$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3235332e302f32342d3234203d3e203338333831.roa File: 3132322e3131392e3235332e302f32342d3234203d3e203338333831.roa (raw, json) Hash identifier: YAk2M0O5mNS1bL5JHxM+2YAWesudHs3HuuLoM2iog84= Subject key identifier: 99:83:83:6E:94:B1:8F:BE:74:4F:E9:35:47:A2:D4:0A:E0:CF:30:6C Certificate issuer: /CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D Certificate serial: 0897ED49C0BBD75AC2F3E4D3277C2C5BF3A0FD59 Authority key identifier: 51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3235332e302f32342d3234203d3e203338333831.roa Signing time: Mon 13 Apr 2026 02:52:37 +0000 ROA not before: Mon 13 Apr 2026 02:47:37 +0000 ROA not after: Mon 12 Apr 2027 02:52:37 +0000 asID: 38381 IP address blocks: 122.119.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:97:ed:49:c0:bb:d7:5a:c2:f3:e4:d3:27:7c:2c:5b:f3:a0:fd:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D Validity Not Before: Apr 13 02:47:37 2026 GMT Not After : Apr 12 02:52:37 2027 GMT Subject: CN=9983836E94B18FBE744FE93547A2D40AE0CF306C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:06:9f:dc:be:85:0b:92:ab:1a:1c:2a:13:c8: d9:91:22:0c:0f:18:dc:f9:f0:da:60:1f:8b:a6:be: 2a:2e:ff:c6:df:31:eb:0c:04:b5:b9:84:fe:54:15: 79:78:86:3c:46:c5:ed:b0:94:50:ff:4a:d2:3b:a0: 52:07:45:76:23:5e:52:e2:f3:81:12:12:53:85:0d: 6a:b3:82:23:bb:a8:93:9d:f2:4a:21:39:97:2a:1e: e0:5e:65:64:f5:7f:05:be:e2:6c:bf:65:9a:67:c8: a3:81:58:34:52:0b:48:fb:1a:76:c1:b0:2e:1e:07: 89:98:8c:9f:a5:8d:b2:9f:f5:fb:6d:49:9c:2f:24: 94:f7:99:59:3b:0e:83:41:cf:41:4e:d0:8d:9a:9c: fb:d5:93:a1:7b:a4:ba:cb:6b:99:00:fe:68:72:8e: 78:c1:69:f1:eb:1d:d9:e0:77:cb:d9:81:10:5b:04: ae:f5:09:20:51:3d:41:db:cd:c6:d0:2d:6b:dc:e1: ef:dc:71:b1:18:7d:20:f6:64:8b:18:af:ba:11:6a: ae:45:0c:e3:12:1d:23:84:64:f9:32:9a:71:a3:5c: 78:71:cb:c4:b4:1b:c5:54:8e:bf:20:e5:d1:8f:fb: ed:34:9d:44:e2:5b:7d:80:ba:c3:04:d8:61:39:69: 47:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:83:83:6E:94:B1:8F:BE:74:4F:E9:35:47:A2:D4:0A:E0:CF:30:6C X509v3 Authority Key Identifier: keyid:51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3235332e302f32342d3234203d3e203338333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.119.253.0/24 Signature Algorithm: sha256WithRSAEncryption 72:85:fc:0f:c6:b0:ed:76:62:1e:ce:a5:15:f0:db:48:8d:bf: 67:56:b8:a7:08:c4:e9:11:62:28:4b:6e:b8:2d:76:8d:17:4a: a8:91:bd:dc:5f:57:4b:88:15:46:73:6d:ed:2c:96:3c:0e:bb: 