$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099364928323584001/0/3132302e3133322e33362e302f32322d3232203d3e203233373234.roa File: 3132302e3133322e33362e302f32322d3232203d3e203233373234.roa (raw, json) Hash identifier: 4XjR2vaiCv4/KLH16fmDdK+5xDx6lGWeHO2wv2/7OHM= Subject key identifier: BC:EA:DF:98:48:75:36:28:D1:DC:D5:AE:01:27:61:30:6E:7D:D3:0D Certificate issuer: /CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Certificate serial: 5141733AC37F37D3AAFFA8B04FFB92DDF64DB6A0 Authority key identifier: 14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/3132302e3133322e33362e302f32322d3232203d3e203233373234.roa Signing time: Tue 28 Apr 2026 01:53:18 +0000 ROA not before: Tue 28 Apr 2026 01:48:18 +0000 ROA not after: Tue 27 Apr 2027 01:53:18 +0000 asID: 23724 IP address blocks: 120.132.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:41:73:3a:c3:7f:37:d3:aa:ff:a8:b0:4f:fb:92:dd:f6:4d:b6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Validity Not Before: Apr 28 01:48:18 2026 GMT Not After : Apr 27 01:53:18 2027 GMT Subject: CN=BCEADF9848753628D1DCD5AE012761306E7DD30D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3d:35:22:cb:4e:a9:00:e7:ac:a8:f2:06:da: 69:0c:5d:f2:2e:e4:3a:84:ca:08:92:30:23:89:49: 2a:94:57:26:de:51:af:92:ae:13:68:85:8d:9d:b5: 1c:02:3c:3d:2c:99:7a:db:c0:50:1e:97:1b:a1:82: 06:86:48:54:79:49:5f:e8:72:73:30:2e:52:10:bb: b2:26:bc:b2:24:1c:ed:57:93:48:16:d3:c5:27:38: 89:85:0c:78:b2:ab:ab:3c:f8:dd:06:2e:58:b0:b6: 11:ac:60:6a:a6:a7:16:c4:23:99:5f:c1:dd:e2:4f: e5:0d:62:4c:5b:b5:60:a4:3d:dc:83:b5:c9:8c:32: a6:c6:c9:b1:6c:22:31:f0:1a:2f:9b:2f:16:81:8a: 83:a3:ef:a3:d7:5b:eb:cf:4e:2e:d6:d4:ad:f8:07: f3:de:4e:da:f0:e8:46:63:0f:ad:1f:f6:88:15:0a: 52:b4:01:8e:b8:2a:81:49:81:97:a5:76:b8:4d:86: 5b:f5:e8:81:24:22:8e:6e:aa:62:9b:f4:2c:51:a9: 58:fe:e1:ee:39:12:c3:bf:90:95:d7:28:19:df:dc: 5f:f0:8b:b2:79:57:c0:ee:94:f5:9f:ca:5e:c4:67: 2f:7c:a6:ed:15:20:a0:55:c9:37:de:60:44:5c:5e: 4f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:EA:DF:98:48:75:36:28:D1:DC:D5:AE:01:27:61:30:6E:7D:D3:0D X509v3 Authority Key Identifier: keyid:14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/3132302e3133322e33362e302f32322d3232203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.132.36.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:b4:bd:57:f9:52:c3:75:77:80:46:05:c2:2e:e1:22:94:09: 7c:44:e3:57:09:ca:3c:07:69:dd:b2:2b:58:d7:43:3c:b4:08: 3e:a5:e6:3b:a6:92:6d:9d:6f:0b:ef:8c:43:c3:e6:54:76:c7: 57:1b:dc:1f:b5:74:02:24:dd:e5:90:8c:7f:f7:65:3c:d8:dd: df:49:32:c5:16:e9:e5:6e:76:d4:90:9e:ef:ee:6f:21:4e:ff: db:40:db:f2:6f:73:92:7c:05:9e:b6:3a:47:64:39:12:cf:2e: 19:84:8f:13:c6:13:2b:c3:52:06:c4:49:08:b3:28:3b:ad:c9: a7:fe:29:60:4d:5a:32:55:87:ea:b2:4a:78:4b:eb:ef:04:94: c3:eb:0e:4c:d5:63:1a:84:b0:7a:7c:d6:fc:2d:e3:91:31:56: 61:20:07:cb:a2:9c:4c:73:c1:1a:47:32:bf:a7:0a:94:50:fe: e5:26:6c:9a:de:31:1c:c6:48:87:8c:db:a5:b5:77:e0:70:a7: 9a:1c:40:67:28:8a:a0:27:ba:e2:00:ed:00:95:8d:1b:32:3b: a6:52:44:5d:20:5a:cc:ee:f5:52:94:b8:20:11:df:02:7f:fc: 98:75:ad:80:94:39:8e:90:75:01:02:b8:28:16:f6:a8:fb:2b: 72:b4:d4:51 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUUUFzOsN/N9Oq/6iwT/uS3fZNtqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAz QkI1QzQyQjAeFw0yNjA0MjgwMTQ4MThaFw0yNzA0MjcwMTUzMThaMDMxMTAvBgNV BAMTKEJDRUFERjk4NDg3NTM2MjhEMURDRDVBRTAxMjc2MTMwNkU3REQzMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmPTUiy06pAOesqPIG2mkMXfIu 5DqEygiSMCOJSSqUVybeUa+SrhNohY2dtRwCPD0smXrbwFAelxuhggaGSFR5SV/o cnMwLlIQu7ImvLIkHO1Xk0gW08UnOImFDHiyq6s8+N0GLliwthGsYGqmpxbEI5lf wd3iT+UNYkxbtWCkPdyDtcmMMqbGybFsIjHwGi+bLxaBioOj76PXW+vPTi7W1K34 B/PeTtrw6EZjD60f9ogVClK0AY64KoFJgZeldrhNhlv16IEkIo5uqmKb9CxRqVj+ 4e45EsO/kJXXKBnf3F/wi7J5V8DulPWfyl7EZy98pu0VIKBVyTfeYERcXk/pAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUvOrfmEh1NijR3NWuASdhMG590w0wHwYDVR0j BBgwFoAUFPKuKJc0xvkiOhX0gu7XUDu1xCswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTM2NDkyODMyMzU4NDAwMS8wLzE0RjJBRTI4OTczNEM2RjkyMjNBMTVGNDgyRUVE NzUwM0JCNUM0MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAzQkI1QzQyQi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5OTM2NDkyODMyMzU4NDAwMS8wLzMxMzIzMDJlMzEz MzMyMmUzMzM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzMzM3MzIzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAniEJDANBgkqhkiG9w0BAQsFAAOCAQEAC7S9V/lSw3V3gEYFwi7hIpQJ fETjVwnKPAdp3bIrWNdDPLQIPqXmO6aSbZ1vC++MQ8PmVHbHVxvcH7V0AiTd5ZCM f/dlPNjd30kyxRbp5W521JCe7+5vIU7/20Db8m9zknwFnrY6R2Q5Es8uGYSPE8YT K8NSBsRJCLMoO63Jp/4pYE1aMlWH6rJKeEvr7wSUw+sOTNVjGoSwenzW/C3jkTFW YSAHy6KcTHPBGkcyv6cKlFD+5SZsmt4xHMZIh4zbpbV34HCnmhxAZyiKoCe64gDt AJWNGzI7plJEXSBazO71UpS4IBHfAn/8mHWtgJQ5jpB1AQK4KBb2qPsrcrTUUQ== -----END CERTIFICATE-----Generated at Wed May 13 13:02:25 2026 by rpki-client