$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3132352e3235342e3132382e302f31392d3139203d3e203233373234.roa File: 3132352e3235342e3132382e302f31392d3139203d3e203233373234.roa (raw, json) Hash identifier: x+Qefx78U2pe0uEWfhxrVgxkDSwRTPxkQZCyX02ebcI= Subject key identifier: 7A:18:F1:5F:1C:20:3B:8F:39:9C:DB:50:41:6C:1C:0D:A5:2F:76:74 Certificate issuer: /CN=51110140697A5E791546E594A2208042F4C4C6DB Certificate serial: 3FFC6BB0ADDE54DA018D63C1CDC5E8A6B73A9959 Authority key identifier: 51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3132352e3235342e3132382e302f31392d3139203d3e203233373234.roa Signing time: Mon 20 Apr 2026 07:26:07 +0000 ROA not before: Mon 20 Apr 2026 07:21:07 +0000 ROA not after: Mon 19 Apr 2027 07:26:07 +0000 asID: 23724 IP address blocks: 125.254.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:fc:6b:b0:ad:de:54:da:01:8d:63:c1:cd:c5:e8:a6:b7:3a:99:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51110140697A5E791546E594A2208042F4C4C6DB Validity Not Before: Apr 20 07:21:07 2026 GMT Not After : Apr 19 07:26:07 2027 GMT Subject: CN=7A18F15F1C203B8F399CDB50416C1C0DA52F7674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:97:12:2d:db:fc:89:08:73:cd:63:d5:76:bd: c7:17:d2:3d:3c:ac:9f:d0:8b:6d:c8:53:64:fb:42: e5:7e:00:71:df:94:a6:bf:2a:dd:f5:7a:26:fc:5d: 9c:40:63:48:24:e3:cb:0a:e1:df:96:3e:75:36:46: 29:1f:53:1d:e8:4d:94:4e:5c:e1:58:6c:2a:f1:fa: 9c:b2:a9:0b:ec:3f:56:db:7e:12:c7:b4:b2:ba:22: cd:b4:b5:c9:57:ad:66:a5:07:5d:a6:6f:46:a4:48: 00:1a:98:b4:3f:90:e5:d8:05:cb:bb:c3:95:22:15: 04:ee:d3:ec:65:26:0a:24:7f:fd:fe:a8:f2:b6:46: 07:05:23:3a:eb:80:6f:e8:7b:ed:17:ae:84:bb:d4: e4:88:e0:cb:9e:3f:d0:30:cf:61:0c:95:2b:13:29: 36:27:43:7e:cc:4c:77:00:30:f4:ad:14:6d:f7:e9: 4a:fe:bc:a9:c2:cb:62:e2:f8:a7:77:d6:90:07:b7: f0:78:7e:dd:2b:e7:79:7e:7b:80:f6:27:2b:85:f1: 73:73:6a:47:18:27:95:79:12:9f:9f:3d:86:3b:24: 54:96:02:98:4a:76:d3:5a:55:99:a1:4a:30:7e:88: fb:f8:7f:cf:c8:05:e1:4a:5c:3a:5a:9d:ec:6f:8e: 10:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:18:F1:5F:1C:20:3B:8F:39:9C:DB:50:41:6C:1C:0D:A5:2F:76:74 X509v3 Authority Key Identifier: keyid:51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3132352e3235342e3132382e302f31392d3139203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 125.254.128.0/19 Signature Algorithm: sha256WithRSAEncryption 71:72:a8:88:e6:3c:bd:17:21:9d:73:ee:8c:39:2a:65:0d:d1: b8:25:c1:e1:5a:cb:80:c4:55:f5:4b:87:97:c7:88:50:0a:f5: 