$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133322e302f32322d3232203d3e203538343636.roa File: 3132312e34362e3133322e302f32322d3232203d3e203538343636.roa (raw, json) Hash identifier: FnpjL/7r1dCcGDQRsUoZbCcUxNyfhOrAVpI6ARO5/v4= Subject key identifier: 04:29:99:83:60:7C:C2:FC:06:C1:22:B1:D1:39:FA:EC:F0:B4:72:93 Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6 Certificate serial: 7D346B8231DD8BAC506A8D9C2B11C545E6584B76 Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133322e302f32322d3232203d3e203538343636.roa Signing time: Thu 23 Apr 2026 07:56:05 +0000 ROA not before: Thu 23 Apr 2026 07:51:05 +0000 ROA not after: Thu 22 Apr 2027 07:56:05 +0000 asID: 58466 IP address blocks: 121.46.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 06:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:34:6b:82:31:dd:8b:ac:50:6a:8d:9c:2b:11:c5:45:e6:58:4b:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6 Validity Not Before: Apr 23 07:51:05 2026 GMT Not After : Apr 22 07:56:05 2027 GMT Subject: CN=04299983607CC2FC06C122B1D139FAECF0B47293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:01:19:2c:e5:40:e8:4a:56:74:8c:e7:0d:84: c9:96:53:dc:eb:ad:ca:2a:3b:f1:7a:e8:58:08:bf: b7:2e:fd:99:d7:1f:fb:7e:9a:9e:63:04:8f:43:ee: 0a:e6:4a:df:6f:cb:62:4b:01:55:ff:51:aa:35:d7: 25:ad:a7:cb:33:38:45:3e:a3:e4:9b:f6:b9:9e:a3: 7b:b8:a0:78:4b:6d:a7:59:34:68:f1:26:18:ac:79: 98:b4:f2:d4:41:e9:48:04:90:b1:d8:f1:a2:3b:3c: 9a:3d:20:34:09:18:87:ce:dd:c8:06:9b:c6:16:49: aa:f8:20:2b:de:1d:52:84:65:b0:ca:0b:45:55:25: 98:37:dc:16:ae:66:7a:a1:d4:8f:e2:fb:6b:5f:d3: 03:34:bc:dd:83:a2:3f:a0:9f:37:2f:15:9a:98:28: 8d:a6:73:87:c2:0d:f0:7e:52:73:14:4a:62:c2:37: 97:c1:1a:6d:0a:f1:6e:d6:ea:9c:4d:34:cf:e5:2e: 21:5f:f7:d5:4d:7c:8a:64:4e:dd:2c:57:f2:97:77: 04:fe:88:f6:d3:ee:5e:93:29:9d:1b:e0:4e:ed:ff: 2f:9e:32:c6:47:40:6d:26:35:de:c4:9f:39:3a:96: c9:c2:5a:c8:ce:2b:f7:af:79:df:2e:2c:81:df:df: 20:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:29:99:83:60:7C:C2:FC:06:C1:22:B1:D1:39:FA:EC:F0:B4:72:93 X509v3 Authority Key Identifier: keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133322e302f32322d3232203d3e203538343636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.46.132.0/22 Signature Algorithm: sha256WithRSAEncryption db:cc:bd:5b:78:8f:8a:1f:cd:e4:b5:0a:9f:83:47:06:54:5e: 01:ba:4e:75:01:af:b6:07:89:ea:24:09:0d:5c:e9:62:06:be: c9:ae:9d:70:13:26:db:a4:a8:5f:45:1e:4a:2c:4a:6b:f8:4e: 94:f1:76:d3:30:2a:96:a9:50:f2:b2:cc:4a:35:2c:0d:47:38: 58:7a:7e:2d:42:ca:6d:b1:d3:d9:50:ba:43:a7:5e:74:dc:9b: fc:f8:10:61:72:5c:05:47:ae:27:fb:7c:cc:60:9f:ca:42:cc: a8:c9:7d:b9:80:99:c4:88:76:93:59:e3:6d:d3:b7:42:65:fc: c1:29:d7:28:a9:55:92:29:8f:db:8e:f6:eb:3e:19:94:b5:35: 87:63:86:b0:b2:fa:85:37:0b:3c:aa:42:a1:de:65:82:77:55: cc:f8:dc:90:6e:59:21:82:8c:11:fa:b3:d9:c0:c7:a8:f6:25: 07:c1:92:85:0a:17:1c:9f:0b:72:86:e3:6b:4c:b2:2c:9d:64: 96:39:a7:0d:9e:3c:41:22:74:a3:9e:51:1a:86:1e:90:2e:bf: 52:4e:da:57:6f:06:5a:c6:c3:11:67:e3:4b:99:ec:58:20:9e: 6a:1e:65:7f:a9:99:e4:94:b8:ab:7a:17:d6:45:ea:ec:b6:4b: d7:6a:c6:a4 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUfTRrgjHdi6xQao2cKxHFReZYS3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD MUE4NjlFNjAeFw0yNjA0MjMwNzUxMDVaFw0yNzA0MjIwNzU2MDVaMDMxMTAvBgNV BAMTKDA0Mjk5OTgzNjA3Q0MyRkMwNkMxMjJCMUQxMzlGQUVDRjBCNDcyOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiARks5UDoSlZ0jOcNhMmWU9zr rcoqO/F66FgIv7cu/ZnXH/t+mp5jBI9D7grmSt9vy2JLAVX/Uao11yWtp8szOEU+ o+Sb9rmeo3u4oHhLbadZNGjxJhiseZi08tRB6UgEkLHY8aI7PJo9IDQJGIfO3cgG m8YWSar4ICveHVKEZbDKC0VVJZg33BauZnqh1I/i+2tf0wM0vN2Doj+gnzcvFZqY KI2mc4fCDfB+UnMUSmLCN5fBGm0K8W7W6pxNNM/lLiFf99VNfIpkTt0sV/KXdwT+ iPbT7l6TKZ0b4E7t/y+eMsZHQG0mNd7Enzk6lsnCWsjOK/eved8uLIHf3yAvAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUBCmZg2B8wvwGwSKx0Tn67PC0cpMwHwYDVR0j BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0 MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjI3NTMzMDc3NzM1MDE0Ni8wLzMxMzIzMTJlMzQz NjJlMzEzMzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzODM0MzYzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAnkuhDANBgkqhkiG9w0BAQsFAAOCAQEA28y9W3iPih/N5LUKn4NHBlRe AbpOdQGvtgeJ6iQJDVzpYga+ya6dcBMm26SoX0UeSixKa/hOlPF20zAqlqlQ8rLM SjUsDUc4WHp+LULKbbHT2VC6Q6dedNyb/PgQYXJcBUeuJ/t8zGCfykLMqMl9uYCZ xIh2k1njbdO3QmX8wSnXKKlVkimP24726z4ZlLU1h2OGsLL6hTcLPKpCod5lgndV zPjckG5ZIYKMEfqz2cDHqPYlB8GShQoXHJ8Lcobja0yyLJ1kljmnDZ48QSJ0o55R GoYekC6/Uk7aV28GWsbDEWfjS5nsWCCeah5lf6mZ5JS4q3oX1kXq7LZL12rGpA== -----END CERTIFICATE-----Generated at Mon Apr 27 16:00:22 2026 by rpki-client