$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101324342530146307/0/3132312e34362e3230302e302f32322d3232203d3e20313430373137.roa File: 3132312e34362e3230302e302f32322d3232203d3e20313430373137.roa (raw, json) Hash identifier: EEb5FwKgW5dHQUxB859/L0aDnU2++rdkRtR6F19ReF8= Subject key identifier: C3:96:7B:2E:C3:FE:78:19:06:98:2F:D7:88:36:31:3A:AD:D1:07:30 Certificate issuer: /CN=A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F Certificate serial: 564C6F646A27D6417F29B69850ACFA4D9766F023 Authority key identifier: A5:F5:79:FD:3B:40:DB:BD:E4:0D:F6:2D:7A:EC:71:5C:0E:93:37:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/3132312e34362e3230302e302f32322d3232203d3e20313430373137.roa Signing time: Tue 28 Apr 2026 02:30:29 +0000 ROA not before: Tue 28 Apr 2026 02:25:29 +0000 ROA not after: Tue 27 Apr 2027 02:30:29 +0000 asID: 140717 IP address blocks: 121.46.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:32:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:4c:6f:64:6a:27:d6:41:7f:29:b6:98:50:ac:fa:4d:97:66:f0:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F Validity Not Before: Apr 28 02:25:29 2026 GMT Not After : Apr 27 02:30:29 2027 GMT Subject: CN=C3967B2EC3FE781906982FD78836313AADD10730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b0:ab:13:53:18:99:c6:f0:29:84:4f:66:d3: 87:42:06:dd:51:1d:85:16:c7:91:c4:1e:68:a6:80: 0f:dd:4b:29:41:4d:e3:a4:67:00:29:e7:55:fb:1a: 5a:91:ca:fb:2d:42:b4:0d:0e:e4:f7:37:88:b0:19: d8:3c:37:00:ee:4e:c9:12:72:dc:29:e1:ca:ef:3c: d1:55:12:0d:62:f0:73:3e:33:32:33:ef:96:e1:10: ab:9c:6f:49:2e:5a:36:41:d7:f4:97:42:78:81:78: be:a4:fb:1c:b7:45:cc:e4:27:05:72:cb:64:96:2f: 63:2b:62:29:67:a9:9b:48:7f:06:d4:09:7e:a7:68: b2:c4:17:ad:77:1c:a6:21:63:8a:f0:a9:b1:74:92: 3f:ce:dd:c3:23:3e:8e:5b:e4:6a:09:e3:01:68:3b: f0:58:31:b0:e0:fa:b7:47:9f:39:24:71:21:ae:07: 08:17:f3:b9:81:32:3f:85:3e:47:d6:e6:80:a8:d3: 34:0b:ba:36:93:5f:61:8f:d1:d1:dc:12:cd:aa:07: 42:ca:8f:87:cb:cf:13:dd:5a:96:0c:3d:f9:b3:28: 7b:37:aa:60:e1:2d:5d:da:54:72:ac:69:61:76:b2: 92:bb:89:60:d4:8a:b7:5f:7d:75:95:6e:b2:fe:8f: 46:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:96:7B:2E:C3:FE:78:19:06:98:2F:D7:88:36:31:3A:AD:D1:07:30 X509v3 Authority Key Identifier: keyid:A5:F5:79:FD:3B:40:DB:BD:E4:0D:F6:2D:7A:EC:71:5C:0E:93:37:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/3132312e34362e3230302e302f32322d3232203d3e20313430373137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.46.200.0/22 Signature Algorithm: sha256WithRSAEncryption 