$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e38352e302f32342d3234203d3e203233383438.roa File: 3132342e3139362e38352e302f32342d3234203d3e203233383438.roa (raw, json) Hash identifier: TBSWSuu26H7hIo3UsTWr1TpLUBHJaELAtoxbru/Tlgk= Subject key identifier: BE:0F:4A:78:35:54:FE:EC:2C:AB:E1:0B:4D:09:F7:B5:B2:B6:8C:99 Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D Certificate serial: 0FB3F66E45ACAFD7695359ECB938DB5A97B1C690 Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e38352e302f32342d3234203d3e203233383438.roa Signing time: Thu 30 Apr 2026 06:44:53 +0000 ROA not before: Thu 30 Apr 2026 06:39:53 +0000 ROA not after: Thu 29 Apr 2027 06:44:53 +0000 asID: 23848 IP address blocks: 124.196.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:b3:f6:6e:45:ac:af:d7:69:53:59:ec:b9:38:db:5a:97:b1:c6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D Validity Not Before: Apr 30 06:39:53 2026 GMT Not After : Apr 29 06:44:53 2027 GMT Subject: CN=BE0F4A783554FEEC2CABE10B4D09F7B5B2B68C99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:36:46:0b:bc:81:78:04:7b:29:38:aa:b1:45: f5:a1:8b:6e:ae:60:50:11:bc:b8:cd:b7:b1:76:f4: 51:42:6c:31:e0:a7:59:a2:eb:d4:2f:50:2c:ad:3f: b4:e2:6e:4f:bb:20:a6:13:b2:22:08:3e:be:30:93: 50:ce:42:5c:63:35:09:d2:cc:d7:5c:cf:53:58:23: 0f:1b:34:19:5b:ca:3f:aa:5c:f3:8f:e4:bc:74:3d: e9:42:55:95:6e:c8:3e:80:48:27:bf:40:d7:11:b9: d7:2f:c7:33:29:a1:55:d5:37:f7:39:69:86:33:1d: 03:d3:4d:62:4b:6d:90:81:ca:ff:1b:1c:ed:5e:45: 5a:e7:f2:e4:9b:af:dc:01:d6:e1:26:71:80:1f:14: 82:f1:36:7e:86:da:a7:43:45:46:b7:b5:28:d2:70: 7e:ff:71:be:3c:4c:78:ad:bd:e0:77:54:44:43:91: 55:5a:eb:d7:17:95:3c:6e:ba:06:b2:4d:1c:b4:6e: f7:b8:58:16:7a:da:0e:26:55:ea:11:e4:0e:fa:85: 5d:b4:05:f9:28:44:f4:11:4b:e4:81:12:71:6e:f2: 15:c2:02:66:98:22:a2:3a:c2:fd:4d:e8:a7:84:0f: 0d:c5:bb:21:dc:d2:31:91:42:f7:62:64:4c:88:32: d2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0F:4A:78:35:54:FE:EC:2C:AB:E1:0B:4D:09:F7:B5:B2:B6:8C:99 X509v3 Authority Key Identifier: keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e38352e302f32342d3234203d3e203233383438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.196.85.0/24 Signature Algorithm: sha256WithRSAEncryption 89:36:af:05:86:7e:c7:fa:ac:8d:a2:d7:8a:bb:eb:e9:18:10: fa:80:6f:63:37:0c:3f:6a:c7:d1:8c:db:6d:1f:48:3c:61:2d: e3:1e:3e:24:b4:52:9c:b3:f5:04:d2:97:53:39:d0:db:05:f8: 7a:e3:aa:8d:36:3e:1f:dc:23:75:ab:98:23:78:17:81:bd:d7: 89:63:2b:50:68:45:a9:8e:82:1f:af:f2:fc:17:83:86:be:81: 6e:d0:13:69:9c:f1:49:18:ec:72:23:86:ff:33:36:92:18:73: 76:9d:d6:a2:9e:1f:ea:9c:24:d7:b3:f9:f6:b0:85:78:74:7a: 26:3f:70:2f:f4:82:af:ac:45:d7:89:8c:6b:a9:59:39:1c:53: d8:3d:f3:a3:45:94:97:db:17:95:11:f0:01:dc:37:e4:1e:03: 6d:ef:f8:87:da:3a:96:f0:d7:8a:b2:b4:19:9a:27:93:dd:ac: f1:5a:8f:69:fb:a0:f9:78:bd:f7:01:aa:11:3d:96:cb:eb:34: 83:86:3f:86:2c:04:00:12:ab:08:38:a9:b1:d0:b5:a3:25:70: 8c:0d:36:28:4c:65:0b:99:7d:3b:02:6c:e7:52:1e:36:2b:eb: 7d:9d:c5:1a:73:00:7a:9f:06:a3:f7:6b:3b:06:d9:30:78:28: 09:ab:72:b7 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUD7P2bkWsr9dpU1nsuTjbWpexxpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEw RTI3MDQyRDAeFw0yNjA0MzAwNjM5NTNaFw0yNzA0MjkwNjQ0NTNaMDMxMTAvBgNV BAMTKEJFMEY0QTc4MzU1NEZFRUMyQ0FCRTEwQjREMDlGN0I1QjJCNjhDOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzNkYLvIF4BHspOKqxRfWhi26u YFARvLjNt7F29FFCbDHgp1mi69QvUCytP7Tibk+7IKYTsiIIPr4wk1DOQlxjNQnS zNdcz1NYIw8bNBlbyj+qXPOP5Lx0PelCVZVuyD6ASCe/QNcRudcvxzMpoVXVN/c5 aYYzHQPTTWJLbZCByv8bHO1eRVrn8uSbr9wB1uEmcYAfFILxNn6G2qdDRUa3tSjS cH7/cb48THitveB3VERDkVVa69cXlTxuugayTRy0bve4WBZ62g4mVeoR5A76hV20 BfkoRPQRS+SBEnFu8hXCAmaYIqI6wv1N6KeEDw3FuyHc0jGRQvdiZEyIMtKlAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUvg9KeDVU/uwsq+ELTQn3tbK2jJkwHwYDVR0j BBgwFoAU7aiEp5dI1X60k2ZwTLaoEQ4nBC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA4MzUzMjM1NTgyOTc2My8wL0VEQTg4NEE3OTc0OEQ1N0VCNDkzNjY3MDRDQjZB ODExMEUyNzA0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEwRTI3MDQyRC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NzA4MzUzMjM1NTgyOTc2My8wLzMxMzIzNDJlMzEz OTM2MmUzODM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM4MzQzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHzEVTANBgkqhkiG9w0BAQsFAAOCAQEAiTavBYZ+x/qsjaLXirvr6RgQ +oBvYzcMP2rH0YzbbR9IPGEt4x4+JLRSnLP1BNKXUznQ2wX4euOqjTY+H9wjdauY I3gXgb3XiWMrUGhFqY6CH6/y/BeDhr6BbtATaZzxSRjsciOG/zM2khhzdp3Wop4f 6pwk17P59rCFeHR6Jj9wL/SCr6xF14mMa6lZORxT2D3zo0WUl9sXlRHwAdw35B4D be/4h9o6lvDXirK0GZonk92s8VqPafug+Xi99wGqET2Wy+s0g4Y/hiwEABKrCDip sdC1oyVwjA02KExlC5l9OwJs51IeNivrfZ3FGnMAep8Go/drOwbZMHgoCatytw== -----END CERTIFICATE-----Generated at Wed May 13 21:31:09 2026 by rpki-client