7b:5b:13:12:ee:ce:39:b0:b9:48:67:f6:84:4a:6c:ff:a6:74: 57:e8:77:96:a6:66:37:d6:d9:63:b8:86:59:fd:6e:49:d3:24: 17:a5:44:6b:27:a5:55:4a:18:3c:73:6c:bb:20:72:70:cc:bc: df:03:93:31:21:78:35:7b:ee:eb:f4:3e:07:2d:68:42:b9:e6: 68:c7:ac:db:e1:be:42:7b:5a:8d:ff:65:5c:2c:eb:78:4f:53: 88:47:59:90:1b:d1:9d:98:f6:44:22:85:ae:52:2e:53:44:14: 57:6f:76:ec:f6:79:6c:e2:5f:c8:6f:3d:61:c0:da:9b:b3:44: d0:96:ce:89:6b:f8:c7:fe:b1:9c:5a:be:26:cb:ec:be:92:c0: d8:52:77:9e:9b:73:f4:a6:76:6e:bf:b1:21:c8:5e:15:d6:7f: d0:2a:54:6e:32:fa:8f:6f:a1:10:1c:95:79:66:aa:8e:a8:a1: 04:e8:70:e2:31:31:95:25:d3:ed:de:61:d1:c5:71:ee:76:bd: ec:8f:90:e1 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUCJftScC711rC8+TTJ3wsW/Og/VkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTExNTk2NkZCNjJBMkJEQjRENjVEOTc0REYwREQ5QjAy MDgxMUQ4RDAeFw0yNjA0MTMwMjQ3MzdaFw0yNzA0MTIwMjUyMzdaMDMxMTAvBgNV BAMTKDk5ODM4MzZFOTRCMThGQkU3NDRGRTkzNTQ3QTJENDBBRTBDRjMwNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvBp/cvoULkqsaHCoTyNmRIgwP GNz58NpgH4umviou/8bfMesMBLW5hP5UFXl4hjxGxe2wlFD/StI7oFIHRXYjXlLi 84ESElOFDWqzgiO7qJOd8kohOZcqHuBeZWT1fwW+4my/ZZpnyKOBWDRSC0j7GnbB sC4eB4mYjJ+ljbKf9fttSZwvJJT3mVk7DoNBz0FO0I2anPvVk6F7pLrLa5kA/mhy jnjBafHrHdngd8vZgRBbBK71CSBRPUHbzcbQLWvc4e/ccbEYfSD2ZIsYr7oRaq5F DOMSHSOEZPkymnGjXHhxy8S0G8VUjr8g5dGP++00nUTiW32AusME2GE5aUdzAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUmYODbpSxj750T+k1R6LUCuDPMGwwHwYDVR0j BBgwFoAUURWWb7YqK9tNZdl03w3ZsCCBHY0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkwMzg0MTMyMjI3MDcyMS8wLzUxMTU5NjZGQjYyQTJCREI0RDY1RDk3NERGMERE OUIwMjA4MTFEOEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTExNTk2NkZCNjJBMkJEQjRENjVEOTc0REYwREQ5QjAyMDgxMUQ4RC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTU5MDM4NDEzMjIyNzA3MjEvMC8zMTMyMzIyZTMx MzEzOTJlMzIzNTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzODMzMzgzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAHp3/TANBgkqhkiG9w0BAQsFAAOCAQEAcoX8D8aw7XZiHs6lFfDb SI2/Z1a4pwjE6RFiKEtuuC12jRdKqJG93F9XS4gVRnNt7SyWPA67e1sTEu7OObC5 SGf2hEps/6Z0V+h3lqZmN9bZY7iGWf1uSdMkF6VEayelVUoYPHNsuyBycMy83wOT MSF4NXvu6/Q+By1oQrnmaMes2+G+Qntajf9lXCzreE9TiEdZkBvRnZj2RCKFrlIu U0QUV2927PZ5bOJfyG89YcDam7NE0JbOiWv4x/6xnFq+JsvsvpLA2FJ3nptz9KZ2 br+xIcheFdZ/0CpUbjL6j2+hEByVeWaqjqihBOhw4jExlSXT7d5h0cVx7na97I+Q 4Q== -----END CERTIFICATE-----Generated at Mon Apr 13 15:20:33 2026 by rpki-client