$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101324342530146307/0/3132312e34362e3139362e302f32322d3232203d3e20313430323932.roa File: 3132312e34362e3139362e302f32322d3232203d3e20313430323932.roa (raw, json) Hash identifier: O/AD3qSU6wTIgj4hkNfIn+Jeen/941RJSXGvoa481lc= Subject key identifier: 80:30:32:BF:49:6A:7E:0A:94:B1:EC:97:C3:32:29:7C:DC:D8:40:F8 Certificate issuer: /CN=A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F Certificate serial: 36093810C95DDAF469983C47F2B8184CFDD7F07A Authority key identifier: A5:F5:79:FD:3B:40:DB:BD:E4:0D:F6:2D:7A:EC:71:5C:0E:93:37:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/3132312e34362e3139362e302f32322d3232203d3e20313430323932.roa Signing time: Tue 28 Apr 2026 02:30:29 +0000 ROA not before: Tue 28 Apr 2026 02:25:29 +0000 ROA not after: Tue 27 Apr 2027 02:30:29 +0000 asID: 140292 IP address blocks: 121.46.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:09:38:10:c9:5d:da:f4:69:98:3c:47:f2:b8:18:4c:fd:d7:f0:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F Validity Not Before: Apr 28 02:25:29 2026 GMT Not After : Apr 27 02:30:29 2027 GMT Subject: CN=803032BF496A7E0A94B1EC97C332297CDCD840F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4f:cd:66:e5:d5:b5:52:94:13:c8:9a:04:29: 21:2b:dc:1f:38:32:21:ae:e5:78:b4:3b:2d:50:d7: 59:45:00:72:98:64:3a:0b:3c:75:e4:19:8e:fc:c7: f4:5b:88:8d:ff:1a:56:9f:57:10:9b:95:43:26:45: 8b:73:ed:81:69:72:55:6e:11:02:76:69:6c:16:bd: d6:48:8a:bd:e7:00:fa:e8:3c:a9:8e:2a:e8:0f:8a: 84:14:3a:83:e1:5d:9a:61:e1:0d:60:24:47:87:e5: 3f:73:78:0b:7c:99:3c:46:d4:b1:38:f8:0c:fa:de: 7b:3c:0f:2a:39:3e:a7:2d:db:b1:66:3f:7b:01:c5: 09:b1:08:fc:bf:89:af:36:84:a1:23:87:5a:a1:a1: 24:98:24:1e:2c:47:fb:e6:ac:ed:af:8a:fa:8d:ef: 79:02:44:0d:21:c8:c5:08:1f:b8:df:d7:fc:ee:16: 89:d6:18:8d:bf:3a:74:07:59:25:0a:41:30:c7:07: 7a:94:9a:c3:f4:9b:56:04:f7:5d:2d:6f:d8:21:a0: 3f:e6:ec:61:7a:6d:85:46:d5:53:25:2a:eb:55:d8: aa:a6:d0:bd:13:4d:29:9d:5a:c2:23:03:d4:0d:09: 28:e6:0d:10:1a:fa:0b:02:5d:6a:0e:66:b1:2d:ac: 8c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:30:32:BF:49:6A:7E:0A:94:B1:EC:97:C3:32:29:7C:DC:D8:40:F8 X509v3 Authority Key Identifier: keyid:A5:F5:79:FD:3B:40:DB:BD:E4:0D:F6:2D:7A:EC:71:5C:0E:93:37:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/3132312e34362e3139362e302f32322d3232203d3e20313430323932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.46.196.0/22 Signature Algorithm: sha256WithRSAEncryption 86:fe:75:fe:db:d8:b2:df:5c:30:9b:04:40:ea:b1:96:49:84: 