$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e362e302f32342d3234203d3e20323133373035.roa File: 3132332e39382e362e302f32342d3234203d3e20323133373035.roa (raw, json) Hash identifier: dPxpdzbq8j2sDVgHipOTeqZmCUwNKlAKmnGvCUfMqN4= Subject key identifier: 3E:C3:C1:7D:D3:6A:B7:50:C9:70:9D:52:1C:F1:80:61:AB:94:FA:C9 Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 4F11CC90AD4D39EBCEA6091E074453062B2C4476 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e362e302f32342d3234203d3e20323133373035.roa Signing time: Wed 22 Apr 2026 07:50:31 +0000 ROA not before: Wed 22 Apr 2026 07:45:31 +0000 ROA not after: Wed 21 Apr 2027 07:50:31 +0000 asID: 213705 IP address blocks: 123.98.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 12:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:11:cc:90:ad:4d:39:eb:ce:a6:09:1e:07:44:53:06:2b:2c:44:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Apr 22 07:45:31 2026 GMT Not After : Apr 21 07:50:31 2027 GMT Subject: CN=3EC3C17DD36AB750C9709D521CF18061AB94FAC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0b:9f:23:6e:38:ef:bf:e5:65:84:67:d3:8b: b6:8b:e5:32:9d:b2:aa:56:5e:82:39:f6:2f:b9:51: 8b:4a:d8:35:33:93:c6:5b:a4:40:9a:cc:87:93:44: 2e:a9:07:2e:87:75:e8:f3:be:a3:5a:b2:da:e7:78: 4a:41:db:b9:09:fe:30:94:b6:b4:90:81:ac:e7:97: bb:6d:45:64:c3:cd:77:4c:5d:ec:53:25:83:bc:e4: e1:07:87:5e:8c:87:d0:82:3e:80:c3:dd:fd:6d:21: 44:74:27:11:02:0e:19:6b:9c:d1:19:b4:2b:fb:64: 72:5c:0b:b2:3b:c0:12:1a:ce:06:25:9a:7d:e0:e0: 41:87:2a:da:09:01:92:da:60:52:ac:7f:d5:79:a8: 18:eb:eb:0e:c5:f2:c9:ca:30:bf:74:24:16:a0:0b: 3f:2e:33:b1:0b:55:b0:ec:bf:4d:59:f8:28:e4:73: cf:34:9d:7c:b9:3b:0e:9e:75:d9:6c:83:74:9f:29: cd:51:d2:84:e8:d9:6a:0f:84:59:55:8c:16:86:e8: f1:b2:c0:ec:b1:fa:bb:be:8b:07:81:b8:15:96:62: 58:9f:16:45:8f:fd:67:87:80:5e:90:0a:7f:88:2f: bb:f9:91:0c:6d:90:56:96:23:1f:11:05:51:da:da: 9f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C3:C1:7D:D3:6A:B7:50:C9:70:9D:52:1C:F1:80:61:AB:94:FA:C9 X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e362e302f32342d3234203d3e20323133373035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.98.6.0/24 Signature Algorithm: sha256WithRSAEncryption 90:54:4d:35:c3:e1:1f:55:cb:98:6d:c2:15:02:00:1e:9e:72: 47:f7:9c:68:40:a0:83:c2:6e:94:1d:01:07:f7:38:cd:31:63: f6:54:6e:f6:d0:ee:ed:fd:18:a0:ec:07:09:d0:12:5a:9a:d5: 68:4c:ce:67:af:7d:f8:58:20:5b:ca:87:64:21:a3:7a:61:1a: b2:6c:0d:9b:14:b8:98:0b:2a:c8:30:3b:02:ee:03:f3:1f:70: e1:a2:6d:c5:6a:b2:c7:13:26:1a:c8:d1:96:39:b8:92:a3:f6: 4b:dd:ab:bb:81:2d:5f:f3:ba:2b:d4:ed:f0:6a:5e:8c:49:e3: 8c:d2:ae:62:b0:b3:93:b1:94:76:4f:3e:8f:0e:87:19:58:de: f3:9b:4b:43:6f:11:57:6d:40:e0:a4:3f:54:5b:58:08:35:f5: d9:6f:3b:06:df:12:52:15:50:04:23:5f:bb:eb:85:6d:61:8b: d6:44:2a:2c:bd:b3:3f:fe:98:3c:48:9f:af:e0:23:99:9c:06: be:9b:23:ff:4b:43:4b:e1:95:cd:5e:32:8e:62:95:18:16:bc: 67:4a:3f:6f:4d:0e:8f:e7:34:ae:76:d2:a3:67:2d:cf:ca:93: 97:01:55:d0:9c:14:ff:f8:e9:25:68:b9:a8:8a:0a:ef:cf:91: 6f:7c:50:bb -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUTxHMkK1NOevOpgkeB0RTBissRHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA0MjIwNzQ1MzFaFw0yNzA0MjEwNzUwMzFaMDMxMTAvBgNV BAMTKDNFQzNDMTdERDM2QUI3NTBDOTcwOUQ1MjFDRjE4MDYxQUI5NEZBQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCC58jbjjvv+VlhGfTi7aL5TKd sqpWXoI59i+5UYtK2DUzk8ZbpECazIeTRC6pBy6HdejzvqNastrneEpB27kJ/jCU trSQgaznl7ttRWTDzXdMXexTJYO85OEHh16Mh9CCPoDD3f1tIUR0JxECDhlrnNEZ tCv7ZHJcC7I7wBIazgYlmn3g4EGHKtoJAZLaYFKsf9V5qBjr6w7F8snKML90JBag Cz8uM7ELVbDsv01Z+Cjkc880nXy5Ow6eddlsg3SfKc1R0oTo2WoPhFlVjBaG6PGy wOyx+ru+iweBuBWWYlifFkWP/WeHgF6QCn+IL7v5kQxtkFaWIx8RBVHa2p9rAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUPsPBfdNqt1DJcJ1SHPGAYauU+skwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NTI1MjUxLzAvMzEzMjMzMmUzOTM4 MmUzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMzM3MzAzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHtiBjANBgkqhkiG9w0BAQsFAAOCAQEAkFRNNcPhH1XLmG3CFQIAHp5yR/ec aECgg8JulB0BB/c4zTFj9lRu9tDu7f0YoOwHCdASWprVaEzOZ699+FggW8qHZCGj emEasmwNmxS4mAsqyDA7Au4D8x9w4aJtxWqyxxMmGsjRljm4kqP2S92ru4EtX/O6 K9Tt8GpejEnjjNKuYrCzk7GUdk8+jw6HGVje85tLQ28RV21A4KQ/VFtYCDX12W87 Bt8SUhVQBCNfu+uFbWGL1kQqLL2zP/6YPEifr+AjmZwGvpsj/0tDS+GVzV4yjmKV GBa8Z0o/b00Oj+c0rnbSo2ctz8qTlwFV0JwU//jpJWi5qIoK78+Rb3xQuw== -----END CERTIFICATE-----Generated at Fri Apr 24 18:23:08 2026 by rpki-client