$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e32332e302f32342d3234203d3e203338333831.roa File: 3132322e3131392e32332e302f32342d3234203d3e203338333831.roa (raw, json) Hash identifier: QIE0dbp+DE+XD+QdkxOfQ5azyE+NYWWhg4853LRasZc= Subject key identifier: 40:C4:08:3C:EE:FD:86:E3:60:F4:5C:EC:42:6E:09:78:16:D6:E2:B4 Certificate issuer: /CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D Certificate serial: 6DF12F296017F1C7D133EE74B849E1B04BCE2B34 Authority key identifier: 51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e32332e302f32342d3234203d3e203338333831.roa Signing time: Wed 22 Apr 2026 07:54:59 +0000 ROA not before: Wed 22 Apr 2026 07:49:59 +0000 ROA not after: Wed 21 Apr 2027 07:54:59 +0000 asID: 38381 IP address blocks: 122.119.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:f1:2f:29:60:17:f1:c7:d1:33:ee:74:b8:49:e1:b0:4b:ce:2b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D Validity Not Before: Apr 22 07:49:59 2026 GMT Not After : Apr 21 07:54:59 2027 GMT Subject: CN=40C4083CEEFD86E360F45CEC426E097816D6E2B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e8:af:8c:88:e3:81:ad:fb:45:b8:23:c9:34: c3:2e:ea:aa:09:45:1d:55:00:81:23:9c:17:50:b0: db:a6:05:29:91:55:fa:e1:29:5b:a0:f6:91:bf:18: a0:b0:d4:85:3d:11:f9:4c:9f:68:f1:c1:e7:4d:4d: f2:da:b7:d6:4f:8a:56:92:de:f7:bd:91:7a:a9:5a: 07:42:f2:91:af:8f:80:6e:ce:f5:ef:71:dd:56:25: d6:88:ba:1b:f7:85:71:c3:9e:cb:e7:a2:fb:16:d1: b2:de:bf:18:78:ab:49:df:d2:b7:e9:f1:bb:74:1c: bb:94:11:19:3b:47:5c:e1:5e:27:41:bf:0f:fe:11: 28:2a:03:fc:3f:13:8b:28:93:ff:e4:05:8f:27:58: 73:0b:b1:d8:2e:27:a5:02:47:c3:dc:80:9c:b3:92: 51:a2:e6:c2:fc:05:80:2e:47:7d:5b:4c:2f:12:d5: 32:50:85:8e:9c:9b:aa:9e:85:47:e1:c8:5c:d3:6d: 9f:fa:fb:d8:a7:87:0b:3f:23:e6:ff:0a:89:e9:9d: ab:95:64:fe:c2:f1:2e:b3:86:09:c6:27:73:89:05: fd:a9:a4:73:a2:ea:47:fd:a5:d8:a9:2a:a8:dc:3a: 29:50:10:5a:80:30:32:fb:db:a4:f3:ea:b5:18:13: 41:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C4:08:3C:EE:FD:86:E3:60:F4:5C:EC:42:6E:09:78:16:D6:E2:B4 X509v3 Authority Key Identifier: keyid:51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e32332e302f32342d3234203d3e203338333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.119.23.0/24 Signature Algorithm: sha256WithRSAEncryption a5:86:39:a2:d4:e5:8a:f5:04:87:95:79:03:58:33:5b:0d:92: 58:51:35:7c:3f:09:75:3b:86:e0:be:c4:dc:51:f4:9d:e6:d4: eb:3c:7f:2b:ec:4e:9e:71:93:c1:8f:84:7b:ef:8e:28:7d:e1: 