$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3135322e302f32322d3232203d3e2034313334.roa File: 3132312e34362e3135322e302f32322d3232203d3e2034313334.roa (raw, json) Hash identifier: 4Y6hdMtjH3Fkk0a11ZoJNVWv2Uj5xxzXub8ezQv7RRI= Subject key identifier: 6F:FB:FC:35:75:DC:20:00:89:D2:EC:07:07:9F:40:65:20:89:F0:0B Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6 Certificate serial: 639BE037AE2C9ACC0404DC35B9A5061318DD0D5D Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3135322e302f32322d3232203d3e2034313334.roa Signing time: Thu 23 Apr 2026 08:16:43 +0000 ROA not before: Thu 23 Apr 2026 08:11:43 +0000 ROA not after: Thu 22 Apr 2027 08:16:43 +0000 asID: 4134 IP address blocks: 121.46.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 06:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:9b:e0:37:ae:2c:9a:cc:04:04:dc:35:b9:a5:06:13:18:dd:0d:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6 Validity Not Before: Apr 23 08:11:43 2026 GMT Not After : Apr 22 08:16:43 2027 GMT Subject: CN=6FFBFC3575DC200089D2EC07079F40652089F00B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9f:51:2e:6a:aa:31:b4:e0:51:38:41:b0:ca: b6:76:3b:f9:38:00:fd:71:ae:93:1b:52:7c:f5:5d: c7:d2:27:4a:d1:82:2f:6b:da:78:c4:dd:a2:73:9e: fe:f1:bb:c2:05:b5:2b:7f:d4:b9:19:37:f8:27:58: 9d:76:40:ce:dc:78:cb:f5:fb:1b:e4:62:dd:fc:f0: b1:51:94:ab:0e:59:59:e7:9a:fa:91:76:11:ff:0f: 1c:07:82:c8:4a:0a:1a:76:e7:1b:c0:aa:f9:61:14: 68:06:0d:9d:f3:a3:14:8b:7a:dc:07:60:b1:45:1d: 5d:4b:47:25:4d:8f:c8:4c:27:64:23:d6:67:a5:8f: 47:6a:dc:05:9e:4d:17:ce:99:65:3f:4e:8b:03:9d: 61:4e:7c:ed:b8:59:6f:91:2d:81:fa:b1:a0:7c:24: 8e:28:8c:25:c0:24:19:19:fb:f4:82:69:1a:61:ee: 94:09:f6:cc:c5:cf:10:83:05:86:63:ff:b3:31:cc: 49:e7:d4:ce:10:22:fe:db:2c:3b:81:7f:5b:c4:70: 8d:c0:b5:da:f3:9a:7a:f0:0b:22:3d:38:cc:7f:bc: c7:45:08:87:48:68:d3:d3:95:34:05:0b:ee:14:f4: 46:43:37:18:2f:e8:f7:29:83:2d:7f:b2:98:b6:c7: 08:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:FB:FC:35:75:DC:20:00:89:D2:EC:07:07:9F:40:65:20:89:F0:0B X509v3 Authority Key Identifier: keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3135322e302f32322d3232203d3e2034313334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.46.152.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:f7:50:5e:48:e2:24:ea:20:d8:f2:a7:ab:f7:7b:25:21:70: 87:52:b3:8e:ed:6b:10:74:b2:44:a1:1d:8b:ca:00:d5:89:2a: 64:b0:b1:a4:ec:cf:d8:0f:a5:99:44:9b:36:e5:31:d0:17:a6: ff:25:1b:8f:eb:4a:89:92:9b:3e:d2:77:7d:92:4b:87:9f:a7: f2:8a:aa:e9:9b:f7:32:e0:a2:11:1a:50:27:c0:00:f0:e1:0f: 0b:b7:54:0c:64:ab:c8:ad:ff:db:0e:0f:4c:30:31:0f:17:de: 5e:bf:8e:67:e7:48:42:f4:65:63:48:1c:9a:59:4a:da:fd:3a: 25:05:af:f4:a6:29:9c:31:f7:2f:d6:e7:2b:4a:bd:dc:45:0e: 5d:f7:b4:d3:00:df:6d:de:23:a8:49:5a:df:66:11:33:ab:89: fc:4a:21:bf:9b:b2:de:23:0c:16:9b:59:9a:e7:fd:70:16:0f: 2d:5a:ef:ce:76:a2:2f:7f:37:c1:53:a3:43:7b:c6:7a:e9:ea: 0b:b9:53:ae:92:4f:5a:78:54:d2:ee:3e:48:cd:5a:d6:e1:8f: 99:ea:33:17:20:39:97:34:7e:e5:e5:c4:fa:b4:9f:85:e3:6c: 0f:8b:0c:34:0e:75:f2:8d:52:15:14:5a:dd:90:c0:06:47:de: e7:9a:22:16 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUY5vgN64smswEBNw1uaUGExjdDV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD MUE4NjlFNjAeFw0yNjA0MjMwODExNDNaFw0yNzA0MjIwODE2NDNaMDMxMTAvBgNV BAMTKDZGRkJGQzM1NzVEQzIwMDA4OUQyRUMwNzA3OUY0MDY1MjA4OUYwMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2n1EuaqoxtOBROEGwyrZ2O/k4 AP1xrpMbUnz1XcfSJ0rRgi9r2njE3aJznv7xu8IFtSt/1LkZN/gnWJ12QM7ceMv1 +xvkYt388LFRlKsOWVnnmvqRdhH/DxwHgshKChp25xvAqvlhFGgGDZ3zoxSLetwH YLFFHV1LRyVNj8hMJ2Qj1melj0dq3AWeTRfOmWU/TosDnWFOfO24WW+RLYH6saB8 JI4ojCXAJBkZ+/SCaRph7pQJ9szFzxCDBYZj/7MxzEnn1M4QIv7bLDuBf1vEcI3A tdrzmnrwCyI9OMx/vMdFCIdIaNPTlTQFC+4U9EZDNxgv6Pcpgy1/spi2xwhrAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUb/v8NXXcIACJ0uwHB59AZSCJ8AswHwYDVR0j BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0 MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2Mjc1MzMwNzc3MzUwMTQ2LzAvMzEzMjMxMmUzNDM2 MmUzMTM1MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDMxMzMzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAnkumDANBgkqhkiG9w0BAQsFAAOCAQEAD/dQXkjiJOog2PKnq/d7JSFwh1Kz ju1rEHSyRKEdi8oA1YkqZLCxpOzP2A+lmUSbNuUx0Bem/yUbj+tKiZKbPtJ3fZJL h5+n8oqq6Zv3MuCiERpQJ8AA8OEPC7dUDGSryK3/2w4PTDAxDxfeXr+OZ+dIQvRl Y0gcmllK2v06JQWv9KYpnDH3L9bnK0q93EUOXfe00wDfbd4jqEla32YRM6uJ/Eoh v5uy3iMMFptZmuf9cBYPLVrvznaiL383wVOjQ3vGeunqC7lTrpJPWnhU0u4+SM1a 1uGPmeozFyA5lzR+5eXE+rSfheNsD4sMNA518o1SFRRa3ZDABkfe55oiFg== -----END CERTIFICATE-----Generated at Mon Apr 27 13:50:49 2026 by rpki-client