$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101324342530146307/0/3132312e34362e3139322e302f32322d3232203d3e20313430323932.roa File: 3132312e34362e3139322e302f32322d3232203d3e20313430323932.roa (raw, json) Hash identifier: wc58+9s0xCI5qy0srFHch4c3xXfPOj0QoS2Uy2hNKzo= Subject key identifier: BD:40:DF:0D:72:DC:64:28:34:5C:15:58:9C:1D:38:1F:6B:8E:EB:77 Certificate issuer: /CN=A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F Certificate serial: 3F8D3D73293CB0144AFDF2AB0D531C04CEDE3218 Authority key identifier: A5:F5:79:FD:3B:40:DB:BD:E4:0D:F6:2D:7A:EC:71:5C:0E:93:37:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/3132312e34362e3139322e302f32322d3232203d3e20313430323932.roa Signing time: Tue 28 Apr 2026 02:30:30 +0000 ROA not before: Tue 28 Apr 2026 02:25:30 +0000 ROA not after: Tue 27 Apr 2027 02:30:30 +0000 asID: 140292 IP address blocks: 121.46.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:8d:3d:73:29:3c:b0:14:4a:fd:f2:ab:0d:53:1c:04:ce:de:32:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F Validity Not Before: Apr 28 02:25:30 2026 GMT Not After : Apr 27 02:30:30 2027 GMT Subject: CN=BD40DF0D72DC6428345C15589C1D381F6B8EEB77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:02:c9:f0:6a:70:c5:8e:fd:e8:0f:bc:47:c5: 9c:1f:bb:69:15:3e:f8:de:be:4f:22:c5:b4:78:a1: 62:85:cb:d7:cf:b9:af:99:b6:44:c6:64:93:79:c8: 7d:c8:9c:4d:98:00:7f:a5:10:e6:8e:cf:ce:88:91: 2f:17:fe:23:1c:21:7c:dd:2d:7d:06:88:c5:93:17: f3:0b:f5:a5:ef:7b:79:31:44:c8:e6:09:1d:a9:b1: 06:f3:7e:f6:85:9d:38:bc:94:55:5f:9a:b2:22:61: 90:80:a8:a7:f4:83:e4:f7:91:79:07:a6:9f:12:3b: 3f:92:15:22:de:b8:59:c3:21:ba:3d:4d:b1:36:69: 6f:fc:d7:8b:11:2c:19:5f:6f:45:db:31:8a:3b:29: 3c:03:e1:26:47:1b:d1:79:4b:40:08:48:7e:98:74: 19:51:81:46:4a:0c:10:e3:29:ff:1c:05:67:24:b6: a1:8f:13:b9:52:a7:0c:4e:ac:23:4c:e6:0d:7e:62: 37:8c:62:16:8e:09:fb:ba:af:80:bd:41:c4:16:b9: 20:49:56:b4:d5:58:e7:49:3a:52:bd:5e:a3:46:5d: 45:ef:53:9d:fe:5e:bc:4a:e1:12:99:74:7c:9a:99: 35:d1:2f:ca:59:48:e9:d0:fc:90:03:a4:38:b3:5e: 96:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:40:DF:0D:72:DC:64:28:34:5C:15:58:9C:1D:38:1F:6B:8E:EB:77 X509v3 Authority Key Identifier: keyid:A5:F5:79:FD:3B:40:DB:BD:E4:0D:F6:2D:7A:EC:71:5C:0E:93:37:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/3132312e34362e3139322e302f32322d3232203d3e20313430323932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.46.192.0/22 Signature Algorithm: sha256WithRSAEncryption 16:cf:1e:1e:75:d7:56:1d:cc:68:b5:f4:a0:95:6e:a0:89:b1: 