$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e302e302f32342d3234203d3e20323133373035.roa File: 3132332e39382e302e302f32342d3234203d3e20323133373035.roa (raw, json) Hash identifier: Dga53EysdQfQRu+qCrf8PDt3ElBnoZMFQLKjG4FziWQ= Subject key identifier: EC:A3:DA:6F:46:27:71:79:59:58:3B:C9:82:9B:55:53:56:E8:62:BE Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 41FE1E8153D6F4FEBCF3CBE2B5EB221F7193F2B6 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e302e302f32342d3234203d3e20323133373035.roa Signing time: Wed 06 May 2026 06:17:28 +0000 ROA not before: Wed 06 May 2026 06:12:28 +0000 ROA not after: Wed 05 May 2027 06:17:28 +0000 asID: 213705 IP address blocks: 123.98.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:fe:1e:81:53:d6:f4:fe:bc:f3:cb:e2:b5:eb:22:1f:71:93:f2:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: May 6 06:12:28 2026 GMT Not After : May 5 06:17:28 2027 GMT Subject: CN=ECA3DA6F4627717959583BC9829B555356E862BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f8:85:d7:5f:3a:9e:70:56:c5:37:5f:91:31: 46:ee:ba:19:0e:3c:a2:e8:bb:69:c2:54:da:c3:4d: 2a:2c:e2:d0:4b:98:ed:dc:f5:a4:56:19:1b:17:53: 9b:8f:ba:22:6c:45:ba:b4:70:a7:8f:08:47:7a:4a: 0d:d8:54:a3:2c:80:f5:00:2f:86:ae:38:28:a2:d4: 5f:24:cf:b2:e8:03:d8:5f:7b:ae:9a:ce:85:8c:fb: 51:6c:52:d7:f1:94:80:69:aa:95:80:0b:e9:56:9a: d6:36:d0:c8:3b:80:35:07:70:a8:70:12:91:e8:c5: be:1c:42:8b:35:c3:66:bc:79:1c:97:ee:0a:75:3c: 3a:d9:e2:f4:e1:9f:00:60:f0:f9:14:3e:c8:e5:16: 0e:bb:7a:8e:3a:a8:e0:78:48:15:50:b2:be:61:56: c6:46:6d:2c:0a:16:d6:1e:cc:1e:65:de:51:ad:40: fc:24:4f:5c:5a:6a:f8:4e:15:94:4b:54:30:79:7b: 80:4a:9b:a4:99:6e:a6:34:c9:fb:b6:1a:ef:95:89: e5:ac:d9:35:91:2b:0e:20:e2:82:97:e3:9d:04:ae: 46:58:26:a1:24:15:dd:b3:f9:60:85:89:61:b9:41: 43:89:83:a0:af:a3:7f:92:ba:8e:9a:31:73:b8:84: 5d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A3:DA:6F:46:27:71:79:59:58:3B:C9:82:9B:55:53:56:E8:62:BE X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e302e302f32342d3234203d3e20323133373035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.98.0.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:1b:f5:8b:49:e4:ae:09:db:46:e6:b2:2c:0f:9d:f4:60:21: be:88:c4:ab:5c:9b:3e:25:30:3d:e8:49:99:2a:28:de:4d:28: 69:ea:91:00:d5:a8:d7:42:41:33:d4:e4:93:2f:a6:13:8e:46: c1:29:09:bc:bf:35:71:f0:86:3a:c3:d9:2d:91:04:10:b4:a1: b7:f2:9b:83:85:6d:63:3b:77:e1:4a:09:49:3a:57:0c:eb:5a: bb:9f:f0:d8:2e:2e:73:a7:cd:2e:8e:5a:53:d2:41:71:5b:37: 53:fe:9f:94:25:73:f4:9c:e7:d8:5e:5e:ec:00:24:bd:8e:7d: 65:63:fb:48:82:12:d4:d0:5a:7b:50:2a:fa:aa:cf:6c:a9:ae: 0c:8e:8b:9f:2b:60:61:ed:8f:8e:d9:1f:ec:4c:5f:31:97:59: ed:5b:67:61:71:21:db:0d:ef:ad:de:12:8a:f5:64:2f:84:15: b9:82:5b:b6:f1:4c:c0:ae:db:5f:44:e7:e3:88:2f:2d:43:16: fe:1d:fd:f0:9d:da:77:e3:ec:33:eb:f3:4d:03:07:a2:f7:e6: cf:83:de:d0:10:b1:5b:9d:cd:2a:4e:1f:97:9e:f3:d2:37:1e: c6:56:7e:e5:df:fc:da:13:67:95:26:45:d8:08:83:ab:e4:06: 71:c5:05:95 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUQf4egVPW9P6888vitesiH3GT8rYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA1MDYwNjEyMjhaFw0yNzA1MDUwNjE3MjhaMDMxMTAvBgNV BAMTKEVDQTNEQTZGNDYyNzcxNzk1OTU4M0JDOTgyOUI1NTUzNTZFODYyQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY+IXXXzqecFbFN1+RMUbuuhkO PKLou2nCVNrDTSos4tBLmO3c9aRWGRsXU5uPuiJsRbq0cKePCEd6Sg3YVKMsgPUA L4auOCii1F8kz7LoA9hfe66azoWM+1FsUtfxlIBpqpWAC+lWmtY20Mg7gDUHcKhw EpHoxb4cQos1w2a8eRyX7gp1PDrZ4vThnwBg8PkUPsjlFg67eo46qOB4SBVQsr5h VsZGbSwKFtYezB5l3lGtQPwkT1xaavhOFZRLVDB5e4BKm6SZbqY0yfu2Gu+VieWs 2TWRKw4g4oKX450ErkZYJqEkFd2z+WCFiWG5QUOJg6Cvo3+Suo6aMXO4hF2VAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU7KPab0YncXlZWDvJgptVU1boYr4wHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NTI1MjUxLzAvMzEzMjMzMmUzOTM4 MmUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMzM3MzAzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHtiADANBgkqhkiG9w0BAQsFAAOCAQEAbRv1i0nkrgnbRuayLA+d9GAhvojE q1ybPiUwPehJmSoo3k0oaeqRANWo10JBM9Tkky+mE45GwSkJvL81cfCGOsPZLZEE ELSht/Kbg4VtYzt34UoJSTpXDOtau5/w2C4uc6fNLo5aU9JBcVs3U/6flCVz9Jzn 2F5e7AAkvY59ZWP7SIIS1NBae1Aq+qrPbKmuDI6LnytgYe2Pjtkf7ExfMZdZ7Vtn YXEh2w3vrd4SivVkL4QVuYJbtvFMwK7bX0Tn44gvLUMW/h398J3ad+PsM+vzTQMH ovfmz4Pe0BCxW53NKk4fl57z0jcexlZ+5d/82hNnlSZF2AiDq+QGccUFlQ== -----END CERTIFICATE-----Generated at Wed May 13 12:17:56 2026 by rpki-client