$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e34392e382e302f32312d3231203d3e2034383437.roa File: 3132322e34392e382e302f32312d3231203d3e2034383437.roa (raw, json) Hash identifier: /Ul3iAJllvZ84O9fvHBIRohq6YSY439OVYl6BOvJahc= Subject key identifier: 3E:6A:27:34:06:44:C6:C2:35:26:13:9A:F1:56:F6:93:42:BE:08:36 Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Certificate serial: 6B8E764DCF9A8FC7C9C7B8A60BA7F7501B05F895 Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e34392e382e302f32312d3231203d3e2034383437.roa Signing time: Mon 11 May 2026 02:44:48 +0000 ROA not before: Mon 11 May 2026 02:39:48 +0000 ROA not after: Mon 10 May 2027 02:44:48 +0000 asID: 4847 IP address blocks: 122.49.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:8e:76:4d:cf:9a:8f:c7:c9:c7:b8:a6:0b:a7:f7:50:1b:05:f8:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Validity Not Before: May 11 02:39:48 2026 GMT Not After : May 10 02:44:48 2027 GMT Subject: CN=3E6A27340644C6C23526139AF156F69342BE0836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a0:32:6e:07:b0:33:12:4b:74:da:d0:5b:fd: 3c:1e:bc:1c:ec:a1:fc:51:72:6f:c4:0c:d1:5f:d5: cf:aa:55:29:15:b9:36:97:a0:54:ce:e6:9c:cc:1c: e6:eb:5e:6b:dd:0e:07:c7:68:ea:8a:b9:33:90:65: 4b:d7:78:c4:40:1e:63:cf:a1:dd:3a:4e:d6:11:be: 34:79:80:00:d2:7f:99:a8:96:dd:a2:a8:88:d1:d7: 7a:1f:29:69:04:61:fb:d9:90:7d:af:9a:f7:58:d4: 6e:1f:5d:d0:d3:3d:7f:15:31:0c:d2:4a:b5:7f:1c: fa:ef:fb:70:61:84:58:1f:04:c8:a2:46:d5:0b:ad: 57:fb:75:3d:48:55:45:b3:20:49:29:c2:e8:aa:85: 56:c4:2f:0e:98:c7:b3:b5:ce:7a:8a:d9:fb:3f:a4: 1d:65:fb:c2:38:d0:40:93:74:b2:2c:d9:4c:58:9d: ce:f2:bd:54:71:3c:93:d8:30:da:8c:55:82:03:74: 9e:7f:79:67:03:6d:e8:90:3e:56:02:59:c4:97:bd: ab:c9:ee:4a:16:ba:f7:2a:26:5f:4d:47:d9:df:fa: 2c:47:b6:bc:96:c1:84:93:29:b6:5a:c1:a5:3a:62: ac:04:58:23:63:d8:aa:fa:ef:66:46:83:e0:25:0f: ad:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6A:27:34:06:44:C6:C2:35:26:13:9A:F1:56:F6:93:42:BE:08:36 X509v3 Authority Key Identifier: keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/3132322e34392e382e302f32312d3231203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.49.8.0/21 Signature Algorithm: sha256WithRSAEncryption 32:64:01:65:23:5e:69:c5:42:aa:7d:3a:88:16:fe:d1:47:ff: e3:94:a4:c6:64:9e:b2:13:80:2a:c2:60:94:63:71:16:75:46: 41:ea:36:78:c2:46:d8:91:ae:e8:48:5a:36:6d:80:08:88:da: a5:4e:55:62:98:fe:c9:f3:d5:91:04:78:5c:4c:68:20:95:fb: 2b:6b:fd:03:78:1e:ee:59:9b:c3:53:3c:17:2f:93:84:0b:23: fe:6e:21:65:f9:a3:01:c9:56:09:5f:0b:f6:8c:58:99:6f:ac: 69:c2:2d:51:4f:08:b3:df:5d:27:92:5e:2a:c7:94:a3:81:34: 55:a2:85:b7:1b:d7:26:f4:e7:da:01:6b:35:53:1d:ef:38:5c: ef:24:b8:11:b0:84:bf:0b:91:ca:dc:44:43:d7:3e:de:5d:95: c2:7a:f0:f1:b1:32:96:88:33:f6:e1:ba:0f:62:e2:40:33:5c: cc:37:36:16:cf:51:a5:63:51:2f:5c:c1:11:2b:82:58:4d:73: 7e:6a:ab:e2:2f:fd:5b:eb:8b:e4:fa:57:a8:b2:ca:38:50:a4: 29:7b:af:a2:98:d7:98:60:67:fb:0a:49:db:ef:be:f4:14:96: be:ed:fe:45:69:10:72:2f:77:1c:c6:68:db:21:c1:63:00:4b: 97:6d:3a:d8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUa452Tc+aj8fJx7imC6f3UBsF+JUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw NDk1QzhDNDAeFw0yNjA1MTEwMjM5NDhaFw0yNzA1MTAwMjQ0NDhaMDMxMTAvBgNV BAMTKDNFNkEyNzM0MDY0NEM2QzIzNTI2MTM5QUYxNTZGNjkzNDJCRTA4MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfoDJuB7AzEkt02tBb/TwevBzs ofxRcm/EDNFf1c+qVSkVuTaXoFTO5pzMHObrXmvdDgfHaOqKuTOQZUvXeMRAHmPP od06TtYRvjR5gADSf5molt2iqIjR13ofKWkEYfvZkH2vmvdY1G4fXdDTPX8VMQzS SrV/HPrv+3BhhFgfBMiiRtULrVf7dT1IVUWzIEkpwuiqhVbELw6Yx7O1znqK2fs/ pB1l+8I40ECTdLIs2UxYnc7yvVRxPJPYMNqMVYIDdJ5/eWcDbeiQPlYCWcSXvavJ 7koWuvcqJl9NR9nf+ixHtryWwYSTKbZawaU6YqwEWCNj2Kr672ZGg+AlD63LAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUPmonNAZExsI1JhOa8Vb2k0K+CDYwHwYDVR0j BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4 NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1ODkwOTg1MjI2ODYyNTk1LzAvMzEzMjMyMmUzNDM5 MmUzODJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDM0MzgzNDM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD ejEIMA0GCSqGSIb3DQEBCwUAA4IBAQAyZAFlI15pxUKqfTqIFv7RR//jlKTGZJ6y E4AqwmCUY3EWdUZB6jZ4wkbYka7oSFo2bYAIiNqlTlVimP7J89WRBHhcTGgglfsr a/0DeB7uWZvDUzwXL5OECyP+biFl+aMByVYJXwv2jFiZb6xpwi1RTwiz310nkl4q x5SjgTRVooW3G9cm9OfaAWs1Ux3vOFzvJLgRsIS/C5HK3ERD1z7eXZXCevDxsTKW iDP24boPYuJAM1zMNzYWz1GlY1EvXMERK4JYTXN+aqviL/1b64vk+leosso4UKQp e6+imNeYYGf7Cknb7770FJa+7f5FaRByL3ccxmjbIcFjAEuXbTrY -----END CERTIFICATE-----Generated at Wed May 13 13:03:47 2026 by rpki-client