$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101324342530146307/0/3132312e34362e3139322e302f32322d3232203d3e20313430373137.roa File: 3132312e34362e3139322e302f32322d3232203d3e20313430373137.roa (raw, json) Hash identifier: 5wawcPsM5m80HU28KarQtD66H36M4Wp3DiAa4Kkd7FM= Subject key identifier: CB:22:FB:B6:07:44:BA:37:C1:03:1D:4F:F1:67:58:60:E2:77:B1:DA Certificate issuer: /CN=A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F Certificate serial: 2864239DA9D2FE8074630A6A44A950C79B645065 Authority key identifier: A5:F5:79:FD:3B:40:DB:BD:E4:0D:F6:2D:7A:EC:71:5C:0E:93:37:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/3132312e34362e3139322e302f32322d3232203d3e20313430373137.roa Signing time: Tue 28 Apr 2026 02:30:30 +0000 ROA not before: Tue 28 Apr 2026 02:25:30 +0000 ROA not after: Tue 27 Apr 2027 02:30:30 +0000 asID: 140717 IP address blocks: 121.46.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:64:23:9d:a9:d2:fe:80:74:63:0a:6a:44:a9:50:c7:9b:64:50:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F Validity Not Before: Apr 28 02:25:30 2026 GMT Not After : Apr 27 02:30:30 2027 GMT Subject: CN=CB22FBB60744BA37C1031D4FF1675860E277B1DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:91:b6:39:5c:9c:39:ca:94:ba:85:ae:67:5a: d2:38:17:1b:3d:64:fa:54:8c:9e:89:ee:1e:fb:7d: e7:99:05:97:2c:60:48:f8:ea:82:de:6f:5f:62:1c: 44:91:9b:cb:ef:d0:0d:00:b7:69:d1:10:4c:9c:fc: 55:51:37:24:f5:0d:80:fe:44:4f:9e:b6:c3:1f:59: d9:a8:c2:bb:ee:2e:0b:82:06:fe:51:b0:11:4c:de: ce:94:ff:55:7e:02:f3:27:62:c8:96:ff:42:89:2c: 30:58:6b:87:83:85:9a:82:b4:22:a1:3b:87:8e:e8: 44:4f:3e:31:c6:5f:06:90:86:ac:53:d1:37:03:48: e3:4d:6d:18:62:44:d2:14:8a:0e:8a:33:76:5a:50: b1:7c:58:47:d2:f8:94:2f:9b:42:8a:20:9d:d4:fd: 85:31:d8:80:e9:27:fb:f7:20:67:c5:97:6d:94:6e: 87:f2:69:f7:ff:28:9c:3b:60:21:5e:7b:da:de:79: bd:7f:48:19:5b:7c:f9:88:65:2c:bd:ea:c5:93:64: 0f:32:2e:bc:68:59:ee:2b:fb:df:ae:e2:19:b4:02: dc:56:a0:2b:bb:94:5f:91:8d:3c:5f:29:88:dd:36: e6:22:0d:af:48:38:7f:e7:2a:ba:58:88:c2:3f:6c: f9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:22:FB:B6:07:44:BA:37:C1:03:1D:4F:F1:67:58:60:E2:77:B1:DA X509v3 Authority Key Identifier: keyid:A5:F5:79:FD:3B:40:DB:BD:E4:0D:F6:2D:7A:EC:71:5C:0E:93:37:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/3132312e34362e3139322e302f32322d3232203d3e20313430373137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.46.192.0/22 Signature Algorithm: sha256WithRSAEncryption 41:ba:07:57:c0:74:cc:3a:90:b5:82:e2:77:f2:da:32:64:9a: