$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3135322e302f32322d3232203d3e203536303430.roa File: 3132312e34362e3135322e302f32322d3232203d3e203536303430.roa (raw, json) Hash identifier: eytA3VRwzvElc/u2V2MTAiSgq9y8aEEkWXUGfWPdGrg= Subject key identifier: D3:70:A3:43:27:0F:93:B3:D6:81:FA:D0:F5:68:32:83:D3:76:11:BE Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6 Certificate serial: 240EB576F0DDDE405F17CC40B96AE39AEB5F0392 Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3135322e302f32322d3232203d3e203536303430.roa Signing time: Thu 23 Apr 2026 08:16:43 +0000 ROA not before: Thu 23 Apr 2026 08:11:43 +0000 ROA not after: Thu 22 Apr 2027 08:16:43 +0000 asID: 56040 IP address blocks: 121.46.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 06:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:0e:b5:76:f0:dd:de:40:5f:17:cc:40:b9:6a:e3:9a:eb:5f:03:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6 Validity Not Before: Apr 23 08:11:43 2026 GMT Not After : Apr 22 08:16:43 2027 GMT Subject: CN=D370A343270F93B3D681FAD0F5683283D37611BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8d:9f:f3:69:b2:24:0f:a8:16:de:82:f1:d8: 26:fe:6d:a2:52:df:8b:c5:58:37:8a:d3:8f:b5:be: d4:22:f4:69:a4:f3:94:3e:d6:28:96:23:ab:6a:77: 10:fa:6c:01:7f:fb:a2:cd:b3:b5:49:df:24:be:b2: 60:4f:63:df:7a:f2:55:99:82:57:69:3e:cc:9b:a7: 6f:7f:4f:82:f3:11:0f:34:92:96:96:00:a5:37:bd: 27:8d:75:65:8b:3c:6a:ac:74:c0:ef:5f:11:cf:ae: c5:ff:ad:e3:15:cc:ce:1c:0a:33:79:db:eb:18:c0: b3:36:2b:52:fc:a3:07:23:02:81:7d:ca:5d:d3:25: 45:1f:d6:f5:6b:a4:0b:9d:c0:8f:2e:63:e2:e8:39: 12:3a:69:81:b5:8a:17:f9:08:f2:1f:98:c5:2d:0c: 1f:28:c7:97:05:4f:2b:fc:52:94:35:4d:a9:bc:97: 1a:68:c4:db:01:b7:1e:30:49:bd:3d:3c:04:f2:ca: 3a:9e:dd:6c:3f:d6:31:06:39:40:22:42:44:f5:d5: 15:81:be:b8:b8:9b:ba:d1:f4:57:7c:52:a3:20:80: b7:82:63:e7:47:8d:e2:a9:44:ac:72:cc:a4:d0:dd: 6d:69:00:3e:b8:85:99:5e:21:62:2c:91:1d:3a:0d: d3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:70:A3:43:27:0F:93:B3:D6:81:FA:D0:F5:68:32:83:D3:76:11:BE X509v3 Authority Key Identifier: keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3135322e302f32322d3232203d3e203536303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.46.152.0/22 Signature Algorithm: sha256WithRSAEncryption 94:ea:ac:c3:e1:bc:2c:fe:4d:88:fa:a5:63:c8:8c:c0:66:7e: f7:96:99:fa:a6:6b:7b:cf:aa:7d:52:66:5b:ed:23:15:e6:d9: 37:d3:96:ad:04:6d:42:7e:87:ac:07:7a:92:92:75:1f:a3:6f: dc:b9:50:ea:14:00:23:14:cf:c2:65:61:3d:4b:08:77:02:47: 02:f2:56:df:ee:6d:b4:a0:38:b6:32:89:4e:47:2f:c8:d4:a9: 35:93:9c:a4:93:4d:95:f2:34:a3:2b:73:77:bd:62:7a:61:47: fb:da:44:20:cd:9f:a6:3b:0e:0d:67:9a:bb:00:34:63:b1:d0: 44:cf:ca:be:58:e4:0a:b2:e8:41:ba:f8:3a:c8:28:7d:f0:05: b5:d4:16:b5:ef:76:ae:0c:e2:7c:4d:0b:91:10:23:d6:81:36: df:1e:f7:12:1d:18:0c:4e:95:4f:ad:51:08:67:c6:4c:53:59: 9c:87:29:43:20:ff:dd:95:87:0e:a5:4b:07:18:b5:96:f7:aa: 90:8f:2e:3f:a4:0e:be:7d:ee:89:11:67:ba:69:91:21:59:df: ca:f4:c0:e8:d4:49:a4:cc:42:75:e9:6d:6a:cb:2b:ac:7c:30: 48:83:fc:e4:51:b2:7f:95:3b:72:43:75:c5:05:47:69:42:6d: cd:8f:69:78 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUJA61dvDd3kBfF8xAuWrjmutfA5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD MUE4NjlFNjAeFw0yNjA0MjMwODExNDNaFw0yNzA0MjIwODE2NDNaMDMxMTAvBgNV BAMTKEQzNzBBMzQzMjcwRjkzQjNENjgxRkFEMEY1NjgzMjgzRDM3NjExQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYjZ/zabIkD6gW3oLx2Cb+baJS 34vFWDeK04+1vtQi9Gmk85Q+1iiWI6tqdxD6bAF/+6LNs7VJ3yS+smBPY9968lWZ gldpPsybp29/T4LzEQ80kpaWAKU3vSeNdWWLPGqsdMDvXxHPrsX/reMVzM4cCjN5 2+sYwLM2K1L8owcjAoF9yl3TJUUf1vVrpAudwI8uY+LoORI6aYG1ihf5CPIfmMUt DB8ox5cFTyv8UpQ1Tam8lxpoxNsBtx4wSb09PATyyjqe3Ww/1jEGOUAiQkT11RWB vri4m7rR9Fd8UqMggLeCY+dHjeKpRKxyzKTQ3W1pAD64hZleIWIskR06DdMbAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU03CjQycPk7PWgfrQ9Wgyg9N2Eb4wHwYDVR0j BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0 MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjI3NTMzMDc3NzM1MDE0Ni8wLzMxMzIzMTJlMzQz NjJlMzEzNTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzNjMwMzQzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAnkumDANBgkqhkiG9w0BAQsFAAOCAQEAlOqsw+G8LP5NiPqlY8iMwGZ+ 95aZ+qZre8+qfVJmW+0jFebZN9OWrQRtQn6HrAd6kpJ1H6Nv3LlQ6hQAIxTPwmVh PUsIdwJHAvJW3+5ttKA4tjKJTkcvyNSpNZOcpJNNlfI0oytzd71iemFH+9pEIM2f pjsODWeauwA0Y7HQRM/KvljkCrLoQbr4OsgoffAFtdQWte92rgzifE0LkRAj1oE2 3x73Eh0YDE6VT61RCGfGTFNZnIcpQyD/3ZWHDqVLBxi1lveqkI8uP6QOvn3uiRFn ummRIVnfyvTA6NRJpMxCdeltassrrHwwSIP85FGyf5U7ckN1xQVHaUJtzY9peA== -----END CERTIFICATE-----Generated at Mon Apr 27 16:00:23 2026 by rpki-client