$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e3139352e302f32342d3234203d3e2030.roa File: 3132342e3137332e3139352e302f32342d3234203d3e2030.roa (raw, json) Hash identifier: CBq+QwxS65mA9yJCgVQN8kMXp1jThH8sGks//fRKQa8= Subject key identifier: 9E:A0:EB:98:D1:DD:33:05:91:8F:DD:92:6B:23:55:02:36:F8:34:CE Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 4D0028D8564D988D492F6E598D32777DEB9240AB Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e3139352e302f32342d3234203d3e2030.roa Signing time: Thu 23 Apr 2026 07:19:10 +0000 ROA not before: Thu 23 Apr 2026 07:14:10 +0000 ROA not after: Thu 22 Apr 2027 07:19:10 +0000 asID: 0 IP address blocks: 124.173.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 13:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:00:28:d8:56:4d:98:8d:49:2f:6e:59:8d:32:77:7d:eb:92:40:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Apr 23 07:14:10 2026 GMT Not After : Apr 22 07:19:10 2027 GMT Subject: CN=9EA0EB98D1DD3305918FDD926B23550236F834CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e7:27:ea:3b:bb:e1:08:22:8c:80:67:65:d1: 48:f1:4c:29:84:5b:1b:04:c8:87:c4:08:b6:46:3c: e1:e9:4a:c9:9a:6f:cf:cf:4d:a6:b2:93:1e:3f:58: 32:0c:e6:f0:1c:02:be:77:79:65:43:0a:39:3d:10: c9:7f:37:bd:88:6e:65:6c:26:68:17:47:cd:a3:3c: f8:08:40:37:5a:6d:44:37:f0:de:02:00:9f:18:d4: d7:b4:af:18:ef:25:8e:47:ad:b1:66:16:c6:02:34: 43:26:cd:c3:09:68:a2:92:6f:cc:ab:9b:77:97:bf: 59:8d:2e:3f:ce:07:2c:69:4d:f3:69:af:01:a2:64: d2:80:df:ff:78:05:aa:e2:37:bd:34:1b:c5:f0:81: 0b:7e:97:59:9d:0b:52:da:a2:8b:df:ab:b8:04:cd: 4f:ae:97:2d:34:c9:0c:8f:82:6f:72:c3:92:f1:5f: 60:dd:ba:f8:97:e4:95:8e:c8:5f:e9:20:ae:f1:15: f7:91:cc:0a:c7:23:fc:0c:8d:2e:56:c4:a7:2c:70: 09:da:19:4a:d8:4e:53:1e:2c:8f:0d:10:33:6d:65: 51:5b:7b:b0:62:b5:06:82:93:11:65:7c:ee:87:7a: 98:08:e6:2b:60:b7:00:ce:af:3e:c2:ac:c9:f4:e1: 8a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A0:EB:98:D1:DD:33:05:91:8F:DD:92:6B:23:55:02:36:F8:34:CE X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e3139352e302f32342d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.173.195.0/24 Signature Algorithm: sha256WithRSAEncryption bf:d8:b1:19:c9:58:9c:97:1b:ef:18:c6:69:23:cb:ff:14:8b: c5:96:10:64:ab:23:b5:ff:61:88:9c:d4:c2:f9:c1:ee:7c:ca: e7:70:d6:4b:d9:ab:3f:a8:0e:64:d4:f8:ca:76:cf:32:8d:99: 67:3a:73:b8:e8:13:38:6e:49:d1:0b:19:38:bc:81:69:fc:63: 18:43:c5:bc:ca:41:90:d1:4a:81:5e:bc:b0:80:99:1d:13:65: 7a:b5:78:2f:a3:e1:31:79:24:9c:0a:69:76:b3:df:c2:5c:e1: bf:b8:b7:3f:57:53:dc:3a:bc:4c:85:53:9b:8f:84:39:db:d6: 19:9f:ba:00:e9:25:c5:c1:57:0b:3b:b0:f5:7a:7d:66:f2:6e: e4:ab:66:03:bd:6c:44:f1:b1:02:2f:06:0d:46:f4:75:ba:f3: 27:44:01:a0:01:38:07:1e:bf:32:69:c7:62:0b:1a:b6:e7:5b: f6:f0:a8:36:a0:1c:4a:12:96:5b:ff:ab:82:66:bd:ae:df:d1: 1b:2c:2d:95:be:44:c3:cc:2a:40:37:47:3c:90:98:c0:2c:80: 5a:4b:3d:f4:f4:d0:41:48:9c:c7:8d:02:4d:bc:47:a5:4d:81: dd:50:6b:e8:bc:79:14:48:5b:71:d8:51:1c:60:51:b2:30:62: 69:f6:1d:9b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUTQAo2FZNmI1JL25ZjTJ3feuSQKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA0MjMwNzE0MTBaFw0yNzA0MjIwNzE5MTBaMDMxMTAvBgNV BAMTKDlFQTBFQjk4RDFERDMzMDU5MThGREQ5MjZCMjM1NTAyMzZGODM0Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB5yfqO7vhCCKMgGdl0UjxTCmE WxsEyIfECLZGPOHpSsmab8/PTaaykx4/WDIM5vAcAr53eWVDCjk9EMl/N72IbmVs JmgXR82jPPgIQDdabUQ38N4CAJ8Y1Ne0rxjvJY5HrbFmFsYCNEMmzcMJaKKSb8yr m3eXv1mNLj/OByxpTfNprwGiZNKA3/94BariN700G8XwgQt+l1mdC1Laoovfq7gE zU+uly00yQyPgm9yw5LxX2DduviX5JWOyF/pIK7xFfeRzArHI/wMjS5WxKcscAna GUrYTlMeLI8NEDNtZVFbe7BitQaCkxFlfO6HepgI5itgtwDOrz7CrMn04YpzAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUnqDrmNHdMwWRj92SayNVAjb4NM4wHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODEyODY3LzAvMzEzMjM0MmUzMTM3 MzMyZTMxMzkzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA fK3DMA0GCSqGSIb3DQEBCwUAA4IBAQC/2LEZyViclxvvGMZpI8v/FIvFlhBkqyO1 /2GInNTC+cHufMrncNZL2as/qA5k1PjKds8yjZlnOnO46BM4bknRCxk4vIFp/GMY Q8W8ykGQ0UqBXrywgJkdE2V6tXgvo+ExeSScCml2s9/CXOG/uLc/V1PcOrxMhVOb j4Q529YZn7oA6SXFwVcLO7D1en1m8m7kq2YDvWxE8bECLwYNRvR1uvMnRAGgATgH Hr8yacdiCxq251v28Kg2oBxKEpZb/6uCZr2u39EbLC2VvkTDzCpAN0c8kJjALIBa Sz309NBBSJzHjQJNvEelTYHdUGvovHkUSFtx2FEcYFGyMGJp9h2b -----END CERTIFICATE-----Generated at Wed May 13 05:15:07 2026 by rpki-client