40:d5:93:bf:9e:b9:5c:1a:e8:b2:f1:a3:67:0f:0a:ce:fd:41: 70:3e:17:09:67:0c:6f:17:25:8c:b2:21:fe:e8:e7:21:95:71: 79:ac:8c:eb:f9:0e:5b:b0:6a:64:ae:df:fb:b5:3f:bf:fe:05: 5b:f9:3e:57:41:91:83:46:d4:39:37:43:05:95:ae:a2:86:34: 59:3c:30:b8:11:66:0e:68:d7:bb:ab:45:fc:03:45:b5:9c:f7: 7d:1d:b8:53:4c:20:f5:b0:80:46:98:36:35:fd:36:1d:20:b3: f4:ab:43:fb:3f:6f:3a:66:36:5c:84:f3:b5:33:22:06:a3:06: c2:bd:02:b5:b8:64:21:cc:88:71:7a:b4:7a:fd:94:a9:77:a0: 00:00:99:f3:7b:e0:d1:07:5d:2a:62:9d:5b:21:23:da:e5:75: c7:48:8c:0e:a5:11:a9:ac:83:02:82:57:03:fa:b3:28:e8:9f: 94:0b:f7:df:dc:e1:d3:97:4c:5e:cf:37:da:a0:84:02:14:bd: a1:95:e0:d4 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUbfEvKWAX8cfRM+50uEnhsEvOKzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTExNTk2NkZCNjJBMkJEQjRENjVEOTc0REYwREQ5QjAy MDgxMUQ4RDAeFw0yNjA0MjIwNzQ5NTlaFw0yNzA0MjEwNzU0NTlaMDMxMTAvBgNV BAMTKDQwQzQwODNDRUVGRDg2RTM2MEY0NUNFQzQyNkUwOTc4MTZENkUyQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC56K+MiOOBrftFuCPJNMMu6qoJ RR1VAIEjnBdQsNumBSmRVfrhKVug9pG/GKCw1IU9EflMn2jxwedNTfLat9ZPilaS 3ve9kXqpWgdC8pGvj4BuzvXvcd1WJdaIuhv3hXHDnsvnovsW0bLevxh4q0nf0rfp 8bt0HLuUERk7R1zhXidBvw/+ESgqA/w/E4sok//kBY8nWHMLsdguJ6UCR8PcgJyz klGi5sL8BYAuR31bTC8S1TJQhY6cm6qehUfhyFzTbZ/6+9inhws/I+b/ConpnauV ZP7C8S6zhgnGJ3OJBf2ppHOi6kf9pdipKqjcOilQEFqAMDL726Tz6rUYE0GzAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUQMQIPO79huNg9FzsQm4JeBbW4rQwHwYDVR0j BBgwFoAUURWWb7YqK9tNZdl03w3ZsCCBHY0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkwMzg0MTMyMjI3MDcyMS8wLzUxMTU5NjZGQjYyQTJCREI0RDY1RDk3NERGMERE OUIwMjA4MTFEOEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTExNTk2NkZCNjJBMkJEQjRENjVEOTc0REYwREQ5QjAyMDgxMUQ4RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTkwMzg0MTMyMjI3MDcyMS8wLzMxMzIzMjJlMzEz MTM5MmUzMjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzODMzMzgzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHp3FzANBgkqhkiG9w0BAQsFAAOCAQEApYY5otTlivUEh5V5A1gzWw2S WFE1fD8JdTuG4L7E3FH0nebU6zx/K+xOnnGTwY+Ee++OKH3hQNWTv565XBrosvGj Zw8Kzv1BcD4XCWcMbxcljLIh/ujnIZVxeayM6/kOW7BqZK7f+7U/v/4FW/k+V0GR g0bUOTdDBZWuooY0WTwwuBFmDmjXu6tF/ANFtZz3fR24U0wg9bCARpg2Nf02HSCz 9KtD+z9vOmY2XITztTMiBqMGwr0CtbhkIcyIcXq0ev2UqXegAACZ83vg0QddKmKd WyEj2uV1x0iMDqURqayDAoJXA/qzKOiflAv339zh05dMXs832qCEAhS9oZXg1A== -----END CERTIFICATE-----Generated at Wed May 13 21:31:38 2026 by rpki-client