$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3132352e3235342e3138382e302f32342d3234203d3e2039383038.roa File: 3132352e3235342e3138382e302f32342d3234203d3e2039383038.roa (raw, json) Hash identifier: xn8jEFnT/vJttguPvfSOMRn/dP9c16qxRmkVUt4kc/k= Subject key identifier: E7:10:30:20:74:16:D7:3B:A3:99:4F:FE:72:10:0F:E9:46:31:11:99 Certificate issuer: /CN=51110140697A5E791546E594A2208042F4C4C6DB Certificate serial: 7A3FBE2DFE2DA47867A4E4987567A7FB7EA57CA7 Authority key identifier: 51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3132352e3235342e3138382e302f32342d3234203d3e2039383038.roa Signing time: Mon 20 Apr 2026 07:28:08 +0000 ROA not before: Mon 20 Apr 2026 07:23:08 +0000 ROA not after: Mon 19 Apr 2027 07:28:08 +0000 asID: 9808 IP address blocks: 125.254.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:3f:be:2d:fe:2d:a4:78:67:a4:e4:98:75:67:a7:fb:7e:a5:7c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51110140697A5E791546E594A2208042F4C4C6DB Validity Not Before: Apr 20 07:23:08 2026 GMT Not After : Apr 19 07:28:08 2027 GMT Subject: CN=E71030207416D73BA3994FFE72100FE946311199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6f:63:c9:7f:d8:57:12:c1:dc:21:86:f4:dc: 2a:9b:23:01:84:81:49:31:0b:79:88:f5:79:1e:b8: de:18:c7:91:c0:ec:4f:f2:df:ab:2e:a3:9c:29:8a: d0:80:86:3d:4f:4a:90:1c:f4:64:86:6c:f0:0c:8b: 36:93:f7:c5:02:91:4d:cd:1c:9c:c8:12:0e:50:de: b2:2f:10:c9:22:ef:a3:df:07:db:ef:47:01:76:cd: d3:bd:24:f5:c6:b5:5b:12:4e:75:9c:24:94:53:a0: 6d:55:c3:2a:93:35:9d:7b:c7:6b:fc:fa:83:e9:bb: b2:56:ac:7a:9b:d9:f8:b0:a9:f2:a9:b5:80:44:d3: 4c:0b:7f:cd:70:70:65:c9:26:8d:d6:11:c3:0a:40: 9c:ed:29:ab:9f:b7:6c:54:38:a1:df:72:8f:ac:3f: 2a:d8:2b:ee:50:f7:99:d2:d3:d3:46:75:34:94:c7: b0:8b:f7:f0:47:87:9a:db:9d:49:45:6f:b5:9e:39: d5:03:02:6c:04:c1:05:ee:a2:e2:6b:00:68:1a:91: dd:2a:b6:80:df:ea:00:1c:2c:c7:3f:50:6f:06:2e: 75:92:9d:3c:da:41:c9:d5:2c:ce:d7:ae:a9:ad:d2: 51:ef:3d:8d:74:bf:16:3d:ce:99:53:b3:b5:1b:c5: cf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:10:30:20:74:16:D7:3B:A3:99:4F:FE:72:10:0F:E9:46:31:11:99 X509v3 Authority Key Identifier: keyid:51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3132352e3235342e3138382e302f32342d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 125.254.188.