$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132312e35382e3135362e302f32332d3233203d3e2034383038.roa File: 3132312e35382e3135362e302f32332d3233203d3e2034383038.roa (raw, json) Hash identifier: Om9u0ighLFrzOioyc9VY4PTogZ6n9JLV7mQxE7Rmsp4= Subject key identifier: 59:91:8B:06:31:68:88:52:45:48:28:B9:56:2E:CA:A2:B3:7D:33:FB Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Certificate serial: 2EB7627AC91CDABEE7E5F5A0D2C4BDC06DF8F661 Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132312e35382e3135362e302f32332d3233203d3e2034383038.roa Signing time: Tue 12 May 2026 02:51:56 +0000 ROA not before: Tue 12 May 2026 02:46:56 +0000 ROA not after: Tue 11 May 2027 02:51:56 +0000 asID: 4808 IP address blocks: 121.58.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:b7:62:7a:c9:1c:da:be:e7:e5:f5:a0:d2:c4:bd:c0:6d:f8:f6:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Validity Not Before: May 12 02:46:56 2026 GMT Not After : May 11 02:51:56 2027 GMT Subject: CN=59918B0631688852454828B9562ECAA2B37D33FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c1:d9:bd:6a:ef:76:28:88:5f:c8:4a:8c:f0: 6d:f2:96:1b:27:62:0e:5a:01:64:1d:28:05:56:ac: ec:91:9a:6a:aa:70:ff:60:f0:92:00:6e:5a:3f:c1: a2:06:21:dc:19:18:1f:e9:21:ac:99:49:ea:d6:e3: f9:70:6a:ab:1f:68:ea:16:9a:e0:66:eb:f2:94:c5: 9f:07:b9:44:c8:e8:cd:7a:5b:dc:99:36:72:12:ec: 42:5a:60:d5:c9:c0:28:ca:08:8f:c0:0a:e5:b5:b4: 6c:1c:a5:47:e3:e2:9b:72:8d:77:a2:d6:21:5e:45: 71:f6:3e:1d:b6:c9:a1:d9:41:b7:a2:90:26:24:06: c4:1b:60:23:b3:49:af:21:de:8a:cf:b1:fd:55:62: c5:13:4e:d3:4d:f6:6f:27:dc:15:3d:bc:9b:ac:be: ce:2f:ea:b1:eb:62:2a:ab:5d:7d:ef:2b:d9:1d:b3: 07:57:81:2a:d7:d6:55:8f:94:33:76:ae:27:f6:2a: da:0d:25:e5:4f:12:15:5d:85:15:06:ed:11:a7:b6: 2c:65:01:ff:6b:2b:74:00:f1:33:5b:0c:7e:82:06: 5d:f4:c4:22:d7:46:1c:a1:3a:8b:63:31:d0:3e:f4: a6:ff:6a:76:d2:86:53:ad:52:40:f3:48:21:2d:11: 14:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:91:8B:06:31:68:88:52:45:48:28:B9:56:2E:CA:A2:B3:7D:33:FB X509v3 Authority Key Identifier: keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132312e35382e3135362e302f32332d3233203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.58.156.0/23 Signature Algorithm: sha256WithRSAEncryption 62:10:a7:13:30:c9:50:ef:39:22:11:3d:a2:3c:d3:56:c7:33: dd:66:c5:23:07:2c:38:b2:23:f1:6b:9d:df:a3:3e:32:0f:4e: 93:45:5c:47:ed:ff:ee:75:43:2f:8a:59:43:29:73:51:e3:30: 36:cb:b2:3f:7d:17:eb:81:17:34:5e:b8:e0:d1:a6:5b:12:87: 1e:31:2a:94:0f:aa:5e:54:0e:39:2b:1a:f1:81:43:18:07:80: 73:f2:9a:81:47:fc:a9:04:91:a9:b3:00:74:bb:40:71:6f:a6: 3f:a3:d2:87:32:51:9b:c7:d0:3b:2c:5f:ba:98:75:7e:55:f6: 76:70:aa:71:e4:a0:29:6e:59:db:ce:62:e7:24:e9:3f:66:34: e7:d6:34:f6:79:5d:b5:b9:bc:5c:58:eb:f8:61:2b:71:84:f2: 39:62:0f:68:b6:3a:aa:9b:f9:f6:cd:01:30:f5:53:23:c2:38: b5:78:b0:b0:f8:5c:93:ce:95:be:90:79:40:98:f7:54:fe:99: de:5f:f5:1f:fe:c7:39:b2:f0:8c:0b:72:73:5a:43:c3:a5:16: bc:78:7b:18:9c:20:8d:26:86:4d:43:59:7c:d3:2f:97:5a:1b: 89:07:9e:64:7c:a8:c7:15:cb:40:57:02:d6:fa:21:b3:44:09: c5:d2:6d:3f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIULrdieskc2r7n5fWg0sS9wG349mEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw NDk1QzhDNDAeFw0yNjA1MTIwMjQ2NTZaFw0yNzA1MTEwMjUxNTZaMDMxMTAvBgNV BAMTKDU5OTE4QjA2MzE2ODg4NTI0NTQ4MjhCOTU2MkVDQUEyQjM3RDMzRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8wdm9au92KIhfyEqM8G3ylhsn Yg5aAWQdKAVWrOyRmmqqcP9g8JIAblo/waIGIdwZGB/pIayZSerW4/lwaqsfaOoW muBm6/KUxZ8HuUTI6M16W9yZNnIS7EJaYNXJwCjKCI/ACuW1tGwcpUfj4ptyjXei 1iFeRXH2Ph22yaHZQbeikCYkBsQbYCOzSa8h3orPsf1VYsUTTtNN9m8n3BU9vJus vs4v6rHrYiqrXX3vK9kdswdXgSrX1lWPlDN2rif2KtoNJeVPEhVdhRUG7RGntixl Af9rK3QA8TNbDH6CBl30xCLXRhyhOotjMdA+9Kb/anbShlOtUkDzSCEtERRbAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUWZGLBjFoiFJFSCi5Vi7KorN9M/swHwYDVR0j BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4 NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1ODkwOTg1MjI2ODYyNTk1LzAvMzEzMjMxMmUzNTM4 MmUzMTM1MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAXk6nDANBgkqhkiG9w0BAQsFAAOCAQEAYhCnEzDJUO85IhE9ojzTVscz3WbF IwcsOLIj8Wud36M+Mg9Ok0VcR+3/7nVDL4pZQylzUeMwNsuyP30X64EXNF644NGm WxKHHjEqlA+qXlQOOSsa8YFDGAeAc/KagUf8qQSRqbMAdLtAcW+mP6PShzJRm8fQ Oyxfuph1flX2dnCqceSgKW5Z285i5yTpP2Y059Y09nldtbm8XFjr+GErcYTyOWIP aLY6qpv59s0BMPVTI8I4tXiwsPhck86VvpB5QJj3VP6Z3l/1H/7HObLwjAtyc1pD w6UWvHh7GJwgjSaGTUNZfNMvl1obiQeeZHyoxxXLQFcC1vohs0QJxdJtPw== -----END CERTIFICATE-----Generated at Wed May 13 13:34:45 2026 by rpki-client