$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e33322e302f32342d3234203d3e203338333831.roa File: 3132322e3131392e33322e302f32342d3234203d3e203338333831.roa (raw, json) Hash identifier: skl35Z3oq7r2Wx9QHXVMSjztipkxo55EX2bCvVP2cqU= Subject key identifier: 17:FD:75:D8:71:5B:FA:8F:39:33:63:CD:44:4B:00:24:26:1B:3D:E9 Certificate issuer: /CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D Certificate serial: 241C540D70FBF7DCBE52B23FC0CF905044724C9C Authority key identifier: 51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e33322e302f32342d3234203d3e203338333831.roa Signing time: Wed 22 Apr 2026 07:57:30 +0000 ROA not before: Wed 22 Apr 2026 07:52:30 +0000 ROA not after: Wed 21 Apr 2027 07:57:30 +0000 asID: 38381 IP address blocks: 122.119.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:1c:54:0d:70:fb:f7:dc:be:52:b2:3f:c0:cf:90:50:44:72:4c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D Validity Not Before: Apr 22 07:52:30 2026 GMT Not After : Apr 21 07:57:30 2027 GMT Subject: CN=17FD75D8715BFA8F393363CD444B0024261B3DE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:de:62:3d:44:71:84:ac:16:6f:27:0e:9c:9c: 72:96:98:90:de:3a:a6:d5:02:8e:26:91:fe:e1:83: 7a:d4:68:c6:34:5e:72:9a:db:02:5f:8a:52:d1:92: 99:66:e0:b8:39:df:fb:d3:a3:59:e3:bf:13:d7:1e: 7d:3a:74:9b:af:d4:42:56:8f:43:01:4e:ca:de:1d: d9:d6:37:da:44:1e:b2:7f:b0:06:54:14:bc:2c:67: 4a:38:8b:2b:2f:a8:fc:85:80:f4:4e:8f:39:61:ec: 73:bc:ea:0c:f1:5d:09:2b:92:ac:35:e7:8f:62:25: 9f:bc:9a:d9:f7:76:a3:7c:a9:e6:a2:e9:51:02:54: ad:58:b5:22:98:57:9c:5b:4a:0b:39:fd:49:07:6f: 33:e5:15:a0:95:1c:e7:0a:b0:3b:00:49:97:18:dc: 7d:69:33:2c:c6:92:da:ed:81:43:f3:41:77:e2:c5: e8:3f:63:bb:58:b2:1d:ae:28:a4:46:84:d5:6b:e3: 72:54:d2:cf:11:9a:79:8a:6e:6f:7c:50:f5:88:97: ac:45:86:de:a4:23:3a:44:9c:16:4e:74:33:e8:63: f0:ff:2e:31:06:35:96:66:e3:aa:4d:26:3e:e8:6b: d8:48:d8:c9:4f:1b:5c:40:50:8b:2f:f8:e2:cc:96: 66:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FD:75:D8:71:5B:FA:8F:39:33:63:CD:44:4B:00:24:26:1B:3D:E9 X509v3 Authority Key Identifier: keyid:51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e33322e302f32342d3234203d3e203338333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.119.32.0/24 Signature Algorithm: sha256WithRSAEncryption 66:47:3b:80:5d:c8:7c:47:bc:0e:bf:fb:21:df:12:db:c1:71: 1c:63:54:f5:2e:bb:d0:e1:df:46:55:07:86:e1:c0:b5:68:b6: 10:fd:b7:68:b1:83:d7:26:ba:7c:6c:6f:f2:74:3d:0e:aa:de: 