$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e342e302f32342d3234203d3e20323133373035.roa File: 3132332e39382e342e302f32342d3234203d3e20323133373035.roa (raw, json) Hash identifier: 9NDodR/eZTmIwc0Q+h0OdWUtoA6QOSFBjWkZi6kLzwY= Subject key identifier: 51:60:78:51:A8:09:EE:AE:AE:4A:36:8F:3D:47:BE:E2:DC:A5:D3:52 Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 32B62F5D6DD5D20FDEF58508683276D89D131B01 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e342e302f32342d3234203d3e20323133373035.roa Signing time: Wed 22 Apr 2026 07:50:15 +0000 ROA not before: Wed 22 Apr 2026 07:45:15 +0000 ROA not after: Wed 21 Apr 2027 07:50:15 +0000 asID: 213705 IP address blocks: 123.98.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 12:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:b6:2f:5d:6d:d5:d2:0f:de:f5:85:08:68:32:76:d8:9d:13:1b:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Apr 22 07:45:15 2026 GMT Not After : Apr 21 07:50:15 2027 GMT Subject: CN=51607851A809EEAEAE4A368F3D47BEE2DCA5D352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a6:65:be:95:2c:5c:73:e5:ac:c5:9d:25:6a: 26:1d:23:0c:28:88:eb:f3:0d:cb:ea:56:8a:06:3d: fb:29:31:12:a8:2b:2a:11:94:04:97:e2:ff:cc:bb: 13:70:f7:22:ba:75:1d:5e:ad:c0:85:cc:69:77:c2: b5:90:6c:19:10:a5:21:c2:e5:24:e7:af:08:8c:24: a9:ad:b2:20:9f:1a:19:02:e0:c4:1d:c3:38:59:41: 3e:05:99:f5:c1:1b:51:12:33:5f:3b:84:b3:91:cf: 68:ed:c0:15:b9:f2:cf:14:44:4f:26:e3:9e:f7:f8: 15:60:d6:6a:b0:94:b3:3d:e7:eb:0a:88:9e:f6:9d: 66:1b:ee:16:88:e9:42:b1:ba:3c:75:a3:d2:cf:35: 58:76:ec:55:4f:d5:84:be:09:2a:77:74:d9:62:34: b9:6c:95:21:37:81:c3:0e:e8:6c:6f:c9:6f:97:b1: 1b:c3:00:8c:2a:4c:7b:ed:66:6b:fe:9d:b6:eb:d9: 79:df:aa:4c:6e:e8:a2:ef:a5:88:2f:c0:63:81:68: fe:10:5d:c4:cc:8c:8c:53:83:73:39:be:59:2a:fa: 2c:fc:a1:a2:6a:38:c0:ce:6e:5e:bf:f6:74:e5:e8: 43:42:92:69:7e:63:3f:4d:85:42:4f:0d:f3:33:f8: 67:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:60:78:51:A8:09:EE:AE:AE:4A:36:8F:3D:47:BE:E2:DC:A5:D3:52 X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e342e302f32342d3234203d3e20323133373035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.98.4.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:ca:3e:92:ba:d2:45:2d:b8:d9:30:c9:52:93:87:c6:88:58: 67:5c:50:33:7c:a2:c3:de:1b:64:81:b7:a0:23:8b:8f:c7:0c: 4e:ce:cc:5a:e3:11:36:e7:7f:2f:1e:22:91:ec:8a:e7:b6:7c: 2e:b7:c4:a7:93:26:63:61:3c:ea:b5:b2:30:37:4c:3c:25:28: b0:3a:24:13:ce:46:13:56:16:d2:3b:35:e5:85:bd:1c:2a:af: c3:4c:24:d5:f8:a4:69:fb:1a:9a:73:27:da:f4:46:2c:1b:91: 8c:1c:4b:fa:94:f5:38:0b:25:e2:12:fa:53:ba:f2:36:83:59: 26:9a:58:f2:36:4c:a0:4d:a6:9c:eb:70:4c:9f:ae:73:8e:94: aa:45:35:4c:95:e5:f8:e3:30:5b:d5:e5:76:ad:49:71:67:1f: e5:79:39:7a:b1:74:10:ce:d1:cf:ee:77:ff:cc:1c:83:e7:ff: 5a:a7:d9:9c:c3:ac:14:9d:68:ac:09:50:ec:3c:bc:85:45:2b: 7b:0d:c2:d3:73:92:2a:9b:5c:c3:5e:09:fc:67:42:4c:2f:34: e4:58:0c:fd:6d:e7:df:ce:5b:e8:7d:27:4c:f9:19:63:41:01: f1:31:25:2f:e6:38:8c:74:16:e4:20:34:34:d7:72:17:8a:59: 2f:7e:f5:15 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUMrYvXW3V0g/e9YUIaDJ22J0TGwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA0MjIwNzQ1MTVaFw0yNzA0MjEwNzUwMTVaMDMxMTAvBgNV BAMTKDUxNjA3ODUxQTgwOUVFQUVBRTRBMzY4RjNENDdCRUUyRENBNUQzNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3pmW+lSxcc+WsxZ0laiYdIwwo iOvzDcvqVooGPfspMRKoKyoRlASX4v/MuxNw9yK6dR1ercCFzGl3wrWQbBkQpSHC 5STnrwiMJKmtsiCfGhkC4MQdwzhZQT4FmfXBG1ESM187hLORz2jtwBW58s8URE8m 4573+BVg1mqwlLM95+sKiJ72nWYb7haI6UKxujx1o9LPNVh27FVP1YS+CSp3dNli NLlslSE3gcMO6GxvyW+XsRvDAIwqTHvtZmv+nbbr2Xnfqkxu6KLvpYgvwGOBaP4Q XcTMjIxTg3M5vlkq+iz8oaJqOMDObl6/9nTl6ENCkml+Yz9NhUJPDfMz+GeLAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUUWB4UagJ7q6uSjaPPUe+4tyl01IwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NTI1MjUxLzAvMzEzMjMzMmUzOTM4 MmUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMzM3MzAzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHtiBDANBgkqhkiG9w0BAQsFAAOCAQEAiso+krrSRS242TDJUpOHxohYZ1xQ M3yiw94bZIG3oCOLj8cMTs7MWuMRNud/Lx4ikeyK57Z8LrfEp5MmY2E86rWyMDdM PCUosDokE85GE1YW0js15YW9HCqvw0wk1fikafsamnMn2vRGLBuRjBxL+pT1OAsl 4hL6U7ryNoNZJppY8jZMoE2mnOtwTJ+uc46UqkU1TJXl+OMwW9Xldq1JcWcf5Xk5 erF0EM7Rz+53/8wcg+f/WqfZnMOsFJ1orAlQ7Dy8hUUrew3C03OSKptcw14J/GdC TC805FgM/W3n385b6H0nTPkZY0EB8TElL+Y4jHQW5CA0NNdyF4pZL371FQ== -----END CERTIFICATE-----Generated at Fri Apr 24 18:23:29 2026 by rpki-client