$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3132312e33382e302e302f31352d3135203d3e2030.roa File: 3132312e33382e302e302f31352d3135203d3e2030.roa (raw, json) Hash identifier: Ew484i2CMlKnoZtqY9FRBWFPRq6aZgtaS+n+YVCpVAg= Subject key identifier: 4A:95:C8:7A:2F:D6:F8:8F:58:26:92:40:4D:F6:B9:96:79:E7:D3:2A Certificate issuer: /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09 Certificate serial: 318E0AA65877C08E3A4D5B05F1F7CA432AE759B9 Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3132312e33382e302e302f31352d3135203d3e2030.roa Signing time: Thu 07 May 2026 02:21:20 +0000 ROA not before: Thu 07 May 2026 02:16:20 +0000 ROA not after: Thu 06 May 2027 02:21:20 +0000 asID: 0 IP address blocks: 121.38.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 13:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:8e:0a:a6:58:77:c0:8e:3a:4d:5b:05:f1:f7:ca:43:2a:e7:59:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09 Validity Not Before: May 7 02:16:20 2026 GMT Not After : May 6 02:21:20 2027 GMT Subject: CN=4A95C87A2FD6F88F582692404DF6B99679E7D32A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:66:79:ca:d1:8a:b6:75:97:3b:27:f3:a1:01: 79:ea:1f:53:7c:88:ed:83:33:5a:b0:7a:75:1b:4f: 98:b7:3e:f4:36:ae:3c:2d:03:d3:00:49:23:64:f5: a5:83:8e:54:56:65:77:59:ee:6b:20:62:9b:60:00: 32:80:43:1d:ea:0a:dc:da:7d:21:cb:60:e4:a1:bc: c4:21:cf:cc:08:95:29:b4:62:3c:7b:07:3d:b4:4d: 35:d5:c3:9a:2e:23:ac:0a:4b:35:30:d6:fe:e5:ad: f3:05:65:c5:a8:52:77:ce:21:06:fa:58:9d:8c:c4: 40:9c:38:d5:a3:92:8c:75:02:05:13:25:c4:b8:2c: b7:f5:de:3c:bd:3e:11:56:61:fe:c7:d9:30:34:f7: e6:81:96:08:17:2d:c8:69:fc:ea:82:5b:13:fc:ca: f1:ea:76:85:e8:9f:70:66:f4:14:3e:87:1b:e2:d6: 9d:86:21:b7:6e:ad:5a:53:aa:5c:bc:ba:7a:bf:53: 26:34:42:da:25:54:17:33:15:9d:3c:44:16:60:be: f8:be:9a:b7:fc:d5:f4:6a:55:0e:5a:ac:c0:4c:e8: 55:c4:a4:d9:91:84:c7:c6:8c:6d:a8:e2:b2:b6:f9: 8c:1e:61:5e:b9:de:fe:72:4c:3e:87:54:6b:2d:6e: 2a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:95:C8:7A:2F:D6:F8:8F:58:26:92:40:4D:F6:B9:96:79:E7:D3:2A X509v3 Authority Key Identifier: keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3132312e33382e302e302f31352d3135203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.38.0.0/15 Signature Algorithm: sha256WithRSAEncryption 0f:0e:28:af:ea:85:a4:b1:32:99:b9:df:81:7b:2e:c0:8f:8b: 01:3a:20:93:b1:11:25:6a:93:35:d1:28:d0:ae:c3:a5:9d:ff: 