$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099364928323584001/0/3132302e3133322e33362e302f32322d3232203d3e203539303839.roa File: 3132302e3133322e33362e302f32322d3232203d3e203539303839.roa (raw, json) Hash identifier: u2YafuC08I8QVlV/WHKEmx9y0bx1Z12YHc/lbMEN1h0= Subject key identifier: 5F:02:8D:7A:94:40:B8:D3:65:4A:E6:52:51:BC:A0:40:B4:27:6F:5F Certificate issuer: /CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Certificate serial: 7DFF159E181FAD5C5ABCE46C3674B8CB0BDAD9EB Authority key identifier: 14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/3132302e3133322e33362e302f32322d3232203d3e203539303839.roa Signing time: Tue 28 Apr 2026 01:53:18 +0000 ROA not before: Tue 28 Apr 2026 01:48:18 +0000 ROA not after: Tue 27 Apr 2027 01:53:18 +0000 asID: 59089 IP address blocks: 120.132.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ff:15:9e:18:1f:ad:5c:5a:bc:e4:6c:36:74:b8:cb:0b:da:d9:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Validity Not Before: Apr 28 01:48:18 2026 GMT Not After : Apr 27 01:53:18 2027 GMT Subject: CN=5F028D7A9440B8D3654AE65251BCA040B4276F5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:30:c6:89:f9:0f:08:7d:a2:b9:fc:b5:e9:11: 34:04:b3:ab:da:9d:5e:79:f3:19:5d:97:8c:77:4c: fe:0f:84:b4:78:89:ef:15:9f:06:83:e8:db:d4:2e: 37:a9:d2:ed:a6:a6:e9:21:26:49:fa:47:39:96:12: 05:3c:52:85:98:78:cf:fb:90:41:75:86:a4:b1:88: 44:6b:53:4b:33:45:93:a3:21:dc:06:15:9f:3b:a2: 7c:1b:46:91:10:71:7f:83:59:60:7b:80:a4:77:09: 08:86:b1:e1:32:33:ad:b8:cc:5a:1b:24:e9:1c:1f: e8:5b:a1:a6:26:ee:7f:6c:9d:0c:d0:be:9f:49:f5: 23:b6:ff:c4:19:a3:7b:7a:38:bb:e9:f8:0d:dc:d6: fb:ee:bc:2f:b1:91:8b:99:da:3d:fc:51:e0:02:f5: 42:81:0e:f7:e9:1a:ae:fa:da:49:46:99:55:7f:3e: 44:74:46:3f:b6:d2:93:8c:94:74:19:64:f1:78:55: 7f:5a:63:26:26:fd:b5:99:36:01:df:a7:cf:55:eb: 7c:07:e2:e5:36:f7:64:de:7e:b8:93:92:fd:1f:e0: fc:e8:18:00:cd:85:51:db:72:5d:97:7e:97:15:86: 1b:c0:07:36:aa:e1:e5:5b:71:18:ff:8f:2e:8e:d7: 29:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:02:8D:7A:94:40:B8:D3:65:4A:E6:52:51:BC:A0:40:B4:27:6F:5F X509v3 Authority Key Identifier: keyid:14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/3132302e3133322e33362e302f32322d3232203d3e203539303839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.132.36.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:8f:70:52:7d:f3:fb:6c:a3:10:a1:54:69:fe:22:fe:6f:36: f1:fc:20:fe:24:fc:e7:8e:32:0d:6b:68:92:b4:f6:6f:96:9a: cd:65:8f:e7:9a:03:e1:d4:af:2c:41:81:9f:bd:5a:56:85:57: f2:f3:75:ab:dc:ea:18:23:c2:35:f5:57:6f:68:99:1f:af:e3: 4c:ce:72:bd:d6:79:67:4f:ec:45:5a:56:b4:33:2f:be:14:25: 1a:a4:e0:fc:32:c5:74:50:04:3f:d8:4d:3e:62:4c:b1:05:3a: 7d:80:7d:f7:07:dd:27:11:cd:d2:28:75:30:bf:45:21:9a:14: 3a:c9:8a:12:91:09:20:3c:a4:28:6a:77:35:8d:b2:46:d3:81: e8:21:d9:76:a8:9c:9c:ae:e3:2a:83:e7:0b:35:f7:ab:7f:91: 78:7f:2c:ea:32:e3:99:25:5a:8e:e5:da:c0:a7:7f:01:d2:d6: bc:d8:02:35:60:6e:ad:62:4d:87:63:6a:25:92:c5:9f:74:7c: c1:6e:c0:87:cd:38:b7:9f:8e:5a:0b:d7:c0:6b:03:a0:65:0e: ba:aa:ba:3c:8c:a2:45:fc:61:96:81:20:ab:4c:4f:4f:d3:74: 3d:94:37:71:8d:d5:47:5c:3e:c6:88:7a:23:50:93:e4:e8:b7: 62:41:2a:c5 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUff8VnhgfrVxavORsNnS4ywva2eswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAz QkI1QzQyQjAeFw0yNjA0MjgwMTQ4MThaFw0yNzA0MjcwMTUzMThaMDMxMTAvBgNV BAMTKDVGMDI4RDdBOTQ0MEI4RDM2NTRBRTY1MjUxQkNBMDQwQjQyNzZGNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0MMaJ+Q8IfaK5/LXpETQEs6va nV558xldl4x3TP4PhLR4ie8VnwaD6NvULjep0u2mpukhJkn6RzmWEgU8UoWYeM/7 kEF1hqSxiERrU0szRZOjIdwGFZ87onwbRpEQcX+DWWB7gKR3CQiGseEyM624zFob JOkcH+hboaYm7n9snQzQvp9J9SO2/8QZo3t6OLvp+A3c1vvuvC+xkYuZ2j38UeAC 9UKBDvfpGq762klGmVV/PkR0Rj+20pOMlHQZZPF4VX9aYyYm/bWZNgHfp89V63wH 4uU292TefriTkv0f4PzoGADNhVHbcl2XfpcVhhvABzaq4eVbcRj/jy6O1ykFAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUXwKNepRAuNNlSuZSUbygQLQnb18wHwYDVR0j BBgwFoAUFPKuKJc0xvkiOhX0gu7XUDu1xCswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTM2NDkyODMyMzU4NDAwMS8wLzE0RjJBRTI4OTczNEM2RjkyMjNBMTVGNDgyRUVE NzUwM0JCNUM0MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAzQkI1QzQyQi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5OTM2NDkyODMyMzU4NDAwMS8wLzMxMzIzMDJlMzEz MzMyMmUzMzM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzOTMwMzgzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAniEJDANBgkqhkiG9w0BAQsFAAOCAQEADo9wUn3z+2yjEKFUaf4i/m82 8fwg/iT8544yDWtokrT2b5aazWWP55oD4dSvLEGBn71aVoVX8vN1q9zqGCPCNfVX b2iZH6/jTM5yvdZ5Z0/sRVpWtDMvvhQlGqTg/DLFdFAEP9hNPmJMsQU6fYB99wfd JxHN0ih1ML9FIZoUOsmKEpEJIDykKGp3NY2yRtOB6CHZdqicnK7jKoPnCzX3q3+R eH8s6jLjmSVajuXawKd/AdLWvNgCNWBurWJNh2NqJZLFn3R8wW7Ah804t5+OWgvX wGsDoGUOuqq6PIyiRfxhloEgq0xPT9N0PZQ3cY3VR1w+xoh6I1CT5Oi3YkEqxQ== -----END CERTIFICATE-----Generated at Wed May 13 14:17:03 2026 by rpki-client