$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3131312e302f32342d3234203d3e203338333831.roa File: 3132322e3131392e3131312e302f32342d3234203d3e203338333831.roa (raw, json) Hash identifier: l1ngdg958I9+LKIAEPiN2Upyxqhqz2OlbnTWp7AFCtE= Subject key identifier: 79:F3:99:40:2D:09:DD:61:69:13:4C:C9:60:79:B0:64:08:2C:2A:1D Certificate issuer: /CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D Certificate serial: 45FB58D8975A56C8F196A9E33DFCF69014A02852 Authority key identifier: 51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3131312e302f32342d3234203d3e203338333831.roa Signing time: Wed 22 Apr 2026 07:57:29 +0000 ROA not before: Wed 22 Apr 2026 07:52:29 +0000 ROA not after: Wed 21 Apr 2027 07:57:29 +0000 asID: 38381 IP address blocks: 122.119.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:fb:58:d8:97:5a:56:c8:f1:96:a9:e3:3d:fc:f6:90:14:a0:28:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D Validity Not Before: Apr 22 07:52:29 2026 GMT Not After : Apr 21 07:57:29 2027 GMT Subject: CN=79F399402D09DD6169134CC96079B064082C2A1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1e:7f:0e:47:72:b5:2f:68:a3:63:3e:26:ed: af:0a:7d:4f:31:3a:83:c1:2d:6a:b8:03:d0:a8:4e: c9:f2:b1:df:b1:6f:a9:e4:da:c5:16:7d:6d:01:36: c3:8e:ce:c1:0b:b1:50:99:4e:d3:ee:bb:ed:23:6f: 12:65:18:bd:55:ac:f6:7d:4d:8a:71:a4:a6:a9:56: 67:7f:46:ad:37:d2:4a:36:af:69:de:19:58:7a:4b: a5:c7:f4:a1:c0:57:a2:b8:b8:87:2b:ae:08:04:33: 35:07:9c:cb:02:09:c9:76:6f:4c:83:e8:f4:fa:27: a2:c7:7b:76:ae:1f:40:c5:51:28:64:9b:48:9d:20: 68:75:3d:cd:10:53:f9:38:cc:8b:56:03:87:96:24: 37:dc:66:bf:38:12:28:03:35:b9:04:d4:9b:7a:95: 44:9a:d3:46:1b:6e:ee:50:93:08:34:bc:ab:4e:1c: 6e:58:50:68:a9:f6:ae:ad:81:83:90:71:26:76:c1: 82:00:93:07:6e:fe:dd:84:1d:09:f1:35:e3:ab:34: 08:59:de:3d:ad:ac:52:af:5a:d9:65:25:58:53:8d: 65:20:3d:7f:54:2e:4f:a7:ff:de:ab:33:5e:cc:e9: b2:c7:20:c9:36:ef:c4:37:f7:b7:c1:0b:ea:e1:da: 07:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F3:99:40:2D:09:DD:61:69:13:4C:C9:60:79:B0:64:08:2C:2A:1D X509v3 Authority Key Identifier: keyid:51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3131312e302f32342d3234203d3e203338333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.119.111.0/24 Signature Algorithm: sha256WithRSAEncryption 04:54:36:97:f6:7c:9f:87:a1:2c:bc:85:eb:2c:74:0d:48:14: 9a:92:c4:5e:b2:c5:c8:f5:99:ca:49:42:12:23:e0:ad:fb:9e: cd:46:1e:9b:30:37:fd:ed:91:05:a3:57:a8:79:64:1e:b5:9c: 