$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108600868493590547/0/3132342e3234302e3132382e302f31382d3138203d3e2034383337.roa File: 3132342e3234302e3132382e302f31382d3138203d3e2034383337.roa (raw, json) Hash identifier: m9XQsIz+eXEguT02N3ywaodILFqEFw4B0TvG17l7yqs= Subject key identifier: B3:90:9B:54:20:DF:25:6B:DF:6E:44:66:6E:B1:4E:EF:41:D9:20:B8 Certificate issuer: /CN=AC68C3A56C2B8FB70DEE75D5F58493ACBE260538 Certificate serial: 7015924EA56708F2745B49F2ADA195E596009AB2 Authority key identifier: AC:68:C3:A5:6C:2B:8F:B7:0D:EE:75:D5:F5:84:93:AC:BE:26:05:38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/3132342e3234302e3132382e302f31382d3138203d3e2034383337.roa Signing time: Mon 18 May 2026 04:00:43 +0000 ROA not before: Mon 18 May 2026 03:55:43 +0000 ROA not after: Mon 17 May 2027 04:00:43 +0000 asID: 4837 IP address blocks: 124.240.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 17:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:15:92:4e:a5:67:08:f2:74:5b:49:f2:ad:a1:95:e5:96:00:9a:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC68C3A56C2B8FB70DEE75D5F58493ACBE260538 Validity Not Before: May 18 03:55:43 2026 GMT Not After : May 17 04:00:43 2027 GMT Subject: CN=B3909B5420DF256BDF6E44666EB14EEF41D920B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a3:9b:2a:47:4f:92:0a:8f:29:71:5b:af:ac: f5:28:ab:1e:33:3e:c8:57:ef:d5:9e:e9:60:e3:a4: fd:90:89:15:72:53:41:72:ef:1c:79:78:e1:68:ba: 9c:5b:a3:9e:a2:0a:2b:f2:93:61:d4:1c:8e:3d:da: ce:e6:c9:d4:05:d9:27:e4:f6:bd:f5:5e:0d:9e:38: d7:e0:28:2c:59:db:62:95:bb:dc:26:a4:39:5b:18: a3:12:aa:45:d6:a3:57:55:7e:f7:2e:d2:f0:6c:ec: 59:9f:81:72:24:a1:6e:69:5a:c9:36:8c:0b:9c:8e: 6f:0f:26:cd:3e:78:ea:7c:bf:86:4a:9f:e2:9e:48: 89:3f:dc:28:b9:0e:63:3f:5d:22:88:23:fb:f0:2a: 64:10:45:af:f7:41:3b:8e:a5:45:eb:6d:0c:ba:a3: 46:22:9e:2d:be:50:19:8a:ab:ff:5d:0e:42:f3:29: 91:93:7e:f1:d3:05:11:38:ed:45:04:98:09:dd:96: 52:67:c7:50:12:72:3e:78:65:95:55:ac:4b:06:0c: 76:58:87:ba:52:d2:2c:8c:db:bd:79:23:e4:35:bd: 87:41:eb:47:18:7b:3e:15:78:c7:cb:5a:8c:94:76: 98:8a:a4:88:2c:b3:dd:c2:45:2c:66:0c:64:4c:8f: e4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:90:9B:54:20:DF:25:6B:DF:6E:44:66:6E:B1:4E:EF:41:D9:20:B8 X509v3 Authority Key Identifier: keyid:AC:68:C3:A5:6C:2B:8F:B7:0D:EE:75:D5:F5:84:93:AC:BE:26:05:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/3132342e3234302e3132382e302f31382d3138203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.240.128.0/18 Signature Algorithm: sha256WithRSAEncryption