eb:72:49:43:1e:ab:4c:1f:e0:e5:66:3e:57:84:63:54:39:f9: 89:19:5b:f8:e6:a3:d7:07:11:49:98:7f:0b:e6:e4:ee:84:51: a3:0f:22:12:31:6e:58:12:a6:4e:ab:09:4a:12:be:a5:db:d7: 1b:6d:92:aa:94:40:19:64:6e:fc:a1:b0:6e:d5:a3:dd:cf:ed: 28:48:ba:a3:ef:05:78:91:d3:78:4e:6e:40:0e:a3:fd:70:37: 59:76:38:fd:f3:19:e9:19:35:ef:44:8d:00:2f:c7:c6:88:8f: 89:ad:e5:2c:40:96:93:28:1a:02:35:cf:5b:55:a8:6b:f2:e4: a8:3f:60:cb:00:90:4c:9a:cc:4a:ff:5a:d4:5c:f8:30:29:64: f3:5f:27:f6:ec:2e:cc:57:65:f7:74:b6:b9:56:8f:a4:6a:b9: 3d:8c:92:58:5e:e8:7c:a9:c6:c9:63:51:36:6c:76:e1:bf:3c: 74:06:64:52:1f:79:1d:e1:aa:85:a3:02:bb:09:b3:bf:8f:90: e9:af:19:34:bb:90:7c:9b:1d:f2:8d:c9:f8:d1:7b:6c:38:f2: 66:d9:52:72:e8:94:0f:14:61:08:60:dc:31:2e:51:d1:31:36: 64:27:5a:3e -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUKGQjnanS/oB0YwpqRKlQx5tkUGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVGNTc5RkQzQjQwREJCREU0MERGNjJEN0FFQzcxNUMw RTkzMzczRjAeFw0yNjA0MjgwMjI1MzBaFw0yNzA0MjcwMjMwMzBaMDMxMTAvBgNV BAMTKENCMjJGQkI2MDc0NEJBMzdDMTAzMUQ0RkYxNjc1ODYwRTI3N0IxREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmkbY5XJw5ypS6ha5nWtI4Fxs9 ZPpUjJ6J7h77feeZBZcsYEj46oLeb19iHESRm8vv0A0At2nREEyc/FVRNyT1DYD+ RE+etsMfWdmowrvuLguCBv5RsBFM3s6U/1V+AvMnYsiW/0KJLDBYa4eDhZqCtCKh O4eO6ERPPjHGXwaQhqxT0TcDSONNbRhiRNIUig6KM3ZaULF8WEfS+JQvm0KKIJ3U /YUx2IDpJ/v3IGfFl22Ubofyaff/KJw7YCFee9reeb1/SBlbfPmIZSy96sWTZA8y LrxoWe4r+9+u4hm0AtxWoCu7lF+RjTxfKYjdNuYiDa9IOH/nKrpYiMI/bPkjAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUyyL7tgdEujfBAx1P8WdYYOJ3sdowHwYDVR0j BBgwFoAUpfV5/TtA273kDfYteuxxXA6TNz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTMyNDM0MjUzMDE0NjMwNy8wL0E1RjU3OUZEM0I0MERCQkRFNDBERjYyRDdBRUM3 MTVDMEU5MzM3M0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTVGNTc5RkQzQjQwREJCREU0MERGNjJEN0FFQzcxNUMwRTkzMzczRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMDEzMjQzNDI1MzAxNDYzMDcvMC8zMTMyMzEyZTM0 MzYyZTMxMzkzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzMDM3MzEzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAnkuwDANBgkqhkiG9w0BAQsFAAOCAQEAQboHV8B0zDqQtYLid/La MmSa63JJQx6rTB/g5WY+V4RjVDn5iRlb+Oaj1wcRSZh/C+bk7oRRow8iEjFuWBKm TqsJShK+pdvXG22SqpRAGWRu/KGwbtWj3c/tKEi6o+8FeJHTeE5uQA6j/XA3WXY4 /fMZ6Rk170SNAC/HxoiPia3lLECWkygaAjXPW1Woa/LkqD9gywCQTJrMSv9a1Fz4 MClk818n9uwuzFdl93S2uVaPpGq5PYySWF7ofKnGyWNRNmx24b88dAZkUh95HeGq haMCuwmzv4+Q6a8ZNLuQfJsd8o3J+NF7bDjyZtlScuiUDxRhCGDcMS5R0TE2ZCda Pg== -----END CERTIFICATE-----Generated at Wed May 13 17:32:58 2026 by rpki-client