$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098494210874540035/0/3132352e3235342e3136382e302f32312d3231203d3e2034383038.roa File: 3132352e3235342e3136382e302f32312d3231203d3e2034383038.roa (raw, json) Hash identifier: FFsVQX7YMz+Uh7zFfyThQ8wwzvkbi+7ZqBOYGNl3RHc= Subject key identifier: DF:75:8D:58:09:53:7F:D0:B9:F8:44:FD:68:5E:92:A1:68:C5:21:53 Certificate issuer: /CN=6D1AB58561FCA85349B344B3CCABAF9318D49FAF Certificate serial: 35E35D8C46D8195B2FFA8650487E22DABC04EAE3 Authority key identifier: 6D:1A:B5:85:61:FC:A8:53:49:B3:44:B3:CC:AB:AF:93:18:D4:9F:AF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/3132352e3235342e3136382e302f32312d3231203d3e2034383038.roa Signing time: Wed 13 May 2026 01:53:28 +0000 ROA not before: Wed 13 May 2026 01:48:28 +0000 ROA not after: Wed 12 May 2027 01:53:28 +0000 asID: 4808 IP address blocks: 125.254.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e3:5d:8c:46:d8:19:5b:2f:fa:86:50:48:7e:22:da:bc:04:ea:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D1AB58561FCA85349B344B3CCABAF9318D49FAF Validity Not Before: May 13 01:48:28 2026 GMT Not After : May 12 01:53:28 2027 GMT Subject: CN=DF758D5809537FD0B9F844FD685E92A168C52153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:7a:13:09:c1:da:6a:f0:51:34:5d:d5:6d:a3: 49:8d:70:14:f5:b6:cf:54:63:b8:9d:59:e9:0d:cd: 55:33:8e:f4:7b:03:b6:3c:54:2a:5b:29:79:3f:68: e6:96:d3:34:a6:c9:1f:a4:e7:14:37:4f:52:16:79: 57:65:06:a4:80:43:dc:e6:cb:4c:29:1c:26:c9:a0: a8:b6:5f:96:66:95:91:5c:6d:51:d9:50:c5:61:d3: c0:16:64:86:2e:73:5d:fc:b2:f2:bd:81:f0:4c:8c: 1c:07:5d:8b:ca:8b:d6:a8:a0:e5:21:f6:cf:94:39: ea:8b:b3:0a:87:35:aa:11:7a:13:cc:b7:08:3d:91: ba:4c:bd:7d:96:ae:36:ea:c7:19:e3:f2:01:46:e2: 79:05:67:51:31:65:e1:d8:52:19:7c:a8:26:0c:cb: 5d:8a:30:8e:7f:40:8a:06:47:4d:2c:41:ca:dc:b2: 4d:28:de:a7:81:77:a7:91:41:ec:9b:dd:bd:05:c0: 67:b1:e9:77:bf:c0:7a:1a:3f:7f:9e:4c:12:80:96: 7a:78:b7:8c:6c:3f:23:de:61:c9:26:50:83:ee:22: c1:0f:75:59:f3:f2:ae:db:68:62:8f:5b:0a:f4:c5: 19:69:b3:ac:f9:d3:26:57:dd:2b:46:77:39:e2:9d: 88:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:75:8D:58:09:53:7F:D0:B9:F8:44:FD:68:5E:92:A1:68:C5:21:53 X509v3 Authority Key Identifier: keyid:6D:1A:B5:85:61:FC:A8:53:49:B3:44:B3:CC:AB:AF:93:18:D4:9F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/3132352e3235342e3136382e302f32312d3231203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 125.254.168.0/21 Signature Algorithm: sha256WithRSAEncryption 