$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099364928323584001/0/3132302e3133322e38382e302f32322d3232203d3e2039383038.roa File: 3132302e3133322e38382e302f32322d3232203d3e2039383038.roa (raw, json) Hash identifier: kVDtH86KTjJ0SIKAoAsxqLxXUQxqUNK9oGhyJSXpZH4= Subject key identifier: F1:C4:22:D9:B4:64:BC:31:DC:D4:E8:52:49:1C:F5:4F:DF:A1:1A:B8 Certificate issuer: /CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Certificate serial: 0268D4D1CA3C84A5F95782AD4A327189035788A3 Authority key identifier: 14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/3132302e3133322e38382e302f32322d3232203d3e2039383038.roa Signing time: Wed 22 Apr 2026 16:08:17 +0000 ROA not before: Wed 22 Apr 2026 16:03:17 +0000 ROA not after: Wed 21 Apr 2027 16:08:17 +0000 asID: 9808 IP address blocks: 120.132.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 06:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:68:d4:d1:ca:3c:84:a5:f9:57:82:ad:4a:32:71:89:03:57:88:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Validity Not Before: Apr 22 16:03:17 2026 GMT Not After : Apr 21 16:08:17 2027 GMT Subject: CN=F1C422D9B464BC31DCD4E852491CF54FDFA11AB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e0:0f:9b:2e:6b:26:4d:44:05:c8:a6:d7:b7: 0f:8f:3b:d0:b5:9b:6e:69:4c:cf:ed:2b:b2:5f:2e: 3c:36:6b:cd:7a:c6:42:02:0e:af:e5:36:a9:eb:ad: f7:ba:09:4d:75:13:d3:78:78:bc:d0:03:16:c3:52: f1:16:a6:84:36:d4:6c:63:fa:d6:df:68:87:bb:79: 9c:a4:57:11:ee:b8:5e:89:dc:fd:fa:c3:ce:f1:7c: 9c:52:20:d7:83:a9:76:f1:47:af:55:49:e0:06:10: fc:a3:6b:9c:f5:a9:26:b5:46:d4:d1:4f:f7:4e:da: f7:04:49:a9:59:29:5f:69:70:80:68:05:92:b1:2a: c6:0d:ba:20:a7:98:36:3f:80:e7:f7:73:44:93:60: 93:dc:9f:88:c6:be:a2:a1:c1:f8:77:3a:eb:da:df: e4:db:46:58:bc:d9:cb:9c:bb:cc:cd:97:8b:ad:e7: 73:3d:ac:c6:5a:71:5e:17:03:10:ca:02:dd:eb:4e: 73:49:f2:36:83:6b:3d:7f:cb:1a:bc:5a:b2:d1:92: 5b:f9:66:f3:9b:5b:5d:c1:c7:36:06:be:cc:e5:64: 52:4e:0c:59:66:f9:cf:c1:39:5f:32:e8:90:67:3c: 20:ad:a5:1f:7d:79:53:bb:ee:04:28:98:06:5b:52: 93:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C4:22:D9:B4:64:BC:31:DC:D4:E8:52:49:1C:F5:4F:DF:A1:1A:B8 X509v3 Authority Key Identifier: keyid:14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/3132302e3133322e38382e302f32322d3232203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.132.88.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:4c:77:f7:7a:56:dc:09:fb:11:e4:d4:58:96:02:46:94:7c: 56:b8:4c:c7:3f:fd:a4:f5:e4:40:a3:8a:e3:3e:5d:36:d4:c2: 98:c0:f4:77:43:fc:b0:d2:02:bb:2c:c2:b3:fc:8a:64:66:7b: f6:be:f4:98:61:1c:fb:f0:81:be:f7:5c:22:ba:fe:96:9c:c7: 81:18:09:d9:49:93:d5:46:8b:e8:b1:d6:64:a0:9e:77:74:0f: ea:a8:bb:9d:1b:ed:4e:37:29:ee:23:51:50:11:44:5b:28:29: d5:c3:81:f0:7b:20:15:00:03:30:01:f3:91:47:99:ad:b3:9e: ac:fe:1b:9e:a9:7f:8b:b8:1a:6a:ad:8f:03:6d:5b:31:dc:96: 88:6a:67:28:94:dd:07:1d:0e:c4:c7:a8:28:b3:55:46:89:18: 29:7d:14:40:4e:46:15:8a:b3:48:48:0f:27:c4:87:33:24:3b: 18:a3:bb:f5:d9:50:14:6d:51:d8:0c:3d:f2:5a:71:aa:e9:c7: 1e:20:6b:c0:b2:e0:66:38:5f:28:96:8c:59:ea:d9:ec:8b:3b: a2:0a:00:1f:e1:01:c0:c7:47:d5:b9:61:18:d9:ee:f2:53:44: 71:9f:2a:2e:e1:32:0e:07:42:71:4c:68:55:37:27:d9:df:96: 0b:7e:18:e8 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUAmjU0co8hKX5V4KtSjJxiQNXiKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAz QkI1QzQyQjAeFw0yNjA0MjIxNjAzMTdaFw0yNzA0MjExNjA4MTdaMDMxMTAvBgNV BAMTKEYxQzQyMkQ5QjQ2NEJDMzFEQ0Q0RTg1MjQ5MUNGNTRGREZBMTFBQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl4A+bLmsmTUQFyKbXtw+PO9C1 m25pTM/tK7JfLjw2a816xkICDq/lNqnrrfe6CU11E9N4eLzQAxbDUvEWpoQ21Gxj +tbfaIe7eZykVxHuuF6J3P36w87xfJxSINeDqXbxR69VSeAGEPyja5z1qSa1RtTR T/dO2vcESalZKV9pcIBoBZKxKsYNuiCnmDY/gOf3c0STYJPcn4jGvqKhwfh3Ouva 3+TbRli82cucu8zNl4ut53M9rMZacV4XAxDKAt3rTnNJ8jaDaz1/yxq8WrLRklv5 ZvObW13BxzYGvszlZFJODFlm+c/BOV8y6JBnPCCtpR99eVO77gQomAZbUpM3AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU8cQi2bRkvDHc1OhSSRz1T9+hGrgwHwYDVR0j BBgwFoAUFPKuKJc0xvkiOhX0gu7XUDu1xCswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTM2NDkyODMyMzU4NDAwMS8wLzE0RjJBRTI4OTczNEM2RjkyMjNBMTVGNDgyRUVE NzUwM0JCNUM0MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAzQkI1QzQyQi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk5MzY0OTI4MzIzNTg0MDAxLzAvMzEzMjMwMmUzMTMz MzIyZTM4MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzOTM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAniEWDANBgkqhkiG9w0BAQsFAAOCAQEAPEx393pW3An7EeTUWJYCRpR8VrhM xz/9pPXkQKOK4z5dNtTCmMD0d0P8sNICuyzCs/yKZGZ79r70mGEc+/CBvvdcIrr+ lpzHgRgJ2UmT1UaL6LHWZKCed3QP6qi7nRvtTjcp7iNRUBFEWygp1cOB8HsgFQAD MAHzkUeZrbOerP4bnql/i7gaaq2PA21bMdyWiGpnKJTdBx0OxMeoKLNVRokYKX0U QE5GFYqzSEgPJ8SHMyQ7GKO79dlQFG1R2Aw98lpxqunHHiBrwLLgZjhfKJaMWerZ 7Is7ogoAH+EBwMdH1blhGNnu8lNEcZ8qLuEyDgdCcUxoVTcn2d+WC34Y6A== -----END CERTIFICATE-----Generated at Mon Apr 27 16:32:44 2026 by rpki-client