19:69:aa:be:9b:f7:1a:0b:0b:d4:bd:de:d3:c4:7b:98:04:76: 3e:07:76:87:b0:90:99:8d:3d:f0:3d:1d:19:77:92:3a:07:33: ff:5c:13:3d:77:92:47:00:5f:a5:ac:17:f3:16:80:18:7c:6a: f4:36:e4:25:67:4d:02:a6:91:0c:56:a0:0c:fe:85:c6:2f:01: 40:79:ef:0e:b9:c6:18:90:23:60:f6:41:69:e1:aa:3f:82:92: f3:42:69:5c:8d:70:0a:9f:4e:91:06:d0:34:8d:6b:b4:e7:30: d8:76:40:03:ba:33:8c:5f:b2:85:7a:04:60:bb:ff:cd:ff:bb: fe:1e:7a:2c:43:a8:de:8b:7c:47:48:0a:d9:18:c7:cc:bd:78: 13:1e:b4:5c:49:42:2e:59:c0:8e:ce:35:bf:f6:72:e1:4d:b4: 7c:52:cb:c7:07:96:4b:4f:63:d4:cf:3e:f6:e2:31:f7:ea:4b: 06:e6:7d:06:86:af:dc:3e:d7:52:c1:d3:25:10:8f:c1:61:0c: b5:0e:f0:6c -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUJBxUDXD799y+UrI/wM+QUERyTJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTExNTk2NkZCNjJBMkJEQjRENjVEOTc0REYwREQ5QjAy MDgxMUQ4RDAeFw0yNjA0MjIwNzUyMzBaFw0yNzA0MjEwNzU3MzBaMDMxMTAvBgNV BAMTKDE3RkQ3NUQ4NzE1QkZBOEYzOTMzNjNDRDQ0NEIwMDI0MjYxQjNERTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA3mI9RHGErBZvJw6cnHKWmJDe OqbVAo4mkf7hg3rUaMY0XnKa2wJfilLRkplm4Lg53/vTo1njvxPXHn06dJuv1EJW j0MBTsreHdnWN9pEHrJ/sAZUFLwsZ0o4iysvqPyFgPROjzlh7HO86gzxXQkrkqw1 549iJZ+8mtn3dqN8qeai6VECVK1YtSKYV5xbSgs5/UkHbzPlFaCVHOcKsDsASZcY 3H1pMyzGktrtgUPzQXfixeg/Y7tYsh2uKKRGhNVr43JU0s8RmnmKbm98UPWIl6xF ht6kIzpEnBZOdDPoY/D/LjEGNZZm46pNJj7oa9hI2MlPG1xAUIsv+OLMlmZfAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUF/112HFb+o85M2PNREsAJCYbPekwHwYDVR0j BBgwFoAUURWWb7YqK9tNZdl03w3ZsCCBHY0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkwMzg0MTMyMjI3MDcyMS8wLzUxMTU5NjZGQjYyQTJCREI0RDY1RDk3NERGMERE OUIwMjA4MTFEOEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTExNTk2NkZCNjJBMkJEQjRENjVEOTc0REYwREQ5QjAyMDgxMUQ4RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTkwMzg0MTMyMjI3MDcyMS8wLzMxMzIzMjJlMzEz MTM5MmUzMzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzODMzMzgzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHp3IDANBgkqhkiG9w0BAQsFAAOCAQEAZkc7gF3IfEe8Dr/7Id8S28Fx HGNU9S670OHfRlUHhuHAtWi2EP23aLGD1ya6fGxv8nQ9DqreGWmqvpv3GgsL1L3e 08R7mAR2Pgd2h7CQmY098D0dGXeSOgcz/1wTPXeSRwBfpawX8xaAGHxq9DbkJWdN AqaRDFagDP6Fxi8BQHnvDrnGGJAjYPZBaeGqP4KS80JpXI1wCp9OkQbQNI1rtOcw 2HZAA7ozjF+yhXoEYLv/zf+7/h56LEOo3ot8R0gK2RjHzL14Ex60XElCLlnAjs41 v/Zy4U20fFLLxweWS09j1M8+9uIx9+pLBuZ9Boav3D7XUsHTJRCPwWEMtQ7wbA== -----END CERTIFICATE-----Generated at Wed May 13 21:31:34 2026 by rpki-client