$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3132322e3131352e33322e302f31392d3139203d3e2034383437.roa File: 3132322e3131352e33322e302f31392d3139203d3e2034383437.roa (raw, json) Hash identifier: larc+B0NbWd2LMISFQucSEftOoyGORTbx4vdoeQvZs0= Subject key identifier: B0:E1:E2:27:F9:38:CD:57:D4:66:90:98:E6:65:F7:80:65:D6:BD:E1 Certificate issuer: /CN=40D86726DB14F9E5E06610928FF6C77226F14874 Certificate serial: 5D828D5433467E1DEBFFB4F8D8A99A2F866388EA Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3132322e3131352e33322e302f31392d3139203d3e2034383437.roa Signing time: Tue 12 May 2026 09:18:21 +0000 ROA not before: Tue 12 May 2026 09:13:21 +0000 ROA not after: Tue 11 May 2027 09:18:21 +0000 asID: 4847 IP address blocks: 122.115.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:82:8d:54:33:46:7e:1d:eb:ff:b4:f8:d8:a9:9a:2f:86:63:88:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874 Validity Not Before: May 12 09:13:21 2026 GMT Not After : May 11 09:18:21 2027 GMT Subject: CN=B0E1E227F938CD57D4669098E665F78065D6BDE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f6:3f:5f:ec:2b:51:af:9c:42:7f:14:60:a6: de:a6:b6:4a:94:f3:0f:68:00:3a:99:01:4e:3e:d8: 47:05:d3:be:01:f7:b3:20:f5:04:45:79:c9:42:e6: c6:33:4f:de:57:bb:51:9e:1c:e1:ed:2f:c3:8b:43: 24:d5:3c:be:08:ce:b1:c5:ea:16:90:9c:08:08:00: 5e:6b:08:b8:b3:74:cf:37:69:78:0c:c8:9d:a9:6c: 1f:95:c2:99:df:c0:bd:3a:20:93:d4:f4:1f:b3:cf: 35:77:ab:e3:08:d6:2c:6a:82:b8:73:1c:78:41:b2: 13:4d:89:fe:ea:37:12:34:a3:49:eb:16:6d:d4:35: b3:97:21:cd:00:f5:fb:bb:f1:ed:41:ee:63:10:5a: b9:7e:f2:13:2d:8a:ba:55:8d:7c:6d:26:ed:2d:29: aa:39:bd:f9:b9:e7:e8:6d:01:78:c6:97:27:ef:8b: 4a:b3:77:d2:f5:d2:52:18:ce:4e:2b:aa:77:1d:6a: 82:0c:b5:b5:b9:e3:e9:b2:11:fd:c0:92:05:00:33: d7:85:c6:1f:56:12:c3:b9:1f:4e:77:17:a3:c6:f0: f8:58:50:54:08:99:95:77:56:68:8d:9d:ab:2c:85: 8b:be:8a:5a:78:b6:3d:b6:60:74:b6:08:5d:0b:22: 1e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E1:E2:27:F9:38:CD:57:D4:66:90:98:E6:65:F7:80:65:D6:BD:E1 X509v3 Authority Key Identifier: keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3132322e3131352e33322e302f31392d3139203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.115.32.0/19 Signature Algorithm: sha256WithRSAEncryption 2a:5a:36:e2:a0:01:ea:cc:c6:19:f4:ae:93:be:ae:f4:14:88: e3:0f:70:1d:cd:eb:86:b1:bd:b1:d3:b0:ec:b9:cc:ea:7e:71: