$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3132302e302f32342d3234203d3e203338333831.roa File: 3132322e3131392e3132302e302f32342d3234203d3e203338333831.roa (raw, json) Hash identifier: NZyLQ2yh0pmI4CNmZm40zeUODfyuXSyyS+Cn1iq7Rkc= Subject key identifier: CD:63:90:2E:7C:BD:E0:2E:8C:F0:DD:8C:55:4B:93:52:AA:9F:28:86 Certificate issuer: /CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D Certificate serial: 4E93D2ED8CFE872B58A1C25941C822BB65FC328D Authority key identifier: 51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3132302e302f32342d3234203d3e203338333831.roa Signing time: Wed 22 Apr 2026 07:54:58 +0000 ROA not before: Wed 22 Apr 2026 07:49:58 +0000 ROA not after: Wed 21 Apr 2027 07:54:58 +0000 asID: 38381 IP address blocks: 122.119.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:93:d2:ed:8c:fe:87:2b:58:a1:c2:59:41:c8:22:bb:65:fc:32:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D Validity Not Before: Apr 22 07:49:58 2026 GMT Not After : Apr 21 07:54:58 2027 GMT Subject: CN=CD63902E7CBDE02E8CF0DD8C554B9352AA9F2886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a7:ff:38:b7:53:7f:47:34:2b:58:29:f3:2b: 20:b9:7b:d0:38:22:78:82:85:d8:01:28:ec:90:69: b7:7e:28:88:53:e9:39:b3:90:05:92:60:02:c4:78: 9c:c1:73:65:9e:af:d1:af:c8:97:fe:f7:f1:70:b2: d1:b5:17:a5:c3:ac:7f:de:a5:60:8f:32:2e:8f:6a: d7:8f:8a:e0:34:8b:0b:0c:91:e0:9a:bc:1b:e5:9a: 07:48:9c:b6:59:b4:11:d0:13:6d:6b:77:c1:b8:e0: d9:1e:d1:34:06:77:94:de:cc:29:37:c1:02:80:3b: 74:a6:b5:d6:04:ce:dd:84:5b:9d:fa:6e:a7:f5:65: 49:8f:8d:11:4c:57:86:8d:71:eb:38:80:1e:0b:2d: f8:b6:81:f8:89:74:01:4b:ae:eb:04:be:d0:38:f4: c8:ab:27:ec:48:be:ad:9b:40:4e:c0:63:f7:c9:7a: 8b:55:c7:62:aa:d1:17:86:42:8f:b6:88:de:5b:df: 18:c2:60:55:d5:81:dd:0b:9a:9b:9c:64:d1:23:7c: 1f:e2:ee:6c:08:bd:9b:23:82:b1:69:2e:17:62:84: 46:4d:52:3a:fa:cc:31:0a:83:98:1f:39:e7:1e:87: f1:c8:77:5e:8f:55:f8:9b:ea:f0:ee:31:6b:80:1b: e4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:63:90:2E:7C:BD:E0:2E:8C:F0:DD:8C:55:4B:93:52:AA:9F:28:86 X509v3 Authority Key Identifier: keyid:51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3132302e302f32342d3234203d3e203338333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.119.120.0/24 Signature Algorithm: sha256WithRSAEncryption 72:48:01:8b:7e:d9:74:d3:0b:de:1c:de:a2:29:21:44:cb:38: 23:25:82:f9:c5:ec:70:f2:3d:a6:3e:1c:2d:bd:05:e3:cf:ee: 31:a7:a0:e7:3d:29:1a:27:7b:8f:56:03:ac:fe:d6:90:67:87: 