$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e3230302e3132302e302f32322d3232203d3e2034383038.roa File: 3132322e3230302e3132302e302f32322d3232203d3e2034383038.roa (raw, json) Hash identifier: iKR1rdvDYfyioiEVq/Xzo+0N3gW5GdpueicpnidBZdY= Subject key identifier: C4:00:2E:C3:69:04:C1:6C:65:AF:D2:6F:CF:7F:A9:66:4E:F6:59:1C Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Certificate serial: 19CCC6213117AEA804023F908A4E42504E62EEE4 Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e3230302e3132302e302f32322d3232203d3e2034383038.roa Signing time: Tue 12 May 2026 02:51:55 +0000 ROA not before: Tue 12 May 2026 02:46:55 +0000 ROA not after: Tue 11 May 2027 02:51:55 +0000 asID: 4808 IP address blocks: 122.200.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:cc:c6:21:31:17:ae:a8:04:02:3f:90:8a:4e:42:50:4e:62:ee:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Validity Not Before: May 12 02:46:55 2026 GMT Not After : May 11 02:51:55 2027 GMT Subject: CN=C4002EC36904C16C65AFD26FCF7FA9664EF6591C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:42:66:a2:1f:c6:85:2f:4a:ff:a8:2a:67:11: 4c:5d:fb:5d:c7:ac:e8:5b:3d:71:e9:76:3c:d9:cd: 0d:c3:9c:89:0b:0b:a9:1f:b7:32:1f:24:e6:0b:48: a4:8b:a3:14:a8:e0:64:b9:a9:22:8b:94:8c:0d:58: 4d:5f:79:bd:b5:90:d6:63:a6:c7:14:eb:d5:92:fb: f2:2e:59:9b:5c:08:c7:92:67:16:5f:8b:0e:1f:70: 63:35:77:02:6c:58:d7:26:22:4c:03:7f:c3:20:90: 20:fc:82:ad:4a:2f:cf:3f:76:e0:c2:cf:df:ff:82: 5e:a9:4b:5c:04:ba:d0:5c:36:40:19:68:55:20:67: 5d:aa:b5:47:4c:04:12:fe:72:34:54:3c:33:e7:a5: d0:81:3a:7b:5e:02:e1:3f:b2:7c:e9:7b:9b:20:f7: d0:fe:c8:58:f9:18:5b:fc:89:0d:69:e6:13:73:77: 3b:32:d2:1f:af:d4:08:97:80:af:03:37:57:28:17: 3c:aa:ad:67:b1:72:9d:7b:18:40:56:f1:c0:88:f2: f8:4e:fd:d2:85:b6:b0:e3:50:52:0a:e2:4a:c3:bd: 35:2f:22:9c:91:9e:05:ed:bf:13:bc:f1:0c:14:a2: 40:d2:76:c1:55:c3:b3:3e:53:a4:0d:07:4d:12:32: 12:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:00:2E:C3:69:04:C1:6C:65:AF:D2:6F:CF:7F:A9:66:4E:F6:59:1C X509v3 Authority Key Identifier: keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e3230302e3132302e302f32322d3232203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.200.120.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:a9:52:07:a4:87:21:03:3f:68:d5:ed:d1:17:ad:22:43:29: 7c:42:fe:9e:7e:c1:7a:fd:e1:39:2c:1a:04:a6:dc:b5:29:da: d8:bb:d2:b0:fc:e1:93:83:cd:60:ba:a5:ae:79:dd:59:6e:8a: 4e:b3:96:19:17:9f:61:68:da:f5:e0:9b:80:2b:3f:ee:1f:61: bd:2a:34:5c:98:0d:93:62:69:8e:63:39:b0:fc:8e:33:08:54: 4c:52:be:33:16:e7:d1:b9:20:13:93:14:3f:84:10:7e:a2:5a: d0:ee:6c:f8:59:79:96:7a:8a:39:86:ed:0c:c3:f6:f8:28:25: 77:42:b6:b1:19:d8:2f:60:12:01:c0:29:a9:24:ba:ab:c6:77: ae:98:6c:09:7f:a8:eb:10:9f:40:96:b7:5c:1a:48:59:ee:3a: 8c:7a:3d:29:43:58:99:46:59:f0:d5:6b:30:71:e8:72:98:a1: 94:3c:f2:32:72:ec:5b:7d:c0:d4:ff:bd:ae:1c:74:50:84:82: 82:db:cf:b6:44:eb:71:57:3f:83:e1:5e:cd:07:bc:bd:48:28: 1f:cc:4f:bb:f4:a9:e9:01:e6:6c:18:d2:9b:13:f1:7e:e2:48: 14:9d:f8:58:44:0f:f8:c3:bc:2a:e1:f1:8c:ea:23:47:34:4c: cf:8a:9c:6f -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUGczGITEXrqgEAj+Qik5CUE5i7uQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw NDk1QzhDNDAeFw0yNjA1MTIwMjQ2NTVaFw0yNzA1MTEwMjUxNTVaMDMxMTAvBgNV BAMTKEM0MDAyRUMzNjkwNEMxNkM2NUFGRDI2RkNGN0ZBOTY2NEVGNjU5MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1QmaiH8aFL0r/qCpnEUxd+13H rOhbPXHpdjzZzQ3DnIkLC6kftzIfJOYLSKSLoxSo4GS5qSKLlIwNWE1feb21kNZj pscU69WS+/IuWZtcCMeSZxZfiw4fcGM1dwJsWNcmIkwDf8MgkCD8gq1KL88/duDC z9//gl6pS1wEutBcNkAZaFUgZ12qtUdMBBL+cjRUPDPnpdCBOnteAuE/snzpe5sg 99D+yFj5GFv8iQ1p5hNzdzsy0h+v1AiXgK8DN1coFzyqrWexcp17GEBW8cCI8vhO /dKFtrDjUFIK4krDvTUvIpyRngXtvxO88QwUokDSdsFVw7M+U6QNB00SMhLBAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUxAAuw2kEwWxlr9Jvz3+pZk72WRwwHwYDVR0j BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4 NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTg5MDk4NTIyNjg2MjU5NS8wLzMxMzIzMjJlMzIz MDMwMmUzMTMyMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAnrIeDANBgkqhkiG9w0BAQsFAAOCAQEAXalSB6SHIQM/aNXt0RetIkMp fEL+nn7Bev3hOSwaBKbctSna2LvSsPzhk4PNYLqlrnndWW6KTrOWGRefYWja9eCb gCs/7h9hvSo0XJgNk2JpjmM5sPyOMwhUTFK+Mxbn0bkgE5MUP4QQfqJa0O5s+Fl5 lnqKOYbtDMP2+Cgld0K2sRnYL2ASAcApqSS6q8Z3rphsCX+o6xCfQJa3XBpIWe46 jHo9KUNYmUZZ8NVrMHHocpihlDzyMnLsW33A1P+9rhx0UISCgtvPtkTrcVc/g+Fe zQe8vUgoH8xPu/Sp6QHmbBjSmxPxfuJIFJ34WEQP+MO8KuHxjOojRzRMz4qcbw== -----END CERTIFICATE-----Generated at Wed May 13 13:02:27 2026 by rpki-client