$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3132302e34392e3132382e302f31382d3234203d3e203338333635.roa File: 3132302e34392e3132382e302f31382d3234203d3e203338333635.roa (raw, json) Hash identifier: LI4OKkOtYcVcqtbWRilyHIMfzYQpvZ6zkmge4eHHSdw= Subject key identifier: 4A:7F:D6:C9:18:C4:5A:5F:DB:84:21:AE:0D:7B:BA:B3:6F:27:5C:9A Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Certificate serial: 07CEAEEC966077B912D6850358A0923CE9732DCF Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3132302e34392e3132382e302f31382d3234203d3e203338333635.roa Signing time: Sun 19 Apr 2026 08:17:19 +0000 ROA not before: Sun 19 Apr 2026 08:12:19 +0000 ROA not after: Sun 18 Apr 2027 08:17:19 +0000 asID: 38365 IP address blocks: 120.49.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ce:ae:ec:96:60:77:b9:12:d6:85:03:58:a0:92:3c:e9:73:2d:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Validity Not Before: Apr 19 08:12:19 2026 GMT Not After : Apr 18 08:17:19 2027 GMT Subject: CN=4A7FD6C918C45A5FDB8421AE0D7BBAB36F275C9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:52:3d:15:98:0a:96:14:c0:37:85:c8:aa:73: 8c:6f:17:85:0c:b0:c1:1c:a0:d0:c5:e3:c6:a0:8e: b8:b6:f0:7d:8b:37:d4:c0:2d:9a:be:fe:fa:a5:fc: 58:b5:04:24:75:4c:b1:72:48:1a:3b:cc:e2:72:56: 55:aa:26:cc:bd:a5:c7:6f:50:b3:37:89:4c:ab:7b: 46:79:19:86:43:e5:e0:01:7a:a0:bb:0f:83:c9:0f: 5f:29:40:bd:78:94:5c:c5:6e:d0:1f:b8:df:e3:10: e1:82:24:88:4b:65:a2:89:f3:1c:91:5b:e7:80:b1: ab:7e:97:73:f0:4b:0c:4c:6d:35:9f:3b:5d:0b:7e: 77:77:09:20:f4:9e:3a:9e:7b:22:b0:18:80:3c:b5: bb:c9:7c:d8:09:79:15:42:f4:49:4f:b2:a5:06:a3: 25:4a:2e:60:b0:a1:98:cd:59:1c:7c:1a:19:c4:7c: 3d:db:fb:41:21:43:ac:5b:f5:68:39:65:c3:b1:e2: 98:d1:6f:cf:b9:0e:4f:2a:30:ee:2d:70:38:ac:c0: 08:bd:af:74:41:5d:87:d6:41:9d:e6:59:c3:04:8d: 22:30:8a:e8:e2:3f:a6:f9:c7:0d:8b:c4:95:bd:07: 88:0f:71:a7:45:e3:dd:68:35:7a:9d:d4:d7:82:0a: 41:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7F:D6:C9:18:C4:5A:5F:DB:84:21:AE:0D:7B:BA:B3:6F:27:5C:9A X509v3 Authority Key Identifier: keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3132302e34392e3132382e302f31382d3234203d3e203338333635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.49.128.0/18 Signature Algorithm: sha256WithRSAEncryption 90:c4:f5:dc:b9:dc:69:60:d8:e0:69:79:3f:c8:75:d2:d2:24: 9d:93:08:98:50:f6:fe:32:a4:98:9d:ea:95:3b:00:d3:76:59: 18:ea:4f:e4:e2:15:33:ad:e7:68:b9:02:a2:03:e8:e1:6d:a3: 01:63:9e:ef:28:35:9b:b4:65:2d:61:2a:63:85:44:4d:93:22: ec:17:36:92:5b:ff:e2:d7:84:50:65:01:55:04:c0:c4:bf:96: 1a:c2:c8:52:15:3d:85:11:64:e1:b2:b9:56:dd:e9:62:74:f5: 58:a0:ed:f8:7d:f4:e1:da:7e:3c:4d:4b:41:b6:e2:e5:66:28: 2e:d9:10:f7:38:f6:c4:12:2d:bd:fb:fd:27:c4:0b:61:f7:aa: b4:48:56:38:f4:f5:00:34:bd:f4:96:44:8f:99:ad:57:46:f6: 37:8c:6e:98:b4:08:46:c1:4f:dd:58:b9:0c:c1:09:c5:08:57: 4c:3f:2d:ce:ce:34:a3:62:05:88:39:56:da:f3:fc:9c:90:ff: c0:62:18:59:37:a6:2f:4d:52:ec:ac:e1:4d:8e:22:51:dc:61: 07:fd:25:97:97:cc:88:c0:cb:03:7c:06:c5:57:3f:69:c9:a0: c6:70:32:8d:1c:7d:b3:5c:ca:b7:f1:32:cf:9d:ef:a9:9d:fb: 30:2a:7f:bc -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUB86u7JZgd7kS1oUDWKCSPOlzLc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRB OEVCQTcwRTAeFw0yNjA0MTkwODEyMTlaFw0yNzA0MTgwODE3MTlaMDMxMTAvBgNV BAMTKDRBN0ZENkM5MThDNDVBNUZEQjg0MjFBRTBEN0JCQUIzNkYyNzVDOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiUj0VmAqWFMA3hciqc4xvF4UM sMEcoNDF48agjri28H2LN9TALZq+/vql/Fi1BCR1TLFySBo7zOJyVlWqJsy9pcdv ULM3iUyre0Z5GYZD5eABeqC7D4PJD18pQL14lFzFbtAfuN/jEOGCJIhLZaKJ8xyR W+eAsat+l3PwSwxMbTWfO10Lfnd3CSD0njqeeyKwGIA8tbvJfNgJeRVC9ElPsqUG oyVKLmCwoZjNWRx8GhnEfD3b+0EhQ6xb9Wg5ZcOx4pjRb8+5Dk8qMO4tcDiswAi9 r3RBXYfWQZ3mWcMEjSIwiujiP6b5xw2LxJW9B4gPcadF491oNXqd1NeCCkGJAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUSn/WyRjEWl/bhCGuDXu6s28nXJowHwYDVR0j BBgwFoAUoZZyIGqdp99ClTbJv/ralKjrpw4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjExMzkyMi8wL0ExOTY3MjIwNkE5REE3REY0Mjk1MzZDOUJGRkFE QTk0QThFQkE3MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRBOEVCQTcwRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjcyMzM3MjExMzkyMi8wLzMxMzIzMDJlMzQz OTJlMzEzMjM4MmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzMzODMzMzYzNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBngxgDANBgkqhkiG9w0BAQsFAAOCAQEAkMT13LncaWDY4Gl5P8h10tIk nZMImFD2/jKkmJ3qlTsA03ZZGOpP5OIVM63naLkCogPo4W2jAWOe7yg1m7RlLWEq Y4VETZMi7Bc2klv/4teEUGUBVQTAxL+WGsLIUhU9hRFk4bK5Vt3pYnT1WKDt+H30 4dp+PE1LQbbi5WYoLtkQ9zj2xBItvfv9J8QLYfeqtEhWOPT1ADS99JZEj5mtV0b2 N4xumLQIRsFP3Vi5DMEJxQhXTD8tzs40o2IFiDlW2vP8nJD/wGIYWTemL01S7Kzh TY4iUdxhB/0ll5fMiMDLA3wGxVc/acmgxnAyjRx9s1zKt/Eyz53vqZ37MCp/vA== -----END CERTIFICATE-----Generated at Wed May 13 16:15:03 2026 by rpki-client