$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e32382e302f32322d3232203d3e20313339303939.roa File: 3132302e3133312e32382e302f32322d3232203d3e20313339303939.roa (raw, json) Hash identifier: oiYdWekPPS1HIVqjarl2S5jGeG4FDDjseRNxYSyQzFo= Subject key identifier: 7E:3F:F1:72:F5:EE:BF:59:67:3C:CF:FA:EE:B9:E6:C7:23:C4:BB:FA Certificate issuer: /CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5 Certificate serial: 709E114336FABA221C1F71C0095E2D508227777D Authority key identifier: 9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e32382e302f32322d3232203d3e20313339303939.roa Signing time: Thu 07 May 2026 05:32:41 +0000 ROA not before: Thu 07 May 2026 05:27:41 +0000 ROA not after: Thu 06 May 2027 05:32:41 +0000 asID: 139099 IP address blocks: 120.131.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:17:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:9e:11:43:36:fa:ba:22:1c:1f:71:c0:09:5e:2d:50:82:27:77:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5 Validity Not Before: May 7 05:27:41 2026 GMT Not After : May 6 05:32:41 2027 GMT Subject: CN=7E3FF172F5EEBF59673CCFFAEEB9E6C723C4BBFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a2:e9:f4:fe:61:63:27:09:b5:50:ae:a6:91: aa:f1:39:fa:66:bc:29:88:e8:29:8c:76:1d:76:04: ef:29:b5:3d:4d:a9:b3:7d:62:41:52:e5:b5:b7:4a: 4e:fa:61:8c:42:d0:6c:f3:c5:de:27:d4:80:5e:33: 12:86:09:82:55:54:28:d9:5e:d0:ea:77:24:27:5d: 7b:54:39:be:ea:45:1d:99:8e:63:8b:bc:62:08:5d: 09:ed:1d:7b:c1:ce:65:01:8a:4a:24:12:d9:0e:18: 10:d0:79:e3:6e:82:00:30:92:f6:ea:d4:08:f1:b6: 00:3c:78:42:32:f7:ee:5e:71:bf:26:a7:8d:b8:81: 38:3c:97:55:1d:80:2e:76:aa:6d:5f:87:05:17:ac: b0:f9:84:c8:4b:9d:46:d2:3f:52:c3:0d:5e:b9:44: 34:d3:b5:95:cd:a4:39:5a:f5:bc:a9:35:39:75:8a: 44:2e:38:2c:52:7f:c6:00:6b:aa:d3:23:19:73:1d: ba:ec:28:99:e3:23:e4:10:b0:85:9c:80:3e:84:e3: d1:3a:b0:34:64:66:3e:70:82:00:7a:68:38:87:d2: 31:1a:1a:9f:39:97:ea:e6:ca:f6:60:9f:c7:50:22: c6:3b:4d:d4:1f:50:b5:ac:5d:db:01:d0:bc:db:a4: 6a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3F:F1:72:F5:EE:BF:59:67:3C:CF:FA:EE:B9:E6:C7:23:C4:BB:FA X509v3 Authority Key Identifier: keyid:9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e32382e302f32322d3232203d3e20313339303939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.131.28.0/22 Signature Algorithm: sha256WithRSAEncryption 70:b1:5a:2e:26:65:64:5e:56:61:41:d4:13:e3:43:0b:8c:3e: 81:a5:aa:da:a2:87:b8:4b:4c:e4:a2:09:05:82:e9:a0:46:fe: