$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32382e302f32332d3233203d3e20313335333931.roa File: 3132312e34362e32382e302f32332d3233203d3e20313335333931.roa (raw, json) Hash identifier: Y2uWBtsWJxyOTIakcI5i4+yjqThEBwBWBYP8OhcT9Ns= Subject key identifier: F3:40:1B:B0:9F:43:A0:80:EF:FB:80:D3:54:C7:E4:62:55:5E:EC:2B Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6 Certificate serial: 7B078BC0B1ED66A8856CFAB1B337DA07393FCD8C Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32382e302f32332d3233203d3e20313335333931.roa Signing time: Mon 20 Apr 2026 06:38:07 +0000 ROA not before: Mon 20 Apr 2026 06:33:07 +0000 ROA not after: Mon 19 Apr 2027 06:38:07 +0000 asID: 135391 IP address blocks: 121.46.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 06:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:07:8b:c0:b1:ed:66:a8:85:6c:fa:b1:b3:37:da:07:39:3f:cd:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6 Validity Not Before: Apr 20 06:33:07 2026 GMT Not After : Apr 19 06:38:07 2027 GMT Subject: CN=F3401BB09F43A080EFFB80D354C7E462555EEC2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:08:f4:c7:3e:1e:ee:66:17:70:6b:a6:26:f5: 7a:21:a7:4a:ad:78:fe:7d:58:1e:8a:81:ea:e6:46: 7d:98:24:84:d7:6d:76:86:84:2b:89:58:22:5f:57: 9b:20:77:07:06:be:c1:50:e1:f1:c3:df:61:73:5b: 7c:90:a5:9e:e6:9b:ef:8e:ce:72:8a:f6:1d:01:4e: 2e:d7:d0:47:1b:4b:4a:fc:c3:e5:83:41:86:e6:c8: 70:12:8c:28:36:6d:50:f7:a8:23:84:6a:d0:1f:37: 52:0c:bf:18:79:e0:b4:d3:bf:82:21:ac:10:d7:e3: c5:77:00:d4:57:b8:ce:3d:53:be:4a:12:3d:e4:9d: f4:1f:02:04:e7:b1:4b:a2:d6:d6:56:ad:1d:7d:bc: 9c:f2:16:bf:05:45:f9:7e:5d:80:4e:d0:12:9f:84: c9:1d:2a:e4:11:f2:cd:64:47:6a:f5:66:37:3d:f6: 43:cd:d5:e5:a3:68:dc:30:fd:fb:44:c9:72:ee:1d: 47:8e:60:e8:33:18:c1:97:e9:e8:f0:e2:18:3d:d7: a0:7b:a9:41:f6:74:7b:c8:41:9e:fd:40:30:50:ae: df:0c:96:bc:e6:90:38:fa:e7:b9:70:3b:c9:e0:ca: 15:da:77:4c:80:1e:2e:ce:b0:ae:86:e0:0f:77:41: 59:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:40:1B:B0:9F:43:A0:80:EF:FB:80:D3:54:C7:E4:62:55:5E:EC:2B X509v3 Authority Key Identifier: keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32382e302f32332d3233203d3e20313335333931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.46.28.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:34:60:df:f9:91:dd:54:19:82:01:b9:5f:d3:32:2f:a6:3d: 7b:f9:6e:9c:3d:3a:22:48:5d:dc:2f:70:b0:e5:86:93:11:66: 7f:8d:25:8f:a2:aa:88:44:7c:67:81:09:a4:21:20:a9:cc:80: 6e:ac:be:6e:da:14:11:d7:ff:85:2f:9c:f2:8c:42:07:c5:64: 17:c4:05:23:87:ef:c5:a0:74:95:bd:57:1b:ee:8a:cf:f3:8d: f5:96:c1:a3:50:00:6d:60:05:fd:72:79:19:76:55:a7:b5:5e: c3:49:cf:80:d4:05:6d:7f:3d:b3:c0:61:bc:24:dd:36:d3:26: 01:56:14:21:c7:44:24:c4:95:b1:d5:fa:60:75:1b:a0:37:1e: 75:c7:55:1d:62:70:bf:84:73:02:6b:30:78:09:b4:ec:d1:e8: e8:69:a2:32:54:c3:f2:0b:52:ef:a3:68:f9:38:f5:67:2c:8d: b0:6e:3b:c4:88:0b:11:d0:c7:a1:e1:41:7c:b4:ee:e7:ad:82: 71:50:02:f7:f9:1b:ef:da:0b:44:2a:ba:15:d1:51:56:71:7d: 88:14:a6:32:78:4e:83:52:5b:e7:66:dc:fe:16:52:ea:86:ce: 48:83:a3:52:72:4e:01:e7:4a:86:0e:d1:f3:a8:ba:29:ce:a5: d0:a5:4b:23 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUeweLwLHtZqiFbPqxszfaBzk/zYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD MUE4NjlFNjAeFw0yNjA0MjAwNjMzMDdaFw0yNzA0MTkwNjM4MDdaMDMxMTAvBgNV BAMTKEYzNDAxQkIwOUY0M0EwODBFRkZCODBEMzU0QzdFNDYyNTU1RUVDMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4CPTHPh7uZhdwa6Ym9Xohp0qt eP59WB6KgermRn2YJITXbXaGhCuJWCJfV5sgdwcGvsFQ4fHD32FzW3yQpZ7mm++O znKK9h0BTi7X0EcbS0r8w+WDQYbmyHASjCg2bVD3qCOEatAfN1IMvxh54LTTv4Ih rBDX48V3ANRXuM49U75KEj3knfQfAgTnsUui1tZWrR19vJzyFr8FRfl+XYBO0BKf hMkdKuQR8s1kR2r1Zjc99kPN1eWjaNww/ftEyXLuHUeOYOgzGMGX6ejw4hg916B7 qUH2dHvIQZ79QDBQrt8MlrzmkDj657lwO8ngyhXad0yAHi7OsK6G4A93QVmPAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU80AbsJ9DoIDv+4DTVMfkYlVe7CswHwYDVR0j BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0 MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjI3NTMzMDc3NzM1MDE0Ni8wLzMxMzIzMTJlMzQz NjJlMzIzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzMzNTMzMzkzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAXkuHDANBgkqhkiG9w0BAQsFAAOCAQEAGzRg3/mR3VQZggG5X9MyL6Y9 e/lunD06Ikhd3C9wsOWGkxFmf40lj6KqiER8Z4EJpCEgqcyAbqy+btoUEdf/hS+c 8oxCB8VkF8QFI4fvxaB0lb1XG+6Kz/ON9ZbBo1AAbWAF/XJ5GXZVp7Vew0nPgNQF bX89s8BhvCTdNtMmAVYUIcdEJMSVsdX6YHUboDcedcdVHWJwv4RzAmsweAm07NHo 6GmiMlTD8gtS76No+Tj1ZyyNsG47xIgLEdDHoeFBfLTu562CcVAC9/kb79oLRCq6 FdFRVnF9iBSmMnhOg1Jb52bc/hZS6obOSIOjUnJOAedKhg7R86i6Kc6l0KVLIw== -----END CERTIFICATE-----Generated at Mon Apr 27 16:00:24 2026 by rpki-client