$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e31352e302f32342d3234203d3e203338333831.roa File: 3132322e3131392e31352e302f32342d3234203d3e203338333831.roa (raw, json) Hash identifier: aFuXFoddciD/Yb0zNwOaEtV2gChL5I89SXY8VTAEGCI= Subject key identifier: 2A:25:99:F7:B7:43:90:6A:5B:23:F1:2E:FF:0C:64:97:1B:62:BC:99 Certificate issuer: /CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D Certificate serial: 045164910DB99B8F3103AFF5EFB389674C92C75C Authority key identifier: 51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e31352e302f32342d3234203d3e203338333831.roa Signing time: Wed 22 Apr 2026 07:55:00 +0000 ROA not before: Wed 22 Apr 2026 07:50:00 +0000 ROA not after: Wed 21 Apr 2027 07:55:00 +0000 asID: 38381 IP address blocks: 122.119.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:51:64:91:0d:b9:9b:8f:31:03:af:f5:ef:b3:89:67:4c:92:c7:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D Validity Not Before: Apr 22 07:50:00 2026 GMT Not After : Apr 21 07:55:00 2027 GMT Subject: CN=2A2599F7B743906A5B23F12EFF0C64971B62BC99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d6:b9:49:73:c3:ee:95:40:4c:b8:aa:22:5d: 06:f9:fd:28:3f:06:37:f5:43:cc:fa:be:78:e6:2a: f7:3a:2f:66:c7:ca:6e:30:61:d6:fe:6c:bf:5c:e5: 25:49:ed:15:af:3f:24:80:5a:78:f1:35:5c:c0:5f: 9b:c9:dd:04:fc:fc:36:1a:a6:46:4c:67:92:dd:17: 91:75:cb:50:e5:1a:17:4c:59:ba:9a:fd:c0:4d:60: 41:45:c2:71:8b:f9:b1:92:8b:49:0c:6d:06:77:5d: 48:41:50:b4:14:35:67:43:3d:58:6f:0b:18:82:00: 3c:8c:fa:1b:9c:e4:f7:28:68:1e:f8:dc:69:26:81: ea:80:bf:7c:23:d4:5f:fe:18:cc:29:58:de:a3:9e: f4:ba:64:b6:87:f2:15:d9:b4:21:c6:f7:c6:7c:11: 4e:83:a1:ce:05:32:28:b6:ba:fe:ec:51:8d:4c:65: 37:c5:15:41:5b:84:cc:c5:35:b1:05:0f:0c:8e:83: dc:9f:eb:c6:bb:0b:a3:c7:4c:4e:99:c5:3e:5a:51: ab:c3:07:ab:bf:0d:e4:3b:db:4b:69:c4:d0:f3:38: 92:bc:1b:a0:cc:fd:bc:1a:c3:ca:c8:43:22:23:f1: 39:e9:f0:08:f0:c7:45:44:d4:9b:f0:5d:66:7e:77: 89:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:25:99:F7:B7:43:90:6A:5B:23:F1:2E:FF:0C:64:97:1B:62:BC:99 X509v3 Authority Key Identifier: keyid:51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e31352e302f32342d3234203d3e203338333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.119.15.