25:5c:17:4f:94:35:3a:cf:92:a5:29:a9:b3:be:b2:98:67:22: 22:41:00:2b:05:73:99:b5:6c:b1:73:96:d6:45:a1:12:50:b7: 77:c6:cd:ed:b6:91:19:d7:be:86:22:df:0d:04:fe:82:8a:0f: c5:c6:db:6f:98:b5:45:8d:ac:d7:11:09:6b:5a:a1:9c:e9:2c: fa:a0:00:ad:99:5e:f5:71:01:2a:e5:26:d3:3f:f6:8d:54:02: f6:4c:8d:f7:87:48:20:5d:0e:46:ba:31:07:81:2b:9c:85:4c: 60:e7:52:03:b0:48:eb:df:1d:d0:92:30:ad:4d:37:7f:90:5d: a1:4a:c6:0e:47:fb:85:c7:ed:6f:b1:bc:5c:25:e3:f7:34:e1: 36:b8:ba:76:7f:40:8d:62:ed:0c:24:99:4a:8d:0f:9a:15:7e: 62:3a:89:a8:e2:83:12:0f:32:b9:12:3a:74:2f:06:7e:a7:51: 63:11:76:e9:b8:55:6d:0e:ee:80:24:31:14:48:bd:47:dd:39: 94:b5:b1:fd:bc:2b:22:da:3e:b2:68:60:75:21:c5:10:20:7d: ed:be:75:73:e9:3a:f1:fb:31:ee:fb:53:e2:f5:e3:7b:31:6b: 1e:a8:c9:bf:db:a3:da:e7:9f:3f:0b:d9:6f:34:39:32:ef:36: da:3a:13:7f -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUNeNdjEbYGVsv+oZQSH4i2rwE6uMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQxQUI1ODU2MUZDQTg1MzQ5QjM0NEIzQ0NBQkFGOTMx OEQ0OUZBRjAeFw0yNjA1MTMwMTQ4MjhaFw0yNzA1MTIwMTUzMjhaMDMxMTAvBgNV BAMTKERGNzU4RDU4MDk1MzdGRDBCOUY4NDRGRDY4NUU5MkExNjhDNTIxNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8ehMJwdpq8FE0XdVto0mNcBT1 ts9UY7idWekNzVUzjvR7A7Y8VCpbKXk/aOaW0zSmyR+k5xQ3T1IWeVdlBqSAQ9zm y0wpHCbJoKi2X5ZmlZFcbVHZUMVh08AWZIYuc138svK9gfBMjBwHXYvKi9aooOUh 9s+UOeqLswqHNaoRehPMtwg9kbpMvX2Wrjbqxxnj8gFG4nkFZ1ExZeHYUhl8qCYM y12KMI5/QIoGR00sQcrcsk0o3qeBd6eRQeyb3b0FwGex6Xe/wHoaP3+eTBKAlnp4 t4xsPyPeYckmUIPuIsEPdVnz8q7baGKPWwr0xRlps6z50yZX3StGdzninYgrAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU33WNWAlTf9C5+ET9aF6SoWjFIVMwHwYDVR0j BBgwFoAUbRq1hWH8qFNJs0SzzKuvkxjUn68wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5NDIxMDg3NDU0MDAzNS8wLzZEMUFCNTg1NjFGQ0E4NTM0OUIzNDRCM0NDQUJB RjkzMThENDlGQUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkQxQUI1ODU2MUZDQTg1MzQ5QjM0NEIzQ0NBQkFGOTMxOEQ0OUZBRi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5ODQ5NDIxMDg3NDU0MDAzNS8wLzMxMzIzNTJlMzIz NTM0MmUzMTM2MzgyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA33+qDANBgkqhkiG9w0BAQsFAAOCAQEAJVwXT5Q1Os+SpSmps76ymGci IkEAKwVzmbVssXOW1kWhElC3d8bN7baRGde+hiLfDQT+gooPxcbbb5i1RY2s1xEJ a1qhnOks+qAArZle9XEBKuUm0z/2jVQC9kyN94dIIF0ORroxB4ErnIVMYOdSA7BI 698d0JIwrU03f5BdoUrGDkf7hcftb7G8XCXj9zThNri6dn9AjWLtDCSZSo0PmhV+ YjqJqOKDEg8yuRI6dC8GfqdRYxF26bhVbQ7ugCQxFEi9R905lLWx/bwrIto+smhg dSHFECB97b51c+k68fsx7vtT4vXjezFrHqjJv9uj2uefPwvZbzQ5Mu822joTfw== -----END CERTIFICATE-----Generated at Wed May 13 14:58:49 2026 by rpki-client