$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101324342530146307/0/3132312e34362e3230302e302f32322d3232203d3e20313430323932.roa File: 3132312e34362e3230302e302f32322d3232203d3e20313430323932.roa (raw, json) Hash identifier: 8xs+dUd+uQdNQZJjuvb+nFvO1wt2heC5dsLAy2/mChI= Subject key identifier: 16:B0:BB:F1:E7:EF:D0:84:38:A0:41:2F:2C:FC:C6:47:8A:7C:DB:AA Certificate issuer: /CN=A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F Certificate serial: 38BC7A7E80E87F5391B874917FBCFD32808942C9 Authority key identifier: A5:F5:79:FD:3B:40:DB:BD:E4:0D:F6:2D:7A:EC:71:5C:0E:93:37:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/3132312e34362e3230302e302f32322d3232203d3e20313430323932.roa Signing time: Tue 28 Apr 2026 02:30:30 +0000 ROA not before: Tue 28 Apr 2026 02:25:30 +0000 ROA not after: Tue 27 Apr 2027 02:30:30 +0000 asID: 140292 IP address blocks: 121.46.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:32:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:bc:7a:7e:80:e8:7f:53:91:b8:74:91:7f:bc:fd:32:80:89:42:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F Validity Not Before: Apr 28 02:25:30 2026 GMT Not After : Apr 27 02:30:30 2027 GMT Subject: CN=16B0BBF1E7EFD08438A0412F2CFCC6478A7CDBAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4d:fe:5f:80:66:0c:87:56:9f:a4:fd:81:39: 1a:54:a7:8f:10:50:7b:d5:9a:12:9b:f3:9f:8a:28: bd:5e:37:4a:55:ea:7a:fa:d2:3e:af:12:7e:e9:73: 82:a6:1f:da:cf:3a:ad:da:18:d9:0b:28:c3:c2:76: a9:fd:f9:b2:fd:28:bf:8b:ac:da:d5:93:5e:48:bc: 26:78:e9:ef:e4:93:e8:44:35:d7:fb:50:51:6e:22: fb:e8:5d:6b:b5:19:ce:fe:61:ef:92:6f:3d:d5:59: fc:2f:de:fb:d4:6a:6d:9e:c1:4b:ea:e9:7f:3b:e7: b5:f2:62:c1:8f:b4:c2:2e:8e:d0:de:59:4e:0e:b0: d8:d4:7f:26:51:75:d2:6d:a9:82:fa:66:e0:89:29: 5e:b4:b2:d5:15:36:12:d0:e4:98:03:ea:42:79:34: 85:5f:e9:89:63:36:fe:93:8b:9d:9f:6c:b3:11:47: fc:53:e3:7f:f0:93:83:2c:0f:40:62:fa:e9:d1:d0: 74:f8:0a:05:72:cf:3a:a6:5d:05:1b:fa:ab:c3:99: d7:01:c5:bf:ea:d2:06:eb:62:19:4f:6d:d7:4b:a4: 83:f8:68:c7:36:b3:d3:53:2f:03:e9:5a:4c:08:27: c8:57:c5:11:0c:cc:7d:9f:34:b6:8d:67:f8:45:21: c9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B0:BB:F1:E7:EF:D0:84:38:A0:41:2F:2C:FC:C6:47:8A:7C:DB:AA X509v3 Authority Key Identifier: keyid:A5:F5:79:FD:3B:40:DB:BD:E4:0D:F6:2D:7A:EC:71:5C:0E:93:37:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/3132312e34362e3230302e302f32322d3232203d3e20313430323932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.46.200.0/22 Signature Algorithm: sha256WithRSAEncryption 