$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e32392e302f32342d3234203d3e20313339303939.roa File: 3132302e3133312e32392e302f32342d3234203d3e20313339303939.roa (raw, json) Hash identifier: EtbUl0kLq9Nml7bDba/KGz/xY2wlocPgPIri+F35CCU= Subject key identifier: 4B:CB:D1:53:51:FC:D9:AA:39:55:C2:6F:4F:D9:98:8F:14:70:C7:9C Certificate issuer: /CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5 Certificate serial: 0C2E948219BBA96510C85A72B67FCDC49B944E7F Authority key identifier: 9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e32392e302f32342d3234203d3e20313339303939.roa Signing time: Thu 07 May 2026 05:31:24 +0000 ROA not before: Thu 07 May 2026 05:26:24 +0000 ROA not after: Thu 06 May 2027 05:31:24 +0000 asID: 139099 IP address blocks: 120.131.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:17:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:2e:94:82:19:bb:a9:65:10:c8:5a:72:b6:7f:cd:c4:9b:94:4e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5 Validity Not Before: May 7 05:26:24 2026 GMT Not After : May 6 05:31:24 2027 GMT Subject: CN=4BCBD15351FCD9AA3955C26F4FD9988F1470C79C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a9:08:eb:b3:08:6a:9e:fa:8e:69:81:d9:47: c0:3b:79:6d:b9:8d:14:86:6c:a7:18:0a:23:d4:e6: 39:1d:9c:81:eb:ea:ed:f3:c8:d1:43:fc:35:0e:aa: 54:2b:46:38:12:c1:f5:65:18:24:01:70:a9:ec:f7: 21:ed:7a:86:51:80:ca:73:b9:54:6d:53:14:13:ad: f3:ba:db:1b:de:20:4c:fb:44:eb:bc:9b:e2:57:fd: 7f:2d:50:4d:82:ec:5b:77:1a:63:8f:06:46:55:ee: 84:16:76:1a:35:12:ac:6c:01:b1:15:01:19:87:ae: 0d:9a:00:19:2c:33:6f:0f:ba:4d:6e:d4:cb:25:dc: 71:80:e8:8e:28:10:a7:16:1f:bc:0c:54:70:7d:56: e7:cd:9c:3f:27:9e:fe:a2:31:93:3c:a1:3e:65:d8: 1d:a5:76:e5:4c:7f:36:11:76:27:fb:b8:9c:0e:4e: 61:2f:22:b3:d7:34:cd:d6:9a:04:a5:cf:a4:22:fa: c5:8b:fc:b4:16:7a:23:91:4f:62:52:a0:16:c4:b0: d2:c7:09:77:99:81:fd:dd:f0:05:29:fb:18:51:6e: 83:a5:f1:5c:2c:15:3f:5f:09:4d:31:c0:d5:47:37: ff:50:cf:bc:8f:0c:34:92:f7:92:0f:f0:16:1e:eb: 57:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CB:D1:53:51:FC:D9:AA:39:55:C2:6F:4F:D9:98:8F:14:70:C7:9C X509v3 Authority Key Identifier: keyid:9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/3132302e3133312e32392e302f32342d3234203d3e20313339303939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.131.29.0/24 Signature Algorithm: sha256WithRSAEncryption c7:c0:73:af:da:cf:4a:77:11:b4:31:bf:b9:16:46:93:9f:19: 4b:b3:38:9e:13:45:da:8b:37:2c:3b:31:80:52:15:42:db:98: 