$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099364928323584001/0/3132302e3133322e38382e302f32322d3232203d3e203233373234.roa File: 3132302e3133322e38382e302f32322d3232203d3e203233373234.roa (raw, json) Hash identifier: 7+ZC8yPFzf/dzFxJeP5KMrdX5vymzjGA7Kg7zZMiZFo= Subject key identifier: 4E:8B:A9:4D:BE:D7:97:0E:E4:7C:35:B9:4F:7D:91:3E:84:16:44:C6 Certificate issuer: /CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Certificate serial: 0CB4CABC206B23E2BB20AC29CEE14BE44BEAE943 Authority key identifier: 14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/3132302e3133322e38382e302f32322d3232203d3e203233373234.roa Signing time: Wed 22 Apr 2026 17:08:42 +0000 ROA not before: Wed 22 Apr 2026 17:03:42 +0000 ROA not after: Wed 21 Apr 2027 17:08:42 +0000 asID: 23724 IP address blocks: 120.132.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 06:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:b4:ca:bc:20:6b:23:e2:bb:20:ac:29:ce:e1:4b:e4:4b:ea:e9:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Validity Not Before: Apr 22 17:03:42 2026 GMT Not After : Apr 21 17:08:42 2027 GMT Subject: CN=4E8BA94DBED7970EE47C35B94F7D913E841644C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cf:50:a8:25:a4:83:e9:d7:ac:6e:56:c1:4f: 5a:e4:a3:c8:12:ae:b8:37:8b:90:ef:f0:05:ec:35: 91:be:6e:34:a7:12:6a:5e:bf:8f:63:ba:a2:ba:3e: ac:16:9b:ad:ad:6c:4b:be:ef:03:af:d6:5d:14:a1: 32:50:04:34:d7:82:a8:35:8c:4f:a6:39:64:a3:e7: 76:5d:e1:46:c5:3b:68:84:02:6d:ac:13:a2:c2:ce: 47:43:f0:af:c6:78:12:d5:42:fe:2b:74:a0:3a:c2: da:08:0d:d6:b1:93:48:2b:69:fd:e0:0a:64:d1:12: e6:02:05:e7:c3:bc:13:95:41:87:7b:17:5b:86:54: a3:b4:f7:80:08:08:30:66:ea:fe:16:d9:08:88:d9: 92:34:19:33:97:be:a5:3b:a0:0b:8c:e8:2f:c2:0a: df:35:86:96:98:8a:1d:1d:b0:67:64:58:a2:c0:3b: 61:7c:f0:40:5c:6c:01:64:11:36:29:1b:26:be:a6: 9c:ad:a3:ad:2a:82:39:6e:cb:01:4c:18:0f:96:8a: b1:eb:ac:82:19:73:d8:e3:44:d3:84:fa:3c:cf:3e: f6:23:94:23:b8:0b:ed:c2:8a:13:53:1e:a7:c1:48: a0:8d:88:08:a6:32:30:bd:fb:a0:dd:52:52:c0:7b: 8c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:8B:A9:4D:BE:D7:97:0E:E4:7C:35:B9:4F:7D:91:3E:84:16:44:C6 X509v3 Authority Key Identifier: keyid:14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/3132302e3133322e38382e302f32322d3232203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.132.88.0/22 Signature Algorithm: sha256WithRSAEncryption b7:65:1d:68:ae:76:54:d2:bf:17:40:e5:78:de:c9:44:b8:68: 