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:41:07:91:6b:ea:55:32:bb:14:21:3f:06:ec:99:6c:29:d5: 5a:e8:0f:71:4e:12:d4:3b:ec:06:13:2d:fd:fc:6a:a2:ba:a7: 00:89:4a:3e:03:59:55:dd:ef:5a:81:96:cc:3b:95:71:ea:5b: a7:e3:a7:aa:14:8c:d1:2d:3c:01:b1:d5:fe:f8:c6:9c:c1:80: d5:5b:7b:64:e9:f3:34:b2:a2:38:98:96:ec:25:eb:03:53:dd: 3a:25:73:4b:4c:71:7b:40:52:4a:c3:f4:1b:1a:1e:13:52:b9: 65:6b:ff:5d:42:21:5c:b1:a5:18:d3:d3:52:ef:03:4e:fa:58: 59:ce:d7:f3:25:fe:8d:10:bc:2a:3a:71:81:cc:71:63:90:cb: 07:3b:d7:a1:b3:9b:07:70:3d:67:6f:1d:af:41:0a:86:66:8f: cd:16:67:5a:d2:ee:90:fb:0e:2c:08:54:ff:06:f1:41:6e:db: bb:c4:08:bd:94:03:e2:45:c8:4f:a8:29:60:dc:17:96:5f:20: 0e:e0:95:56:5f:15:b1:df:bf:25:8f:cb:91:dc:e1:db:62:c0: af:40:78:63:9d:e8:a6:02:a3:42:1a:c3:d1:ab:44:3a:71:78: ae:29:91:70:28:34:be:6d:66:7e:f6:49:1b:00:db:8f:67:a5: 74:68:b2:3c -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUej++Lf4tpHhnpOSYdWen+36lfKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTExMTAxNDA2OTdBNUU3OTE1NDZFNTk0QTIyMDgwNDJG NEM0QzZEQjAeFw0yNjA0MjAwNzIzMDhaFw0yNzA0MTkwNzI4MDhaMDMxMTAvBgNV BAMTKEU3MTAzMDIwNzQxNkQ3M0JBMzk5NEZGRTcyMTAwRkU5NDYzMTExOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzb2PJf9hXEsHcIYb03CqbIwGE gUkxC3mI9XkeuN4Yx5HA7E/y36suo5wpitCAhj1PSpAc9GSGbPAMizaT98UCkU3N HJzIEg5Q3rIvEMki76PfB9vvRwF2zdO9JPXGtVsSTnWcJJRToG1VwyqTNZ17x2v8 +oPpu7JWrHqb2fiwqfKptYBE00wLf81wcGXJJo3WEcMKQJztKauft2xUOKHfco+s PyrYK+5Q95nS09NGdTSUx7CL9/BHh5rbnUlFb7WeOdUDAmwEwQXuouJrAGgakd0q toDf6gAcLMc/UG8GLnWSnTzaQcnVLM7Xrqmt0lHvPY10vxY9zplTs7Ubxc9lAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU5xAwIHQW1zujmU/+chAP6UYxEZkwHwYDVR0j BBgwFoAUUREBQGl6XnkVRuWUoiCAQvTExtswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ4OTI0NTU1MjYwNzIzNS8wLzUxMTEwMTQwNjk3QTVFNzkxNTQ2RTU5NEEyMjA4 MDQyRjRDNEM2REIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTExMTAxNDA2OTdBNUU3OTE1NDZFNTk0QTIyMDgwNDJGNEM0QzZEQi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5ODQ4OTI0NTU1MjYwNzIzNS8wLzMxMzIzNTJlMzIz NTM0MmUzMTM4MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAH3+vDANBgkqhkiG9w0BAQsFAAOCAQEATEEHkWvqVTK7FCE/BuyZbCnV WugPcU4S1DvsBhMt/fxqorqnAIlKPgNZVd3vWoGWzDuVcepbp+OnqhSM0S08AbHV /vjGnMGA1Vt7ZOnzNLKiOJiW7CXrA1PdOiVzS0xxe0BSSsP0GxoeE1K5ZWv/XUIh XLGlGNPTUu8DTvpYWc7X8yX+jRC8KjpxgcxxY5DLBzvXobObB3A9Z28dr0EKhmaP zRZnWtLukPsOLAhU/wbxQW7bu8QIvZQD4kXIT6gpYNwXll8gDuCVVl8Vsd+/JY/L kdzh22LAr0B4Y53opgKjQhrD0atEOnF4rimRcCg0vm1mfvZJGwDbj2eldGiyPA== -----END CERTIFICATE-----Generated at Wed May 13 17:13:53 2026 by rpki-client