43:c0:49:f1:f2:94:53:69:4d:60:a1:98:1b:f4:b6:50:6e:68: 4e:a2:da:ee:42:2c:c7:32:9c:40:b3:7d:c3:94:45:61:e1:c3: 3a:c9:94:46:df:41:9b:fb:a4:91:98:66:81:e3:2c:fe:73:25: 49:d5:03:ac:16:e4:7f:1c:bb:b3:a1:ba:a3:be:eb:3e:64:e0: a1:f1:09:16:4d:85:bf:99:9b:93:f5:e2:07:32:4a:32:2c:c7: fd:b2:90:37:9d:b0:22:0f:ea:40:7e:ee:b4:35:4b:43:cc:16: 41:e7:62:af:a7:68:ce:b6:59:06:8b:52:0a:dd:22:a9:a3:01: 6b:6a:f4:0f:bd:32:10:ae:93:2d:60:d8:23:18:7f:6e:cd:f5: 98:7b:0f:1b:c2:6e:24:9b:8a:64:18:2c:a7:be:f6:e9:59:34: 29:f4:04:91:d4:80:5d:c2:2e:90:5e:68:f1:66:c6:67:dc:6f: e2:96:5e:c9:0f:2d:4a:93:f6:f1:f1:49:fe:b3:2e:06:3a:3a: 0e:33:68:59:24:02:c8:e5:fd:bc:20:34:22:fd:af:17:96:f9: 17:a6:4a:01 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUDC6Ughm7qWUQyFpytn/NxJuUTn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJBNDQ0MkY2QjA3MDU0NjVBRTU0RkI1Q0E4MUIzOENB REE1NzhGNTAeFw0yNjA1MDcwNTI2MjRaFw0yNzA1MDYwNTMxMjRaMDMxMTAvBgNV BAMTKDRCQ0JEMTUzNTFGQ0Q5QUEzOTU1QzI2RjRGRDk5ODhGMTQ3MEM3OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIqQjrswhqnvqOaYHZR8A7eW25 jRSGbKcYCiPU5jkdnIHr6u3zyNFD/DUOqlQrRjgSwfVlGCQBcKns9yHteoZRgMpz uVRtUxQTrfO62xveIEz7ROu8m+JX/X8tUE2C7Ft3GmOPBkZV7oQWdho1EqxsAbEV ARmHrg2aABksM28Puk1u1Msl3HGA6I4oEKcWH7wMVHB9VufNnD8nnv6iMZM8oT5l 2B2lduVMfzYRdif7uJwOTmEvIrPXNM3WmgSlz6Qi+sWL/LQWeiORT2JSoBbEsNLH CXeZgf3d8AUp+xhRboOl8VwsFT9fCU0xwNVHN/9Qz7yPDDSS95IP8BYe61eBAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUS8vRU1H82ao5VcJvT9mYjxRwx5wwHwYDVR0j BBgwFoAUm6REL2sHBUZa5U+1yoGzjK2lePUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDYzOTQyOTAzMDQ0NTA2My8wLzlCQTQ0NDJGNkIwNzA1NDY1QUU1NEZCNUNBODFC MzhDQURBNTc4RjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJBNDQ0MkY2QjA3MDU0NjVBRTU0RkI1Q0E4MUIzOENBREE1NzhGNS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMDQ2Mzk0MjkwMzA0NDUwNjMvMC8zMTMyMzAyZTMx MzMzMTJlMzIzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzOTMwMzkzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAHiDHTANBgkqhkiG9w0BAQsFAAOCAQEAx8Bzr9rPSncRtDG/uRZG k58ZS7M4nhNF2os3LDsxgFIVQtuYQ8BJ8fKUU2lNYKGYG/S2UG5oTqLa7kIsxzKc QLN9w5RFYeHDOsmURt9Bm/ukkZhmgeMs/nMlSdUDrBbkfxy7s6G6o77rPmTgofEJ Fk2Fv5mbk/XiBzJKMizH/bKQN52wIg/qQH7utDVLQ8wWQedir6dozrZZBotSCt0i qaMBa2r0D70yEK6TLWDYIxh/bs31mHsPG8JuJJuKZBgsp7726Vk0KfQEkdSAXcIu kF5o8WbGZ9xv4pZeyQ8tSpP28fFJ/rMuBjo6DjNoWSQCyOX9vCA0Iv2vF5b5F6ZK AQ== -----END CERTIFICATE-----Generated at Wed May 13 21:32:08 2026 by rpki-client