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:e1:17:1d:77:05:f5:a1:ce:4b:46:b0:3d:39:9a:89:4f:ee: 1e:cf:fc:8d:99:ef:5c:73:96:a9:86:e3:79:55:ee:4e:7a:ef: 3e:90:d8:6d:1f:51:84:23:7e:18:85:23:26:6f:16:7c:c7:4c: 1f:b1:1d:84:7d:79:42:ec:e5:ed:d2:9f:f7:2b:c7:a9:d9:d1: 6c:02:52:07:1b:39:4c:26:0f:62:ae:2e:1a:5f:d1:a0:e3:04: f3:13:34:ca:d3:dc:de:f9:51:45:e1:2f:aa:67:b8:04:1d:b0: 59:54:e3:d4:b0:11:81:d4:88:28:23:0f:e5:e3:ea:27:be:f5: 9b:6b:75:a3:b7:3f:cd:ff:bb:02:d8:c1:f7:55:67:b6:b4:d5: 8d:b9:28:92:10:de:d6:25:c6:f6:90:1b:5e:32:25:75:de:59: 22:17:e5:e9:fc:60:48:f3:98:57:0b:2a:9a:92:a8:3b:66:bc: 9f:e2:1c:6a:71:ef:be:ce:19:fa:d2:9f:86:17:4b:dd:a9:d8: 09:23:1e:ce:26:8a:6b:1f:5c:2e:f7:57:c0:94:c5:b2:e9:c8: 5e:1e:e6:95:e3:c1:ca:86:9b:00:81:0e:23:78:cd:51:4a:15: 9e:6d:fe:df:79:00:9b:eb:41:bf:f4:0b:5a:d7:db:91:23:b2: 73:1c:5f:32 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUBFFkkQ25m48xA6/177OJZ0ySx1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTExNTk2NkZCNjJBMkJEQjRENjVEOTc0REYwREQ5QjAy MDgxMUQ4RDAeFw0yNjA0MjIwNzUwMDBaFw0yNzA0MjEwNzU1MDBaMDMxMTAvBgNV BAMTKDJBMjU5OUY3Qjc0MzkwNkE1QjIzRjEyRUZGMEM2NDk3MUI2MkJDOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu1rlJc8PulUBMuKoiXQb5/Sg/ Bjf1Q8z6vnjmKvc6L2bHym4wYdb+bL9c5SVJ7RWvPySAWnjxNVzAX5vJ3QT8/DYa pkZMZ5LdF5F1y1DlGhdMWbqa/cBNYEFFwnGL+bGSi0kMbQZ3XUhBULQUNWdDPVhv CxiCADyM+huc5PcoaB743GkmgeqAv3wj1F/+GMwpWN6jnvS6ZLaH8hXZtCHG98Z8 EU6Doc4FMii2uv7sUY1MZTfFFUFbhMzFNbEFDwyOg9yf68a7C6PHTE6ZxT5aUavD B6u/DeQ720tpxNDzOJK8G6DM/bwaw8rIQyIj8Tnp8Ajwx0VE1JvwXWZ+d4kzAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUKiWZ97dDkGpbI/Eu/wxklxtivJkwHwYDVR0j BBgwFoAUURWWb7YqK9tNZdl03w3ZsCCBHY0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkwMzg0MTMyMjI3MDcyMS8wLzUxMTU5NjZGQjYyQTJCREI0RDY1RDk3NERGMERE OUIwMjA4MTFEOEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTExNTk2NkZCNjJBMkJEQjRENjVEOTc0REYwREQ5QjAyMDgxMUQ4RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTkwMzg0MTMyMjI3MDcyMS8wLzMxMzIzMjJlMzEz MTM5MmUzMTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzODMzMzgzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHp3DzANBgkqhkiG9w0BAQsFAAOCAQEAfOEXHXcF9aHOS0awPTmaiU/u Hs/8jZnvXHOWqYbjeVXuTnrvPpDYbR9RhCN+GIUjJm8WfMdMH7EdhH15Quzl7dKf 9yvHqdnRbAJSBxs5TCYPYq4uGl/RoOME8xM0ytPc3vlRReEvqme4BB2wWVTj1LAR gdSIKCMP5ePqJ771m2t1o7c/zf+7AtjB91VntrTVjbkokhDe1iXG9pAbXjIldd5Z Ihfl6fxgSPOYVwsqmpKoO2a8n+IcanHvvs4Z+tKfhhdL3anYCSMeziaKax9cLvdX wJTFsunIXh7mlePByoabAIEOI3jNUUoVnm3+33kAm+tBv/QLWtfbkSOycxxfMg== -----END CERTIFICATE-----Generated at Wed May 13 21:31:37 2026 by rpki-client