$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3235342e302f32342d3234203d3e2034383131.roa File: 3132312e34362e3235342e302f32342d3234203d3e2034383131.roa (raw, json) Hash identifier: 3pXA4qKU3vp45gTirzMkKrU8Zk4wL0OLas0e2KqoDHA= Subject key identifier: DD:D4:F9:8F:4D:B3:BA:41:E1:72:F8:3A:5A:4D:53:C3:F9:E4:F1:0B Certificate issuer: /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94 Certificate serial: 6F1E6277D2BB2244C8B11CE3D40CDED0D1D77F7D Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3235342e302f32342d3234203d3e2034383131.roa Signing time: Mon 27 Apr 2026 07:59:58 +0000 ROA not before: Mon 27 Apr 2026 07:54:58 +0000 ROA not after: Mon 26 Apr 2027 07:59:58 +0000 asID: 4811 IP address blocks: 121.46.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:1e:62:77:d2:bb:22:44:c8:b1:1c:e3:d4:0c:de:d0:d1:d7:7f:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94 Validity Not Before: Apr 27 07:54:58 2026 GMT Not After : Apr 26 07:59:58 2027 GMT Subject: CN=DDD4F98F4DB3BA41E172F83A5A4D53C3F9E4F10B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:eb:82:71:f3:02:ba:86:bd:05:33:f9:1a:bd: 66:4a:19:a4:74:8a:67:d3:9f:d1:26:b4:ba:c8:5f: b3:ad:f3:0e:9f:40:22:88:6d:cb:ef:a5:ea:22:41: b8:fa:76:ca:b6:b0:5e:15:83:e9:39:d1:4b:fd:a1: d4:a4:3f:ec:c6:d5:a3:d4:52:22:4e:a9:f8:3c:e4: e4:48:b0:d0:d7:af:33:d8:74:6d:3d:59:d5:2f:a0: 89:71:6c:5d:c7:0a:12:b9:51:69:dc:9b:2d:5e:06: 35:5d:f7:7c:40:23:3e:54:9f:e3:5f:21:0c:44:bf: e1:96:14:85:69:35:85:41:3e:f6:cd:55:ac:19:a7: 4a:3b:c9:77:f2:c8:c9:2a:ff:9b:9b:b5:4f:a0:f7: 9e:92:28:8e:42:04:ab:c0:51:b1:25:49:3c:e1:10: 49:b0:0d:65:c1:a6:d4:b5:11:1f:63:09:62:b9:00: 94:43:69:56:32:48:2a:29:74:74:6c:92:09:6a:89: 07:5b:b8:92:6e:9a:ac:46:22:c3:c5:db:f2:17:18: 85:36:7d:a6:e9:db:8c:9c:ea:79:c2:7f:79:24:5a: b7:a1:b5:f4:36:bd:58:39:1a:ee:d2:62:e9:da:ef: 40:9f:9c:4c:76:b8:6d:a6:a5:f6:67:9e:87:61:5a: cf:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D4:F9:8F:4D:B3:BA:41:E1:72:F8:3A:5A:4D:53:C3:F9:E4:F1:0B X509v3 Authority Key Identifier: keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3235342e302f32342d3234203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.46.254.0/24 Signature Algorithm: sha256WithRSAEncryption 11:d5:d6:0d:b5:c7:59:b8:a5:f4:65:47:67:d9:19:da:37:0a: 03:31:e4:86:02:fd:b6:8c:d5:36:9a:07:7b:dd:ef:0f:af:97: c1:cc:0d:0f:3f:21:4c:00:0d:64:a4:70:eb:08:43:49:01:3e: 