$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3232302e302f32322d3234203d3e20333939343631.roa File: 3132342e34322e3232302e302f32322d3234203d3e20333939343631.roa (raw, json) Hash identifier: 1v21NFMwf2CmsK//N2/8dG4J9unP3oQn6NWG6UMifVw= Subject key identifier: B8:FD:15:0B:09:80:4D:62:C9:3E:D7:C8:92:5A:F6:D7:37:3E:CE:13 Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 01A7EA6070DF5F9A437A8C7DD2CD0752FBAECAD9 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3232302e302f32322d3234203d3e20333939343631.roa Signing time: Wed 25 Mar 2026 10:34:42 +0000 ROA not before: Wed 25 Mar 2026 10:29:42 +0000 ROA not after: Wed 24 Mar 2027 10:34:42 +0000 asID: 399461 IP address blocks: 124.42.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a7:ea:60:70:df:5f:9a:43:7a:8c:7d:d2:cd:07:52:fb:ae:ca:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Mar 25 10:29:42 2026 GMT Not After : Mar 24 10:34:42 2027 GMT Subject: CN=B8FD150B09804D62C93ED7C8925AF6D7373ECE13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d5:55:dc:8e:3d:cd:4a:c6:a8:52:18:f0:9a: d6:82:14:51:4d:da:55:44:95:7d:c5:c8:26:84:54: be:f6:58:5f:6f:5c:5a:d2:24:67:57:1a:4e:cc:08: 7e:17:c5:54:09:ac:32:d1:0e:11:fc:3a:c1:29:53: 8b:46:84:05:6b:59:4c:cf:be:e9:ff:23:71:24:1e: 91:90:41:a7:cf:9b:53:7c:fa:15:6d:83:41:de:9d: fc:9d:f8:0b:1a:b8:8c:60:eb:75:50:0b:82:25:c9: d4:b2:a6:c4:15:bf:86:4d:e7:15:46:57:32:35:74: 7f:f0:ce:9a:02:fc:f5:86:a7:f8:6a:be:e9:b7:3b: b6:25:43:2b:29:f1:8e:a8:e6:82:23:94:c7:67:4d: 6f:1a:d9:99:54:81:d3:97:d7:a1:05:d6:72:f3:c9: 9f:03:e9:84:c7:98:bf:7a:3a:c6:00:7f:47:a4:d2: b7:f4:d2:9b:7f:13:08:2a:4e:0a:d1:f9:9f:ae:c9: 53:ba:66:37:f8:81:1c:63:e4:f0:0e:8c:2b:dd:43: de:f8:99:e1:ae:6c:5b:5b:21:c5:09:36:01:e3:e7: 0d:38:44:e9:49:80:bf:6f:1d:f8:32:64:1a:10:a8: da:23:c2:19:a6:09:b8:16:b6:62:3a:46:27:8d:9f: 3c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FD:15:0B:09:80:4D:62:C9:3E:D7:C8:92:5A:F6:D7:37:3E:CE:13 X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3232302e302f32322d3234203d3e20333939343631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.42.220.0/22 Signature Algorithm: sha256WithRSAEncryption 85:d3:a4:b1:c3:e3:5f:37:23:f2:8d:5d:ff:47:c8:a2:0a:d8: 77:9b:c0:25:a2:ec:d4:ae:a0:51:30:29:7a:ed:2c:c7:be:3e: f1:a9:af:e4:9c:5a:12:89:8e:44:7a:3e:bf:96:35:e7:04:8e: ab:4c:75:42:f9:f4:f5:60:aa:7d:19:d2:44:3d:06:32:b2:68: 11:81:6c:0c:3a:10:6e:4b:2c:89:30:fc:39:79:a9:2b:a9:5f: 52:10:3d:72:7e:d4:f5:d8:2d:b2:8e:a0:96:8e:f2:26:4c:d5: e7:fc:1d:84:37:bc:e1:1b:fe:3b:e5:e4:ab:84:6b:11:13:96: da:59:af:b1:c5:ed:5c:2d:06:38:62:41:01:fa:38:d1:c5:3a: eb:f8:9d:10:51:c4:52:dd:89:8f:fe:e2:97:30:ff:9b:f2:3d: 21:d8:50:1a:07:4c:db:57:86:39:59:32:8e:99:d1:2d:14:1b: 9d:c9:37:4a:ce:c2:24:34:22:ce:ed:66:fc:cc:6f:b2:83:c1: 74:a4:98:65:3b:9a:ce:93:d9:81:ce:65:32:4f:28:63:8c:b5: 49:9d:73:71:b6:95:a8:b7:b7:c8:a7:39:e5:b8:1c:61:c7:ab: c8:5a:f8:c1:68:c1:75:b9:89:72:4f:69:31:ca:0d:13:ff:cf: 8c:09:d5:ec -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUAafqYHDfX5pDeox90s0HUvuuytkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjAzMjUxMDI5NDJaFw0yNzAzMjQxMDM0NDJaMDMxMTAvBgNV BAMTKEI4RkQxNTBCMDk4MDRENjJDOTNFRDdDODkyNUFGNkQ3MzczRUNFMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC31VXcjj3NSsaoUhjwmtaCFFFN 2lVElX3FyCaEVL72WF9vXFrSJGdXGk7MCH4XxVQJrDLRDhH8OsEpU4tGhAVrWUzP vun/I3EkHpGQQafPm1N8+hVtg0Henfyd+AsauIxg63VQC4IlydSypsQVv4ZN5xVG VzI1dH/wzpoC/PWGp/hqvum3O7YlQysp8Y6o5oIjlMdnTW8a2ZlUgdOX16EF1nLz yZ8D6YTHmL96OsYAf0ek0rf00pt/EwgqTgrR+Z+uyVO6Zjf4gRxj5PAOjCvdQ974 meGubFtbIcUJNgHj5w04ROlJgL9vHfgyZBoQqNojwhmmCbgWtmI6RieNnzwVAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUuP0VCwmATWLJPtfIklr21zc+zhMwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC8zMTMyMzQyZTM0 MzIyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMzMzkzOTM0MzYzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAnwq3DANBgkqhkiG9w0BAQsFAAOCAQEAhdOkscPjXzcj8o1d/0fI ogrYd5vAJaLs1K6gUTApeu0sx74+8amv5JxaEomORHo+v5Y15wSOq0x1Qvn09WCq fRnSRD0GMrJoEYFsDDoQbkssiTD8OXmpK6lfUhA9cn7U9dgtso6glo7yJkzV5/wd hDe84Rv+O+Xkq4RrEROW2lmvscXtXC0GOGJBAfo40cU66/idEFHEUt2Jj/7ilzD/ m/I9IdhQGgdM21eGOVkyjpnRLRQbnck3Ss7CJDQizu1m/MxvsoPBdKSYZTuazpPZ gc5lMk8oY4y1SZ1zcbaVqLe3yKc55bgcYceryFr4wWjBdbmJck9pMcoNE//PjAnV 7A== -----END CERTIFICATE-----Generated at Thu Mar 26 07:47:36 2026 by rpki-client