$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099364928323584001/0/3132302e3133322e38382e302f32322d3232203d3e203539303839.roa File: 3132302e3133322e38382e302f32322d3232203d3e203539303839.roa (raw, json) Hash identifier: mQ719dBo8AjeVcNBY2cnlvFp490X4F9JzO9bEemtk78= Subject key identifier: C1:04:41:D6:95:B4:31:9B:91:44:78:81:FA:94:C0:16:CE:7A:3F:F0 Certificate issuer: /CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Certificate serial: 4A51EE0AC874E4F9C047EABE7CF015C79F707E0E Authority key identifier: 14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/3132302e3133322e38382e302f32322d3232203d3e203539303839.roa Signing time: Wed 22 Apr 2026 16:08:18 +0000 ROA not before: Wed 22 Apr 2026 16:03:18 +0000 ROA not after: Wed 21 Apr 2027 16:08:18 +0000 asID: 59089 IP address blocks: 120.132.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 06:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:51:ee:0a:c8:74:e4:f9:c0:47:ea:be:7c:f0:15:c7:9f:70:7e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Validity Not Before: Apr 22 16:03:18 2026 GMT Not After : Apr 21 16:08:18 2027 GMT Subject: CN=C10441D695B4319B91447881FA94C016CE7A3FF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:57:21:9e:68:70:0d:a7:ca:07:2f:18:6b:53: 3d:fa:1e:2f:ad:4e:eb:23:27:b2:34:13:8a:20:ed: 0f:39:d2:71:65:db:e2:3f:7e:f0:b6:42:fa:91:ee: 1e:8e:66:08:ae:05:60:94:8f:ef:0f:89:a6:b7:84: cf:b0:ea:1c:b6:77:c2:78:ae:c6:8c:de:24:98:45: 02:29:6f:c5:f2:c5:13:28:99:d2:71:2d:9c:4a:bc: e3:a2:50:88:89:77:e0:b8:fc:76:08:95:a6:ef:c7: bb:c4:98:d3:33:58:fa:a7:79:6c:13:8b:1f:c9:97: 73:d3:b9:15:f3:18:42:7c:a2:1a:70:7c:da:72:b2: 47:97:54:78:12:30:80:eb:2b:47:73:c1:96:96:e4: c5:87:2a:21:0b:c8:07:ac:28:4d:fa:44:19:1b:01: 2b:b4:77:3c:8c:ec:2c:24:50:ea:4c:b3:e0:10:f4: 24:a4:d5:6e:05:62:62:36:a9:10:2f:45:0c:fe:bc: b1:ac:31:1f:38:50:b2:d1:60:7e:22:5c:4d:b0:d8: 26:1c:a4:eb:14:86:cf:6a:be:de:c4:4d:b4:85:c8: 5f:37:96:33:b3:41:b2:8a:e0:f6:f2:1b:fc:37:b7: b1:d8:33:4e:05:cf:f0:5b:c2:7d:d0:79:8d:8a:20: c2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:04:41:D6:95:B4:31:9B:91:44:78:81:FA:94:C0:16:CE:7A:3F:F0 X509v3 Authority Key Identifier: keyid:14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/3132302e3133322e38382e302f32322d3232203d3e203539303839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.132.88.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:5f:7e:65:b3:3e:1b:f3:f7:26:98:ed:e8:32:44:5e:35:a6: 98:b4:92:e1:aa:ea:c2:2a:90:75:ca:53:e3:45:6c:cb:29:ae: 06:1a:83:f3:cc:f6:4b:c8:a9:2f:b3:81:7a:0f:9b:59:59:1b: 4d:3b:8e:6b:f8:81:f7:20:50:4f:56:dd:fb:e9:1c:a7:66:ef: 55:c2:04:df:c2:41:8b:64:f9:43:d5:12:d9:9c:fd:b5:4a:4e: 1e:bd:ea:d8:51:05:15:0b:2a:5f:b3:9a:bb:05:df:b8:52:0f: 90:6f:a1:ca:01:41:2d:98:67:ce:ba:80:dd:46:0c:65:38:d0: 46:c1:53:89:01:21:4d:6f:3f:b1:44:8f:69:54:4a:37:af:b1: 10:13:06:b8:8e:1b:6d:30:71:17:fb:50:99:e2:45:43:17:6b: 57:02:dd:bf:43:fb:dd:fe:2f:11:21:6a:b1:f2:f9:74:59:21: 1b:47:eb:e1:ad:91:76:08:4f:d3:58:9e:0c:38:7c:ef:55:e9: 5e:a5:6e:78:cf:e5:72:4f:36:d4:80:0e:2b:8a:5e:fb:bc:b1: cd:8f:6e:e7:07:70:e0:f6:05:51:8b:1e:e0:b4:bf:81:7e:2c: 84:e8:0d:f7:9c:40:9c:8e:86:25:bd:57:bb:a3:fa:94:5d:8a: 99:21:18:2e -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUSlHuCsh05PnAR+q+fPAVx59wfg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAz QkI1QzQyQjAeFw0yNjA0MjIxNjAzMThaFw0yNzA0MjExNjA4MThaMDMxMTAvBgNV BAMTKEMxMDQ0MUQ2OTVCNDMxOUI5MTQ0Nzg4MUZBOTRDMDE2Q0U3QTNGRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpVyGeaHANp8oHLxhrUz36Hi+t TusjJ7I0E4og7Q850nFl2+I/fvC2QvqR7h6OZgiuBWCUj+8Piaa3hM+w6hy2d8J4 rsaM3iSYRQIpb8XyxRMomdJxLZxKvOOiUIiJd+C4/HYIlabvx7vEmNMzWPqneWwT ix/Jl3PTuRXzGEJ8ohpwfNpyskeXVHgSMIDrK0dzwZaW5MWHKiELyAesKE36RBkb ASu0dzyM7CwkUOpMs+AQ9CSk1W4FYmI2qRAvRQz+vLGsMR84ULLRYH4iXE2w2CYc pOsUhs9qvt7ETbSFyF83ljOzQbKK4PbyG/w3t7HYM04Fz/Bbwn3QeY2KIMIxAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUwQRB1pW0MZuRRHiB+pTAFs56P/AwHwYDVR0j BBgwFoAUFPKuKJc0xvkiOhX0gu7XUDu1xCswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTM2NDkyODMyMzU4NDAwMS8wLzE0RjJBRTI4OTczNEM2RjkyMjNBMTVGNDgyRUVE NzUwM0JCNUM0MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAzQkI1QzQyQi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5OTM2NDkyODMyMzU4NDAwMS8wLzMxMzIzMDJlMzEz MzMyMmUzODM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzOTMwMzgzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAniEWDANBgkqhkiG9w0BAQsFAAOCAQEAml9+ZbM+G/P3Jpjt6DJEXjWm mLSS4arqwiqQdcpT40VsyymuBhqD88z2S8ipL7OBeg+bWVkbTTuOa/iB9yBQT1bd ++kcp2bvVcIE38JBi2T5Q9US2Zz9tUpOHr3q2FEFFQsqX7OauwXfuFIPkG+hygFB LZhnzrqA3UYMZTjQRsFTiQEhTW8/sUSPaVRKN6+xEBMGuI4bbTBxF/tQmeJFQxdr VwLdv0P73f4vESFqsfL5dFkhG0fr4a2RdghP01ieDDh871XpXqVueM/lck821IAO K4pe+7yxzY9u5wdw4PYFUYse4LS/gX4shOgN95xAnI6GJb1Xu6P6lF2KmSEYLg== -----END CERTIFICATE-----Generated at Mon Apr 27 16:34:42 2026 by rpki-client