0c:d6:90:22:d9:17:29:0e:5d:08:bf:d8:95:c7:ab:7b:0c:ee: 4a:91:ed:57:c8:c3:96:b9:e0:0a:06:a7:42:9a:77:11:6d:cb: 60:0c:55:30:68:f6:30:48:14:d0:13:17:f7:fe:c7:97:cd:5b: db:e8:85:64:92:20:cc:85:40:80:2a:36:5c:00:e8:b4:cc:70: 9a:bd:29:b8:5f:3c:4b:6c:e9:58:1d:1f:f9:9c:11:96:e0:a4: e7:ae:25:88:ce:ec:5d:4c:4f:b6:21:80:ce:ab:e1:7a:f4:f0: 44:0f:84:0a:8a:97:c8:db:ad:cb:f2:86:70:8b:a4:15:c3:19: 80:c5:cb:2b:e1:02:d1:50:f3:d1:34:9f:a6:ea:0b:7c:16:b1: 01:04:2d:7f:c6:58:f5:6d:23:7b:e4:b4:81:e1:27:31:80:38: 44:03:cb:03:f8:86:28:89:f1:32:fa:9d:df:51:74:f1:f8:1c: 49:e1:cf:4f:27:12:b0:80:6d:c8:1c:0b:66:e7:f0:07:c5:88: 9c:a2:ee:a1:9c:b6:7b:25:58:d0:1b:61:87:91:be:14:30:bd: ed:e1:a0:6b -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgIUMY4Kplh3wI46TVsF8ffKQyrnWbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhFNDI3OTc3NDg0RjM2RjNGMEE0NTI4OEQ2REY2NEYz QTdGQ0IwOTAeFw0yNjA1MDcwMjE2MjBaFw0yNzA1MDYwMjIxMjBaMDMxMTAvBgNV BAMTKDRBOTVDODdBMkZENkY4OEY1ODI2OTI0MDRERjZCOTk2NzlFN0QzMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyZnnK0Yq2dZc7J/OhAXnqH1N8 iO2DM1qwenUbT5i3PvQ2rjwtA9MASSNk9aWDjlRWZXdZ7msgYptgADKAQx3qCtza fSHLYOShvMQhz8wIlSm0Yjx7Bz20TTXVw5ouI6wKSzUw1v7lrfMFZcWoUnfOIQb6 WJ2MxECcONWjkox1AgUTJcS4LLf13jy9PhFWYf7H2TA09+aBlggXLchp/OqCWxP8 yvHqdoXon3Bm9BQ+hxvi1p2GIbdurVpTqly8unq/UyY0QtolVBczFZ08RBZgvvi+ mrf81fRqVQ5arMBM6FXEpNmRhMfGjG2o4rK2+YweYV653v5yTD6HVGstbiplAgMB AAGjggIGMIICAjAdBgNVHQ4EFgQUSpXIei/W+I9YJpJATfa5lnnn0yowHwYDVR0j BBgwFoAUOOQnl3SE828/CkUojW32Tzp/ywkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDU4NjM1ODA5NTA4NTU3Ny8wLzM4RTQyNzk3NzQ4NEYzNkYzRjBBNDUyODhENkRG NjRGM0E3RkNCMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzhFNDI3OTc3NDg0RjM2RjNGMEE0NTI4OEQ2REY2NEYzQTdGQ0IwOS5jZXIw gYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA0NTg2MzU4MDk1MDg1NTc3LzAvMzEzMjMxMmUzMzM4 MmUzMDJlMzAyZjMxMzUyZDMxMzUyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBeSYwDQYJ KoZIhvcNAQELBQADggEBAA8OKK/qhaSxMpm534F7LsCPiwE6IJOxESVqkzXRKNCu w6Wd/wzWkCLZFykOXQi/2JXHq3sM7kqR7VfIw5a54AoGp0KadxFty2AMVTBo9jBI FNATF/f+x5fNW9vohWSSIMyFQIAqNlwA6LTMcJq9KbhfPEts6VgdH/mcEZbgpOeu JYjO7F1MT7YhgM6r4Xr08EQPhAqKl8jbrcvyhnCLpBXDGYDFyyvhAtFQ89E0n6bq C3wWsQEELX/GWPVtI3vktIHhJzGAOEQDywP4hiiJ8TL6nd9RdPH4HEnhz08nErCA bcgcC2bn8AfFiJyi7qGctnslWNAbYYeRvhQwve3hoGs= -----END CERTIFICATE-----Generated at Tue May 12 21:38:59 2026 by rpki-client