63:55:ba:ba:dc:10:51:78:52:ee:c6:07:36:79:60:00:3d:87: 38:61:0f:1e:c3:c2:9d:4a:b7:a5:71:8e:58:75:68:58:11:c8: 3f:00:a4:7f:0b:fa:ca:e2:3e:24:af:ec:4d:8b:63:91:7c:ed: a3:f0:74:37:43:79:15:5d:94:32:68:c1:8c:f3:32:96:d7:37: 92:7f:54:51:39:52:41:e0:d7:4c:7c:49:7d:1b:d5:bf:5a:08: 04:2e:28:8a:e1:52:7f:2c:f0:a1:0b:6f:3d:50:bf:e9:9b:2b: 19:e3:6b:f8:2c:05:8a:26:01:c4:e9:a3:d7:80:b1:bb:fb:9d: 78:9e:cf:fa:41:e2:9e:ad:9f:83:a2:53:43:79:2a:b7:87:2d: 22:17:78:12:65:60:41:17:02:66:84:14:e4:b2:e1:5a:bd:01: bc:6f:73:6e:b7:27:45:fe:52:c3:65:eb:ee:66:6a:2c:dc:21: c4:cc:44:aa:fa:96:16:fa:5b:db:38:9e:57:9a:30:90:79:be: 25:2b:23:aa:77:97:ac:c3:69:ec:27:0e:f0:c5:a4:23:a2:b7: a1:55:43:90:65:1f:bf:06:22:ee:a6:c9:7e:00:cd:64:15:cf: eb:8a:21:00:e9:82:cc:50:a6:4b:fb:4e:fa:79:dc:a0:51:1d: 23:54:82:06 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUVkxvZGon1kF/KbaYUKz6TZdm8CMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVGNTc5RkQzQjQwREJCREU0MERGNjJEN0FFQzcxNUMw RTkzMzczRjAeFw0yNjA0MjgwMjI1MjlaFw0yNzA0MjcwMjMwMjlaMDMxMTAvBgNV BAMTKEMzOTY3QjJFQzNGRTc4MTkwNjk4MkZENzg4MzYzMTNBQUREMTA3MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdsKsTUxiZxvAphE9m04dCBt1R HYUWx5HEHmimgA/dSylBTeOkZwAp51X7GlqRyvstQrQNDuT3N4iwGdg8NwDuTskS ctwp4crvPNFVEg1i8HM+MzIz75bhEKucb0kuWjZB1/SXQniBeL6k+xy3RczkJwVy y2SWL2MrYilnqZtIfwbUCX6naLLEF613HKYhY4rwqbF0kj/O3cMjPo5b5GoJ4wFo O/BYMbDg+rdHnzkkcSGuBwgX87mBMj+FPkfW5oCo0zQLujaTX2GP0dHcEs2qB0LK j4fLzxPdWpYMPfmzKHs3qmDhLV3aVHKsaWF2spK7iWDUirdffXWVbrL+j0atAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUw5Z7LsP+eBkGmC/XiDYxOq3RBzAwHwYDVR0j BBgwFoAUpfV5/TtA273kDfYteuxxXA6TNz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTMyNDM0MjUzMDE0NjMwNy8wL0E1RjU3OUZEM0I0MERCQkRFNDBERjYyRDdBRUM3 MTVDMEU5MzM3M0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTVGNTc5RkQzQjQwREJCREU0MERGNjJEN0FFQzcxNUMwRTkzMzczRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMDEzMjQzNDI1MzAxNDYzMDcvMC8zMTMyMzEyZTM0 MzYyZTMyMzAzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzMDM3MzEzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAnkuyDANBgkqhkiG9w0BAQsFAAOCAQEAY1W6utwQUXhS7sYHNnlg AD2HOGEPHsPCnUq3pXGOWHVoWBHIPwCkfwv6yuI+JK/sTYtjkXzto/B0N0N5FV2U MmjBjPMyltc3kn9UUTlSQeDXTHxJfRvVv1oIBC4oiuFSfyzwoQtvPVC/6ZsrGeNr +CwFiiYBxOmj14Cxu/udeJ7P+kHinq2fg6JTQ3kqt4ctIhd4EmVgQRcCZoQU5LLh Wr0BvG9zbrcnRf5Sw2Xr7mZqLNwhxMxEqvqWFvpb2zieV5owkHm+JSsjqneXrMNp 7CcO8MWkI6K3oVVDkGUfvwYi7qbJfgDNZBXP64ohAOmCzFCmS/tO+nncoFEdI1SC Bg== -----END CERTIFICATE-----Generated at Wed May 13 14:33:25 2026 by rpki-client