$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094791290421248001/0/3132322e3131342e302e302f31362d3136203d3e2034383337.roa File: 3132322e3131342e302e302f31362d3136203d3e2034383337.roa (raw, json) Hash identifier: 0+enGD/zc0KUM6hJ3xXwylGpBRXHqMrwp8Qwg/rjKXA= Subject key identifier: B8:EA:54:0C:65:86:AE:33:85:93:EA:B7:60:27:67:E9:C4:5B:C1:CB Certificate issuer: /CN=2D55A041FCB7F9FF7365E90A7DDA8542D8F31756 Certificate serial: 0F97D56DE05B7089A53471C03C4133FA269D9910 Authority key identifier: 2D:55:A0:41:FC:B7:F9:FF:73:65:E9:0A:7D:DA:85:42:D8:F3:17:56 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/3132322e3131342e302e302f31362d3136203d3e2034383337.roa Signing time: Fri 10 Apr 2026 01:12:21 +0000 ROA not before: Fri 10 Apr 2026 01:07:21 +0000 ROA not after: Fri 09 Apr 2027 01:12:21 +0000 asID: 4837 IP address blocks: 122.114.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 03:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:97:d5:6d:e0:5b:70:89:a5:34:71:c0:3c:41:33:fa:26:9d:99:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D55A041FCB7F9FF7365E90A7DDA8542D8F31756 Validity Not Before: Apr 10 01:07:21 2026 GMT Not After : Apr 9 01:12:21 2027 GMT Subject: CN=B8EA540C6586AE338593EAB7602767E9C45BC1CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:22:ab:e8:af:3e:8f:9e:d0:b4:db:6a:c5:3f: 84:38:1b:f3:a1:a6:b7:0b:c5:cd:aa:67:69:17:23: e3:ed:17:00:fe:4a:14:32:00:52:a0:f5:93:9f:d0: 21:9c:90:fb:a3:67:0b:7b:5c:5f:15:e5:db:5a:90: 0d:ea:c9:ec:92:81:a0:c0:7e:50:fb:e5:50:97:ae: 5b:83:60:e9:96:f4:57:54:2e:3a:b1:1f:4b:67:d3: 71:f8:4a:31:74:8b:8c:e8:4e:5f:9e:b1:26:c9:4a: 9f:d1:e0:cb:9c:13:6b:f5:6c:78:31:d0:ea:7b:b6: 44:bc:f7:90:d0:9b:42:a4:f8:1c:7c:c6:d8:36:75: a8:d6:b5:86:f9:37:81:98:43:22:5f:49:dc:24:30: 3f:02:a6:67:e5:89:36:1f:1b:85:60:6e:d1:2d:96: 24:8d:9b:0f:1e:c7:da:81:f8:e5:5d:0b:56:5b:04: 5b:46:b5:78:77:ed:79:da:9e:8e:ba:d7:b7:04:17: ce:fe:ec:0a:ff:79:93:b1:01:6e:9b:60:0b:8e:c1: 9a:13:5d:a1:05:9e:fd:fe:d8:10:f1:26:28:1f:d7: 46:90:05:1d:64:41:ea:09:eb:a3:e9:61:57:ef:6e: 70:cd:c6:fa:b6:90:b2:9f:ba:02:f8:aa:f8:3e:f6: 78:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EA:54:0C:65:86:AE:33:85:93:EA:B7:60:27:67:E9:C4:5B:C1:CB X509v3 Authority Key Identifier: keyid:2D:55:A0:41:FC:B7:F9:FF:73:65:E9:0A:7D:DA:85:42:D8:F3:17:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/3132322e3131342e302e302f31362d3136203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.114.0.0/16 Signature Algorithm: sha256WithRSAEncryption 