$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3234302e302f32322d3234203d3e20333939343631.roa File: 3132342e34322e3234302e302f32322d3234203d3e20333939343631.roa (raw, json) Hash identifier: 4B4AM0muhjlKy02qC1EFE7OlYf1sLsUdH6qypvY7jmY= Subject key identifier: DB:27:83:A9:1F:21:5E:CA:C8:2C:A8:11:E8:48:DB:3D:4A:A9:C3:1A Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 4FA6D53BEC4E89930A2D0B23C61AD702AC50B84F Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3234302e302f32322d3234203d3e20333939343631.roa Signing time: Tue 19 May 2026 16:15:16 +0000 ROA not before: Tue 19 May 2026 16:10:16 +0000 ROA not after: Tue 18 May 2027 16:15:16 +0000 asID: 399461 IP address blocks: 124.42.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 19:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a6:d5:3b:ec:4e:89:93:0a:2d:0b:23:c6:1a:d7:02:ac:50:b8:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: May 19 16:10:16 2026 GMT Not After : May 18 16:15:16 2027 GMT Subject: CN=DB2783A91F215ECAC82CA811E848DB3D4AA9C31A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e0:54:02:6f:1f:36:78:32:db:eb:2f:0e:10: 88:c2:8e:a2:4c:fb:c8:e3:f5:fb:c1:f5:bd:ec:2b: 70:28:c4:5f:72:1d:4c:36:dd:22:d5:8c:19:43:d7: 23:d0:48:60:df:44:c1:4b:b3:69:6b:3e:cf:63:c1: be:19:08:c3:29:02:6c:4e:e0:00:e7:9e:5f:90:d5: cb:0f:83:08:5e:0b:9b:84:fc:7c:f5:e5:17:08:7f: 23:3b:81:01:df:63:e3:a7:88:63:39:75:ea:48:a4: ef:6f:bf:df:93:a9:16:c9:d8:32:d3:4d:d1:0d:0b: c2:35:1d:7d:c1:90:7a:6e:81:eb:ba:b4:b0:a1:a1: fe:88:7c:9d:ee:4b:01:66:0b:54:23:e8:47:d4:1c: ac:b8:ee:cf:fa:a7:29:47:02:d6:25:eb:20:8f:c5: f1:38:dc:e8:08:0f:3a:c2:bb:56:4e:3d:69:dc:73: 96:87:7a:4b:58:f1:a3:e6:6a:87:b9:34:74:a0:dd: 9c:e5:37:cb:2c:91:a5:d2:91:01:82:1d:54:9b:d0: dc:2f:5f:c6:01:90:a3:09:bb:bd:b1:62:dd:ee:ab: ec:08:6f:37:c1:bf:db:88:2b:70:e1:37:25:8b:0d: 5e:e8:13:5e:98:f0:89:49:d7:6a:3f:58:3a:26:9a: ae:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:27:83:A9:1F:21:5E:CA:C8:2C:A8:11:E8:48:DB:3D:4A:A9:C3:1A X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3234302e302f32322d3234203d3e20333939343631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.42.240.0/22 Signature Algorithm: sha256WithRSAEncryption b6:0b:f4:92:c7:23:98:65:f6:ac:26:7f:56:e8:9d:e7:95:73: 20:a4:97:be:f6:d9:41:ef:24:49:3f:cf:aa:b9:bc:8a:18:3d: c3:1c:9b:05:ec:be:ed:11:b3:0d:c3:ef:72:d7:55:c1:4b:1b: 45:1a:f3:cc:67:ec:b4:9b:d7:4d:5a:a1:06:97:fa:c8:40:48: 45:29:cf:35:a3:5f:95:63:43:8c:23:31:7e:d6:c3:27:16:77: 0a:80:fd:2d:64:3c:17:2e:b6:62:b9:fe:95:1f:65:56:4f:c7: 92:00:41:d3:c1:9f:d0:b3:a4:77:a5:91:3f:0f:c9:5a:4c:a8: 2a:e1:04:e1:34:78:2b:6a:73:03:8c:ad:a2:89:ef:c2:e5:9d: 1d:4f:26:c3:69:11:f4:b0:b8:60:00:36:ed:e5:b0:ec:bb:be: ad:22:49:ec:15:fd:54:69:81:9b:bd:70:34:3a:96:cf:b9:58: 5b:49:cd:34:49:1d:7c:31:60:2f:49:d6:e0:25:ee:0d:1e:95: ab:83:ca:ac:e5:88:71:3f:bf:c2:48:e6:b2:b9:1b:1a:0b:2a: eb:f5:90:e7:9b:bd:aa:9a:e5:07:6a:7e:b9:7e:f7:ce:57:b3: 1f:bd:6e:29:ba:27:85:4b:c8:bb:ee:4c:86:7c:f7:96:ae:83: 6d:53:3a:e8 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUT6bVO+xOiZMKLQsjxhrXAqxQuE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA1MTkxNjEwMTZaFw0yNzA1MTgxNjE1MTZaMDMxMTAvBgNV BAMTKERCMjc4M0E5MUYyMTVFQ0FDODJDQTgxMUU4NDhEQjNENEFBOUMzMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh4FQCbx82eDLb6y8OEIjCjqJM +8jj9fvB9b3sK3AoxF9yHUw23SLVjBlD1yPQSGDfRMFLs2lrPs9jwb4ZCMMpAmxO 4ADnnl+Q1csPgwheC5uE/Hz15RcIfyM7gQHfY+OniGM5depIpO9vv9+TqRbJ2DLT TdENC8I1HX3BkHpugeu6tLChof6IfJ3uSwFmC1Qj6EfUHKy47s/6pylHAtYl6yCP xfE43OgIDzrCu1ZOPWncc5aHektY8aPmaoe5NHSg3ZzlN8sskaXSkQGCHVSb0Nwv X8YBkKMJu72xYt3uq+wIbzfBv9uIK3DhNyWLDV7oE16Y8IlJ12o/WDommq63AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU2yeDqR8hXsrILKgR6EjbPUqpwxowHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC8zMTMyMzQyZTM0 MzIyZTMyMzQzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMzMzkzOTM0MzYzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAnwq8DANBgkqhkiG9w0BAQsFAAOCAQEAtgv0kscjmGX2rCZ/Vuid 55VzIKSXvvbZQe8kST/Pqrm8ihg9wxybBey+7RGzDcPvctdVwUsbRRrzzGfstJvX TVqhBpf6yEBIRSnPNaNflWNDjCMxftbDJxZ3CoD9LWQ8Fy62Yrn+lR9lVk/HkgBB 08Gf0LOkd6WRPw/JWkyoKuEE4TR4K2pzA4ytoonvwuWdHU8mw2kR9LC4YAA27eWw 7Lu+rSJJ7BX9VGmBm71wNDqWz7lYW0nNNEkdfDFgL0nW4CXuDR6Vq4PKrOWIcT+/ wkjmsrkbGgsq6/WQ55u9qprlB2p+uX73zlezH71uKbonhUvIu+5Mhnz3lq6DbVM6 6A== -----END CERTIFICATE-----Generated at Tue May 26 03:58:41 2026 by rpki-client