$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3235302e302f32342d3234203d3e2034383131.roa File: 3132312e34362e3235302e302f32342d3234203d3e2034383131.roa (raw, json) Hash identifier: 3NXFOW+JxLSqSLZN+FPKsUDOS5JMhZ+sra5cXJvMIzU= Subject key identifier: 38:55:D9:3C:0A:01:C3:04:39:FA:71:A2:C1:7C:5A:7D:87:AB:A8:72 Certificate issuer: /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94 Certificate serial: 55E0174B83380F2AE6B4D97C978788D39DE75C66 Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3235302e302f32342d3234203d3e2034383131.roa Signing time: Mon 27 Apr 2026 07:59:58 +0000 ROA not before: Mon 27 Apr 2026 07:54:58 +0000 ROA not after: Mon 26 Apr 2027 07:59:58 +0000 asID: 4811 IP address blocks: 121.46.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:e0:17:4b:83:38:0f:2a:e6:b4:d9:7c:97:87:88:d3:9d:e7:5c:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94 Validity Not Before: Apr 27 07:54:58 2026 GMT Not After : Apr 26 07:59:58 2027 GMT Subject: CN=3855D93C0A01C30439FA71A2C17C5A7D87ABA872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:fa:4d:fb:19:9f:44:fa:e3:dd:74:c0:ac:71: 27:ae:27:b4:87:11:fc:74:c9:42:ce:d6:a7:94:9b: 26:0d:88:cc:5a:60:08:82:4d:88:b6:95:1e:c1:d2: 7a:bd:67:01:0f:9c:c3:ad:d5:69:09:fb:ba:2b:5f: 89:0b:13:6c:22:57:23:4d:24:cf:06:ef:68:cd:57: c9:7f:9e:8e:25:8f:77:36:38:dd:1b:6b:a6:86:78: 65:37:83:c0:87:bd:23:61:17:d8:05:7d:00:54:38: 12:49:8a:a2:f2:1f:8c:be:7e:e8:47:4a:c4:a1:99: d4:73:a7:7c:35:1f:c6:e6:59:d5:d6:fe:15:24:d8: 7c:c9:49:a1:9d:86:79:ed:83:04:03:34:13:15:98: 44:06:3c:02:5e:27:63:79:21:b0:78:84:60:7e:10: 07:f3:a3:f2:32:0e:08:b1:c3:4a:ec:bb:05:b3:ac: 57:44:1c:11:1e:77:03:62:48:3e:b1:ae:ce:4c:22: 49:d4:18:e6:81:ce:6a:69:62:78:7f:f5:49:b5:dd: f3:67:37:75:77:f1:ac:b3:08:b0:9f:85:fc:30:5c: 6e:63:7f:3a:e7:e6:fd:a4:dc:e8:25:60:f1:3a:8b: 5b:c9:05:0b:58:cd:0d:51:21:50:a3:d7:a0:00:3b: 73:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:55:D9:3C:0A:01:C3:04:39:FA:71:A2:C1:7C:5A:7D:87:AB:A8:72 X509v3 Authority Key Identifier: keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3235302e302f32342d3234203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.46.250.0/24 Signature Algorithm: sha256WithRSAEncryption b2:28:7b:fb:eb:ad:31:2c:05:6a:aa:4a:62:6d:dd:87:2d:b9: 4e:75:2b:5c:8e:b9:54:92:14:f9:bd:2a:df:0a:8e:8e:9d:4d: 86:57:a9:35:7f:86:0d:f4:1c:7b:4f:90:51:d5:e6:22:7a:bc: