$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134342e302f32322d3232203d3e20313335333931.roa File: 3132312e34362e3134342e302f32322d3232203d3e20313335333931.roa (raw, json) Hash identifier: OwG6YsTv9bxP6xE8A4gznVzkezmTVUbTr/nSo3TrioQ= Subject key identifier: BB:6B:B5:05:67:A6:CD:40:E2:B4:D2:84:CC:DA:37:89:AA:18:74:FB Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6 Certificate serial: 0CD5D95E5FFB56AEE07106A0A76F653E24BA3B18 Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134342e302f32322d3232203d3e20313335333931.roa Signing time: Thu 23 Apr 2026 08:14:09 +0000 ROA not before: Thu 23 Apr 2026 08:09:09 +0000 ROA not after: Thu 22 Apr 2027 08:14:09 +0000 asID: 135391 IP address blocks: 121.46.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 06:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:d5:d9:5e:5f:fb:56:ae:e0:71:06:a0:a7:6f:65:3e:24:ba:3b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6 Validity Not Before: Apr 23 08:09:09 2026 GMT Not After : Apr 22 08:14:09 2027 GMT Subject: CN=BB6BB50567A6CD40E2B4D284CCDA3789AA1874FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:9b:b1:2f:dd:82:3a:55:11:97:cc:7d:5e:92: f0:f7:48:13:d3:40:df:7f:7f:a9:b5:e3:42:f7:c3: 18:85:66:91:7a:65:28:4b:d6:87:fd:de:2c:bc:e8: 6d:a7:c1:93:67:12:95:82:0d:bc:fd:96:e2:78:43: 8e:d7:70:a9:6b:7d:37:f7:8e:e5:eb:a7:d8:32:50: d7:e2:ca:99:d4:e4:33:eb:ed:c4:f6:dc:e5:ca:83: 40:ea:cf:c3:27:c8:20:ed:d2:eb:66:c1:eb:62:d6: 9b:e2:19:ae:04:d5:54:4d:1d:14:e2:07:54:08:8a: 7d:e4:30:57:9f:ed:e7:02:61:89:3f:87:9b:d7:9f: dc:64:f3:53:65:84:22:7a:ef:99:ca:c1:13:2f:db: 9c:64:2d:bf:d5:bf:b8:e3:d9:9a:ba:2c:24:06:49: dd:57:a9:e7:98:d7:5f:60:02:72:39:a5:c8:b2:52: 79:b2:d9:33:c8:d1:81:05:41:cf:5b:ec:40:6b:3d: 0f:41:0b:13:1b:12:55:99:95:28:3e:37:e7:a9:49: 43:18:80:f0:6c:02:4e:86:86:e8:ae:60:da:fa:ca: b1:6b:b6:1a:84:09:bf:83:7f:84:d3:c2:f5:ff:f3: 6c:a4:22:e9:5d:b1:5a:b5:35:b0:aa:92:2d:ce:60: 10:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6B:B5:05:67:A6:CD:40:E2:B4:D2:84:CC:DA:37:89:AA:18:74:FB X509v3 Authority Key Identifier: keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134342e302f32322d3232203d3e20313335333931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.46.144.0/22 Signature Algorithm: sha256WithRSAEncryption 07:74:60:22:d4:13:c3:f9:b4:a4:e8:d3:40:3f:c1:fa:37:50: d2:88:2a:40:15:17:83:b6:4c:36:2b:23:9f:a3:4b:a7:9b:f3: 4e:74:a1:bf:10:25:31:96:6b:cc:8a:01:59:96:0d:4a:f7:7a: 9d:dc:aa:4f:ab:d5:13:bb:ee:7c:78:90:37:ef:d0:a7:b6:39: d4:66:8b:4a:a4:9a:fd:fd:13:33:dc:60:43:4d:0e:dc:ba:64: fa:9c:c1:8c:4c:93:dd:e8:d4:75:fe:73:38:b8:87:40:8f:3b: cc:6f:57:cc:08:9d:d7:13:ea:16:b6:05:5d:e3:e5:53:f9:ba: 47:92:6f:7d:1b:a0:76:bd:6a:b1:db:01:c1:95:ca:c8:d2:fc: 99:15:00:ef:d6:f5:ef:eb:49:e9:66:4c:60:93:4f:38:fd:69: 7f:d5:08:5c:4b:6a:5a:29:e2:34:af:cf:71:65:18:5d:77:36: 42:4f:62:b2:86:ac:28:76:d9:c2:23:e1:63:65:a8:71:cc:33: 46:4e:fb:e4:08:cd:d2:56:98:e4:a1:00:11:f9:82:0e:1a:90: 6e:39:72:c3:dc:6e:39:a2:07:d5:75:af:51:97:43:8b:28:97: af:ab:50:1f:14:61:4c:2f:36:18:a3:cb:3b:fd:7a:e9:12:50: 71:52:e7:9e -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUDNXZXl/7Vq7gcQagp29lPiS6OxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD MUE4NjlFNjAeFw0yNjA0MjMwODA5MDlaFw0yNzA0MjIwODE0MDlaMDMxMTAvBgNV BAMTKEJCNkJCNTA1NjdBNkNENDBFMkI0RDI4NENDREEzNzg5QUExODc0RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxm7Ev3YI6VRGXzH1ekvD3SBPT QN9/f6m140L3wxiFZpF6ZShL1of93iy86G2nwZNnEpWCDbz9luJ4Q47XcKlrfTf3 juXrp9gyUNfiypnU5DPr7cT23OXKg0Dqz8MnyCDt0utmweti1pviGa4E1VRNHRTi B1QIin3kMFef7ecCYYk/h5vXn9xk81NlhCJ675nKwRMv25xkLb/Vv7jj2Zq6LCQG Sd1XqeeY119gAnI5pciyUnmy2TPI0YEFQc9b7EBrPQ9BCxMbElWZlSg+N+epSUMY gPBsAk6GhuiuYNr6yrFrthqECb+Df4TTwvX/82ykIuldsVq1NbCqki3OYBBRAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUu2u1BWemzUDitNKEzNo3iaoYdPswHwYDVR0j BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0 MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTYyNzUzMzA3NzczNTAxNDYvMC8zMTMyMzEyZTM0 MzYyZTMxMzQzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzNTMzMzkzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAnkukDANBgkqhkiG9w0BAQsFAAOCAQEAB3RgItQTw/m0pOjTQD/B +jdQ0ogqQBUXg7ZMNisjn6NLp5vzTnShvxAlMZZrzIoBWZYNSvd6ndyqT6vVE7vu fHiQN+/Qp7Y51GaLSqSa/f0TM9xgQ00O3Lpk+pzBjEyT3ejUdf5zOLiHQI87zG9X zAid1xPqFrYFXePlU/m6R5JvfRugdr1qsdsBwZXKyNL8mRUA79b17+tJ6WZMYJNP OP1pf9UIXEtqWiniNK/PcWUYXXc2Qk9isoasKHbZwiPhY2WoccwzRk775AjN0laY 5KEAEfmCDhqQbjlyw9xuOaIH1XWvUZdDiyiXr6tQHxRhTC82GKPLO/166RJQcVLn ng== -----END CERTIFICATE-----Generated at Mon Apr 27 16:00:16 2026 by rpki-client