$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133322e302f32322d3232203d3e20313335333931.roa File: 3132312e34362e3133322e302f32322d3232203d3e20313335333931.roa (raw, json) Hash identifier: 2B+9csvaQ7vVXu2fruX09NShagG+K6XGm7cWgqKMyes= Subject key identifier: 58:59:A4:53:A8:18:B1:97:FB:43:D2:AB:9D:5A:63:2C:8E:E4:D9:BD Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6 Certificate serial: 698209CA75EBEB9651A94469B839A1D6CBCDC22F Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133322e302f32322d3232203d3e20313335333931.roa Signing time: Thu 23 Apr 2026 07:56:05 +0000 ROA not before: Thu 23 Apr 2026 07:51:05 +0000 ROA not after: Thu 22 Apr 2027 07:56:05 +0000 asID: 135391 IP address blocks: 121.46.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 06:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:82:09:ca:75:eb:eb:96:51:a9:44:69:b8:39:a1:d6:cb:cd:c2:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6 Validity Not Before: Apr 23 07:51:05 2026 GMT Not After : Apr 22 07:56:05 2027 GMT Subject: CN=5859A453A818B197FB43D2AB9D5A632C8EE4D9BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0f:bc:d8:94:39:30:96:99:2d:06:49:f7:9d: b0:83:78:c7:31:29:0a:f0:87:14:54:f4:0d:cb:f3: ba:19:5e:e2:90:c1:ff:2c:3b:14:47:3d:30:0d:44: 24:f4:00:a9:79:76:f6:6f:29:27:93:ae:31:62:d0: de:47:dd:4a:5a:55:8c:63:bf:13:6a:28:fe:92:e8: 01:98:14:e7:e5:5f:70:1e:d3:0f:ca:8e:9d:78:ab: 69:c8:58:8e:c8:f2:8f:0b:84:f8:a4:30:cf:cc:e4: f1:39:d6:7c:bc:66:97:38:09:53:36:28:1f:79:5d: b2:19:e8:3c:17:e7:c4:60:8c:cc:f7:f9:73:09:2c: fa:9b:ee:55:58:4f:f4:5a:34:1d:4c:5b:2e:81:60: 87:16:ef:40:00:b2:42:38:bb:d1:c1:45:80:cb:4d: 80:4c:f1:e0:b0:be:4b:e1:2a:90:b0:8b:d3:5b:26: 2b:f9:fe:b8:2a:1d:58:c0:82:b0:ae:aa:9a:11:9e: 87:4f:e8:86:c6:f8:8d:51:f3:8c:56:c1:44:f5:2d: b1:78:11:e1:65:f2:2f:a8:2d:03:45:89:58:cf:85: 93:e3:32:5b:b5:5e:a1:c6:cd:96:76:80:d2:6d:c3: d4:22:7f:1e:e4:9a:c1:b8:f3:b5:20:18:70:ee:cd: 0b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:59:A4:53:A8:18:B1:97:FB:43:D2:AB:9D:5A:63:2C:8E:E4:D9:BD X509v3 Authority Key Identifier: keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133322e302f32322d3232203d3e20313335333931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.46.132.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:7c:58:9e:99:a4:b6:ef:7a:97:06:25:f9:55:58:5e:fd:5c: 95:40:08:20:fd:af:bb:28:80:69:14:16:90:53:26:97:64:80: 74:08:cb:29:25:72:54:13:63:6a:83:a0:79:59:ca:53:16:78: d4:89:f2:78:92:31:16:73:7b:05:dc:be:da:16:6c:e4:0a:50: 7c:d0:26:17:5e:1e:5f:9c:2b:65:af:4b:9b:d7:35:69:ab:9d: cb:1a:ec:e1:dd:df:e6:be:cf:80:25:31:f8:07:56:91:58:13: 25:9c:09:d8:e5:e3:cc:7d:98:4b:b9:12:c1:8d:5e:e8:07:c7: ff:eb:52:da:36:cf:41:7c:ce:e7:42:78:0c:5c:5d:9f:82:3d: 0b:aa:fb:9f:24:e3:18:52:d3:21:6f:bf:2f:44:fc:ea:3b:00: 32:a9:04:d7:54:e4:47:91:3d:77:96:e3:47:90:b8:13:f7:63: a1:c7:8b:1d:f3:a4:19:c0:ef:1b:72:57:f8:b5:42:3c:db:56: d1:1a:27:59:33:4e:2c:47:ad:7b:32:5c:e3:33:02:d5:0b:42: a2:ea:b6:94:95:8b:23:cc:2f:30:58:cc:af:7d:f0:8b:ac:63: 6c:fa:12:9d:b1:57:56:7a:c4:c5:6c:a3:7a:4f:46:89:f8:c5: 0b:63:4f:d8 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUaYIJynXr65ZRqURpuDmh1svNwi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD MUE4NjlFNjAeFw0yNjA0MjMwNzUxMDVaFw0yNzA0MjIwNzU2MDVaMDMxMTAvBgNV BAMTKDU4NTlBNDUzQTgxOEIxOTdGQjQzRDJBQjlENUE2MzJDOEVFNEQ5QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnD7zYlDkwlpktBkn3nbCDeMcx KQrwhxRU9A3L87oZXuKQwf8sOxRHPTANRCT0AKl5dvZvKSeTrjFi0N5H3UpaVYxj vxNqKP6S6AGYFOflX3Ae0w/Kjp14q2nIWI7I8o8LhPikMM/M5PE51ny8Zpc4CVM2 KB95XbIZ6DwX58RgjMz3+XMJLPqb7lVYT/RaNB1MWy6BYIcW70AAskI4u9HBRYDL TYBM8eCwvkvhKpCwi9NbJiv5/rgqHVjAgrCuqpoRnodP6IbG+I1R84xWwUT1LbF4 EeFl8i+oLQNFiVjPhZPjMlu1XqHGzZZ2gNJtw9Qifx7kmsG487UgGHDuzQsPAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUWFmkU6gYsZf7Q9KrnVpjLI7k2b0wHwYDVR0j BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0 MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTYyNzUzMzA3NzczNTAxNDYvMC8zMTMyMzEyZTM0 MzYyZTMxMzMzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzNTMzMzkzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAnkuhDANBgkqhkiG9w0BAQsFAAOCAQEAbXxYnpmktu96lwYl+VVY Xv1clUAIIP2vuyiAaRQWkFMml2SAdAjLKSVyVBNjaoOgeVnKUxZ41InyeJIxFnN7 Bdy+2hZs5ApQfNAmF14eX5wrZa9Lm9c1aaudyxrs4d3f5r7PgCUx+AdWkVgTJZwJ 2OXjzH2YS7kSwY1e6AfH/+tS2jbPQXzO50J4DFxdn4I9C6r7nyTjGFLTIW+/L0T8 6jsAMqkE11TkR5E9d5bjR5C4E/djoceLHfOkGcDvG3JX+LVCPNtW0RonWTNOLEet ezJc4zMC1QtCouq2lJWLI8wvMFjMr33wi6xjbPoSnbFXVnrExWyjek9GifjFC2NP 2A== -----END CERTIFICATE-----Generated at Mon Apr 27 16:00:17 2026 by rpki-client