ad:72:ec:e2:41:e7:07:39:55:f5:c3:f9:02:bd:fc:49:07:8b: ad:f7:f1:b2:f2:76:dc:cd:80:4e:b1:bf:6a:d3:07:c4:04:17: 31:af:50:e3:c6:2b:b9:4f:fc:9e:69:8b:1b:5c:91:d9:a5:ad: bc:29:8f:bd:a4:25:81:74:9a:e7:7a:65:60:6a:86:46:bc:74: 9a:73:54:cb:ee:e1:dd:64:a6:25:e8:98:54:ff:c9:fd:e9:ac: 21:76:e5:78:52:e7:20:3c:c7:1d:aa:d9:fd:26:e3:0e:02:da: 0f:0d:0b:2f:09:e0:3e:da:1b:c4:e4:5e:88:f6:73:48:28:4c: 58:a1:92:2e:67:40:3b:96:a8:dc:30:5e:d1:9a:c5:90:26:8c: f0:18:d3:dc:ad:ed:26:67:02:61:f9:33:96:02:2a:9d:b9:9c: 2c:3e:3a:f8:a5:e0:43:4c:11:75:c9:00:94:af:af:55:b8:53: 90:2f:fd:57:1f:b7:c9:50:0d:76:a6:3b:dd:ac:be:6e:12:7f: 04:33:21:79 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUVeAXS4M4DyrmtNl8l4eI053nXGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE4OThCM0U0RUJCNEM1NzdGNzZCQkQ3RjBENzUxRjg1 MDVBREQ5NDAeFw0yNjA0MjcwNzU0NThaFw0yNzA0MjYwNzU5NThaMDMxMTAvBgNV BAMTKDM4NTVEOTNDMEEwMUMzMDQzOUZBNzFBMkMxN0M1QTdEODdBQkE4NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8+k37GZ9E+uPddMCscSeuJ7SH Efx0yULO1qeUmyYNiMxaYAiCTYi2lR7B0nq9ZwEPnMOt1WkJ+7orX4kLE2wiVyNN JM8G72jNV8l/no4lj3c2ON0ba6aGeGU3g8CHvSNhF9gFfQBUOBJJiqLyH4y+fuhH SsShmdRzp3w1H8bmWdXW/hUk2HzJSaGdhnntgwQDNBMVmEQGPAJeJ2N5IbB4hGB+ EAfzo/IyDgixw0rsuwWzrFdEHBEedwNiSD6xrs5MIknUGOaBzmppYnh/9Um13fNn N3V38ayzCLCfhfwwXG5jfzrn5v2k3OglYPE6i1vJBQtYzQ1RIVCj16AAO3NRAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUOFXZPAoBwwQ5+nGiwXxafYerqHIwHwYDVR0j BBgwFoAUaomLPk67TFd/drvX8NdR+FBa3ZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQwNTExNTI2ODA3MTQyNy8wLzZBODk4QjNFNEVCQjRDNTc3Rjc2QkJEN0YwRDc1 MUY4NTA1QUREOTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkE4OThCM0U0RUJCNEM1NzdGNzZCQkQ3RjBENzUxRjg1MDVBREQ5NC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3NDA1MTE1MjY4MDcxNDI3LzAvMzEzMjMxMmUzNDM2 MmUzMjM1MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzEzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHku+jANBgkqhkiG9w0BAQsFAAOCAQEAsih7++utMSwFaqpKYm3dhy25TnUr XI65VJIU+b0q3wqOjp1NhlepNX+GDfQce0+QUdXmInq8rXLs4kHnBzlV9cP5Ar38 SQeLrffxsvJ23M2ATrG/atMHxAQXMa9Q48YruU/8nmmLG1yR2aWtvCmPvaQlgXSa 53plYGqGRrx0mnNUy+7h3WSmJeiYVP/J/emsIXbleFLnIDzHHarZ/SbjDgLaDw0L LwngPtobxOReiPZzSChMWKGSLmdAO5ao3DBe0ZrFkCaM8BjT3K3tJmcCYfkzlgIq nbmcLD46+KXgQ0wRdckAlK+vVbhTkC/9Vx+3yVANdqY73ay+bhJ/BDMheQ== -----END CERTIFICATE-----Generated at Wed May 13 14:57:15 2026 by rpki-client