$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134342e302f32322d3232203d3e203338333730.roa File: 3132312e34362e3134342e302f32322d3232203d3e203338333730.roa (raw, json) Hash identifier: OTMTWHxFxBe9m3VLwZNU1c7Vanhubtau+9Z1SLemlzo= Subject key identifier: D9:67:8A:9B:1A:D9:3E:C1:4B:EE:9D:7F:33:9A:E7:E4:62:D5:33:AC Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6 Certificate serial: 742877FDD3496CB4A058C7DDCB394080DA3D3DE3 Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134342e302f32322d3232203d3e203338333730.roa Signing time: Thu 23 Apr 2026 08:14:09 +0000 ROA not before: Thu 23 Apr 2026 08:09:09 +0000 ROA not after: Thu 22 Apr 2027 08:14:09 +0000 asID: 38370 IP address blocks: 121.46.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 06:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:28:77:fd:d3:49:6c:b4:a0:58:c7:dd:cb:39:40:80:da:3d:3d:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6 Validity Not Before: Apr 23 08:09:09 2026 GMT Not After : Apr 22 08:14:09 2027 GMT Subject: CN=D9678A9B1AD93EC14BEE9D7F339AE7E462D533AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e7:6f:cb:29:55:a9:7c:07:51:15:80:a0:2d: 33:5b:c1:7c:7e:7b:06:7f:26:5c:fb:5d:2e:f6:29: 18:c6:25:66:be:19:ab:6f:7b:23:36:37:e3:2d:19: 4d:a7:8c:ac:2b:fc:51:85:e4:23:08:e6:08:7e:26: da:8e:bc:a5:2e:f9:82:bd:cf:21:10:e2:e6:2d:8e: 01:7a:7b:c2:84:91:36:b8:69:35:1f:35:f1:1c:85: f0:2e:cc:a7:a4:95:72:d1:7b:b9:68:e1:0b:ee:bc: 61:20:2f:ac:a1:98:bb:01:7d:80:1e:57:c5:a7:12: d1:de:b0:24:fc:88:e3:19:e6:85:7d:9e:17:f3:42: d3:39:13:6b:93:ca:2b:cc:f0:90:2b:fc:b1:d2:7f: 01:f6:23:99:26:c1:fe:4e:69:b2:83:91:29:20:70: 08:f9:34:cd:64:7b:8b:d7:45:e4:58:1b:3d:85:c2: 6a:7e:cc:a7:21:d9:f3:3d:68:15:29:e3:37:ba:8a: e3:82:3c:b2:ac:2b:a2:3e:79:b8:54:d4:f4:de:9b: 26:9a:7d:c0:fd:dd:61:8c:67:23:88:e6:cd:4b:71: 43:66:c3:68:e3:38:cf:db:32:3c:1b:3b:bb:b5:ea: 72:a2:1a:84:d6:5f:20:da:d1:9d:18:fd:be:14:d5: 4e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:67:8A:9B:1A:D9:3E:C1:4B:EE:9D:7F:33:9A:E7:E4:62:D5:33:AC X509v3 Authority Key Identifier: keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134342e302f32322d3232203d3e203338333730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.46.144.0/22 Signature Algorithm: sha256WithRSAEncryption b3:4c:8a:9a:08:12:cb:1a:38:b6:a5:e7:b5:89:31:c6:f4:8c: 19:a0:e1:08:a8:8b:ba:be:21:2f:8d:55:95:d1:77:3b:23:ec: fa:57:83:fb:63:54:10:77:98:b9:e4:9a:af:2c:8b:de:36:5c: f9:68:df:38:e6:27:a8:2a:30:e3:ab:85:15:cd:0b:53:5d:71: 88:f3:08:b5:47:3a:99:9b:61:9c:8d:e7:2c:69:cd:43:55:5c: 3f:a0:20:54:a4:c2:3d:a4:d3:44:3e:20:15:81:19:f3:22:5f: 66:15:d7:2c:c7:1f:01:cf:33:f0:c0:1d:e2:30:59:25:09:b0: e8:41:e2:d2:10:9a:79:b9:f6:11:04:c5:c1:1a:9c:d1:c5:b1: 1c:9e:2e:93:78:99:78:cb:ee:2e:59:d8:2a:9e:96:36:27:1c: e6:4b:6e:29:5e:d5:e3:c7:06:ab:57:d2:0d:72:07:d9:a5:e9: e0:aa:1e:f1:f5:3d:02:69:b2:d9:28:73:54:d5:e6:9d:0e:ff: 54:97:a9:6d:92:85:b3:e2:73:27:b6:c4:ef:e3:b0:1b:47:f0: 1f:40:8a:31:f8:2c:c6:61:b3:c8:40:63:d7:73:92:50:58:e6: 19:48:b6:4d:b3:9c:ed:69:db:15:6c:ad:94:46:a5:ea:0b:8c: 74:3c:d3:83 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUdCh3/dNJbLSgWMfdyzlAgNo9PeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD MUE4NjlFNjAeFw0yNjA0MjMwODA5MDlaFw0yNzA0MjIwODE0MDlaMDMxMTAvBgNV BAMTKEQ5Njc4QTlCMUFEOTNFQzE0QkVFOUQ3RjMzOUFFN0U0NjJENTMzQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX52/LKVWpfAdRFYCgLTNbwXx+ ewZ/Jlz7XS72KRjGJWa+GatveyM2N+MtGU2njKwr/FGF5CMI5gh+JtqOvKUu+YK9 zyEQ4uYtjgF6e8KEkTa4aTUfNfEchfAuzKeklXLRe7lo4QvuvGEgL6yhmLsBfYAe V8WnEtHesCT8iOMZ5oV9nhfzQtM5E2uTyivM8JAr/LHSfwH2I5kmwf5OabKDkSkg cAj5NM1ke4vXReRYGz2Fwmp+zKch2fM9aBUp4ze6iuOCPLKsK6I+ebhU1PTemyaa fcD93WGMZyOI5s1LcUNmw2jjOM/bMjwbO7u16nKiGoTWXyDa0Z0Y/b4U1U5vAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU2WeKmxrZPsFL7p1/M5rn5GLVM6wwHwYDVR0j BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0 MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjI3NTMzMDc3NzM1MDE0Ni8wLzMxMzIzMTJlMzQz NjJlMzEzNDM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzMzODMzMzczMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAnkukDANBgkqhkiG9w0BAQsFAAOCAQEAs0yKmggSyxo4tqXntYkxxvSM GaDhCKiLur4hL41VldF3OyPs+leD+2NUEHeYueSaryyL3jZc+WjfOOYnqCow46uF Fc0LU11xiPMItUc6mZthnI3nLGnNQ1VcP6AgVKTCPaTTRD4gFYEZ8yJfZhXXLMcf Ac8z8MAd4jBZJQmw6EHi0hCaebn2EQTFwRqc0cWxHJ4uk3iZeMvuLlnYKp6WNicc 5ktuKV7V48cGq1fSDXIH2aXp4Koe8fU9Ammy2ShzVNXmnQ7/VJepbZKFs+JzJ7bE 7+OwG0fwH0CKMfgsxmGzyEBj13OSUFjmGUi2TbOc7WnbFWytlEal6guMdDzTgw== -----END CERTIFICATE-----Generated at Mon Apr 27 16:00:18 2026 by rpki-client