$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3234302e302f32322d3234203d3e20333939343631.roa File: 3132342e34322e3234302e302f32322d3234203d3e20333939343631.roa (raw, json) Hash identifier: OxVdHdomXJiRpCRZjkFq94s6QwmgMOCBPenDibLk4vw= Subject key identifier: 34:F2:5A:2F:F2:1D:3D:F2:A9:01:82:8C:BE:78:FE:B3:BD:BB:53:EA Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 166898B6FD7178A5E8182F001B96F9F85E7B21D6 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3234302e302f32322d3234203d3e20333939343631.roa Signing time: Mon 13 Jul 2026 03:46:39 +0000 ROA not before: Mon 13 Jul 2026 03:41:39 +0000 ROA not after: Mon 12 Jul 2027 03:46:39 +0000 asID: 399461 IP address blocks: 124.42.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:68:98:b6:fd:71:78:a5:e8:18:2f:00:1b:96:f9:f8:5e:7b:21:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Jul 13 03:41:39 2026 GMT Not After : Jul 12 03:46:39 2027 GMT Subject: CN=34F25A2FF21D3DF2A901828CBE78FEB3BDBB53EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cc:1d:99:0a:96:40:2a:16:cb:a7:c8:d6:57: 8d:ad:2b:6c:14:be:03:07:6b:10:9f:ae:d6:0d:cb: b2:13:80:1e:39:f2:90:77:e6:e1:6e:c6:8c:04:09: 59:92:d9:17:c8:92:14:c6:f4:2f:4f:98:9c:b4:28: 19:1a:64:ec:d2:51:7d:bb:ed:57:7e:cc:78:a5:0e: 7c:a8:cb:23:f5:f3:28:97:28:11:06:ec:19:8c:2b: dd:84:86:66:5b:01:52:52:b6:5d:ed:b7:1d:72:d5: 82:69:d1:ad:7f:d9:e1:d7:05:52:7a:6b:ed:57:06: ec:b2:51:4c:8e:8e:51:9f:4a:cf:79:8b:bd:66:d9: d7:1d:31:57:2d:1d:37:27:c5:dd:3c:87:4f:a6:1c: 9e:06:62:29:98:4a:5d:c1:2a:1f:86:7b:7d:be:17: 55:1e:db:9b:a1:9a:37:df:d5:cf:bf:53:99:98:1a: f0:5d:6e:22:40:f3:e4:94:a7:df:43:b1:a6:b5:cd: 0c:0c:35:35:ad:5e:db:2d:68:02:32:2e:8e:a2:62: 16:ca:db:f4:84:0b:48:a8:fb:5c:04:b3:6c:a8:0b: 0a:df:5e:0d:d5:ef:18:6d:af:03:e4:ef:d9:df:8e: ef:66:c9:11:c1:6d:fb:bf:c4:20:8b:ec:e0:04:1b: 3c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F2:5A:2F:F2:1D:3D:F2:A9:01:82:8C:BE:78:FE:B3:BD:BB:53:EA X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3234302e302f32322d3234203d3e20333939343631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.42.240.0/22 Signature Algorithm: sha256WithRSAEncryption 25:44:99:df:cf:8e:4b:98:70:c3:b2:9e:f2:2f:dc:e8:fd:e8: f2:20:e2:27:c6:58:0b:a5:f6:de:6f:18:24:a1:cc:4e:ae:a3: 20:e2:7e:2c:4e:11:e0:6d:36:88:f2:32:77:48:5c:32:13:07: a5:e9:8b:58:80:6e:d9:8a:c6:4b:1e:b7:e1:f0:2f:ce:79:27: 54:54:34:5d:e3:95:d6:85:0c:d8:70:a5:9f:b5:5c:8d:76:8c: cb:e2:83:8a:d9:28:23:0a:23:60:13:97:02:9e:fd:b6:0e:f6: db:17:74:f8:b7:f4:a6:11:1d:e0:90:b6:84:d8:2e:25:0c:df: d8:42:07:d8:15:ae:b7:c9:e3:e3:64:1f:53:50:99:81:7f:ad: d5:42:dc:c0:15:e1:17:12:b8:ed:73:57:3a:39:eb:f3:67:df: 08:a3:37:d8:41:64:01:76:dd:fe:c8:1b:04:b2:d7:3d:b6:42: ac:24:27:4c:62:7c:53:4b:39:aa:57:5b:53:1d:a5:b1:d5:f4: 14:0c:c9:9e:f6:c7:de:c1:47:6a:c4:2b:8c:78:4a:13:0f:1d: 85:bd:b7:8c:7e:0a:46:38:92:b2:a8:99:08:99:91:86:87:bb: e1:72:22:62:2f:57:27:b1:5c:68:d6:52:c2:69:35:cd:8a:75: 30:e2:51:8a -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUFmiYtv1xeKXoGC8AG5b5+F57IdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA3MTMwMzQxMzlaFw0yNzA3MTIwMzQ2MzlaMDMxMTAvBgNV BAMTKDM0RjI1QTJGRjIxRDNERjJBOTAxODI4Q0JFNzhGRUIzQkRCQjUzRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDzB2ZCpZAKhbLp8jWV42tK2wU vgMHaxCfrtYNy7ITgB458pB35uFuxowECVmS2RfIkhTG9C9PmJy0KBkaZOzSUX27 7Vd+zHilDnyoyyP18yiXKBEG7BmMK92EhmZbAVJStl3ttx1y1YJp0a1/2eHXBVJ6 a+1XBuyyUUyOjlGfSs95i71m2dcdMVctHTcnxd08h0+mHJ4GYimYSl3BKh+Ge32+ F1Ue25uhmjff1c+/U5mYGvBdbiJA8+SUp99Dsaa1zQwMNTWtXtstaAIyLo6iYhbK 2/SEC0io+1wEs2yoCwrfXg3V7xhtrwPk79nfju9myRHBbfu/xCCL7OAEGzybAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUNPJaL/IdPfKpAYKMvnj+s727U+owHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC8zMTMyMzQyZTM0 MzIyZTMyMzQzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMzMzkzOTM0MzYzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAnwq8DANBgkqhkiG9w0BAQsFAAOCAQEAJUSZ38+OS5hww7Ke8i/c 6P3o8iDiJ8ZYC6X23m8YJKHMTq6jIOJ+LE4R4G02iPIyd0hcMhMHpemLWIBu2YrG Sx634fAvznknVFQ0XeOV1oUM2HCln7VcjXaMy+KDitkoIwojYBOXAp79tg722xd0 +Lf0phEd4JC2hNguJQzf2EIH2BWut8nj42QfU1CZgX+t1ULcwBXhFxK47XNXOjnr 82ffCKM32EFkAXbd/sgbBLLXPbZCrCQnTGJ8U0s5qldbUx2lsdX0FAzJnvbH3sFH asQrjHhKEw8dhb23jH4KRjiSsqiZCJmRhoe74XIiYi9XJ7FcaNZSwmk1zYp1MOJR ig== -----END CERTIFICATE-----Generated at Fri Jul 24 13:46:40 2026 by rpki-client