6f:fe:4b:65:e3:f1:96:d2:5f:24:3f:72:89:71:b0:ae:0f:de: c0:ae:2a:42:28:f7:c1:63:df:f9:5a:c2:d8:80:0b:ae:fe:d9: 6a:b2:72:32:43:95:dd:d5:4a:86:ff:82:cb:43:8f:c7:26:2b: 49:e9:cd:72:ef:c5:12:7c:ee:44:b7:2e:6f:f3:da:72:f2:fc: 8d:88:e8:48:77:02:fb:6d:06:a2:ac:a2:d2:64:48:70:b6:1a: f6:ab:b7:6d:29:35:d6:40:3b:b5:3a:09:77:1c:fb:96:fc:53: 90:a6:8b:6e:be:b0:66:95:63:54:f5:30:ad:2a:72:a2:2b:b4: 1a:a5:07:25:c5:2c:fc:66:a3:d7:16:56:9f:ba:f8:42:0c:3f: 1d:5b:20:b4:87:b5:f8:5f:b4:c3:4e:a7:5f:fb:3c:13:dd:6d: 02:28:d1:7e:c4:01:75:18:4d:85:5a:d7:7f:11:a9:bf:46:b9: 90:0a:5a:73:99:59:78:f4:25:3e:b4:61:b7:17:fa:83:5a:41: 1b:1d:0e:76:21:8f:78:38:a0:b1:a1:bd:63:35:34:23:44:c5: a0:23:97:42:9b:7a:2a:66:e9:69:17:3a:6b:c5:bf:61:20:14: 36:1c:31:9a -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUP409cyk8sBRK/fKrDVMcBM7eMhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVGNTc5RkQzQjQwREJCREU0MERGNjJEN0FFQzcxNUMw RTkzMzczRjAeFw0yNjA0MjgwMjI1MzBaFw0yNzA0MjcwMjMwMzBaMDMxMTAvBgNV BAMTKEJENDBERjBENzJEQzY0MjgzNDVDMTU1ODlDMUQzODFGNkI4RUVCNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGAsnwanDFjv3oD7xHxZwfu2kV Pvjevk8ixbR4oWKFy9fPua+ZtkTGZJN5yH3InE2YAH+lEOaOz86IkS8X/iMcIXzd LX0GiMWTF/ML9aXve3kxRMjmCR2psQbzfvaFnTi8lFVfmrIiYZCAqKf0g+T3kXkH pp8SOz+SFSLeuFnDIbo9TbE2aW/814sRLBlfb0XbMYo7KTwD4SZHG9F5S0AISH6Y dBlRgUZKDBDjKf8cBWcktqGPE7lSpwxOrCNM5g1+YjeMYhaOCfu6r4C9QcQWuSBJ VrTVWOdJOlK9XqNGXUXvU53+XrxK4RKZdHyamTXRL8pZSOnQ/JADpDizXpZ9AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUvUDfDXLcZCg0XBVYnB04H2uO63cwHwYDVR0j BBgwFoAUpfV5/TtA273kDfYteuxxXA6TNz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTMyNDM0MjUzMDE0NjMwNy8wL0E1RjU3OUZEM0I0MERCQkRFNDBERjYyRDdBRUM3 MTVDMEU5MzM3M0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTVGNTc5RkQzQjQwREJCREU0MERGNjJEN0FFQzcxNUMwRTkzMzczRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMDEzMjQzNDI1MzAxNDYzMDcvMC8zMTMyMzEyZTM0 MzYyZTMxMzkzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzMDMyMzkzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAnkuwDANBgkqhkiG9w0BAQsFAAOCAQEAFs8eHnXXVh3MaLX0oJVu oImxb/5LZePxltJfJD9yiXGwrg/ewK4qQij3wWPf+VrC2IALrv7ZarJyMkOV3dVK hv+Cy0OPxyYrSenNcu/FEnzuRLcub/PacvL8jYjoSHcC+20Goqyi0mRIcLYa9qu3 bSk11kA7tToJdxz7lvxTkKaLbr6wZpVjVPUwrSpyoiu0GqUHJcUs/Gaj1xZWn7r4 Qgw/HVsgtIe1+F+0w06nX/s8E91tAijRfsQBdRhNhVrXfxGpv0a5kApac5lZePQl PrRhtxf6g1pBGx0OdiGPeDigsaG9YzU0I0TFoCOXQpt6KmbpaRc6a8W/YSAUNhwx mg== -----END CERTIFICATE-----Generated at Wed May 13 14:59:20 2026 by rpki-client