68:f0:c7:25:c9:19:4a:ea:4b:72:28:78:14:1b:3e:7e:47:39: 03:41:5f:04:4f:7b:75:38:4b:01:9c:24:2e:59:b3:d8:e2:ce: c6:5e:67:a0:44:1b:cc:7e:45:17:34:29:94:b7:30:bc:d7:a3: ca:23:44:4d:5e:95:48:78:97:57:e1:9e:d3:70:1b:e6:ce:64: 45:78:83:f8:93:63:f8:47:c3:cc:2c:d8:e1:dd:c8:80:bd:9b: 83:19:76:ee:56:1d:79:5c:9f:07:fe:78:bb:3b:67:9d:89:98: a9:e2:3f:57:0f:81:52:f3:40:f1:6d:69:3d:5e:7d:ff:b7:1a: 19:60:9c:7a:2e:46:06:0e:01:6f:a0:4a:bf:27:ee:66:aa:ea: 85:2c:98:a9:02:f8:ff:c1:c4:6c:48:be:4d:a8:f2:8f:13:81: 71:fc:e8:23:8c:50:86:77:b6:3c:eb:0a:7f:64:b3:68:88:e5: a4:b4:2c:03:35:51:81:9d:e5:e7:be:51:6e:09:ad:b9:24:2f: a9:1d:43:82:dd:32:a6:b4:b6:45:9b:d1:b8:32:c5:e7:40:a0: 33:e7:14:de:59:eb:19:b8:cc:85:ba:6f:11:49:92:18:c5:2f: 53:0e:1b:eb:98:2e:e4:a9:ed:7c:95:b4:bc:96:bc:f8:1b:c0: 24:cf:79:12 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUOLx6foDof1ORuHSRf7z9MoCJQskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVGNTc5RkQzQjQwREJCREU0MERGNjJEN0FFQzcxNUMw RTkzMzczRjAeFw0yNjA0MjgwMjI1MzBaFw0yNzA0MjcwMjMwMzBaMDMxMTAvBgNV BAMTKDE2QjBCQkYxRTdFRkQwODQzOEEwNDEyRjJDRkNDNjQ3OEE3Q0RCQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmTf5fgGYMh1afpP2BORpUp48Q UHvVmhKb85+KKL1eN0pV6nr60j6vEn7pc4KmH9rPOq3aGNkLKMPCdqn9+bL9KL+L rNrVk15IvCZ46e/kk+hENdf7UFFuIvvoXWu1Gc7+Ye+Sbz3VWfwv3vvUam2ewUvq 6X8757XyYsGPtMIujtDeWU4OsNjUfyZRddJtqYL6ZuCJKV60stUVNhLQ5JgD6kJ5 NIVf6YljNv6Ti52fbLMRR/xT43/wk4MsD0Bi+unR0HT4CgVyzzqmXQUb+qvDmdcB xb/q0gbrYhlPbddLpIP4aMc2s9NTLwPpWkwIJ8hXxREMzH2fNLaNZ/hFIcnnAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUFrC78efv0IQ4oEEvLPzGR4p826owHwYDVR0j BBgwFoAUpfV5/TtA273kDfYteuxxXA6TNz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTMyNDM0MjUzMDE0NjMwNy8wL0E1RjU3OUZEM0I0MERCQkRFNDBERjYyRDdBRUM3 MTVDMEU5MzM3M0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTVGNTc5RkQzQjQwREJCREU0MERGNjJEN0FFQzcxNUMwRTkzMzczRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMDEzMjQzNDI1MzAxNDYzMDcvMC8zMTMyMzEyZTM0 MzYyZTMyMzAzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzMDMyMzkzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAnkuyDANBgkqhkiG9w0BAQsFAAOCAQEAaPDHJckZSupLcih4FBs+ fkc5A0FfBE97dThLAZwkLlmz2OLOxl5noEQbzH5FFzQplLcwvNejyiNETV6VSHiX V+Ge03Ab5s5kRXiD+JNj+EfDzCzY4d3IgL2bgxl27lYdeVyfB/54uztnnYmYqeI/ Vw+BUvNA8W1pPV59/7caGWCcei5GBg4Bb6BKvyfuZqrqhSyYqQL4/8HEbEi+Tajy jxOBcfzoI4xQhne2POsKf2SzaIjlpLQsAzVRgZ3l575RbgmtuSQvqR1Dgt0yprS2 RZvRuDLF50CgM+cU3lnrGbjMhbpvEUmSGMUvUw4b65gu5KntfJW0vJa8+BvAJM95 Eg== -----END CERTIFICATE-----Generated at Wed May 13 14:10:55 2026 by rpki-client