bc:3c:5f:42:3d:5a:3f:8e:30:6b:7b:c0:f4:20:98:8e:9f:c9: 82:b8:ae:d3:b7:f1:76:4a:87:35:12:3d:79:47:d4:0f:bb:8b: 63:4b:3b:2d:62:97:7a:92:41:80:b0:b2:8f:97:77:ff:a9:8f: 3d:12:10:30:1f:d9:71:bd:45:82:1a:f1:99:cd:84:a2:e4:3b: 05:41:e1:bf:6c:c6:2e:73:30:99:60:77:7f:74:c6:c9:1b:ae: e9:f1:0c:26:0b:1b:79:cd:32:33:d6:09:a2:ea:56:81:cc:68: ad:ae:4f:1a:da:0e:75:e9:57:8e:32:a6:64:42:6e:31:bf:2e: 6f:6d:6b:0b:f6:a2:7e:cd:d0:b8:f5:e1:b4:5f:bc:0c:f5:1a: 82:c2:0b:7c:a1:dc:1b:22:aa:b6:14:33:ed:96:24:05:f2:01: b2:3f:6f:1d:b4:95:12:87:96:cd:71:d3:f0:21:ae:41:04:3f: 3d:3f:1d:49:37:49:4c:43:f2:f9:cb:3e:4b:66:51:22:d5:b0: 85:fc:9f:ab:22:b9:63:79:ba:ed:3e:14:b7:82:fa:6d:bd:12: 5f:37:62:f9 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUXYKNVDNGfh3r/7T42KmaL4ZjiOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBEODY3MjZEQjE0RjlFNUUwNjYxMDkyOEZGNkM3NzIy NkYxNDg3NDAeFw0yNjA1MTIwOTEzMjFaFw0yNzA1MTEwOTE4MjFaMDMxMTAvBgNV BAMTKEIwRTFFMjI3RjkzOENENTdENDY2OTA5OEU2NjVGNzgwNjVENkJERTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz9j9f7CtRr5xCfxRgpt6mtkqU 8w9oADqZAU4+2EcF074B97Mg9QRFeclC5sYzT95Xu1GeHOHtL8OLQyTVPL4IzrHF 6haQnAgIAF5rCLizdM83aXgMyJ2pbB+VwpnfwL06IJPU9B+zzzV3q+MI1ixqgrhz HHhBshNNif7qNxI0o0nrFm3UNbOXIc0A9fu78e1B7mMQWrl+8hMtirpVjXxtJu0t Kao5vfm55+htAXjGlyfvi0qzd9L10lIYzk4rqncdaoIMtbW54+myEf3AkgUAM9eF xh9WEsO5H053F6PG8PhYUFQImZV3VmiNnasshYu+ilp4tj22YHS2CF0LIh7XAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUsOHiJ/k4zVfUZpCY5mX3gGXWveEwHwYDVR0j BBgwFoAUQNhnJtsU+eXgZhCSj/bHcibxSHQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjUwMzE1NTY2MDYxOTc5My8wLzQwRDg2NzI2REIxNEY5RTVFMDY2MTA5MjhGRjZD NzcyMjZGMTQ4NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDBEODY3MjZEQjE0RjlFNUUwNjYxMDkyOEZGNkM3NzIyNkYxNDg3NC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA2NTAzMTU1NjYwNjE5NzkzLzAvMzEzMjMyMmUzMTMx MzUyZTMzMzIyZTMwMmYzMTM5MmQzMTM5MjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBXpzIDANBgkqhkiG9w0BAQsFAAOCAQEAKlo24qAB6szGGfSuk76u9BSI4w9w Hc3rhrG9sdOw7LnM6n5xvDxfQj1aP44wa3vA9CCYjp/Jgriu07fxdkqHNRI9eUfU D7uLY0s7LWKXepJBgLCyj5d3/6mPPRIQMB/Zcb1Fghrxmc2EouQ7BUHhv2zGLnMw mWB3f3TGyRuu6fEMJgsbec0yM9YJoupWgcxora5PGtoOdelXjjKmZEJuMb8ub21r C/aifs3QuPXhtF+8DPUagsILfKHcGyKqthQz7ZYkBfIBsj9vHbSVEoeWzXHT8CGu QQQ/PT8dSTdJTEPy+cs+S2ZRItWwhfyfqyK5Y3m67T4Ut4L6bb0SXzdi+Q== -----END CERTIFICATE-----Generated at Wed May 13 13:54:14 2026 by rpki-client