$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132312e35382e3135362e302f32332d3233203d3e2034383437.roa File: 3132312e35382e3135362e302f32332d3233203d3e2034383437.roa (raw, json) Hash identifier: MvY4WxFDwdMuwIr4Kn5Z26RPTwdXaQ2iEnSeGu6UkAM= Subject key identifier: 70:8E:D1:0C:62:C6:FC:28:71:E7:FE:F3:A1:3D:54:45:0F:4F:39:5E Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Certificate serial: 111E2705C187E8DB78DAEA64AC6CAEC0279BC0E0 Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132312e35382e3135362e302f32332d3233203d3e2034383437.roa Signing time: Tue 12 May 2026 02:51:56 +0000 ROA not before: Tue 12 May 2026 02:46:56 +0000 ROA not after: Tue 11 May 2027 02:51:56 +0000 asID: 4847 IP address blocks: 121.58.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:1e:27:05:c1:87:e8:db:78:da:ea:64:ac:6c:ae:c0:27:9b:c0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Validity Not Before: May 12 02:46:56 2026 GMT Not After : May 11 02:51:56 2027 GMT Subject: CN=708ED10C62C6FC2871E7FEF3A13D54450F4F395E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3c:bd:ee:62:4b:aa:e4:b8:19:95:fa:24:f8: 2d:27:92:a0:a6:fe:f9:2d:10:8d:06:70:57:c2:41: 28:e3:27:26:99:d2:1b:06:3e:d7:0f:f5:21:53:3a: 01:97:92:5a:b8:22:b1:48:15:5d:c3:1a:a0:b6:17: 89:70:6e:d8:5b:a3:8b:f4:a9:91:c4:43:ba:9a:fb: fd:76:cd:c3:1d:9c:3c:ed:37:31:c6:00:17:2b:00: 22:58:30:e6:55:2a:82:50:38:d7:af:d1:50:1a:0b: f6:bd:24:62:db:5c:e7:f7:9e:78:16:55:2e:56:23: 90:17:83:2b:03:71:07:ba:96:5d:45:7a:29:81:78: f3:5c:00:5d:0c:25:5a:47:34:82:ff:80:d7:3c:44: ee:b6:26:36:69:a6:ba:5f:4c:c5:e3:1f:3d:9c:f6: 1f:13:8b:2a:d7:e5:92:5b:cd:09:c6:f8:ee:79:36: fd:ff:85:be:63:7d:6e:94:2c:18:88:db:76:ea:34: 0b:04:bc:82:a6:14:4e:5a:f1:13:79:84:a7:9d:4a: 44:c6:47:f5:ab:06:6f:5c:bf:8d:47:04:bc:b7:59: a9:39:21:94:1b:92:9e:62:31:3b:02:c5:d9:c8:56: 5f:60:da:a7:cd:b4:a8:00:21:f3:83:52:59:05:dd: d8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8E:D1:0C:62:C6:FC:28:71:E7:FE:F3:A1:3D:54:45:0F:4F:39:5E X509v3 Authority Key Identifier: keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132312e35382e3135362e302f32332d3233203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.58.156.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:3d:64:cb:62:9b:3b:c3:f7:99:f1:96:fb:e8:3a:5e:30:87: 95:30:96:8a:2a:7e:59:bb:45:f3:c4:70:91:fb:a6:cb:56:3d: 0d:4f:34:24:e0:ac:b5:78:3a:83:3f:97:e2:89:52:fa:ef:23: 97:07:3a:85:94:9a:d8:3b:2b:0d:a2:c2:76:57:6f:50:63:c7: dd:d4:cf:52:20:42:bd:03:f6:66:2f:e1:70:23:61:92:76:8a: fa:aa:82:69:cc:cc:17:cc:6f:c8:7d:05:49:4c:54:19:f8:23: b6:22:36:a8:66:e0:ad:79:c0:88:ff:f4:0b:e8:13:6d:02:6a: 00:ab:de:80:c5:d7:68:b1:24:30:17:4f:b1:96:f9:46:b8:e5: 84:ee:8a:84:81:1c:16:2f:23:1a:60:14:ad:dd:ad:36:a2:73: d5:6b:af:7b:c7:36:96:da:5d:48:ae:23:f5:f5:a5:31:9d:5c: ab:0b:6f:6d:3d:51:ed:82:44:c7:24:ed:87:a3:19:af:c6:f8: 29:8c:23:06:f5:7f:e6:78:95:7e:8a:0d:bb:18:9b:36:df:33: fc:e8:ef:6b:8b:b2:9c:c5:5f:38:00:82:60:d8:9a:50:98:8b: 74:0c:74:98:40:df:0f:45:77:73:e0:bf:a7:ea:72:a5:09:bd: 8c:2b:8a:37 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUER4nBcGH6Nt42upkrGyuwCebwOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw NDk1QzhDNDAeFw0yNjA1MTIwMjQ2NTZaFw0yNzA1MTEwMjUxNTZaMDMxMTAvBgNV BAMTKDcwOEVEMTBDNjJDNkZDMjg3MUU3RkVGM0ExM0Q1NDQ1MEY0RjM5NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPPL3uYkuq5LgZlfok+C0nkqCm /vktEI0GcFfCQSjjJyaZ0hsGPtcP9SFTOgGXklq4IrFIFV3DGqC2F4lwbthbo4v0 qZHEQ7qa+/12zcMdnDztNzHGABcrACJYMOZVKoJQONev0VAaC/a9JGLbXOf3nngW VS5WI5AXgysDcQe6ll1FeimBePNcAF0MJVpHNIL/gNc8RO62JjZpprpfTMXjHz2c 9h8TiyrX5ZJbzQnG+O55Nv3/hb5jfW6ULBiI23bqNAsEvIKmFE5a8RN5hKedSkTG R/WrBm9cv41HBLy3Wak5IZQbkp5iMTsCxdnIVl9g2qfNtKgAIfODUlkF3dhlAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUcI7RDGLG/Chx5/7zoT1URQ9POV4wHwYDVR0j BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4 NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1ODkwOTg1MjI2ODYyNTk1LzAvMzEzMjMxMmUzNTM4 MmUzMTM1MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAXk6nDANBgkqhkiG9w0BAQsFAAOCAQEAPj1ky2KbO8P3mfGW++g6XjCHlTCW iip+WbtF88Rwkfumy1Y9DU80JOCstXg6gz+X4olS+u8jlwc6hZSa2DsrDaLCdldv UGPH3dTPUiBCvQP2Zi/hcCNhknaK+qqCaczMF8xvyH0FSUxUGfgjtiI2qGbgrXnA iP/0C+gTbQJqAKvegMXXaLEkMBdPsZb5RrjlhO6KhIEcFi8jGmAUrd2tNqJz1Wuv e8c2ltpdSK4j9fWlMZ1cqwtvbT1R7YJExyTth6MZr8b4KYwjBvV/5niVfooNuxib Nt8z/Ojva4uynMVfOACCYNiaUJiLdAx0mEDfD0V3c+C/p+pypQm9jCuKNw== -----END CERTIFICATE-----Generated at Wed May 13 13:34:20 2026 by rpki-client