$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3132342e34372e35382e302f32332d3233203d3e203233373731.roa File: 3132342e34372e35382e302f32332d3233203d3e203233373731.roa (raw, json) Hash identifier: rQLWosbS/tP3HuPrH7EoixJZKXhPapZHHKl+DlBIndA= Subject key identifier: AA:E4:3C:AF:2A:9A:3F:A2:21:F7:67:F8:F0:65:29:22:D4:D1:3D:2E Certificate issuer: /CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C Certificate serial: 4AF399E8F066FB14F9508B1E42CE9A606B252207 Authority key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3132342e34372e35382e302f32332d3233203d3e203233373731.roa Signing time: Mon 20 Apr 2026 02:21:03 +0000 ROA not before: Mon 20 Apr 2026 02:16:03 +0000 ROA not after: Mon 19 Apr 2027 02:21:03 +0000 asID: 23771 IP address blocks: 124.47.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f3:99:e8:f0:66:fb:14:f9:50:8b:1e:42:ce:9a:60:6b:25:22:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C Validity Not Before: Apr 20 02:16:03 2026 GMT Not After : Apr 19 02:21:03 2027 GMT Subject: CN=AAE43CAF2A9A3FA221F767F8F0652922D4D13D2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:8d:20:55:51:c1:b9:1f:d5:6f:8b:df:cf:2d: da:1b:60:e0:ae:62:db:23:c4:1f:20:18:dc:c0:f9: 78:64:d4:cd:de:da:29:fe:15:1c:a1:ea:72:bf:ba: fd:69:0b:15:28:86:9d:87:f0:0e:2b:30:03:3c:f4: 11:f7:08:8a:63:7f:e6:e6:ee:d7:07:20:27:65:7e: 33:dd:1f:be:42:57:69:c8:51:54:64:7b:18:c8:c5: 1a:7e:e1:56:89:0a:82:93:38:c8:9d:f0:83:dc:63: 9b:e3:2f:a7:b9:d1:c8:ea:b1:b8:cd:4a:36:47:5a: 91:ed:e5:98:00:f9:46:d8:57:83:58:47:86:f5:0c: ea:be:cd:63:69:ff:8d:e9:7f:9f:2f:aa:be:d7:b3: 98:dd:eb:ca:68:0e:0f:ad:6d:e3:71:b0:92:9a:30: 90:93:ec:2f:bf:fc:0f:88:01:52:49:e2:80:d5:6f: b6:91:bf:fa:f1:7c:b2:c1:8f:33:2b:b0:d4:34:23: 9c:ad:1c:d3:69:30:c6:20:cf:18:d6:03:fe:2c:46: 1e:fd:9e:d0:ae:2e:f0:f2:10:6f:4a:64:ff:2c:61: da:a6:00:ea:a9:c8:ad:5c:00:cd:0a:22:27:a0:98: 41:03:66:03:3a:1a:50:37:50:56:b0:1b:68:64:0a: 17:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E4:3C:AF:2A:9A:3F:A2:21:F7:67:F8:F0:65:29:22:D4:D1:3D:2E X509v3 Authority Key Identifier: keyid:FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3132342e34372e35382e302f32332d3233203d3e203233373731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.47.58.0/23 Signature Algorithm: sha256WithRSAEncryption 28:cf:9c:c0:7d:d8:aa:0e:14:a6:97:d3:06:ef:04:74:ad:ad: 3d:ee:cc:b9:b1:9b:7e:25:ce:2f:2a:0e:40:f2:61:42:78:a5: 44:5d:ce:4f:c9:52:41:0c:b2:24:c1:46:5b:5c:d6:e4:1c:97: 0f:71:2b:4c:29:bb:9e:c2:1b:70:b4:9c:b8:73:3f:f0:c1:62: 10:8a:81:37:3c:4b:45:c9:d7:36:e8:d1:09:3f:21:72:d8:03: 96:bf:4c:e5:f6:9f:11:e2:81:88:16:7c:7a:04:73:c9:81:cd: 8f:ae:ff:0a:c1:3e:54:0d:31:4b:de:64:dc:84:6f:61:ef:e5: 38:9d:21:98:99:df:92:f8:b4:d5:8a:7f:28:8d:35:ff:2d:24: c0:26:f6:0b:ab:d6:7b:e0:52:ce:e4:d1:83:4f:bd:28:f8:6c: 80:b9:e2:3b:07:87:c4:0b:26:43:5b:d7:1a:58:79:33:07:27: 98:55:dc:0c:ee:4b:09:76:40:a6:96:da:4e:80:ed:aa:3d:31: 5a:46:a9:64:c1:19:e7:85:8b:b3:30:19:ab:3d:8c:d9:f0:53: a6:c6:4f:14:d0:91:89:73:fe:0a:79:25:b7:70:bb:72:10:df: 80:a3:75:e2:6b:89:2f:a1:ef:bf:7a:b3:fb:47:bb:f3:9b:0f: be:49:17:9a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUSvOZ6PBm+xT5UIseQs6aYGslIgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5 QjFGNUIyQzAeFw0yNjA0MjAwMjE2MDNaFw0yNzA0MTkwMjIxMDNaMDMxMTAvBgNV BAMTKEFBRTQzQ0FGMkE5QTNGQTIyMUY3NjdGOEYwNjUyOTIyRDREMTNEMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8jSBVUcG5H9Vvi9/PLdobYOCu YtsjxB8gGNzA+Xhk1M3e2in+FRyh6nK/uv1pCxUohp2H8A4rMAM89BH3CIpjf+bm 7tcHICdlfjPdH75CV2nIUVRkexjIxRp+4VaJCoKTOMid8IPcY5vjL6e50cjqsbjN SjZHWpHt5ZgA+UbYV4NYR4b1DOq+zWNp/43pf58vqr7Xs5jd68poDg+tbeNxsJKa MJCT7C+//A+IAVJJ4oDVb7aRv/rxfLLBjzMrsNQ0I5ytHNNpMMYgzxjWA/4sRh79 ntCuLvDyEG9KZP8sYdqmAOqpyK1cAM0KIiegmEEDZgM6GlA3UFawG2hkCheDAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUquQ8ryqaP6Ih92f48GUpItTRPS4wHwYDVR0j BBgwFoAU+3t5TxI3Jf6ACmR/P36L6ZsfWywwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjA0ODM4Ni8wL0ZCN0I3OTRGMTIzNzI1RkU4MDBBNjQ3RjNGN0U4 QkU5OUIxRjVCMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5QjFGNUIyQy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcyMDQ4Mzg2LzAvMzEzMjM0MmUzNDM3 MmUzNTM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzMzM3MzczMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAXwvOjANBgkqhkiG9w0BAQsFAAOCAQEAKM+cwH3Yqg4UppfTBu8EdK2tPe7M ubGbfiXOLyoOQPJhQnilRF3OT8lSQQyyJMFGW1zW5ByXD3ErTCm7nsIbcLScuHM/ 8MFiEIqBNzxLRcnXNujRCT8hctgDlr9M5fafEeKBiBZ8egRzyYHNj67/CsE+VA0x S95k3IRvYe/lOJ0hmJnfkvi01Yp/KI01/y0kwCb2C6vWe+BSzuTRg0+9KPhsgLni OweHxAsmQ1vXGlh5MwcnmFXcDO5LCXZAppbaToDtqj0xWkapZMEZ54WLszAZqz2M 2fBTpsZPFNCRiXP+Cnklt3C7chDfgKN14muJL6Hvv3qz+0e785sPvkkXmg== -----END CERTIFICATE-----Generated at Wed May 13 19:53:46 2026 by rpki-client