68:8f:00:bb:40:d3:a9:6c:ef:0e:5c:3e:fb:d3:5e:bd:ce:1d: ee:3f:a5:28:36:15:cb:d3:35:97:c6:c7:a6:e4:19:b8:54:27: ac:fa:1f:4c:21:2f:18:64:3b:a7:d1:75:dd:38:43:44:f6:3e: d7:d8:f8:10:cf:6a:f5:ed:df:2d:31:2a:ad:7a:47:af:d9:16: 2c:fe:c7:62:36:0e:53:7e:30:78:4a:4f:11:39:65:c3:b4:04: 1d:fe:c9:3f:89:0c:d8:82:a1:97:64:b4:ba:ca:fc:d1:5d:d4: 96:b2:a8:d4:c1:2d:45:c1:58:f5:5f:7c:be:b5:91:19:e3:fb: 50:a4:82:a5:c7:37:e5:4b:d1:2e:89:c8:12:92:68:f5:28:53: 61:6e:1b:c1:51:ee:25:12:bd:6a:d3:46:ee:25:8a:3b:0a:dd: bf:13:bc:47:ed:46:3b:64:d4:6a:a2:60:59:cd:06:a6:11:65: 20:14:d2:36:39:cd:bf:cd:3c:0a:79:aa:6e:a2:c6:f7:82:7c: 91:e7:6a:cd -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUTpPS7Yz+hytYocJZQcgiu2X8Mo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTExNTk2NkZCNjJBMkJEQjRENjVEOTc0REYwREQ5QjAy MDgxMUQ4RDAeFw0yNjA0MjIwNzQ5NThaFw0yNzA0MjEwNzU0NThaMDMxMTAvBgNV BAMTKENENjM5MDJFN0NCREUwMkU4Q0YwREQ4QzU1NEI5MzUyQUE5RjI4ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTp/84t1N/RzQrWCnzKyC5e9A4 IniChdgBKOyQabd+KIhT6TmzkAWSYALEeJzBc2Wer9GvyJf+9/FwstG1F6XDrH/e pWCPMi6PatePiuA0iwsMkeCavBvlmgdInLZZtBHQE21rd8G44Nke0TQGd5TezCk3 wQKAO3SmtdYEzt2EW536bqf1ZUmPjRFMV4aNces4gB4LLfi2gfiJdAFLrusEvtA4 9MirJ+xIvq2bQE7AY/fJeotVx2Kq0ReGQo+2iN5b3xjCYFXVgd0LmpucZNEjfB/i 7mwIvZsjgrFpLhdihEZNUjr6zDEKg5gfOeceh/HId16PVfib6vDuMWuAG+SVAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUzWOQLny94C6M8N2MVUuTUqqfKIYwHwYDVR0j BBgwFoAUURWWb7YqK9tNZdl03w3ZsCCBHY0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkwMzg0MTMyMjI3MDcyMS8wLzUxMTU5NjZGQjYyQTJCREI0RDY1RDk3NERGMERE OUIwMjA4MTFEOEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTExNTk2NkZCNjJBMkJEQjRENjVEOTc0REYwREQ5QjAyMDgxMUQ4RC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTU5MDM4NDEzMjIyNzA3MjEvMC8zMTMyMzIyZTMx MzEzOTJlMzEzMjMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzODMzMzgzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAHp3eDANBgkqhkiG9w0BAQsFAAOCAQEAckgBi37ZdNML3hzeoikh RMs4IyWC+cXscPI9pj4cLb0F48/uMaeg5z0pGid7j1YDrP7WkGeHaI8Au0DTqWzv Dlw++9Nevc4d7j+lKDYVy9M1l8bHpuQZuFQnrPofTCEvGGQ7p9F13ThDRPY+19j4 EM9q9e3fLTEqrXpHr9kWLP7HYjYOU34weEpPETllw7QEHf7JP4kM2IKhl2S0usr8 0V3UlrKo1MEtRcFY9V98vrWRGeP7UKSCpcc35UvRLonIEpJo9ShTYW4bwVHuJRK9 atNG7iWKOwrdvxO8R+1GO2TUaqJgWc0GphFlIBTSNjnNv808CnmqbqLG94J8kedq zQ== -----END CERTIFICATE-----Generated at Wed May 13 21:31:37 2026 by rpki-client