$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3139322e302f32322d3234203d3e20333939343631.roa File: 3132342e34322e3139322e302f32322d3234203d3e20333939343631.roa (raw, json) Hash identifier: trB6SktpSYC7zM1r9EZNF5FEgIXdKibjV3X9atiiRNg= Subject key identifier: E9:FA:2D:F0:D4:31:BC:17:14:3A:94:4F:0F:8D:97:52:C8:BD:A2:10 Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 2DD28D3AB1D1FB08CAF867CF2183860BE18AF33A Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3139322e302f32322d3234203d3e20333939343631.roa Signing time: Mon 13 Jul 2026 03:46:35 +0000 ROA not before: Mon 13 Jul 2026 03:41:35 +0000 ROA not after: Mon 12 Jul 2027 03:46:35 +0000 asID: 399461 IP address blocks: 124.42.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d2:8d:3a:b1:d1:fb:08:ca:f8:67:cf:21:83:86:0b:e1:8a:f3:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Jul 13 03:41:35 2026 GMT Not After : Jul 12 03:46:35 2027 GMT Subject: CN=E9FA2DF0D431BC17143A944F0F8D9752C8BDA210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:23:b3:45:8b:ed:36:fa:fc:be:ec:a4:45:48: 1f:0b:7c:fa:15:db:ca:28:fa:10:1b:1d:c4:2e:20: 7c:ad:ba:28:a8:e4:ba:ec:60:84:8b:8a:08:e5:2e: 6f:bd:ed:71:47:4b:4b:77:86:20:1f:de:74:9f:6d: de:b2:ce:5c:0c:ae:05:35:36:18:55:91:6b:c1:76: f0:ef:d6:ee:91:11:33:72:b2:48:ff:82:7b:6d:8f: 44:9d:bb:ad:a4:ef:39:73:68:f9:9e:46:f0:c5:78: 5f:cd:33:1a:ee:3b:e9:2f:00:03:fe:b9:0e:9b:13: db:8d:e3:0f:32:5a:78:0e:0b:b7:44:80:54:3e:8b: 11:5f:ca:59:61:09:2d:47:45:96:39:62:b9:06:71: 98:d9:a5:52:34:f9:f9:75:a9:34:c1:b5:e8:76:eb: 1e:de:98:15:86:61:ed:18:42:da:ce:05:e3:29:a3: 4b:3a:aa:d9:ae:27:d4:7a:66:1a:8d:29:5a:9d:56: 1b:e9:a5:f4:6d:0a:04:7c:78:dc:d9:e1:69:e6:b1: eb:fb:fe:97:02:03:dc:c8:79:89:bc:d1:65:a5:a6: a2:c1:d5:a7:d4:4c:90:1e:60:ef:75:ba:39:38:cc: 09:c8:8a:0f:81:0b:2f:41:c2:36:45:44:17:5e:49: db:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FA:2D:F0:D4:31:BC:17:14:3A:94:4F:0F:8D:97:52:C8:BD:A2:10 X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3139322e302f32322d3234203d3e20333939343631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.42.192.0/22 Signature Algorithm: sha256WithRSAEncryption b0:74:6e:65:28:95:a6:c9:fd:0c:0b:00:d3:a2:fd:b9:68:af: b5:4e:5a:c0:36:a4:37:bc:45:2d:40:f9:15:5f:9a:a4:c0:1a: 5d:50:61:23:ba:82:26:69:0c:83:e6:b9:f7:6f:83:e0:c2:87: c3:12:cb:37:3c:52:ed:36:e3:97:9c:99:19:7b:85:83:6c:71: 98:2c:66:c1:47:49:da:67:99:bf:e2:fa:4f:0b:d6:f2:45:0b: 29:d7:e2:b5:91:06:ed:85:f2:73:7f:4f:f7:0d:c5:52:a8:95: 34:7d:4f:e5:eb:47:4a:92:84:c5:b3:0c:dc:1b:37:46:a8:7c: a8:83:1a:a7:36:05:fa:e0:82:62:32:4c:67:11:4f:38:89:0c: 02:e5:eb:29:b5:f7:ae:04:5b:25:11:4a:1b:4d:9e:45:4a:88: fc:d4:1a:8e:f4:81:c4:06:0c:a2:77:fc:2a:a5:ca:29:49:bf: e0:61:c0:5c:69:5e:e8:30:03:3a:cb:14:e4:d2:72:95:fd:c2: 9b:a5:8c:e9:68:2f:ca:c8:4b:85:41:4c:07:60:19:08:ff:e7: c8:3a:cc:eb:d0:4e:91:c1:f3:a8:2a:8d:c2:52:76:f3:84:7a: 50:d3:26:29:ca:ad:1f:4d:78:39:dc:68:8d:96:15:3c:97:36: b9:6e:1e:98 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIULdKNOrHR+wjK+GfPIYOGC+GK8zowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA3MTMwMzQxMzVaFw0yNzA3MTIwMzQ2MzVaMDMxMTAvBgNV BAMTKEU5RkEyREYwRDQzMUJDMTcxNDNBOTQ0RjBGOEQ5NzUyQzhCREEyMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6I7NFi+02+vy+7KRFSB8LfPoV 28oo+hAbHcQuIHytuiio5LrsYISLigjlLm+97XFHS0t3hiAf3nSfbd6yzlwMrgU1 NhhVkWvBdvDv1u6RETNyskj/gnttj0Sdu62k7zlzaPmeRvDFeF/NMxruO+kvAAP+ uQ6bE9uN4w8yWngOC7dEgFQ+ixFfyllhCS1HRZY5YrkGcZjZpVI0+fl1qTTBteh2 6x7emBWGYe0YQtrOBeMpo0s6qtmuJ9R6ZhqNKVqdVhvppfRtCgR8eNzZ4Wnmsev7 /pcCA9zIeYm80WWlpqLB1afUTJAeYO91ujk4zAnIig+BCy9BwjZFRBdeSdtzAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU6fot8NQxvBcUOpRPD42XUsi9ohAwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC8zMTMyMzQyZTM0 MzIyZTMxMzkzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMzMzkzOTM0MzYzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAnwqwDANBgkqhkiG9w0BAQsFAAOCAQEAsHRuZSiVpsn9DAsA06L9 uWivtU5awDakN7xFLUD5FV+apMAaXVBhI7qCJmkMg+a592+D4MKHwxLLNzxS7Tbj l5yZGXuFg2xxmCxmwUdJ2meZv+L6TwvW8kULKdfitZEG7YXyc39P9w3FUqiVNH1P 5etHSpKExbMM3Bs3Rqh8qIMapzYF+uCCYjJMZxFPOIkMAuXrKbX3rgRbJRFKG02e RUqI/NQajvSBxAYMonf8KqXKKUm/4GHAXGle6DADOssU5NJylf3Cm6WM6WgvyshL hUFMB2AZCP/nyDrM69BOkcHzqCqNwlJ284R6UNMmKcqtH014OdxojZYVPJc2uW4e mA== -----END CERTIFICATE-----Generated at Fri Jul 24 21:06:07 2026 by rpki-client