$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e3230342e302f32342d3234203d3e2030.roa File: 3132342e3137332e3230342e302f32342d3234203d3e2030.roa (raw, json) Hash identifier: OwvQOMQgjI4zweBtXAIcyTPyAeZIzEBwptHT9Aqc8Hg= Subject key identifier: B2:B9:0F:FC:4D:2E:25:C9:AC:5A:0A:95:F9:88:7E:72:97:E1:E0:8C Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 6B9A3CD1F0FCA519D032637BAF03653791955485 Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e3230342e302f32342d3234203d3e2030.roa Signing time: Thu 23 Apr 2026 07:19:10 +0000 ROA not before: Thu 23 Apr 2026 07:14:10 +0000 ROA not after: Thu 22 Apr 2027 07:19:10 +0000 asID: 0 IP address blocks: 124.173.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 13:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:9a:3c:d1:f0:fc:a5:19:d0:32:63:7b:af:03:65:37:91:95:54:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Apr 23 07:14:10 2026 GMT Not After : Apr 22 07:19:10 2027 GMT Subject: CN=B2B90FFC4D2E25C9AC5A0A95F9887E7297E1E08C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:60:b3:4c:81:06:9e:a3:62:ec:b3:27:f5:70: 68:9b:ef:3a:b0:88:8b:39:fb:93:d9:34:0d:b7:45: 9e:e7:77:3d:a8:c7:6a:14:5a:d1:af:64:7d:5a:f0: 0b:5e:f0:d1:ce:43:6a:4e:55:45:4e:c6:36:aa:c6: f6:7e:69:59:28:e3:84:2f:4d:16:bd:82:5b:a8:c3: 24:61:51:4b:de:2f:58:3d:41:1a:77:22:64:78:35: ef:6b:fc:07:c2:aa:90:3d:ae:2b:9a:ef:f2:5a:c3: 14:28:50:bc:b3:b2:d8:2f:5d:84:3e:6d:16:ee:ad: c7:1e:44:53:88:49:ae:45:81:b4:9b:6f:8d:8c:dc: 36:e1:56:88:da:03:11:3c:70:4c:21:07:13:75:32: aa:23:a1:dc:7b:4b:81:b4:08:e0:73:1d:f0:c9:3a: 82:ed:e3:08:de:11:ad:7c:57:26:e5:ff:d6:4c:ed: 12:85:a3:0e:39:9b:d4:20:50:d3:73:77:1c:b2:3c: 3b:5b:6b:ed:36:17:44:43:44:73:ba:bc:c0:cf:f9: fb:eb:98:88:ff:65:e0:50:43:1e:96:37:17:99:68: f5:c1:c8:73:ae:ed:de:8c:c1:37:5c:65:4b:1a:30: 04:f2:5a:db:11:00:17:73:88:6f:b7:a3:3b:47:43: 18:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B9:0F:FC:4D:2E:25:C9:AC:5A:0A:95:F9:88:7E:72:97:E1:E0:8C X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e3230342e302f32342d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.173.204.0/24 Signature Algorithm: sha256WithRSAEncryption 91:4c:8a:f7:cb:63:a9:27:32:7d:6e:61:71:43:92:31:7a:a7: cf:5c:95:84:81:4e:b3:f2:9b:30:1f:6a:a6:c9:16:22:e3:26: b6:6a:37:f0:f6:35:a2:f8:8b:3b:ec:6e:0b:77:a1:01:2f:f1: 44:e2:d6:04:e8:84:9c:d0:00:d5:5d:96:30:91:25:fb:a6:40: 00:6b:ec:e9:6a:e8:5f:e2:65:c2:2b:72:96:b9:e1:2d:ef:75: ef:e5:c3:54:5f:0f:62:98:67:97:5f:4c:d4:52:7d:c8:2f:e9: 75:01:9d:56:23:55:0b:dd:a7:a9:85:66:4a:d2:db:4c:92:2c: 00:a0:23:30:fc:bb:44:6e:c3:d5:e0:78:42:1c:a8:55:6f:8b: 5d:d8:c5:cb:51:fc:a5:64:cf:11:6b:22:3e:b7:c9:e5:5f:a2: d3:1c:b5:0a:1d:71:e2:a0:7c:d6:ce:48:91:00:16:b4:3d:21: 9f:40:81:ab:85:2e:73:7c:5e:e2:da:62:30:7f:fe:93:67:7f: 9b:d2:b5:89:e9:1b:aa:40:a8:0f:b6:23:30:fb:e6:2b:1d:a5: 8f:0c:6a:b1:38:5f:80:aa:b3:e0:e7:1f:12:34:90:db:9a:b3: ba:f3:f3:ae:13:cd:f3:a5:d5:5b:13:0b:f4:16:08:7e:a6:b5: 9e:ed:e8:32 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUa5o80fD8pRnQMmN7rwNlN5GVVIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA0MjMwNzE0MTBaFw0yNzA0MjIwNzE5MTBaMDMxMTAvBgNV BAMTKEIyQjkwRkZDNEQyRTI1QzlBQzVBMEE5NUY5ODg3RTcyOTdFMUUwOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKYLNMgQaeo2Lssyf1cGib7zqw iIs5+5PZNA23RZ7ndz2ox2oUWtGvZH1a8Ate8NHOQ2pOVUVOxjaqxvZ+aVko44Qv TRa9gluowyRhUUveL1g9QRp3ImR4Ne9r/AfCqpA9riua7/JawxQoULyzstgvXYQ+ bRburcceRFOISa5FgbSbb42M3DbhVojaAxE8cEwhBxN1Mqojodx7S4G0COBzHfDJ OoLt4wjeEa18Vybl/9ZM7RKFow45m9QgUNNzdxyyPDtba+02F0RDRHO6vMDP+fvr mIj/ZeBQQx6WNxeZaPXByHOu7d6MwTdcZUsaMATyWtsRABdziG+3oztHQxjNAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUsrkP/E0uJcmsWgqV+Yh+cpfh4IwwHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODEyODY3LzAvMzEzMjM0MmUzMTM3 MzMyZTMyMzAzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA fK3MMA0GCSqGSIb3DQEBCwUAA4IBAQCRTIr3y2OpJzJ9bmFxQ5IxeqfPXJWEgU6z 8pswH2qmyRYi4ya2ajfw9jWi+Is77G4Ld6EBL/FE4tYE6ISc0ADVXZYwkSX7pkAA a+zpauhf4mXCK3KWueEt73Xv5cNUXw9imGeXX0zUUn3IL+l1AZ1WI1UL3aephWZK 0ttMkiwAoCMw/LtEbsPV4HhCHKhVb4td2MXLUfylZM8RayI+t8nlX6LTHLUKHXHi oHzWzkiRABa0PSGfQIGrhS5zfF7i2mIwf/6TZ3+b0rWJ6RuqQKgPtiMw++YrHaWP DGqxOF+AqrPg5x8SNJDbmrO68/OuE83zpdVbEwv0Fgh+prWe7egy -----END CERTIFICATE-----Generated at Tue May 12 21:38:17 2026 by rpki-client