$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e3132382e302f31372d3137203d3e20313336323030.roa File: 3132342e3137332e3132382e302f31372d3137203d3e20313336323030.roa (raw, json) Hash identifier: FsR39AL3Lb65LjjnAQ3vyCBAj9DRVmOfD7ZWib6MUQM= Subject key identifier: 21:D0:B9:11:AE:10:1A:B6:2D:BC:D2:18:FD:46:0E:81:C4:91:23:EE Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 7FD79B5D4444AFF56E400CAFD18BD6ED6AFC3EFD Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e3132382e302f31372d3137203d3e20313336323030.roa Signing time: Thu 23 Apr 2026 07:19:10 +0000 ROA not before: Thu 23 Apr 2026 07:14:10 +0000 ROA not after: Thu 22 Apr 2027 07:19:10 +0000 asID: 136200 IP address blocks: 124.173.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:58:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:d7:9b:5d:44:44:af:f5:6e:40:0c:af:d1:8b:d6:ed:6a:fc:3e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Apr 23 07:14:10 2026 GMT Not After : Apr 22 07:19:10 2027 GMT Subject: CN=21D0B911AE101AB62DBCD218FD460E81C49123EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:54:a2:26:84:1a:89:1d:78:b2:a2:2c:df:df: dd:60:96:0a:6e:e2:48:72:94:0b:81:14:9d:eb:44: 42:d1:fd:33:f7:34:60:29:87:4c:a4:1f:b8:31:e0: 55:66:fe:75:4d:ba:8e:fb:fd:99:14:ac:f6:0c:b3: 0f:0a:7e:84:44:95:48:5b:2c:52:2a:d5:b0:11:b6: de:1c:45:4e:68:b3:8d:8e:cb:d3:5d:7a:25:ba:4e: 37:5f:f8:d4:22:ee:b6:06:ab:94:08:de:74:92:26: 38:a5:01:76:ae:a0:16:6d:b5:d9:88:f1:c3:11:ce: b8:e8:36:b0:15:0d:8f:4f:80:bf:a5:46:9d:a3:47: ed:55:67:e1:67:0b:63:fc:a7:83:b3:26:a0:c7:c4: 2a:19:8c:ff:5d:33:86:df:6e:84:0a:46:f2:38:e3: 27:17:d8:7f:a1:02:7a:6e:49:f0:c9:cc:bc:e5:d2: d2:82:03:bb:fc:36:df:ab:16:8d:84:04:35:cf:39: d3:31:4f:ec:b7:0d:6d:4d:bb:3c:09:12:bb:ec:b1: 3e:4e:a8:d0:49:2e:ac:47:ac:7e:5b:7d:c1:29:06: c2:5c:f8:9b:fc:19:f5:01:3e:02:9b:13:74:25:5c: a9:e5:1c:f0:e1:97:0a:be:93:44:e9:d7:df:24:f0: 90:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D0:B9:11:AE:10:1A:B6:2D:BC:D2:18:FD:46:0E:81:C4:91:23:EE X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e3132382e302f31372d3137203d3e20313336323030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.173.128.0/17 Signature Algorithm: sha256WithRSAEncryption 42:69:78:20:9e:6e:b8:eb:92:d4:f2:26:12:a4:d9:b1:1b:61: c9:cb:9e:ee:72:b8:f9:c2:03:1e:04:82:42:ae:0f:96:3a:64: 29:39:f7:2c:16:af:bf:5b:6a:7a:d8:74:a4:b7:56:aa:fd:d4: ac:97:e7:c3:e0:43:85:35:31:d2:c0:33:57:74:ca:b8:d8:4e: 4d:82:56:d5:33:4d:00:71:7d:ac:59:94:6d:3d:e8:2d:e6:90: 28:4f:59:5f:b9:2d:ab:ae:f8:dc:c4:52:1e:44:98:6d:ec:77: 24:78:f4:34:5d:7d:4b:be:b9:be:f0:24:16:12:3a:bf:4f:ad: 46:55:e5:b0:26:a7:24:0f:3b:74:e6:35:16:60:22:62:ad:23: 00:36:5a:50:8e:67:75:2d:21:5c:d5:c9:52:b1:fe:00:e1:79: 70:72:a0:73:5c:72:21:e2:7a:a2:0f:a4:1c:e6:37:7c:22:a1: 44:c5:aa:31:4f:d7:52:d4:bc:91:1f:42:1a:d7:98:8a:09:08: fe:11:f7:4a:55:c5:11:3b:08:11:cb:56:fe:c8:8e:df:b8:76: ec:7b:0d:1e:f2:79:fe:cf:eb:ee:38:5d:bf:65:89:f2:32:bf: 77:11:20:92:85:97:1b:a5:b1:79:0d:4d:f0:99:49:2b:34:a8: 52:2a:b0:a2 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUf9ebXUREr/VuQAyv0YvW7Wr8Pv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA0MjMwNzE0MTBaFw0yNzA0MjIwNzE5MTBaMDMxMTAvBgNV BAMTKDIxRDBCOTExQUUxMDFBQjYyREJDRDIxOEZENDYwRTgxQzQ5MTIzRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUVKImhBqJHXiyoizf391glgpu 4khylAuBFJ3rRELR/TP3NGAph0ykH7gx4FVm/nVNuo77/ZkUrPYMsw8KfoRElUhb LFIq1bARtt4cRU5os42Oy9NdeiW6Tjdf+NQi7rYGq5QI3nSSJjilAXauoBZttdmI 8cMRzrjoNrAVDY9PgL+lRp2jR+1VZ+FnC2P8p4OzJqDHxCoZjP9dM4bfboQKRvI4 4ycX2H+hAnpuSfDJzLzl0tKCA7v8Nt+rFo2EBDXPOdMxT+y3DW1NuzwJErvssT5O qNBJLqxHrH5bfcEpBsJc+Jv8GfUBPgKbE3QlXKnlHPDhlwq+k0Tp198k8JCrAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUIdC5Ea4QGrYtvNIY/UYOgcSRI+4wHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODEyODY3LzAvMzEzMjM0MmUz MTM3MzMyZTMxMzIzODJlMzAyZjMxMzcyZDMxMzcyMDNkM2UyMDMxMzMzNjMyMzAz MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEB3ytgDANBgkqhkiG9w0BAQsFAAOCAQEAQml4IJ5uuOuS1PIm EqTZsRthycue7nK4+cIDHgSCQq4PljpkKTn3LBavv1tqeth0pLdWqv3UrJfnw+BD hTUx0sAzV3TKuNhOTYJW1TNNAHF9rFmUbT3oLeaQKE9ZX7ktq6743MRSHkSYbex3 JHj0NF19S765vvAkFhI6v0+tRlXlsCanJA87dOY1FmAiYq0jADZaUI5ndS0hXNXJ UrH+AOF5cHKgc1xyIeJ6og+kHOY3fCKhRMWqMU/XUtS8kR9CGteYigkI/hH3SlXF ETsIEctW/siO37h27HsNHvJ5/s/r7jhdv2WJ8jK/dxEgkoWXG6WxeQ1N8JlJKzSo Uiqwog== -----END CERTIFICATE-----Generated at Wed May 13 12:41:35 2026 by rpki-client