$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3231322e302f32322d3234203d3e20333939343631.roa File: 3132342e34322e3231322e302f32322d3234203d3e20333939343631.roa (raw, json) Hash identifier: PG/cKj2CJRqHqFj5j9fwA7HF7N0xI5U4CthDFeO4psc= Subject key identifier: 29:9A:35:CE:06:83:0B:BC:E3:D9:9D:A5:3C:B4:4F:94:F4:D0:92:D5 Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 63C1D813A1F64190C0A622BDD387B5E175367F04 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3231322e302f32322d3234203d3e20333939343631.roa Signing time: Wed 25 Mar 2026 10:34:25 +0000 ROA not before: Wed 25 Mar 2026 10:29:25 +0000 ROA not after: Wed 24 Mar 2027 10:34:25 +0000 asID: 399461 IP address blocks: 124.42.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c1:d8:13:a1:f6:41:90:c0:a6:22:bd:d3:87:b5:e1:75:36:7f:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Mar 25 10:29:25 2026 GMT Not After : Mar 24 10:34:25 2027 GMT Subject: CN=299A35CE06830BBCE3D99DA53CB44F94F4D092D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:38:ec:2b:5f:3c:c5:6d:28:ae:3d:72:71:f8: 68:aa:e4:0e:93:df:b8:ec:f9:f9:34:02:bb:2f:c0: 35:72:46:bb:08:1c:34:6f:f4:b3:1d:e6:64:2a:7d: a6:b6:0d:09:14:7b:c6:67:11:5f:ed:8d:14:24:65: f6:5a:b3:6a:63:44:14:08:64:50:0d:49:e5:aa:37: ed:d4:69:e6:7a:92:67:72:c8:de:eb:2f:66:72:e5: 9f:b3:4b:e8:17:5f:12:da:13:af:e2:11:81:c4:a0: ac:1b:76:f5:3f:20:91:c2:2c:18:1e:90:c5:7f:f6: aa:52:4b:c3:55:f9:81:29:1a:93:e5:b6:10:dc:6d: 0e:58:85:1e:d3:35:55:fb:c3:4b:f3:2c:46:63:1e: 72:62:3a:11:e4:91:f5:54:ac:01:bb:c4:8c:91:7b: 5c:6e:07:d8:75:75:4b:66:37:61:d1:ba:52:1b:eb: 3c:a3:e0:ad:8d:08:7b:a0:73:fc:bb:b7:13:2e:75: 8f:5f:6d:5d:32:fd:5a:3f:bc:4e:32:e5:02:fa:64: 0c:44:c1:af:b1:81:cd:54:f9:52:e6:5f:9a:07:79: ca:02:55:18:41:82:4a:47:5c:91:40:9e:db:c8:19: a5:a8:7e:34:ae:12:d2:5a:c4:9f:68:1a:59:fe:7b: ef:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9A:35:CE:06:83:0B:BC:E3:D9:9D:A5:3C:B4:4F:94:F4:D0:92:D5 X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3231322e302f32322d3234203d3e20333939343631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.42.212.0/22 Signature Algorithm: sha256WithRSAEncryption 89:b2:dc:a3:25:6b:9c:05:fe:8d:d2:8e:16:ff:a5:72:a2:b7: 4e:81:a1:3e:67:51:ea:0c:14:58:81:6a:60:4d:3e:27:23:6d: 9d:46:db:a2:fd:bd:d1:ab:e5:af:e4:86:35:21:6b:43:42:5c: 2c:ab:43:a5:37:26:78:c7:9d:c1:ac:6a:f6:24:f3:60:2a:50: 44:b1:7d:e2:78:4b:e0:0d:bd:cb:4f:b8:78:ab:b9:e0:ad:d0: 04:3e:4d:56:e1:ce:2c:6b:c2:bd:ba:e7:25:34:4a:b8:2c:cb: 42:9f:91:63:9a:98:0e:c4:3d:4e:9a:36:64:21:34:e4:d3:e3: 6d:24:5d:55:8d:7b:2a:05:4a:cd:35:38:d2:1a:0a:02:da:37: b2:26:80:02:76:a2:a9:3e:01:3d:b0:f2:9f:44:ed:9c:a2:8f: 61:9a:96:c6:a7:24:c9:1e:ed:29:72:84:22:78:2b:ef:94:17: 24:08:0b:6c:c3:60:00:87:23:c8:87:74:79:a8:da:1c:bc:b7: c4:d8:fc:27:20:99:04:8f:3f:91:ed:4d:a1:be:7a:68:f0:8b: 88:c0:6c:16:bd:ff:1d:6d:ed:f9:af:0d:f7:1e:fd:bd:ae:03: 05:95:32:f7:d9:86:29:d7:4e:d4:2e:20:53:df:56:20:d4:8d: 69:97:80:84 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUY8HYE6H2QZDApiK904e14XU2fwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjAzMjUxMDI5MjVaFw0yNzAzMjQxMDM0MjVaMDMxMTAvBgNV BAMTKDI5OUEzNUNFMDY4MzBCQkNFM0Q5OURBNTNDQjQ0Rjk0RjREMDkyRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIOOwrXzzFbSiuPXJx+Giq5A6T 37js+fk0ArsvwDVyRrsIHDRv9LMd5mQqfaa2DQkUe8ZnEV/tjRQkZfZas2pjRBQI ZFANSeWqN+3UaeZ6kmdyyN7rL2Zy5Z+zS+gXXxLaE6/iEYHEoKwbdvU/IJHCLBge kMV/9qpSS8NV+YEpGpPlthDcbQ5YhR7TNVX7w0vzLEZjHnJiOhHkkfVUrAG7xIyR e1xuB9h1dUtmN2HRulIb6zyj4K2NCHugc/y7txMudY9fbV0y/Vo/vE4y5QL6ZAxE wa+xgc1U+VLmX5oHecoCVRhBgkpHXJFAntvIGaWofjSuEtJaxJ9oGln+e+9LAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUKZo1zgaDC7zj2Z2lPLRPlPTQktUwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC8zMTMyMzQyZTM0 MzIyZTMyMzEzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMzMzkzOTM0MzYzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAnwq1DANBgkqhkiG9w0BAQsFAAOCAQEAibLcoyVrnAX+jdKOFv+l cqK3ToGhPmdR6gwUWIFqYE0+JyNtnUbbov290avlr+SGNSFrQ0JcLKtDpTcmeMed waxq9iTzYCpQRLF94nhL4A29y0+4eKu54K3QBD5NVuHOLGvCvbrnJTRKuCzLQp+R Y5qYDsQ9Tpo2ZCE05NPjbSRdVY17KgVKzTU40hoKAto3siaAAnaiqT4BPbDyn0Tt nKKPYZqWxqckyR7tKXKEIngr75QXJAgLbMNgAIcjyId0eajaHLy3xNj8JyCZBI8/ ke1Nob56aPCLiMBsFr3/HW3t+a8N9x79va4DBZUy99mGKddO1C4gU99WINSNaZeA hA== -----END CERTIFICATE-----Generated at Thu Mar 26 14:40:27 2026 by rpki-client