$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3132302e35322e33312e302f32342d3234203d3e2034383038.roa File: 3132302e35322e33312e302f32342d3234203d3e2034383038.roa (raw, json) Hash identifier: d2L9h98J/fI3Jky+WocrS09LIUC6ipAU83j3XP7FeJo= Subject key identifier: 69:4A:BC:EB:6F:34:62:36:71:FD:63:AD:AB:62:42:04:AC:FE:40:80 Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D Certificate serial: 58759CBBD15598125D0D9199ED92E6F8D0EC1208 Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3132302e35322e33312e302f32342d3234203d3e2034383038.roa Signing time: Fri 15 May 2026 08:57:20 +0000 ROA not before: Fri 15 May 2026 08:52:20 +0000 ROA not after: Fri 14 May 2027 08:57:20 +0000 asID: 4808 IP address blocks: 120.52.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:75:9c:bb:d1:55:98:12:5d:0d:91:99:ed:92:e6:f8:d0:ec:12:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D Validity Not Before: May 15 08:52:20 2026 GMT Not After : May 14 08:57:20 2027 GMT Subject: CN=694ABCEB6F34623671FD63ADAB624204ACFE4080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5a:25:a9:f0:01:8d:5b:c7:44:9f:71:87:49: c7:40:88:52:25:9c:6b:72:01:81:82:12:9c:cd:31: 06:01:52:2f:9b:89:b0:63:04:29:92:f6:fc:55:5f: 4c:73:38:6a:1a:03:43:ed:de:95:6c:03:5f:6d:07: e7:26:bc:23:18:2c:68:6f:41:94:2f:6e:dd:1d:63: f8:f4:e6:33:a0:c3:98:b2:ee:68:a6:ea:ff:ba:d6: 3a:f4:f9:b8:0a:a9:33:58:ef:41:d6:4c:8c:e2:f7: 5a:d1:0c:79:13:65:7b:cc:8e:6a:41:46:87:21:79: 3a:fc:27:d0:15:43:9f:be:18:67:27:8f:68:71:06: d9:a1:db:80:7d:f0:49:4d:8d:3c:e8:50:f5:bd:82: 0d:a8:ed:b2:82:f9:2e:36:61:94:71:29:e3:7a:4a: 23:7c:99:04:5b:e6:00:82:8c:af:e0:85:be:0c:51: b6:da:dc:45:33:f2:e2:da:b2:09:a2:3a:de:54:bc: a3:96:19:20:e0:f0:e8:23:1e:aa:a3:22:4b:63:47: 3e:45:67:fe:34:fe:fd:e3:15:8d:20:c2:f3:44:01: 3c:5e:ed:65:76:b9:e2:ee:fb:a9:ec:91:40:62:a9: c7:63:41:e2:cf:80:f4:f7:34:84:7e:5c:ed:2d:dd: b2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4A:BC:EB:6F:34:62:36:71:FD:63:AD:AB:62:42:04:AC:FE:40:80 X509v3 Authority Key Identifier: keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3132302e35322e33312e302f32342d3234203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.52.31.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:0b:73:85:62:e4:88:25:7c:7a:3a:0e:12:4e:20:4f:ae:4c: db:9e:32:7f:74:c1:e7:f0:df:f6:de:0d:34:ce:b8:b7:5d:aa: c2:67:dc:f1:bc:52:d4:31:a7:ba:df:c7:db:fb:7e:fc:77:ed: ac:70:4d:28:ee:e9:d5:d0:d4:ad:d6:29:f0:07:b5:16:bf:d8: 33:3b:26:93:6a:ab:56:57:48:b3:90:4c:e5:bb:70:80:f2:a2: 7b:a0:a0:6a:5b:cb:6b:19:1a:08:24:0d:20:b9:d6:78:5f:39: 11:ce:7f:d0:d4:55:d1:d8:54:7b:c5:20:c5:2e:53:10:ee:d9: d1:c0:3c:1e:0e:ea:99:77:51:01:d8:b4:47:af:0c:c9:5a:5a: 62:94:ca:f7:13:56:b5:bd:45:02:ff:e8:1f:70:a1:44:f7:87: 7e:0b:d9:8c:17:65:17:d5:02:2b:f4:c8:ed:b0:cd:3c:a0:7a: 79:95:11:18:30:68:cf:3b:d2:55:37:4e:ec:1e:16:9a:25:e1: a6:ab:50:50:66:b9:18:d7:0e:09:89:a0:bf:91:73:32:93:1c: 5c:7d:89:c7:2c:8e:f7:18:57:7d:5a:e2:0b:94:1c:5c:db:90: ae:88:1c:e2:e8:97:a2:81:9f:c3:ed:e4:a8:ab:cb:98:a3:1a: 8e:b9:1f:07 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUWHWcu9FVmBJdDZGZ7ZLm+NDsEggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI1NkM3RTg3MTMyMTEyNTFBOUY2MTlEQkMzOEQ5OTM5 NEFCQUE5RDAeFw0yNjA1MTUwODUyMjBaFw0yNzA1MTQwODU3MjBaMDMxMTAvBgNV BAMTKDY5NEFCQ0VCNkYzNDYyMzY3MUZENjNBREFCNjI0MjA0QUNGRTQwODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3WiWp8AGNW8dEn3GHScdAiFIl nGtyAYGCEpzNMQYBUi+bibBjBCmS9vxVX0xzOGoaA0Pt3pVsA19tB+cmvCMYLGhv QZQvbt0dY/j05jOgw5iy7mim6v+61jr0+bgKqTNY70HWTIzi91rRDHkTZXvMjmpB RocheTr8J9AVQ5++GGcnj2hxBtmh24B98ElNjTzoUPW9gg2o7bKC+S42YZRxKeN6 SiN8mQRb5gCCjK/ghb4MUbba3EUz8uLasgmiOt5UvKOWGSDg8OgjHqqjIktjRz5F Z/40/v3jFY0gwvNEATxe7WV2ueLu+6nskUBiqcdjQeLPgPT3NIR+XO0t3bJ5AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUaUq86280YjZx/WOtq2JCBKz+QIAwHwYDVR0j BBgwFoAUklbH6HEyESUan2GdvDjZk5Srqp0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcwODc0OTUwNDAyMDQ4Mi8wLzkyNTZDN0U4NzEzMjExMjUxQTlGNjE5REJDMzhE OTkzOTRBQkFBOUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTI1NkM3RTg3MTMyMTEyNTFBOUY2MTlEQkMzOEQ5OTM5NEFCQUE5RC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2NzA4NzQ5NTA0MDIwNDgyLzAvMzEzMjMwMmUzNTMy MmUzMzMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAB4NB8wDQYJKoZIhvcNAQELBQADggEBAI4Lc4Vi5IglfHo6DhJOIE+uTNueMn90 wefw3/beDTTOuLddqsJn3PG8UtQxp7rfx9v7fvx37axwTSju6dXQ1K3WKfAHtRa/ 2DM7JpNqq1ZXSLOQTOW7cIDyonugoGpby2sZGggkDSC51nhfORHOf9DUVdHYVHvF IMUuUxDu2dHAPB4O6pl3UQHYtEevDMlaWmKUyvcTVrW9RQL/6B9woUT3h34L2YwX ZRfVAiv0yO2wzTygenmVERgwaM870lU3TuweFpol4aarUFBmuRjXDgmJoL+RczKT HFx9iccsjvcYV31a4guUHFzbkK6IHOLol6KBn8Pt5Kiry5ijGo65Hwc= -----END CERTIFICATE-----Generated at Fri May 29 22:56:59 2026 by rpki-client