$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e20313532313739.roa File: 3132342e3137332e302e302f31382d3234203d3e20313532313739.roa (raw, json) Hash identifier: yFRsQdpRLlxpa072IX0rtVdNNEzWBo4E/qVA2RCHHXI= Subject key identifier: 57:B2:31:84:3D:7E:51:1E:28:3D:B2:03:D6:CE:16:23:1A:48:2B:49 Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 3CC0E7759FA99CE61454D0CED9556CD33FEA5CCD Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e20313532313739.roa Signing time: Fri 11 Sep 2026 12:25:26 +0000 ROA not before: Fri 11 Sep 2026 12:20:26 +0000 ROA not after: Fri 10 Sep 2027 12:25:26 +0000 asID: 152179 IP address blocks: 124.173.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:c0:e7:75:9f:a9:9c:e6:14:54:d0:ce:d9:55:6c:d3:3f:ea:5c:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Sep 11 12:20:26 2026 GMT Not After : Sep 10 12:25:26 2027 GMT Subject: CN=57B231843D7E511E283DB203D6CE16231A482B49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e4:29:b6:f7:99:d5:6c:b6:47:0a:34:d6:1f: 8d:d8:29:61:7b:5c:b7:94:d7:85:e8:20:0e:01:cf: a7:73:7d:58:41:64:69:12:40:61:08:10:a7:3b:a1: 4d:ab:05:05:fb:1d:e6:b3:3c:53:47:80:fc:d6:5e: a7:4c:6d:ec:99:e3:7f:b6:9c:14:85:bf:fe:8d:c2: 9f:0f:be:02:80:b9:fc:c7:69:a7:30:33:95:15:c8: 0e:97:33:9f:2c:65:03:71:1e:50:d1:fe:23:c2:c5: 83:1e:af:ad:25:a5:6f:03:ea:db:c8:37:b1:49:87: a3:c1:3b:1f:ce:57:39:74:b9:38:54:af:53:da:94: 52:be:31:6f:45:49:4b:7b:1d:74:1d:d0:52:1b:58: b5:5b:e7:9a:17:b8:15:0e:1c:49:46:08:77:1e:9a: 52:73:bd:d4:04:69:f4:53:70:48:74:8b:cd:0c:5d: 67:65:1a:a9:0c:f7:47:58:0e:ef:eb:96:1f:7e:85: 41:55:8e:2a:8c:f6:50:32:15:7a:ec:0f:9a:27:05: 2f:81:6c:ad:e8:c1:d6:78:d8:c1:6d:86:5d:9e:5e: 79:0f:9a:af:d8:9f:d5:f8:7a:12:cc:96:8d:2a:cb: 43:f0:5a:94:9f:e1:85:17:09:7c:46:f5:8a:97:93: 60:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B2:31:84:3D:7E:51:1E:28:3D:B2:03:D6:CE:16:23:1A:48:2B:49 X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e20313532313739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.173.0.0/18 Signature Algorithm: sha256WithRSAEncryption 3f:2c:9f:c7:5c:5f:da:46:10:8f:33:03:d8:6f:1f:d4:11:67: e9:c9:21:4f:88:33:80:60:5e:54:18:37:d1:e3:7a:a9:4a:69: 1a:6e:4e:21:20:b5:b1:a3:34:61:8f:c2:3b:a2:af:bd:24:00: 00:02:72:61:13:bb:f3:27:69:23:ef:56:d2:9d:6d:e7:bc:b6: a7:9a:60:9a:f2:ac:d3:6c:c4:a2:92:75:c7:6a:f9:61:81:0d: a0:a8:b9:1c:bf:17:7b:d3:20:93:dd:2e:bc:b6:66:e0:43:84: e3:75:bf:37:1c:3c:a0:df:c9:6e:b3:98:d6:04:f1:03:35:8b: 06:78:5e:86:29:ab:eb:a1:33:51:6a:7a:f3:4d:9b:4a:a7:40: 4b:46:aa:24:7e:bc:64:8c:29:4b:b1:89:38:cb:e8:98:77:07: 2c:13:97:44:27:46:95:92:a5:f4:fa:19:37:49:cb:60:e1:3b: 65:ce:46:a2:fc:30:99:3b:f9:7e:36:fa:c4:f6:52:6e:32:24: ea:fd:8e:af:dc:8c:16:04:a3:2c:db:96:73:85:98:ef:bf:61: 90:79:62:b3:4a:a9:23:aa:d8:0f:29:0b:05:0d:3c:a0:2c:0c: f4:1e:ff:81:37:41:ee:b6:7d:3c:1b:e0:6b:00:73:65:f6:d5: fb:23:a4:44 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUPMDndZ+pnOYUVNDO2VVs0z/qXM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA5MTExMjIwMjZaFw0yNzA5MTAxMjI1MjZaMDMxMTAvBgNV BAMTKDU3QjIzMTg0M0Q3RTUxMUUyODNEQjIwM0Q2Q0UxNjIzMUE0ODJCNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCF5Cm295nVbLZHCjTWH43YKWF7 XLeU14XoIA4Bz6dzfVhBZGkSQGEIEKc7oU2rBQX7HeazPFNHgPzWXqdMbeyZ43+2 nBSFv/6Nwp8PvgKAufzHaacwM5UVyA6XM58sZQNxHlDR/iPCxYMer60lpW8D6tvI N7FJh6PBOx/OVzl0uThUr1PalFK+MW9FSUt7HXQd0FIbWLVb55oXuBUOHElGCHce mlJzvdQEafRTcEh0i80MXWdlGqkM90dYDu/rlh9+hUFVjiqM9lAyFXrsD5onBS+B bK3owdZ42MFthl2eXnkPmq/Yn9X4ehLMlo0qy0PwWpSf4YUXCXxG9YqXk2BTAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUV7IxhD1+UR4oPbID1s4WIxpIK0kwHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0NzgxMjg2Ny8wLzMxMzIzNDJlMzEz NzMzMmUzMDJlMzAyZjMxMzgyZDMyMzQyMDNkM2UyMDMxMzUzMjMxMzczOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBnytADANBgkqhkiG9w0BAQsFAAOCAQEAPyyfx1xf2kYQjzMD2G8f1BFn 6ckhT4gzgGBeVBg30eN6qUppGm5OISC1saM0YY/CO6KvvSQAAAJyYRO78ydpI+9W 0p1t57y2p5pgmvKs02zEopJ1x2r5YYENoKi5HL8Xe9Mgk90uvLZm4EOE43W/Nxw8 oN/JbrOY1gTxAzWLBnhehimr66EzUWp6802bSqdAS0aqJH68ZIwpS7GJOMvomHcH LBOXRCdGlZKl9PoZN0nLYOE7Zc5GovwwmTv5fjb6xPZSbjIk6v2Or9yMFgSjLNuW c4WY779hkHlis0qpI6rYDykLBQ08oCwM9B7/gTdB7rZ9PBvgawBzZfbV+yOkRA== -----END CERTIFICATE-----Generated at Sat Sep 26 14:51:31 2026 by rpki-client