87:13:f5:69:4d:b4:15:fb:15:5f:42:3f:14:fd:13:97:48:28: 02:ad:40:9a:af:87:16:b6:d9:68:49:b8:e6:5e:fa:7e:f5:74: 7e:f6:32:88:05:37:80:b0:46:80:96:c3:79:cb:83:45:62:05: 7a:3a:24:6f:14:c6:b2:e7:c2:3e:44:a4:f2:c4:f7:ed:37:0f: df:b9:b6:6c:09:46:ad:5a:9b:86:db:50:86:b9:32:e8:11:d5: 8e:11:3e:63:ad:cb:f4:84:95:01:c1:ea:86:35:dd:22:00:0f: 25:ca:c9:d5:3a:1d:d8:8a:dd:ac:28:48:9c:23:ce:ce:17:b0: 66:fa:e9:8b:bd:02:b7:bc:2a:0e:15:8d:a6:1c:f9:d2:f8:62: 5d:51:ab:dd:bc:2a:03:f6:69:a8:f9:0e:24:6d:ae:b7:7a:02: c7:0c:48:5a:8b:56:18:0d:f4:94:c2:3e:dc:f5:ce:53:e6:be: 70:a2:19:c0:b7:97:16:0b:45:3a:4b:4a:e6:8b:59:da:c4:73: 31:71:5f:a5 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUbx5id9K7IkTIsRzj1Aze0NHXf30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE4OThCM0U0RUJCNEM1NzdGNzZCQkQ3RjBENzUxRjg1 MDVBREQ5NDAeFw0yNjA0MjcwNzU0NThaFw0yNzA0MjYwNzU5NThaMDMxMTAvBgNV BAMTKERERDRGOThGNERCM0JBNDFFMTcyRjgzQTVBNEQ1M0MzRjlFNEYxMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk64Jx8wK6hr0FM/kavWZKGaR0 imfTn9EmtLrIX7Ot8w6fQCKIbcvvpeoiQbj6dsq2sF4Vg+k50Uv9odSkP+zG1aPU UiJOqfg85ORIsNDXrzPYdG09WdUvoIlxbF3HChK5UWncmy1eBjVd93xAIz5Un+Nf IQxEv+GWFIVpNYVBPvbNVawZp0o7yXfyyMkq/5ubtU+g956SKI5CBKvAUbElSTzh EEmwDWXBptS1ER9jCWK5AJRDaVYySCopdHRskglqiQdbuJJumqxGIsPF2/IXGIU2 fabp24yc6nnCf3kkWrehtfQ2vVg5Gu7SYuna70CfnEx2uG2mpfZnnodhWs8NAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU3dT5j02zukHhcvg6Wk1Tw/nk8QswHwYDVR0j BBgwFoAUaomLPk67TFd/drvX8NdR+FBa3ZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQwNTExNTI2ODA3MTQyNy8wLzZBODk4QjNFNEVCQjRDNTc3Rjc2QkJEN0YwRDc1 MUY4NTA1QUREOTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkE4OThCM0U0RUJCNEM1NzdGNzZCQkQ3RjBENzUxRjg1MDVBREQ5NC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3NDA1MTE1MjY4MDcxNDI3LzAvMzEzMjMxMmUzNDM2 MmUzMjM1MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzEzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHku/jANBgkqhkiG9w0BAQsFAAOCAQEAEdXWDbXHWbil9GVHZ9kZ2jcKAzHk hgL9tozVNpoHe93vD6+XwcwNDz8hTAANZKRw6whDSQE+hxP1aU20FfsVX0I/FP0T l0goAq1Amq+HFrbZaEm45l76fvV0fvYyiAU3gLBGgJbDecuDRWIFejokbxTGsufC PkSk8sT37TcP37m2bAlGrVqbhttQhrky6BHVjhE+Y63L9ISVAcHqhjXdIgAPJcrJ 1Tod2IrdrChInCPOzhewZvrpi70Ct7wqDhWNphz50vhiXVGr3bwqA/ZpqPkOJG2u t3oCxwxIWotWGA30lMI+3PXOU+a+cKIZwLeXFgtFOktK5otZ2sRzMXFfpQ== -----END CERTIFICATE-----Generated at Wed May 13 13:42:43 2026 by rpki-client