d6:1f:b5:39:a4:5c:2b:cc:ef:ba:8c:10:4b:5e:2f:d3:cc:94: 4b:c4:8f:62:05:5f:7b:17:67:53:e3:37:a8:8f:07:37:af:fd: c9:bf:79:c6:17:9c:a6:6e:3a:57:04:c1:df:c2:b6:7e:78:f1: 8f:05:b1:ef:f3:a5:5b:64:6f:dc:d5:4c:7c:9b:3f:0c:45:b9: 54:2a:1e:f1:35:57:f9:35:68:69:83:10:04:06:c6:b8:dd:c4: 4a:ce:80:e5:5a:ca:3e:fd:59:bb:c2:e7:5f:4d:6f:f9:c2:50: 46:77:8d:27:f0:83:7a:09:12:a3:6e:cd:e0:48:6a:b2:45:44: a0:b6:ef:20:ce:f7:4b:f8:77:d9:dc:93:c7:b7:fb:2e:13:6b: dd:04:f9:95:10:a1:ee:b0:57:5e:98:22:4f:8a:04:27:2e:ff: 19:fe:7c:ff:44:2e:bc:ed:72:15:04:86:2a:fd:5d:40:be:e0: 1f:3b:26:87:0b:b8:b2:58:89:89:ce:e8:3d:8f:d5:23:92:ca: 35:06:bf:aa:b5:84:6a:cb:2b:51:25:13:12:ca:c8:a8:f1:1c: 89:63:80:1b:a2:95:99:e8:f7:91:76:a5:5d:a2:5c:ab:dd:6a: 60:08:c1:38:45:b6:6f:e2:a5:6c:41:6a:d0:7a:b5:5b:6b:fb: ab:5a:ee:59 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUcBWSTqVnCPJ0W0nyraGV5ZYAmrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM2OEMzQTU2QzJCOEZCNzBERUU3NUQ1RjU4NDkzQUNC RTI2MDUzODAeFw0yNjA1MTgwMzU1NDNaFw0yNzA1MTcwNDAwNDNaMDMxMTAvBgNV BAMTKEIzOTA5QjU0MjBERjI1NkJERjZFNDQ2NjZFQjE0RUVGNDFEOTIwQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJo5sqR0+SCo8pcVuvrPUoqx4z PshX79We6WDjpP2QiRVyU0Fy7xx5eOFoupxbo56iCivyk2HUHI492s7mydQF2Sfk 9r31Xg2eONfgKCxZ22KVu9wmpDlbGKMSqkXWo1dVfvcu0vBs7FmfgXIkoW5pWsk2 jAucjm8PJs0+eOp8v4ZKn+KeSIk/3Ci5DmM/XSKII/vwKmQQRa/3QTuOpUXrbQy6 o0Yini2+UBmKq/9dDkLzKZGTfvHTBRE47UUEmAndllJnx1AScj54ZZVVrEsGDHZY h7pS0iyM2715I+Q1vYdB60cYez4VeMfLWoyUdpiKpIgss93CRSxmDGRMj+THAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUs5CbVCDfJWvfbkRmbrFO70HZILgwHwYDVR0j BBgwFoAUrGjDpWwrj7cN7nXV9YSTrL4mBTgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODYwMDg2ODQ5MzU5MDU0Ny8wL0FDNjhDM0E1NkMyQjhGQjcwREVFNzVENUY1ODQ5 M0FDQkUyNjA1MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUM2OEMzQTU2QzJCOEZCNzBERUU3NUQ1RjU4NDkzQUNCRTI2MDUzOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEwODYwMDg2ODQ5MzU5MDU0Ny8wLzMxMzIzNDJlMzIz NDMwMmUzMTMyMzgyZTMwMmYzMTM4MmQzMTM4MjAzZDNlMjAzNDM4MzMzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBnzwgDANBgkqhkiG9w0BAQsFAAOCAQEA1h+1OaRcK8zvuowQS14v08yU S8SPYgVfexdnU+M3qI8HN6/9yb95xhecpm46VwTB38K2fnjxjwWx7/OlW2Rv3NVM fJs/DEW5VCoe8TVX+TVoaYMQBAbGuN3ESs6A5VrKPv1Zu8LnX01v+cJQRneNJ/CD egkSo27N4EhqskVEoLbvIM73S/h32dyTx7f7LhNr3QT5lRCh7rBXXpgiT4oEJy7/ Gf58/0QuvO1yFQSGKv1dQL7gHzsmhwu4sliJic7oPY/VI5LKNQa/qrWEassrUSUT EsrIqPEciWOAG6KVmej3kXalXaJcq91qYAjBOEW2b+KlbEFq0Hq1W2v7q1ruWQ== -----END CERTIFICATE-----Generated at Sat May 23 04:26:14 2026 by rpki-client