1f:f0:5b:08:f1:fc:39:0c:ca:d9:13:c0:b2:7e:39:2f:a1:5b: 3e:7e:9c:5f:34:71:df:d3:6b:6d:12:6d:39:dd:8b:6d:83:9c: 9a:86:63:e4:09:96:8e:fc:52:81:27:d9:0b:27:2f:95:17:80: f0:83:f6:66:69:53:cb:7e:38:bd:ee:5a:3a:4d:4b:02:ba:2a: 64:53:5f:bb:8e:5d:ff:91:90:7d:75:45:3b:25:9b:8b:99:f8: 65:94:b3:48:7e:22:ac:9d:06:86:73:d4:14:bd:47:b7:80:e1: 2d:9c:5e:74:36:a1:f0:1b:10:8e:10:5b:f3:6d:47:aa:7f:be: 9a:62:2c:bb:70:78:72:0c:ee:b4:a3:03:61:cc:bb:3a:62:17: 6a:4c:b0:0c:47:78:b0:1b:b2:83:c0:6f:f6:f3:2d:ba:75:67: 4f:5d:ce:c3:a0:28:dd:02:a3:a1:1f:78:c6:02:78:c6:9f:52: 1c:fe:e4:ea:c1:b3:20:71:64:2b:bd:47:98:9e:7a:d8:58:c8: ad:d6:bb:6c:92:c4:06:aa:cc:2c:df:41:35:f6:33:55:76:c9: 61:74:4c:e5:80:fa:75:22:c4:b5:2d:09:52:b0:a4:ab:2d:b4: fb:32:d4:89 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUDLTKvCBrI+K7IKwpzuFL5Evq6UMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAz QkI1QzQyQjAeFw0yNjA0MjIxNzAzNDJaFw0yNzA0MjExNzA4NDJaMDMxMTAvBgNV BAMTKDRFOEJBOTREQkVENzk3MEVFNDdDMzVCOTRGN0Q5MTNFODQxNjQ0QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTz1CoJaSD6desblbBT1rko8gS rrg3i5Dv8AXsNZG+bjSnEmpev49juqK6PqwWm62tbEu+7wOv1l0UoTJQBDTXgqg1 jE+mOWSj53Zd4UbFO2iEAm2sE6LCzkdD8K/GeBLVQv4rdKA6wtoIDdaxk0graf3g CmTREuYCBefDvBOVQYd7F1uGVKO094AICDBm6v4W2QiI2ZI0GTOXvqU7oAuM6C/C Ct81hpaYih0dsGdkWKLAO2F88EBcbAFkETYpGya+ppyto60qgjluywFMGA+WirHr rIIZc9jjRNOE+jzPPvYjlCO4C+3CihNTHqfBSKCNiAimMjC9+6DdUlLAe4xBAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUToupTb7Xlw7kfDW5T32RPoQWRMYwHwYDVR0j BBgwFoAUFPKuKJc0xvkiOhX0gu7XUDu1xCswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTM2NDkyODMyMzU4NDAwMS8wLzE0RjJBRTI4OTczNEM2RjkyMjNBMTVGNDgyRUVE NzUwM0JCNUM0MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAzQkI1QzQyQi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5OTM2NDkyODMyMzU4NDAwMS8wLzMxMzIzMDJlMzEz MzMyMmUzODM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzMzM3MzIzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAniEWDANBgkqhkiG9w0BAQsFAAOCAQEAt2UdaK52VNK/F0DleN7JRLho H/BbCPH8OQzK2RPAsn45L6FbPn6cXzRx39NrbRJtOd2LbYOcmoZj5AmWjvxSgSfZ CycvlReA8IP2ZmlTy344ve5aOk1LAroqZFNfu45d/5GQfXVFOyWbi5n4ZZSzSH4i rJ0GhnPUFL1Ht4DhLZxedDah8BsQjhBb821Hqn++mmIsu3B4cgzutKMDYcy7OmIX akywDEd4sBuyg8Bv9vMtunVnT13Ow6Ao3QKjoR94xgJ4xp9SHP7k6sGzIHFkK71H mJ562FjIrda7bJLEBqrMLN9BNfYzVXbJYXRM5YD6dSLEtS0JUrCkqy20+zLUiQ== -----END CERTIFICATE-----Generated at Mon Apr 27 16:34:01 2026 by rpki-client