9: 1a:08:5b:4a:e5:2a:82:af:b6:f5:c0:52:15:cb:55: 6b:cd:b8:72:4c:3b:1b:e9:e8:97:d9:cd:bc:69:49: 65:3d:6e:53:6c:08:15:e7:2b:ed:17:ed:50:e3:7c: 22:d4:c8:bb:2b:25:52:10:26:4e:3c:be:98:b8:16: 08:19:ca:57:ba:f7:3f:16:ae:f4:4f:70:47:e4:8f: 0a:28:34:ef:52:ac:c1:8c:96:be:b1:bd:58:2d:82: 18:13:68:e5:d7:dc:4b:bf:81:56:e3:f6:38:45:d0: 68:98:e6:26:65:2e:57:96:3a:e3:da:5f:56:42:54: 52:90:93:69:33:16:56:40:f3:bd:7e:94:5f:33:e5: f5:88:60:ef:57:44:0c:19:60:fd:4d:09:77:c7:63: b0:ce:34:71:f3:32:a8:10:9a:be:e2:7b:17:18:28: 2f:35:4a:ed:0c:aa:87:62:c1:89:99:c7:10:ec:1e: 4e:52:52:17:51:6f:99:3c:e4:89:d7:e2:12:8d:44: 4d:17:5c:30:e2:a8:37:45:bb:10:2b:ed:61:98:a8: f6:d2:80:01:d8:33:a1:40:74:61:2c:0b:39:28:e3: 2a:88:57:51:8e:4e:10:75:0b:cb:e5:45:f2:9c:f6: ac:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:71:6F:8A:B3:9E:8D:40:9A:ED:47:7F:53:13:2F:64:7E:12:66:51 X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e302e302f32342d3234203d3e20313937353430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.98.0.0/24 Signature Algorithm: sha256WithRSAEncryption c8:7d:80:df:78:ec:f2:fe:ad:62:a6:c1:36:e7:48:2d:be:51: 6f:50:a6:45:d2:6f:2f:d5:47:fc:67:b9:be:ef:b5:89:5c:6f: b1:03:2a:04:94:38:21:13:d7:be:82:88:4a:2d:a9:a0:a0:2d: bc:40:e9:56:78:c7:cb:66:60:33:8c:83:c8:cc:74:43:63:7f: 14:db:9f:3a:99:a9:ad:c8:b0:34:e4:a3:23:16:d3:85:0e:de: 18:72:69:3e:45:46:a1:17:ec:9a:92:64:e8:f2:42:3a:2c:1a: ef:96:9f:cb:9f:05:75:01:3b:67:66:a7:13:5a:48:16:d2:ea: 80:4f:99:6b:8b:1e:79:90:94:73:47:6b:58:81:62:59:b7:ae: e2:ed:46:7b:e2:f8:a4:f9:1c:4d:d4:26:cc:d1:1a:ad:ee:b2: 6d:76:51:89:b4:11:aa:bb:f7:44:8b:99:f4:e0:71:a6:45:8b: cd:ae:7a:a3:53:b7:de:59:f2:27:1f:c5:f8:cb:37:fa:5e:c9: 42:a1:10:c9:12:23:71:fd:19:25:21:6e:7e:fb:be:31:91:12: 1a:1a:6e:5a:98:95:c4:7c:a0:ff:ee:ae:8f:8c:88:e8:21:4c: 58:bb:70:30:8c:84:7a:4d:69:e9:4c:72:da:be:ab:d2:47:83: 57:7d:61:07 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUK61jDbSgOY+5bSTDzrRBvj2EFvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA4MDUwNzI0MThaFw0yNzA4MDQwNzI5MThaMDMxMTAvBgNV BAMTKEQxNzE2RjhBQjM5RThENDA5QUVENDc3RjUzMTMyRjY0N0UxMjY2NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/bVH7515eAkUOWvNRuRoIW0rl KoKvtvXAUhXLVWvNuHJMOxvp6JfZzbxpSWU9blNsCBXnK+0X7VDjfCLUyLsrJVIQ Jk48vpi4FggZyle69z8WrvRPcEfkjwooNO9SrMGMlr6xvVgtghgTaOXX3Eu/gVbj 9jhF0GiY5iZlLleWOuPaX1ZCVFKQk2kzFlZA871+lF8z5fWIYO9XRAwZYP1NCXfH Y7DONHHzMqgQmr7iexcYKC81Su0MqodiwYmZxxDsHk5SUhdRb5k85InX4hKNRE0X XDDiqDdFuxAr7WGYqPbSgAHYM6FAdGEsCzko4yqIV1GOThB1C8vlRfKc9qwzAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU0XFvirOejUCa7Ud/UxMvZH4SZlEwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NTI1MjUxLzAvMzEzMjMzMmUzOTM4 MmUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzkzNzM1MzQzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHtiADANBgkqhkiG9w0BAQsFAAOCAQEAyH2A33js8v6tYqbBNudILb5Rb1Cm RdJvL9VH/Ge5vu+1iVxvsQMqBJQ4IRPXvoKISi2poKAtvEDpVnjHy2ZgM4yDyMx0 Q2N/FNufOpmprciwNOSjIxbThQ7eGHJpPkVGoRfsmpJk6PJCOiwa75afy58FdQE7 Z2anE1pIFtLqgE+Za4seeZCUc0drWIFiWbeu4u1Ge+L4pPkcTdQmzNEare6ybXZR ibQRqrv3RIuZ9OBxpkWLza56o1O33lnyJx/F+Ms3+l7JQqEQyRIjcf0ZJSFufvu+ MZESGhpuWpiVxHyg/+6uj4yI6CFMWLtwMIyEek1p6Uxy2r6r0keDV31hBw== -----END CERTIFICATE-----Generated at Wed Sep 9 21:27:09 2026 by rpki-client