$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e302e302f32342d3234203d3e20323133373035.roa File: 3132332e39382e302e302f32342d3234203d3e20323133373035.roa (raw, json) Hash identifier: b0ZNmUbJOa3YhxiqyjI4SpACL/6mavpgFb/0j+/3fak= Subject key identifier: AE:05:C6:95:86:03:DE:38:22:A4:49:45:0B:39:F9:92:06:05:6D:6D Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 092C64C46F4AB063943BADF6C74A4B80CB9D9CBE Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e302e302f32342d3234203d3e20323133373035.roa Signing time: Mon 13 Jul 2026 03:46:33 +0000 ROA not before: Mon 13 Jul 2026 03:41:33 +0000 ROA not after: Mon 12 Jul 2027 03:46:33 +0000 asID: 213705 IP address blocks: 123.98.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 14:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:2c:64:c4:6f:4a:b0:63:94:3b:ad:f6:c7:4a:4b:80:cb:9d:9c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Jul 13 03:41:33 2026 GMT Not After : Jul 12 03:46:33 2027 GMT Subject: CN=AE05C6958603DE3822A449450B39F99206056D6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:21:a5:41:e9:5a:d3:45:7b:49:46:39:2a:95: ef:a3:3d:3f:ca:59:ba:11:18:f1:e4:2f:ff:10:50: 96:ad:f3:c5:3c:07:a0:00:e7:19:d6:36:d6:36:23: 7f:ea:f7:b0:d7:0f:9a:c6:e4:cf:13:31:e3:95:ce: 0f:ce:a3:82:d5:94:89:d6:c1:26:52:b1:f7:56:4b: 73:7c:40:e1:c7:e3:ee:69:e6:72:f1:a5:14:2c:13: 26:0e:64:eb:82:08:47:f8:29:2a:62:0c:aa:b3:8b: 2d:31:fd:84:06:44:e7:3e:a8:55:f1:b9:fb:f7:53: 62:f8:eb:ff:54:5b:65:bb:14:ed:66:0f:21:80:ae: 98:47:f8:84:6a:26:2f:92:ab:cf:1b:b0:ee:52:26: 0c:10:32:d7:21:d6:73:0b:b9:25:81:ff:91:9f:d7: 69:37:1c:33:ae:fe:bc:f8:73:85:e4:1a:6c:ee:44: 3e:89:12:55:f1:35:03:eb:a1:32:e3:84:1f:82:e6: 5e:06:53:ea:cf:18:8d:47:7a:d9:c3:3e:77:4f:8f: 90:47:0b:ae:4b:cf:31:16:f2:8e:99:25:8f:bc:41: ac:95:30:28:46:71:a8:d6:6a:51:51:b4:c6:81:b7: 75:3a:55:ab:e1:5b:e1:78:e6:cc:0e:22:1f:62:67: 11:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:05:C6:95:86:03:DE:38:22:A4:49:45:0B:39:F9:92:06:05:6D:6D X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e302e302f32342d3234203d3e20323133373035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.98.0.0/24 Signature Algorithm: sha256WithRSAEncryption c5:49:8a:e2:a2:51:b6:53:ac:d5:c4:ab:6a:6c:de:29:d5:01: 06:9c:73:73:93:d3:af:27:ff:5f:c9:a1:57:f4:67:2c:12:45: af:d0:79:5d:7a:da:56:63:81:eb:58:0b:95:94:c0:1c:f6:76: 11:02:a1:8a:58:1b:df:6f:93:ef:a0:27:9b:ee:77:f5:ae:b2: 18:28:63:31:92:1d:6d:2f:b3:cf:85:77:71:6c:a1:14:ee:b3: 7d:b9:75:ac:5c:b6:77:2d:14:2c:ab:e0:1a:79:bc:e3:17:1b: 5b:f9:93:02:bc:a8:5d:e5:e1:b8:c7:54:09:7f:90:b7:51:d1: c6:5f:57:a1:7c:7f:7b:1e:e6:a1:24:c4:46:1a:ae:c7:e4:94: 84:8e:f0:72:ed:1b:58:ec:ea:c2:2d:6c:89:05:3c:93:9b:ea: fb:c4:32:83:e3:77:2e:20:2c:52:ba:bc:f5:d1:60:98:ea:15: e4:1f:3c:35:f5:8e:57:88:02:10:cb:bf:f8:dd:f9:c6:7a:22: d2:03:9d:24:39:30:df:7b:41:f1:62:82:9d:1f:64:0d:5b:bb: 15:1a:ca:c7:6c:02:20:5b:8b:cd:32:61:b2:ec:f3:9b:65:d3: 8b:6c:4a:66:b3:a4:96:ed:31:5a:84:51:ce:83:19:5c:39:83: 8e:99:9e:0e -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUCSxkxG9KsGOUO632x0pLgMudnL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA3MTMwMzQxMzNaFw0yNzA3MTIwMzQ2MzNaMDMxMTAvBgNV BAMTKEFFMDVDNjk1ODYwM0RFMzgyMkE0NDk0NTBCMzlGOTkyMDYwNTZENkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpIaVB6VrTRXtJRjkqle+jPT/K WboRGPHkL/8QUJat88U8B6AA5xnWNtY2I3/q97DXD5rG5M8TMeOVzg/Oo4LVlInW wSZSsfdWS3N8QOHH4+5p5nLxpRQsEyYOZOuCCEf4KSpiDKqziy0x/YQGROc+qFXx ufv3U2L46/9UW2W7FO1mDyGArphH+IRqJi+Sq88bsO5SJgwQMtch1nMLuSWB/5Gf 12k3HDOu/rz4c4XkGmzuRD6JElXxNQProTLjhB+C5l4GU+rPGI1HetnDPndPj5BH C65LzzEW8o6ZJY+8QayVMChGcajWalFRtMaBt3U6VavhW+F45swOIh9iZxEfAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUrgXGlYYD3jgipElFCzn5kgYFbW0wHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NTI1MjUxLzAvMzEzMjMzMmUzOTM4 MmUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMzM3MzAzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHtiADANBgkqhkiG9w0BAQsFAAOCAQEAxUmK4qJRtlOs1cSramzeKdUBBpxz c5PTryf/X8mhV/RnLBJFr9B5XXraVmOB61gLlZTAHPZ2EQKhilgb32+T76Anm+53 9a6yGChjMZIdbS+zz4V3cWyhFO6zfbl1rFy2dy0ULKvgGnm84xcbW/mTAryoXeXh uMdUCX+Qt1HRxl9XoXx/ex7moSTERhqux+SUhI7wcu0bWOzqwi1siQU8k5vq+8Qy g+N3LiAsUrq89dFgmOoV5B88NfWOV4gCEMu/+N35xnoi0gOdJDkw33tB8WKCnR9k DVu7FRrKx2wCIFuLzTJhsuzzm2XTi2xKZrOklu0xWoRRzoMZXDmDjpmeDg== -----END CERTIFICATE-----Generated at Fri Jul 24 22:15:15 2026 by rpki-client