$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3132312e34302e302e302f31342d3234203d3e203337393633.roa File: 3132312e34302e302e302f31342d3234203d3e203337393633.roa (raw, json) Hash identifier: F+45dQDYE5GxI3QnVJJ+0Y/Yhf0LCMHLUg32Sa/qhCI= Subject key identifier: D8:3B:35:12:9F:14:04:92:AE:5A:9F:C6:83:7D:C5:BA:3E:78:50:91 Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Certificate serial: 1F725AA764FF22CBEA273B5D0A9402DDF9BA6BE1 Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3132312e34302e302e302f31342d3234203d3e203337393633.roa Signing time: Mon 20 Apr 2026 02:43:52 +0000 ROA not before: Mon 20 Apr 2026 02:38:52 +0000 ROA not after: Mon 19 Apr 2027 02:43:52 +0000 asID: 37963 IP address blocks: 121.40.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 06:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:72:5a:a7:64:ff:22:cb:ea:27:3b:5d:0a:94:02:dd:f9:ba:6b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Validity Not Before: Apr 20 02:38:52 2026 GMT Not After : Apr 19 02:43:52 2027 GMT Subject: CN=D83B35129F140492AE5A9FC6837DC5BA3E785091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:61:8c:03:70:92:75:d7:11:97:2a:ff:f7:64: 85:44:51:16:e0:6a:85:47:5c:fd:11:fd:dc:ad:64: 95:44:4c:50:ad:4b:d4:93:de:fb:cf:ba:d8:6f:9a: d4:ec:98:06:e4:6b:ed:4d:70:ad:aa:c1:f4:79:40: 9d:98:31:22:ef:eb:dc:04:c0:ac:21:18:fb:0e:4b: a8:8c:73:db:c7:38:96:93:7e:ed:b1:6e:af:af:65: 37:ca:80:a5:9b:bd:20:e1:7c:dd:21:7e:41:8f:71: 97:98:8b:d8:4c:fa:85:8b:97:cc:9b:26:8e:f6:74: 5d:54:97:26:e7:0d:f2:a2:b1:8b:e7:87:28:2d:38: 28:1a:1f:9b:03:36:e2:51:59:31:c2:54:64:96:c2: ab:03:f0:19:18:fb:db:b6:e9:49:b7:16:7d:91:ca: 78:57:2c:3f:86:2d:86:36:3b:4e:42:97:6a:96:09: db:ea:d3:8a:1f:82:f8:75:b6:4a:e8:32:5b:4d:aa: 4a:c1:79:54:58:3c:ac:ea:55:d6:32:ad:d4:b2:63: c1:43:f3:f4:ca:d1:5e:a5:2e:46:7b:7a:e4:a1:81: 98:55:1f:cf:e8:34:00:d1:64:d4:15:80:54:89:19: 61:76:88:79:65:37:53:9e:5f:23:4a:d7:4e:2d:66: fe:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3B:35:12:9F:14:04:92:AE:5A:9F:C6:83:7D:C5:BA:3E:78:50:91 X509v3 Authority Key Identifier: keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3132312e34302e302e302f31342d3234203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.40.0.0/14 Signature Algorithm: sha256WithRSAEncryption 23:99:ec:ab:ed:7f:83:ad:84:0c:e1:71:56:84:e9:3b:d2:16: dd:03:d8:49:52:81:76:09:cd:f7:e1:5f:ac:60:e0:c4:b1:2c: 65:4c:e9:f5:50:15:63:28:98:82:70:1b:5e:3e:a4:d6:a9:e9: 80:5a:f5:2a:fb:a1:df:fc:49:0d:dc:ea:26:20:b7:7d:c8:b0: 72:05:07:63:75:0f:60:e8:a5:0b:32:ef:bf:3d:3b:5b:99:d5: 62:46:0e:74:a3:15:3f:e7:73:5a:2e:f7:e3:00:6a:4f:e4:4e: 1f:ab:c0:ae:06:82:7e:de:db:4e:ac:a3:85:3b:6d:f2:2d:bf: 98:db:28:8e:d8:2e:1f:5f:e0:16:7b:d5:b0:3a:e1:b5:23:8d: df:e8:a0:ef:c2:11:19:bc:d2:a8:cb:83:d4:65:0a:02:45:6b: 1b:a1:2a:86:9b:04:ca:d9:fb:5c:8a:d7:a3:22:37:ec:93:26: 59:25:1c:f3:31:28:f9:4a:a3:cb:31:f4:c0:9d:c9:e0:43:8b: 3f:fb:8e:13:ae:b0:76:7f:d6:8f:d5:a6:55:de:2f:99:ec:58: fd:fb:d5:ed:e9:3a:33:01:57:97:76:86:7a:11:d6:54:76:95: 99:66:0b:b0:b6:50:98:90:42:08:94:42:1d:bd:c6:1b:3d:6b: dd:68:a7:ad -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUH3Jap2T/IsvqJztdCpQC3fm6a+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx NTdEMEM4RTAeFw0yNjA0MjAwMjM4NTJaFw0yNzA0MTkwMjQzNTJaMDMxMTAvBgNV BAMTKEQ4M0IzNTEyOUYxNDA0OTJBRTVBOUZDNjgzN0RDNUJBM0U3ODUwOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5YYwDcJJ11xGXKv/3ZIVEURbg aoVHXP0R/dytZJVETFCtS9ST3vvPuthvmtTsmAbka+1NcK2qwfR5QJ2YMSLv69wE wKwhGPsOS6iMc9vHOJaTfu2xbq+vZTfKgKWbvSDhfN0hfkGPcZeYi9hM+oWLl8yb Jo72dF1UlybnDfKisYvnhygtOCgaH5sDNuJRWTHCVGSWwqsD8BkY+9u26Um3Fn2R ynhXLD+GLYY2O05Cl2qWCdvq04ofgvh1tkroMltNqkrBeVRYPKzqVdYyrdSyY8FD 8/TK0V6lLkZ7euShgZhVH8/oNADRZNQVgFSJGWF2iHllN1OeXyNK104tZv5VAgMB AAGjggIOMIICCjAdBgNVHQ4EFgQU2Ds1Ep8UBJKuWp/Gg33Fuj54UJEwHwYDVR0j BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5 MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzAvMzEzMjMxMmUzNDMw MmUzMDJlMzAyZjMxMzQyZDMyMzQyMDNkM2UyMDMzMzczOTM2MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwJ5KDANBgkqhkiG9w0BAQsFAAOCAQEAI5nsq+1/g62EDOFxVoTpO9IW3QPYSVKB dgnN9+FfrGDgxLEsZUzp9VAVYyiYgnAbXj6k1qnpgFr1Kvuh3/xJDdzqJiC3fciw cgUHY3UPYOilCzLvvz07W5nVYkYOdKMVP+dzWi734wBqT+ROH6vArgaCft7bTqyj hTtt8i2/mNsojtguH1/gFnvVsDrhtSON3+ig78IRGbzSqMuD1GUKAkVrG6EqhpsE ytn7XIrXoyI37JMmWSUc8zEo+UqjyzH0wJ3J4EOLP/uOE66wdn/Wj9WmVd4vmexY /fvV7ek6MwFXl3aGehHWVHaVmWYLsLZQmJBCCJRCHb3GGz1r3WinrQ== -----END CERTIFICATE-----Generated at Wed Apr 22 06:40:55 2026 by rpki-client