71:a1:39:7b:43:27:f6:8a:1c:49:99:fc:f2:51:fe:7d:12:4f: c3:27:10:03:0a:c7:78:3e:04:a9:97:24:7f:68:10:51:14:a2: 41:8f:e7:3f:e2:62:34:ca:59:a4:1f:37:d8:03:5b:c8:0d:48: fa:71:db:6a:9c:bf:b3:17:8a:ef:80:cd:17:c9:0a:21:c7:96: 62:83:54:77:2d:88:e9:b5:c4:86:e2:d5:c9:66:03:87:94:f4: dc:06:7a:62:da:88:db:c2:f1:08:cc:f1:ef:9a:f0:17:f7:ff: 0c:09:b4:76:bc:a9:b7:37:d6:e7:a7:37:2f:7b:27:04:5f:ce: db:04:b5:8d:62:1f:fe:e0:ba:04:45:61:ec:28:66:4e:c4:a4: 38:a5:c3:1c:1c:cf:da:d4:7a:16:68:6c:9b:1b:7f:ed:d2:9e: 82:4e:a4:64:64:d6:20:aa:b2:dd:c0:72:63:a8:e2:48:94:72: 4b:47:f1:68:69:b7:e9:4f:62:d3:a0:a4:71:35:62:70:70:df: cb:f6:df:72:4a:6f:d7:9e:a4:09:cc:cc:0d:89:32:ac:8d:96: 05:84:ca:70:c9:af:6e:57:c1:ed:28:b0:94:cb:5b:88:be:f1: 75:0a:6b:66 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUNgk4EMld2vRpmDxH8rgYTP3X8HowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVGNTc5RkQzQjQwREJCREU0MERGNjJEN0FFQzcxNUMw RTkzMzczRjAeFw0yNjA0MjgwMjI1MjlaFw0yNzA0MjcwMjMwMjlaMDMxMTAvBgNV BAMTKDgwMzAzMkJGNDk2QTdFMEE5NEIxRUM5N0MzMzIyOTdDRENEODQwRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrT81m5dW1UpQTyJoEKSEr3B84 MiGu5Xi0Oy1Q11lFAHKYZDoLPHXkGY78x/RbiI3/GlafVxCblUMmRYtz7YFpclVu EQJ2aWwWvdZIir3nAProPKmOKugPioQUOoPhXZph4Q1gJEeH5T9zeAt8mTxG1LE4 +Az63ns8Dyo5Pqct27FmP3sBxQmxCPy/ia82hKEjh1qhoSSYJB4sR/vmrO2vivqN 73kCRA0hyMUIH7jf1/zuFonWGI2/OnQHWSUKQTDHB3qUmsP0m1YE910tb9ghoD/m 7GF6bYVG1VMlKutV2Kqm0L0TTSmdWsIjA9QNCSjmDRAa+gsCXWoOZrEtrIxlAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUgDAyv0lqfgqUseyXwzIpfNzYQPgwHwYDVR0j BBgwFoAUpfV5/TtA273kDfYteuxxXA6TNz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTMyNDM0MjUzMDE0NjMwNy8wL0E1RjU3OUZEM0I0MERCQkRFNDBERjYyRDdBRUM3 MTVDMEU5MzM3M0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTVGNTc5RkQzQjQwREJCREU0MERGNjJEN0FFQzcxNUMwRTkzMzczRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMDEzMjQzNDI1MzAxNDYzMDcvMC8zMTMyMzEyZTM0 MzYyZTMxMzkzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzMDMyMzkzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAnkuxDANBgkqhkiG9w0BAQsFAAOCAQEAhv51/tvYst9cMJsEQOqx lkmEcaE5e0Mn9oocSZn88lH+fRJPwycQAwrHeD4EqZckf2gQURSiQY/nP+JiNMpZ pB832ANbyA1I+nHbapy/sxeK74DNF8kKIceWYoNUdy2I6bXEhuLVyWYDh5T03AZ6 YtqI28LxCMzx75rwF/f/DAm0dryptzfW56c3L3snBF/O2wS1jWIf/uC6BEVh7Chm TsSkOKXDHBzP2tR6Fmhsmxt/7dKegk6kZGTWIKqy3cByY6jiSJRyS0fxaGm36U9i 06CkcTVicHDfy/bfckpv156kCczMDYkyrI2WBYTKcMmvblfB7SiwlMtbiL7xdQpr Zg== -----END CERTIFICATE-----Generated at Wed May 13 19:42:18 2026 by rpki-client