$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e302e302f31372d3137203d3e20313336323030.roa File: 3132342e3137322e302e302f31372d3137203d3e20313336323030.roa (raw, json) Hash identifier: 2zCKdPammY/170TypCwF4Euu/2r/enasuy1SqVDdUSg= Subject key identifier: 3A:4C:A1:61:3F:1C:27:A8:06:D8:4D:7C:9E:B5:5A:14:8E:FD:CD:21 Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 16CA3819F7AA29569E689A7E45D300E959CFF72A Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e302e302f31372d3137203d3e20313336323030.roa Signing time: Tue 14 Apr 2026 03:32:11 +0000 ROA not before: Tue 14 Apr 2026 03:27:11 +0000 ROA not after: Tue 13 Apr 2027 03:32:11 +0000 asID: 136200 IP address blocks: 124.172.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 08:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ca:38:19:f7:aa:29:56:9e:68:9a:7e:45:d3:00:e9:59:cf:f7:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Apr 14 03:27:11 2026 GMT Not After : Apr 13 03:32:11 2027 GMT Subject: CN=3A4CA1613F1C27A806D84D7C9EB55A148EFDCD21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:85:3a:5f:b8:2d:dd:51:38:81:22:ab:cb:27: cb:21:09:c6:aa:2e:95:a2:34:24:22:fe:43:8e:b5: 78:54:44:b4:87:29:ed:83:09:11:7f:48:66:05:41: ec:7f:e1:7f:04:ca:3c:86:16:99:b4:4d:18:f9:c2: f7:2f:73:e0:c8:53:97:30:29:4b:4a:56:50:38:56: c5:ba:52:a0:3d:28:e7:02:44:93:fe:fc:e8:04:2a: d6:a9:cf:c5:72:f6:c9:00:d5:26:98:52:3f:17:6c: 5e:c2:7b:f1:67:87:fc:35:69:27:5c:17:02:2b:77: 9b:06:32:39:99:ef:07:99:11:c0:24:c8:c5:75:b7: 09:18:8a:a8:d7:cd:21:5b:7c:48:02:bf:4c:65:5b: 76:4a:21:d3:78:13:50:13:74:6f:8b:b0:e0:43:41: b5:ba:45:61:c5:8c:6a:ee:2e:15:89:36:ec:21:8b: bc:f0:3b:80:96:04:22:ce:dc:51:ca:35:30:80:f4: cc:d2:b1:3e:49:03:af:37:e6:60:82:6d:9b:9b:67: 99:c1:19:e8:e1:51:f2:7f:f5:7c:98:45:70:73:0d: a8:2d:a8:9d:4a:25:99:cd:20:f3:df:f3:f3:00:8f: cc:f2:61:fe:5b:af:1a:0e:36:95:6c:ad:eb:f9:38: 9d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:4C:A1:61:3F:1C:27:A8:06:D8:4D:7C:9E:B5:5A:14:8E:FD:CD:21 X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e302e302f31372d3137203d3e20313336323030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.172.0.0/17 Signature Algorithm: sha256WithRSAEncryption 3d:a6:4b:c2:f9:36:fb:e7:00:e9:b9:08:dc:9d:fb:75:76:42: 7a:7d:40:46:d7:10:05:46:07:86:94:22:a6:e4:eb:33:e4:ec: e1:7c:02:9a:0d:69:a3:70:19:42:6f:99:3d:a2:a6:e0:36:66: 3e:27:6e:d8:02:fc:f6:3b:46:46:ed:b5:d3:e9:93:bf:c8:66: 7c:7e:76:d2:b9:53:ca:00:f2:83:81:b5:6c:44:01:65:db:75: 15:3b:61:3e:3f:1c:bb:be:9a:53:4f:3b:4d:f4:af:4b:7f:9d: 9d:b4:71:a7:9e:f5:96:99:27:ea:86:2e:3a:14:02:ff:2b:8b: ac:16:7a:6a:d0:5d:a5:bd:80:90:81:84:31:16:87:03:b6:62: e8:e4:00:d7:63:4d:b3:7c:39:b3:36:72:ab:5a:e2:f5:d8:57: 60:58:bb:b9:4d:05:31:1e:b5:5e:56:0c:35:3d:c2:c7:df:bb: 4f:e3:5d:bc:f2:d9:c4:71:d7:c8:72:35:40:1c:14:d8:54:61: 8e:15:fe:68:8b:e2:08:4f:ca:ab:f7:d1:33:73:29:24:19:92: 46:a6:43:26:62:29:ce:96:5d:60:60:82:e5:20:f0:d7:5f:fb: a8:c0:ce:21:7a:06:74:5a:1f:4f:1e:b3:2d:08:2c:66:0e:df: e2:23:18:eb -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUFso4GfeqKVaeaJp+RdMA6VnP9yowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA0MTQwMzI3MTFaFw0yNzA0MTMwMzMyMTFaMDMxMTAvBgNV BAMTKDNBNENBMTYxM0YxQzI3QTgwNkQ4NEQ3QzlFQjU1QTE0OEVGRENEMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfhTpfuC3dUTiBIqvLJ8shCcaq LpWiNCQi/kOOtXhURLSHKe2DCRF/SGYFQex/4X8EyjyGFpm0TRj5wvcvc+DIU5cw KUtKVlA4VsW6UqA9KOcCRJP+/OgEKtapz8Vy9skA1SaYUj8XbF7Ce/Fnh/w1aSdc FwIrd5sGMjmZ7weZEcAkyMV1twkYiqjXzSFbfEgCv0xlW3ZKIdN4E1ATdG+LsOBD QbW6RWHFjGruLhWJNuwhi7zwO4CWBCLO3FHKNTCA9MzSsT5JA6835mCCbZubZ5nB GejhUfJ/9XyYRXBzDagtqJ1KJZnNIPPf8/MAj8zyYf5brxoONpVsrev5OJ01AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUOkyhYT8cJ6gG2E18nrVaFI79zSEwHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0NzgxMjg2Ny8wLzMxMzIzNDJlMzEz NzMyMmUzMDJlMzAyZjMxMzcyZDMxMzcyMDNkM2UyMDMxMzMzNjMyMzAzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEB3ysADANBgkqhkiG9w0BAQsFAAOCAQEAPaZLwvk2++cA6bkI3J37dXZC en1ARtcQBUYHhpQipuTrM+Ts4XwCmg1po3AZQm+ZPaKm4DZmPidu2AL89jtGRu21 0+mTv8hmfH520rlTygDyg4G1bEQBZdt1FTthPj8cu76aU087TfSvS3+dnbRxp571 lpkn6oYuOhQC/yuLrBZ6atBdpb2AkIGEMRaHA7Zi6OQA12NNs3w5szZyq1ri9dhX YFi7uU0FMR61XlYMNT3Cx9+7T+NdvPLZxHHXyHI1QBwU2FRhjhX+aIviCE/Kq/fR M3MpJBmSRqZDJmIpzpZdYGCC5SDw11/7qMDOIXoGdFofTx6zLQgsZg7f4iMY6w== -----END CERTIFICATE-----Generated at Fri Apr 17 19:26:34 2026 by rpki-client