04:5f:70:d9:b7:a8:94:66:83:4b:9a:7e:ec:88:f8:f7:b8:67: f0:64:ed:62:56:4b:98:20:6a:b2:c2:4e:cd:ec:cc:19:e3:66: 1c:e4:9a:42:89:ae:f2:67:29:a0:ff:11:d5:c4:9e:56:8f:79: 6a:8e:d0:88:c4:dc:dd:2d:52:13:a5:a8:28:66:13:5d:06:a0: da:0d:fd:f4:9c:01:7e:1a:c4:ac:14:76:20:1e:c2:3b:2b:0f: c5:4f:b0:c9:f9:ac:9e:09:9d:7d:f4:ce:af:65:0a:15:dd:4c: f9:83:01:a3:ea:64:2d:cf:dd:2b:c6:74:cb:9c:05:9d:c3:1a: 60:da:01:32:73:3a:dd:f6:53:35:58:4d:6a:4f:52:d2:82:80: 96:2b:91:b0:b8:69:70:19:f8:89:33:34:69:45:96:a7:7f:26: f5:15:28:d7:ad:9c:8c:4d:e2:85:87:22:f4:87:5d:5a:95:60: 97:ef:b5:36:37:ee:87:02:d7:55:72:52:9c:40:81:2f:67:ca: 38:ed:66:bd:28:df:98:69:14:94:c1:06:5a:42:c9:69:47:43: df:42:b0:7f:f8:b3:14:7b:9e:8b:1d:4b:71:4e:66:ec:b2:3d: 4c:fa:a4:23:12:44:3f:e9:72:82:a9:80:df:57:fd:fc:5c:61: 3d:05:2a:0f -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUD5fVbeBbcImlNHHAPEEz+iadmRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1NUEwNDFGQ0I3RjlGRjczNjVFOTBBN0REQTg1NDJE OEYzMTc1NjAeFw0yNjA0MTAwMTA3MjFaFw0yNzA0MDkwMTEyMjFaMDMxMTAvBgNV BAMTKEI4RUE1NDBDNjU4NkFFMzM4NTkzRUFCNzYwMjc2N0U5QzQ1QkMxQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Iqvorz6PntC022rFP4Q4G/Oh prcLxc2qZ2kXI+PtFwD+ShQyAFKg9ZOf0CGckPujZwt7XF8V5dtakA3qyeySgaDA flD75VCXrluDYOmW9FdULjqxH0tn03H4SjF0i4zoTl+esSbJSp/R4MucE2v1bHgx 0Op7tkS895DQm0Kk+Bx8xtg2dajWtYb5N4GYQyJfSdwkMD8CpmfliTYfG4VgbtEt liSNmw8ex9qB+OVdC1ZbBFtGtXh37Xnano6617cEF87+7Ar/eZOxAW6bYAuOwZoT XaEFnv3+2BDxJigf10aQBR1kQeoJ66PpYVfvbnDNxvq2kLKfugL4qvg+9niNAgMB AAGjggIOMIICCjAdBgNVHQ4EFgQUuOpUDGWGrjOFk+q3YCdn6cRbwcswHwYDVR0j BBgwFoAULVWgQfy3+f9zZekKfdqFQtjzF1YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDc5MTI5MDQyMTI0ODAwMS8wLzJENTVBMDQxRkNCN0Y5RkY3MzY1RTkwQTdEREE4 NTQyRDhGMzE3NTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQ1NUEwNDFGQ0I3RjlGRjczNjVFOTBBN0REQTg1NDJEOEYzMTc1Ni5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0NzkxMjkwNDIxMjQ4MDAxLzAvMzEzMjMyMmUzMTMx MzQyZTMwMmUzMDJmMzEzNjJkMzEzNjIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwB6cjANBgkqhkiG9w0BAQsFAAOCAQEABF9w2beolGaDS5p+7Ij497hn8GTtYlZL mCBqssJOzezMGeNmHOSaQomu8mcpoP8R1cSeVo95ao7QiMTc3S1SE6WoKGYTXQag 2g399JwBfhrErBR2IB7COysPxU+wyfmsngmdffTOr2UKFd1M+YMBo+pkLc/dK8Z0 y5wFncMaYNoBMnM63fZTNVhNak9S0oKAliuRsLhpcBn4iTM0aUWWp38m9RUo162c jE3ihYci9IddWpVgl++1NjfuhwLXVXJSnECBL2fKOO1mvSjfmGkUlMEGWkLJaUdD 30Kwf/izFHueix1LcU5m7LI9TPqkIxJEP+lygqmA31f9/FxhPQUqDw== -----END CERTIFICATE-----Generated at Mon Apr 13 12:23:30 2026 by rpki-client