15:2d:4a:aa:0d:d4:30:0c:0d:94:07:a2:d8:ec:8b:c0:cb:46: fb:d4:40:e0:db:94:73:dc:ca:e3:cb:96:dc:09:54:a5:a0:ac: 25:a5:46:90:14:9f:0b:52:b6:07:b0:1a:ca:70:3a:ba:55:67: a0:c4:7d:5d:30:1f:56:e3:db:09:b6:4f:08:bb:af:48:64:b7: 9f:0e:e6:23:99:89:b8:e6:d6:95:87:0c:03:0d:c8:db:6c:05: 35:43:9e:2a:ca:1d:fd:20:ed:93:02:59:2c:3a:d5:80:56:2c: 5a:86:3a:e2:45:c5:8d:e1:88:91:e0:a4:d1:dd:1e:c9:66:d8: d8:f8:01:10:75:da:13:b4:35:34:13:74:4e:37:8b:fa:d2:0f: 11:28:88:e1:da:92:4b:f5:a0:2a:76:74:24:ad:68:c0:40:97: 0d:9f:07:cf:d2:46:79:95:d9:38:40:ea:79:21:c6:43:cf:6d: c5:98:fe:9f:09:62:a2:29:f3:4c:d8:04:a5:2a:8f:09:39:ed: 00:a9:26:e0:b6:a4:2a:3e:74:84:c8:22:ac:be:18:16:30:6f: 45:04:2e:6f -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUP/xrsK3eVNoBjWPBzcXoprc6mVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTExMTAxNDA2OTdBNUU3OTE1NDZFNTk0QTIyMDgwNDJG NEM0QzZEQjAeFw0yNjA0MjAwNzIxMDdaFw0yNzA0MTkwNzI2MDdaMDMxMTAvBgNV BAMTKDdBMThGMTVGMUMyMDNCOEYzOTlDREI1MDQxNkMxQzBEQTUyRjc2NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPlxIt2/yJCHPNY9V2vccX0j08 rJ/Qi23IU2T7QuV+AHHflKa/Kt31eib8XZxAY0gk48sK4d+WPnU2RikfUx3oTZRO XOFYbCrx+pyyqQvsP1bbfhLHtLK6Is20tclXrWalB12mb0akSAAamLQ/kOXYBcu7 w5UiFQTu0+xlJgokf/3+qPK2RgcFIzrrgG/oe+0XroS71OSI4MueP9Awz2EMlSsT KTYnQ37MTHcAMPStFG336Ur+vKnCy2Li+Kd31pAHt/B4ft0r53l+e4D2JyuF8XNz akcYJ5V5Ep+fPYY7JFSWAphKdtNaVZmhSjB+iPv4f8/IBeFKXDpanexvjhADAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUehjxXxwgO485nNtQQWwcDaUvdnQwHwYDVR0j BBgwFoAUUREBQGl6XnkVRuWUoiCAQvTExtswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ4OTI0NTU1MjYwNzIzNS8wLzUxMTEwMTQwNjk3QTVFNzkxNTQ2RTU5NEEyMjA4 MDQyRjRDNEM2REIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTExMTAxNDA2OTdBNUU3OTE1NDZFNTk0QTIyMDgwNDJGNEM0QzZEQi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTg0ODkyNDU1NTI2MDcyMzUvMC8zMTMyMzUyZTMy MzUzNDJlMzEzMjM4MmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzIzMzM3MzIzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBX3+gDANBgkqhkiG9w0BAQsFAAOCAQEAcXKoiOY8vRchnXPujDkq ZQ3RuCXB4VrLgMRV9UuHl8eIUAr1FS1Kqg3UMAwNlAei2OyLwMtG+9RA4NuUc9zK 48uW3AlUpaCsJaVGkBSfC1K2B7AaynA6ulVnoMR9XTAfVuPbCbZPCLuvSGS3nw7m I5mJuObWlYcMAw3I22wFNUOeKsod/SDtkwJZLDrVgFYsWoY64kXFjeGIkeCk0d0e yWbY2PgBEHXaE7Q1NBN0TjeL+tIPESiI4dqSS/WgKnZ0JK1owECXDZ8Hz9JGeZXZ OEDqeSHGQ89txZj+nwlioinzTNgEpSqPCTntAKkm4LakKj50hMgirL4YFjBvRQQu bw== -----END CERTIFICATE-----Generated at Wed May 13 16:25:23 2026 by rpki-client