$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139362e302f32342d3234203d3e2034383437.roa File: 3132332e34392e3139362e302f32342d3234203d3e2034383437.roa (raw, json) Hash identifier: Xe83UM/aJfzCa3+48HF5aAN08xJ9gZ2bfrNqD2sRwTM= Subject key identifier: 41:04:6A:29:BC:FE:BB:8E:BD:C2:C4:FF:F0:C6:97:01:00:05:CE:AE Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 10B72174ACF999B14D0C82F28E8D55F0FAFD2AB5 Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139362e302f32342d3234203d3e2034383437.roa Signing time: Wed 01 Jul 2026 07:27:02 +0000 ROA not before: Wed 01 Jul 2026 07:22:02 +0000 ROA not after: Wed 30 Jun 2027 07:27:02 +0000 asID: 4847 IP address blocks: 123.49.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b7:21:74:ac:f9:99:b1:4d:0c:82:f2:8e:8d:55:f0:fa:fd:2a:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Jul 1 07:22:02 2026 GMT Not After : Jun 30 07:27:02 2027 GMT Subject: CN=41046A29BCFEBB8EBDC2C4FFF0C697010005CEAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2e:04:b4:6a:0d:1e:82:2b:9f:8e:50:71:55: 88:ca:9a:a7:d8:a4:7d:29:22:d6:89:7e:e0:62:ed: f2:db:6a:31:6d:aa:90:e0:1e:ac:da:aa:d3:a8:56: 97:7a:c2:b3:47:34:83:e7:c6:55:b1:a2:83:c5:73: 50:53:71:51:f2:b0:37:69:63:73:61:fa:d7:af:52: 02:aa:4f:69:07:07:9d:ca:4f:e4:11:7a:8f:bb:7e: ab:5a:5b:27:d8:14:54:db:9c:f1:8d:d4:f5:d7:ed: a7:b8:45:9e:7c:a1:6f:25:d1:01:a0:55:57:89:7c: 13:66:5d:05:c9:ac:4a:75:42:c4:5b:dd:e8:c4:ef: d4:8a:d3:04:d6:6b:44:19:11:19:c1:a3:67:aa:3f: 9d:78:37:18:27:bd:1a:bd:67:f0:1e:c9:f6:93:fb: ec:d8:7c:db:07:2e:78:59:d9:70:15:55:cc:78:f2: 15:55:af:14:06:99:51:b5:0d:d2:e4:a0:4e:c0:8f: a7:c2:49:97:6c:3c:d4:6b:03:13:31:2f:29:d1:a0: 95:7e:80:50:99:8d:10:df:0a:dc:f6:77:12:33:da: 55:60:93:1d:60:18:e8:47:7c:09:84:b8:f4:7b:e7: d4:5e:32:0f:07:ea:6f:10:d5:93:4a:6c:41:42:10: af:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:04:6A:29:BC:FE:BB:8E:BD:C2:C4:FF:F0:C6:97:01:00:05:CE:AE X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3139362e302f32342d3234203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.49.196.0/24 Signature Algorithm: sha256WithRSAEncryption dd:da:37:2d:55:d4:0b:ed:7b:84:d4:0d:f3:37:01:3d:4e:18: 29:00:e9:7e:8a:d7:2e:9f:77:ed:46:9c:12:33:64:58:f5:b2: 12:73:ed:be:39:e3:2c:04:63:c2:26:7f:7f:9d:d8:30:70:6d: 01:81:a7:76:11:35:fe:49:cd:3b:d3:14:b7:d0:d7:45:a8:33: 60:1e:0e:0f:43:48:b0:3c:e1:d4:a8:91:37:08:d3:23:93:e6: 1a:80:a8:9b:93:37:36:df:74:58:7f:9c:41:c3:09:c1:d1:b8: c4:b4:a2:8d:dc:79:5e:01:64:4e:e6:f1:29:07:11:c9:0d:69: 0c:08:d4:65:85:bc:e6:3f:81:be:fd:64:fe:f1:2f:59:7f:7c: 2d:ca:3a:1a:77:61:25:eb:f5:8c:3d:c4:db:37:80:56:e0:13: cc:eb:8b:03:ac:24:06:48:46:9d:80:73:20:2a:10:cd:aa:88: f9:6d:52:19:e0:0e:90:4b:fd:6d:47:90:d0:59:d0:73:52:1c: 41:4d:75:0b:ae:a6:b4:a6:90:a8:fa:e5:c9:4b:49:05:32:1a: 43:ea:0d:5d:c7:93:b5:7f:40:f5:5e:ef:61:29:43:13:a9:29: d1:c7:57:5b:31:f1:12:46:2b:6b:7b:2f:9d:a9:69:bc:f7:98: c4:6a:73:12 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUELchdKz5mbFNDILyjo1V8Pr9KrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjA3MDEwNzIyMDJaFw0yNzA2MzAwNzI3MDJaMDMxMTAvBgNV BAMTKDQxMDQ2QTI5QkNGRUJCOEVCREMyQzRGRkYwQzY5NzAxMDAwNUNFQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZLgS0ag0egiufjlBxVYjKmqfY pH0pItaJfuBi7fLbajFtqpDgHqzaqtOoVpd6wrNHNIPnxlWxooPFc1BTcVHysDdp Y3Nh+tevUgKqT2kHB53KT+QReo+7fqtaWyfYFFTbnPGN1PXX7ae4RZ58oW8l0QGg VVeJfBNmXQXJrEp1QsRb3ejE79SK0wTWa0QZERnBo2eqP514NxgnvRq9Z/AeyfaT ++zYfNsHLnhZ2XAVVcx48hVVrxQGmVG1DdLkoE7Aj6fCSZdsPNRrAxMxLynRoJV+ gFCZjRDfCtz2dxIz2lVgkx1gGOhHfAmEuPR759ReMg8H6m8Q1ZNKbEFCEK/vAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUQQRqKbz+u469wsT/8MaXAQAFzq4wHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ2Nzk5MTA1LzAvMzEzMjMzMmUzNDM5 MmUzMTM5MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHsxxDANBgkqhkiG9w0BAQsFAAOCAQEA3do3LVXUC+17hNQN8zcBPU4YKQDp forXLp937UacEjNkWPWyEnPtvjnjLARjwiZ/f53YMHBtAYGndhE1/knNO9MUt9DX RagzYB4OD0NIsDzh1KiRNwjTI5PmGoCom5M3Nt90WH+cQcMJwdG4xLSijdx5XgFk TubxKQcRyQ1pDAjUZYW85j+Bvv1k/vEvWX98Lco6GndhJev1jD3E2zeAVuATzOuL A6wkBkhGnYBzICoQzaqI+W1SGeAOkEv9bUeQ0FnQc1IcQU11C66mtKaQqPrlyUtJ BTIaQ+oNXceTtX9A9V7vYSlDE6kp0cdXWzHxEkYra3svnalpvPeYxGpzEg== -----END CERTIFICATE-----Generated at Fri Jul 24 12:24:17 2026 by rpki-client