d2:1d:fb:d9:29:cc:8b:58:da:46:2f:ef:18:9e:1e:fb:2b:51: 84:d7:bb:6c:ea:80:10:ad:30:bd:a2:f3:c7:01:8b:92:71:1e: 6e:e8:22:c9:c2:f2:39:be:92:72:5c:b4:74:c4:65:bc:75:b1: 7b:ae:71:23:6a:f3:ca:29:62:e7:af:0c:3b:42:b0:3c:5e:87: 6a:bd:a5:23:15:aa:f6:0a:d6:fc:a0:f2:91:05:e6:a7:13:49: f8:4b:c9:32:e1:e6:d8:a4:2b:0e:e5:b2:67:2b:3f:fc:f0:e3: 5d:ad:04:fe:75:10:bd:c5:1c:00:a4:2d:79:01:78:4d:cd:f9: 0a:21:82:ff:6b:cc:7c:77:9f:1d:39:66:7d:c4:57:d9:82:6e: 69:e6:01:67:9f:ca:ed:33:43:03:10:e4:43:48:22:44:0b:77: 03:b2:68:5f:13:81:c6:45:71:75:c7:57:a2:bb:fe:70:8a:21: 82:8f:1a:93:d1:85:f7:bb:5c:8b:98:7f:8f:01:3b:21:f2:21: ca:eb:4b:1a:d6:7f:80:99:38:10:ac:e8:82:1d:91:87:15:da: 17:62:96:32 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUcJ4RQzb6uiIcH3HACV4tUIInd30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJBNDQ0MkY2QjA3MDU0NjVBRTU0RkI1Q0E4MUIzOENB REE1NzhGNTAeFw0yNjA1MDcwNTI3NDFaFw0yNzA1MDYwNTMyNDFaMDMxMTAvBgNV BAMTKDdFM0ZGMTcyRjVFRUJGNTk2NzNDQ0ZGQUVFQjlFNkM3MjNDNEJCRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdoun0/mFjJwm1UK6mkarxOfpm vCmI6CmMdh12BO8ptT1NqbN9YkFS5bW3Sk76YYxC0Gzzxd4n1IBeMxKGCYJVVCjZ XtDqdyQnXXtUOb7qRR2ZjmOLvGIIXQntHXvBzmUBikokEtkOGBDQeeNuggAwkvbq 1AjxtgA8eEIy9+5ecb8mp424gTg8l1UdgC52qm1fhwUXrLD5hMhLnUbSP1LDDV65 RDTTtZXNpDla9bypNTl1ikQuOCxSf8YAa6rTIxlzHbrsKJnjI+QQsIWcgD6E49E6 sDRkZj5wggB6aDiH0jEaGp85l+rmyvZgn8dQIsY7TdQfULWsXdsB0LzbpGqlAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUfj/xcvXuv1lnPM/67rnmxyPEu/owHwYDVR0j BBgwFoAUm6REL2sHBUZa5U+1yoGzjK2lePUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDYzOTQyOTAzMDQ0NTA2My8wLzlCQTQ0NDJGNkIwNzA1NDY1QUU1NEZCNUNBODFC MzhDQURBNTc4RjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJBNDQ0MkY2QjA3MDU0NjVBRTU0RkI1Q0E4MUIzOENBREE1NzhGNS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMDQ2Mzk0MjkwMzA0NDUwNjMvMC8zMTMyMzAyZTMx MzMzMTJlMzIzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzOTMwMzkzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAniDHDANBgkqhkiG9w0BAQsFAAOCAQEAcLFaLiZlZF5WYUHUE+ND C4w+gaWq2qKHuEtM5KIJBYLpoEb+0h372SnMi1jaRi/vGJ4e+ytRhNe7bOqAEK0w vaLzxwGLknEebugiycLyOb6Scly0dMRlvHWxe65xI2rzyili568MO0KwPF6Har2l IxWq9grW/KDykQXmpxNJ+EvJMuHm2KQrDuWyZys//PDjXa0E/nUQvcUcAKQteQF4 Tc35CiGC/2vMfHefHTlmfcRX2YJuaeYBZ5/K7TNDAxDkQ0giRAt3A7JoXxOBxkVx dcdXorv+cIohgo8ak9GF97tci5h/jwE7IfIhyutLGtZ/gJk4EKzogh2RhxXaF2KW Mg== -----END CERTIFICATE-----Generated at Wed May 13 21:32:11 2026 by rpki-client