3a:48:71:8c:e1:05:7e:e7:9a:b0:8e:0b:df:fb:46:72:26:3b: 77:f0:51:fe:59:f7:7e:41:2d:aa:c1:b1:92:21:11:b2:9a:fa: 94:8a:8b:c4:b6:57:a5:54:19:ab:cf:92:14:d9:fd:93:4f:5d: a2:33:35:1b:3f:d7:c5:d5:ff:bc:6b:4e:4f:c1:3a:7f:0e:b0: c8:40:e5:c0:a2:9b:07:e7:8e:ee:09:74:f5:b5:ab:a7:0b:ac: 55:6a:c8:fc:22:bc:fe:6c:0f:28:83:c4:b9:e9:7b:57:48:7e: 76:b9:1b:ae:82:1f:82:0f:d4:86:63:d5:3e:55:61:64:fc:ba: f3:06:80:21:09:5b:ac:4a:f9:4b:f7:6b:53:e6:5d:34:75:5a: 5b:ac:73:d1:a3:58:0a:0f:06:d6:7b:16:b8:44:7b:57:ee:84: 65:b3:38:6b:7c:8c:f1:6f:03:46:3a:54:52:30:05:e7:87:04: 70:0c:e9:d0:13:47:8f:c1:d9:bc:95:ec:e1:55:60:d2:3b:d8: 5d:dc:a2:0f -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIURftY2JdaVsjxlqnjPfz2kBSgKFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTExNTk2NkZCNjJBMkJEQjRENjVEOTc0REYwREQ5QjAy MDgxMUQ4RDAeFw0yNjA0MjIwNzUyMjlaFw0yNzA0MjEwNzU3MjlaMDMxMTAvBgNV BAMTKDc5RjM5OTQwMkQwOURENjE2OTEzNENDOTYwNzlCMDY0MDgyQzJBMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Hn8OR3K1L2ijYz4m7a8KfU8x OoPBLWq4A9CoTsnysd+xb6nk2sUWfW0BNsOOzsELsVCZTtPuu+0jbxJlGL1VrPZ9 TYpxpKapVmd/Rq030ko2r2neGVh6S6XH9KHAV6K4uIcrrggEMzUHnMsCCcl2b0yD 6PT6J6LHe3auH0DFUShkm0idIGh1Pc0QU/k4zItWA4eWJDfcZr84EigDNbkE1Jt6 lUSa00Ybbu5Qkwg0vKtOHG5YUGip9q6tgYOQcSZ2wYIAkwdu/t2EHQnxNeOrNAhZ 3j2trFKvWtllJVhTjWUgPX9ULk+n/96rM17M6bLHIMk278Q397fBC+rh2gc3AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUefOZQC0J3WFpE0zJYHmwZAgsKh0wHwYDVR0j BBgwFoAUURWWb7YqK9tNZdl03w3ZsCCBHY0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkwMzg0MTMyMjI3MDcyMS8wLzUxMTU5NjZGQjYyQTJCREI0RDY1RDk3NERGMERE OUIwMjA4MTFEOEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTExNTk2NkZCNjJBMkJEQjRENjVEOTc0REYwREQ5QjAyMDgxMUQ4RC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTU5MDM4NDEzMjIyNzA3MjEvMC8zMTMyMzIyZTMx MzEzOTJlMzEzMTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzODMzMzgzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAHp3bzANBgkqhkiG9w0BAQsFAAOCAQEABFQ2l/Z8n4ehLLyF6yx0 DUgUmpLEXrLFyPWZyklCEiPgrfuezUYemzA3/e2RBaNXqHlkHrWcOkhxjOEFfuea sI4L3/tGciY7d/BR/ln3fkEtqsGxkiERspr6lIqLxLZXpVQZq8+SFNn9k09dojM1 Gz/XxdX/vGtOT8E6fw6wyEDlwKKbB+eO7gl09bWrpwusVWrI/CK8/mwPKIPEuel7 V0h+drkbroIfgg/UhmPVPlVhZPy68waAIQlbrEr5S/drU+ZdNHVaW6xz0aNYCg8G 1nsWuER7V+6EZbM4a3yM8W8DRjpUUjAF54cEcAzp0BNHj8HZvJXs4VVg0jvYXdyi Dw== -----END CERTIFICATE-----Generated at Wed May 13 21:31:34 2026 by rpki-client