$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e3231342e302f32342d3234203d3e2030.roa File: 3132342e3137332e3231342e302f32342d3234203d3e2030.roa (raw, json) Hash identifier: FN1xhLa00ON78Vy1hgAQNLJdDQN4XYVNIstjhIUIlpU= Subject key identifier: F1:EF:FA:61:B1:DF:D3:E9:A5:01:DF:E0:25:B4:8A:12:5C:AB:40:FC Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 18E717AEF4231508A7C1F446DC783817B08E422E Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e3231342e302f32342d3234203d3e2030.roa Signing time: Thu 23 Apr 2026 07:19:10 +0000 ROA not before: Thu 23 Apr 2026 07:14:10 +0000 ROA not after: Thu 22 Apr 2027 07:19:10 +0000 asID: 0 IP address blocks: 124.173.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 13:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:e7:17:ae:f4:23:15:08:a7:c1:f4:46:dc:78:38:17:b0:8e:42:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Apr 23 07:14:10 2026 GMT Not After : Apr 22 07:19:10 2027 GMT Subject: CN=F1EFFA61B1DFD3E9A501DFE025B48A125CAB40FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:26:83:19:9c:ab:5e:eb:f2:d7:f1:cc:99:bc: a5:3f:0a:74:82:5d:89:e3:e6:44:6d:2b:e8:f5:e7: 0d:fd:e8:2e:0a:1f:e1:14:3c:8b:e2:64:de:9f:01: 9b:d4:87:88:ef:10:0e:5d:31:9e:9f:e1:3d:d2:1b: ad:f2:3e:7f:09:4e:b2:2c:9b:23:0c:e5:fe:79:13: 86:aa:19:bc:60:1f:f0:4a:9d:08:2f:96:fa:e0:f0: 87:9b:04:d2:a4:44:b0:66:92:1b:00:ab:46:25:0e: 65:c2:61:75:d8:fa:21:7d:b4:44:37:de:20:9d:0b: fd:be:cf:ac:ea:a6:2d:92:35:34:8a:5c:5f:ed:43: be:c4:46:fe:0b:82:94:b2:53:da:9a:99:95:e5:64: 05:cc:38:ff:a7:da:68:c2:e7:d2:68:73:c4:5d:f0: 42:95:89:9d:95:27:39:7c:4d:c8:41:bb:c0:3d:dc: 0a:71:cf:d7:4f:e7:da:eb:18:2b:c8:d3:ca:fd:e5: 13:39:05:1e:b4:29:9b:08:8b:0d:ff:2f:f4:0a:43: 73:71:1b:1a:f5:6b:07:77:27:40:e1:9d:12:2e:dd: 88:56:d1:e4:58:fa:13:1d:ac:8f:e7:33:bc:f0:5d: 10:13:98:c2:b2:02:e8:5c:f3:4b:10:5f:e6:e9:2c: 1b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EF:FA:61:B1:DF:D3:E9:A5:01:DF:E0:25:B4:8A:12:5C:AB:40:FC X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e3231342e302f32342d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.173.214.0/24 Signature Algorithm: sha256WithRSAEncryption 35:09:24:bb:36:96:5d:4e:f8:ec:d0:c9:61:98:57:62:b6:44: 92:ab:fb:c5:a4:0b:51:59:0e:31:c3:65:31:3c:cc:48:41:a5: ba:9b:57:fc:10:d8:56:73:fa:8d:54:bc:ee:14:11:fd:15:38: d3:a9:fc:dd:09:1e:87:cc:08:2d:29:ce:a2:19:c5:69:ac:87: 17:dc:fc:80:3a:cb:23:a5:05:f0:a4:79:9c:7f:57:9d:eb:f6: 5a:87:57:3a:36:69:d5:94:f1:eb:7a:66:e7:97:86:c2:73:c3: 1a:73:96:f1:34:65:21:a3:64:a6:51:a0:ce:f0:7b:5a:63:2c: fc:a1:eb:ac:e7:cf:87:33:00:07:23:a7:a9:a5:c3:eb:e0:c3: 8f:e0:22:7a:da:eb:1f:ee:f9:a4:89:ff:6b:ce:55:f9:9e:8c: 9b:03:16:23:52:17:42:56:7f:43:2f:a5:00:1f:94:65:8f:93: d5:12:6c:4b:d2:31:01:0c:5a:bf:a2:8a:15:c3:26:36:96:d6: 38:e5:8c:f1:c2:f7:51:91:1f:61:2c:46:41:2d:0e:f0:fb:d9: c9:20:e0:cf:d4:3a:31:b8:3f:b4:08:6a:d7:89:ec:3e:d8:a0: 3b:05:07:6e:70:33:5c:ae:60:76:7f:9d:ff:f3:6a:08:30:0d: e0:18:d2:5c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUGOcXrvQjFQinwfRG3Hg4F7COQi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA0MjMwNzE0MTBaFw0yNzA0MjIwNzE5MTBaMDMxMTAvBgNV BAMTKEYxRUZGQTYxQjFERkQzRTlBNTAxREZFMDI1QjQ4QTEyNUNBQjQwRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/JoMZnKte6/LX8cyZvKU/CnSC XYnj5kRtK+j15w396C4KH+EUPIviZN6fAZvUh4jvEA5dMZ6f4T3SG63yPn8JTrIs myMM5f55E4aqGbxgH/BKnQgvlvrg8IebBNKkRLBmkhsAq0YlDmXCYXXY+iF9tEQ3 3iCdC/2+z6zqpi2SNTSKXF/tQ77ERv4LgpSyU9qamZXlZAXMOP+n2mjC59Joc8Rd 8EKViZ2VJzl8TchBu8A93Apxz9dP59rrGCvI08r95RM5BR60KZsIiw3/L/QKQ3Nx Gxr1awd3J0DhnRIu3YhW0eRY+hMdrI/nM7zwXRATmMKyAuhc80sQX+bpLBuDAgMB AAGjggINMIICCTAdBgNVHQ4EFgQU8e/6YbHf0+mlAd/gJbSKElyrQPwwHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODEyODY3LzAvMzEzMjM0MmUzMTM3 MzMyZTMyMzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA fK3WMA0GCSqGSIb3DQEBCwUAA4IBAQA1CSS7NpZdTvjs0MlhmFditkSSq/vFpAtR WQ4xw2UxPMxIQaW6m1f8ENhWc/qNVLzuFBH9FTjTqfzdCR6HzAgtKc6iGcVprIcX 3PyAOssjpQXwpHmcf1ed6/Zah1c6NmnVlPHrembnl4bCc8Mac5bxNGUho2SmUaDO 8HtaYyz8oeus58+HMwAHI6eppcPr4MOP4CJ62usf7vmkif9rzlX5noybAxYjUhdC Vn9DL6UAH5Rlj5PVEmxL0jEBDFq/oooVwyY2ltY45YzxwvdRkR9hLEZBLQ7w+9nJ IODP1DoxuD+0CGrXiew+2KA7BQducDNcrmB2f53/82oIMA3gGNJc -----END CERTIFICATE-----Generated at Tue May 12 21:39:03 2026 by rpki-client