$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3133362e302f32322d3234203d3e20333939313338.roa File: 3132342e34322e3133362e302f32322d3234203d3e20333939313338.roa (raw, json) Hash identifier: OX6Noq5PewBL73RP7/SevH80rX2Jlb1qOAKK7FdULL8= Subject key identifier: F4:C0:71:B0:3F:D2:F9:6C:8C:6C:2D:6D:05:2C:D5:42:A0:98:AD:6B Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 01C82EDA8F978DD02AED9ECEB6842A7056EA0D44 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3133362e302f32322d3234203d3e20333939313338.roa Signing time: Mon 13 Jul 2026 03:46:32 +0000 ROA not before: Mon 13 Jul 2026 03:41:32 +0000 ROA not after: Mon 12 Jul 2027 03:46:32 +0000 asID: 399138 IP address blocks: 124.42.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:c8:2e:da:8f:97:8d:d0:2a:ed:9e:ce:b6:84:2a:70:56:ea:0d:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Jul 13 03:41:32 2026 GMT Not After : Jul 12 03:46:32 2027 GMT Subject: CN=F4C071B03FD2F96C8C6C2D6D052CD542A098AD6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ed:9f:8e:a6:2b:8e:ce:8f:3e:69:28:8b:4c: 59:ce:87:93:3f:ce:00:6b:b1:c6:a7:d9:f5:5b:52: 16:26:97:ec:c7:b5:fe:35:c3:c6:36:13:cd:b7:44: e0:0b:d3:c7:86:c1:6f:05:aa:82:0e:13:33:08:09: fc:e2:6c:94:dd:43:0e:4a:43:2b:b8:12:3c:34:3e: 3c:45:33:2b:ba:34:7a:cf:c5:3f:df:ec:a4:5e:bd: 97:11:36:2c:47:0b:fb:c8:f0:59:d7:b2:9a:27:a4: b4:5c:46:b5:11:f2:68:2b:b2:6d:f0:6b:23:b1:47: 5f:ba:d6:99:88:e1:8e:bc:2d:cd:41:4e:dc:60:37: 49:a6:8d:a5:9e:0e:f0:09:5a:27:59:1b:4d:c6:76: 57:dd:17:56:9d:8b:7d:9c:1e:ce:76:11:44:80:e2: bd:f2:cf:eb:98:71:54:7f:63:ca:d4:0b:ec:5c:18: 5e:c8:1b:8d:8b:fe:62:e6:ea:f6:c3:35:00:b6:58: 48:01:18:ff:f0:79:ba:1e:76:31:0a:e3:65:dc:49: b6:d3:7b:c7:43:4d:1f:d8:55:a7:a7:ed:61:53:d4: 0a:be:58:24:27:fa:da:e7:9d:15:07:e5:c4:d0:3f: 89:3b:1a:c7:84:36:2b:b2:b8:4a:cd:f6:f8:e5:f5: 85:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C0:71:B0:3F:D2:F9:6C:8C:6C:2D:6D:05:2C:D5:42:A0:98:AD:6B X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3133362e302f32322d3234203d3e20333939313338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.42.136.0/22 Signature Algorithm: sha256WithRSAEncryption 02:28:10:db:b1:ed:f4:db:b3:d7:73:b9:9c:92:84:58:bf:3f: df:ea:3c:52:03:fc:e1:b1:53:e2:07:42:0a:37:56:2d:9b:08: ba:8a:fa:80:71:cc:b5:a4:9f:e7:26:76:d2:f2:30:41:eb:04: fc:99:63:9a:50:3e:ed:de:1e:63:1c:5b:00:c3:38:af:87:ea: fc:18:69:bd:d9:66:95:3b:00:a6:00:04:8c:d3:fe:88:bc:a9: 07:8a:bc:c0:3d:a0:6a:42:c0:78:bb:6a:f0:08:60:f5:39:b3: 3a:f9:f4:67:e9:7e:2a:a0:8e:c0:cc:fb:65:4d:6a:b3:ec:bd: 01:07:4d:64:c3:5a:ed:bf:ca:e7:43:b5:89:2e:a1:d2:7c:ac: ce:d0:39:f7:e2:e3:f7:c5:f4:40:dd:2e:c3:d3:9d:b9:fc:69: 38:8e:20:13:59:4c:b7:9b:ce:60:94:c8:36:2b:60:9f:17:8b: 62:e3:bd:ee:85:32:fe:09:f0:44:88:8a:9f:c7:c6:c3:83:d5: 4f:c7:46:2e:b4:64:f1:87:5e:03:d1:32:b3:f5:43:db:e4:3e: d5:d4:03:6a:a0:2c:25:9a:0f:d3:2f:91:b9:4d:04:29:d2:99: 85:86:56:65:8a:79:7d:12:46:4a:5c:f2:97:30:ac:6a:d1:08: d1:6f:46:86 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUAcgu2o+XjdAq7Z7OtoQqcFbqDUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA3MTMwMzQxMzJaFw0yNzA3MTIwMzQ2MzJaMDMxMTAvBgNV BAMTKEY0QzA3MUIwM0ZEMkY5NkM4QzZDMkQ2RDA1MkNENTQyQTA5OEFENkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo7Z+OpiuOzo8+aSiLTFnOh5M/ zgBrscan2fVbUhYml+zHtf41w8Y2E823ROAL08eGwW8FqoIOEzMICfzibJTdQw5K Qyu4Ejw0PjxFMyu6NHrPxT/f7KRevZcRNixHC/vI8FnXsponpLRcRrUR8mgrsm3w ayOxR1+61pmI4Y68Lc1BTtxgN0mmjaWeDvAJWidZG03GdlfdF1adi32cHs52EUSA 4r3yz+uYcVR/Y8rUC+xcGF7IG42L/mLm6vbDNQC2WEgBGP/weboedjEK42XcSbbT e8dDTR/YVaen7WFT1Aq+WCQn+trnnRUH5cTQP4k7GseENiuyuErN9vjl9YVTAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU9MBxsD/S+WyMbC1tBSzVQqCYrWswHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC8zMTMyMzQyZTM0 MzIyZTMxMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMzMzkzOTMxMzMzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAnwqiDANBgkqhkiG9w0BAQsFAAOCAQEAAigQ27Ht9Nuz13O5nJKE WL8/3+o8UgP84bFT4gdCCjdWLZsIuor6gHHMtaSf5yZ20vIwQesE/JljmlA+7d4e YxxbAMM4r4fq/BhpvdlmlTsApgAEjNP+iLypB4q8wD2gakLAeLtq8Ahg9TmzOvn0 Z+l+KqCOwMz7ZU1qs+y9AQdNZMNa7b/K50O1iS6h0nysztA59+Lj98X0QN0uw9Od ufxpOI4gE1lMt5vOYJTINitgnxeLYuO97oUy/gnwRIiKn8fGw4PVT8dGLrRk8Yde A9Eys/VD2+Q+1dQDaqAsJZoP0y+RuU0EKdKZhYZWZYp5fRJGSlzylzCsatEI0W9G hg== -----END CERTIFICATE-----Generated at Fri Jul 24 15:48:50 2026 by rpki-client