$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3139322e302f32322d3234203d3e20333939343631.roa File: 3132342e34322e3139322e302f32322d3234203d3e20333939343631.roa (raw, json) Hash identifier: iwX9ztxmxpl7oEu5C4GsFlI0bJLdcrZqhfMYP9mPckU= Subject key identifier: B5:D8:7F:B1:5C:B6:74:BA:58:7C:04:69:77:88:DA:B0:DA:CC:15:81 Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 549F578567FCCA6E02B251E0C18194D09FFBB762 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3139322e302f32322d3234203d3e20333939343631.roa Signing time: Wed 25 Mar 2026 10:33:56 +0000 ROA not before: Wed 25 Mar 2026 10:28:56 +0000 ROA not after: Wed 24 Mar 2027 10:33:56 +0000 asID: 399461 IP address blocks: 124.42.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:9f:57:85:67:fc:ca:6e:02:b2:51:e0:c1:81:94:d0:9f:fb:b7:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Mar 25 10:28:56 2026 GMT Not After : Mar 24 10:33:56 2027 GMT Subject: CN=B5D87FB15CB674BA587C04697788DAB0DACC1581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:dd:b0:ea:ae:6c:9d:d2:e1:cc:3b:8a:41:ed: 87:5d:f3:26:12:c9:00:cf:17:f4:18:ee:b9:b2:6e: 50:19:29:36:b3:81:1c:d9:3b:33:f9:65:fa:43:91: 05:fb:d8:57:78:23:10:a4:92:28:d3:86:07:f1:cf: 94:10:e0:91:e7:a5:ea:67:80:30:93:99:25:24:ad: ca:88:68:0c:55:1e:9d:42:bb:cb:5e:8b:40:85:9a: c9:d4:0c:1e:82:02:e4:8a:fc:43:dd:6f:c9:ce:29: 30:2e:9f:e7:11:df:d8:c3:be:02:88:a4:fb:8b:64: df:2e:9f:3e:a2:71:51:08:c8:06:c8:ea:f7:bd:28: 7a:a1:44:a4:30:61:da:ab:2e:bd:8d:9e:58:23:72: 19:09:60:da:20:f9:b8:7e:8f:7d:59:86:0a:f5:68: f9:4c:0a:61:e9:46:a7:1e:f6:19:ba:ec:88:cc:77: 2c:20:bf:88:eb:1d:b0:4b:e6:f4:41:da:97:67:2c: 49:3c:46:51:78:63:15:b7:af:62:80:f5:95:a4:1f: fa:80:a2:f4:35:83:96:73:63:4a:7a:e9:c9:55:59: bb:89:07:4a:a6:ab:ba:1b:d1:a7:21:03:c9:8a:b2: b0:91:02:86:3c:84:b7:f9:43:62:65:d3:4c:ea:bd: 8d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D8:7F:B1:5C:B6:74:BA:58:7C:04:69:77:88:DA:B0:DA:CC:15:81 X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3139322e302f32322d3234203d3e20333939343631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.42.192.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:a6:c1:c2:89:aa:cc:66:c4:7f:47:ae:c8:bb:78:ec:d7:43: d2:ac:a8:68:f4:5c:a3:b6:37:bf:82:6d:98:08:35:d3:95:5a: 36:e1:35:1e:8f:ad:77:85:53:da:06:16:d7:de:b1:82:bd:dc: 10:57:46:61:da:4a:b6:e8:89:83:8f:a8:a1:95:bd:c5:96:40: 92:1e:ca:ee:b7:a9:81:dc:58:50:9a:d0:00:75:0e:c8:45:ce: 71:2d:af:e8:e5:c2:42:a9:96:36:94:6e:c5:c1:b7:b8:c7:32: 23:11:89:25:9b:49:8c:d5:21:5c:00:f3:da:04:30:d6:82:7f: ef:0b:1a:3b:99:f4:00:9f:a5:18:74:82:e4:fa:25:d3:a5:89: b6:15:90:c9:14:e6:51:a4:93:37:62:cf:12:a0:cf:a0:bf:24: 2c:1c:eb:10:ab:d9:a4:65:58:68:1f:5b:3d:61:69:66:99:40: c7:c7:18:49:0d:98:94:63:87:59:d2:da:9e:f3:2b:b0:28:c9: a4:b2:3a:66:85:cf:b2:54:59:bb:13:3f:92:56:33:f1:e0:a3: 02:db:b6:b3:69:b0:97:50:58:c7:49:eb:3a:b2:af:f0:ed:cf: 33:ae:24:6f:e2:aa:06:0e:8f:b3:71:48:37:11:f6:aa:2a:83: 6f:20:23:24 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUVJ9XhWf8ym4CslHgwYGU0J/7t2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjAzMjUxMDI4NTZaFw0yNzAzMjQxMDMzNTZaMDMxMTAvBgNV BAMTKEI1RDg3RkIxNUNCNjc0QkE1ODdDMDQ2OTc3ODhEQUIwREFDQzE1ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf3bDqrmyd0uHMO4pB7Ydd8yYS yQDPF/QY7rmyblAZKTazgRzZOzP5ZfpDkQX72Fd4IxCkkijThgfxz5QQ4JHnpepn gDCTmSUkrcqIaAxVHp1Cu8tei0CFmsnUDB6CAuSK/EPdb8nOKTAun+cR39jDvgKI pPuLZN8unz6icVEIyAbI6ve9KHqhRKQwYdqrLr2NnlgjchkJYNog+bh+j31Zhgr1 aPlMCmHpRqce9hm67IjMdywgv4jrHbBL5vRB2pdnLEk8RlF4YxW3r2KA9ZWkH/qA ovQ1g5ZzY0p66clVWbuJB0qmq7ob0achA8mKsrCRAoY8hLf5Q2Jl00zqvY0BAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUtdh/sVy2dLpYfARpd4jasNrMFYEwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC8zMTMyMzQyZTM0 MzIyZTMxMzkzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMzMzkzOTM0MzYzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAnwqwDANBgkqhkiG9w0BAQsFAAOCAQEAe6bBwomqzGbEf0euyLt4 7NdD0qyoaPRco7Y3v4JtmAg105VaNuE1Ho+td4VT2gYW196xgr3cEFdGYdpKtuiJ g4+ooZW9xZZAkh7K7repgdxYUJrQAHUOyEXOcS2v6OXCQqmWNpRuxcG3uMcyIxGJ JZtJjNUhXADz2gQw1oJ/7wsaO5n0AJ+lGHSC5Pol06WJthWQyRTmUaSTN2LPEqDP oL8kLBzrEKvZpGVYaB9bPWFpZplAx8cYSQ2YlGOHWdLanvMrsCjJpLI6ZoXPslRZ uxM/klYz8eCjAtu2s2mwl1BYx0nrOrKv8O3PM64kb+KqBg6Ps3FINxH2qiqDbyAj JA== -----END CERTIFICATE-----Generated at Thu Mar 26 08:06:01 2026 by rpki-client