$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e302e302f31372d3234203d3e2032393134.roa File: 3132342e3137322e302e302f31372d3234203d3e2032393134.roa (raw, json) Hash identifier: xSdBAtdG4DMRvf8FW6BX+KZ1sG5FJWE2hjDpmRIW3hY= Subject key identifier: F4:64:28:E5:E6:5B:6E:1C:C4:6C:EE:CF:6E:5C:7B:1A:AB:2A:49:CC Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 7BEF5E6CFCBCC4FC1F421FA10495C36F946075E3 Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e302e302f31372d3234203d3e2032393134.roa Signing time: Fri 11 Sep 2026 12:25:24 +0000 ROA not before: Fri 11 Sep 2026 12:20:24 +0000 ROA not after: Fri 10 Sep 2027 12:25:24 +0000 asID: 2914 IP address blocks: 124.172.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ef:5e:6c:fc:bc:c4:fc:1f:42:1f:a1:04:95:c3:6f:94:60:75:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Sep 11 12:20:24 2026 GMT Not After : Sep 10 12:25:24 2027 GMT Subject: CN=F46428E5E65B6E1CC46CEECF6E5C7B1AAB2A49CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f7:5e:8d:1f:53:e5:86:00:a9:cc:de:ac:34: 01:8d:82:15:e2:b5:72:1a:a5:e1:3c:f3:9c:5e:e8: 23:fe:f1:b4:1f:3e:8b:1f:40:f0:9e:45:9a:ac:23: a1:0d:72:7c:d9:e6:9b:2c:5c:27:a2:ef:e4:8c:f4: ca:44:01:91:e8:b0:ad:d6:b9:94:d5:13:60:3d:5e: 4b:00:89:49:4c:40:a4:5c:ef:40:8f:e5:6f:c0:58: 2f:bc:5e:98:95:c5:74:d3:cf:61:2a:9a:78:90:71: d3:31:83:b3:fe:51:a1:bd:f3:a9:ed:1c:38:d1:b9: 36:c2:fe:85:83:a3:bc:60:15:6b:9a:ac:75:32:d8: 83:51:79:01:f9:af:1d:b1:3e:04:16:06:06:50:fb: 40:35:9b:4b:37:6f:08:54:13:7a:2a:df:db:87:d5: a0:5b:f5:e0:87:7c:ba:8a:f5:dc:22:96:e0:12:5d: e6:ad:2a:2a:33:17:42:95:02:71:aa:d2:81:b2:e1: 6f:50:b9:e3:f4:c9:66:11:2d:71:1b:6d:65:cf:d9: b6:46:7e:39:85:89:9b:52:8f:48:4d:98:81:d4:7c: 8a:f0:59:06:88:c2:a3:f1:71:24:69:d5:32:48:a5: a3:7b:bc:76:ae:08:0f:ab:d6:3c:36:9d:79:9f:47: 69:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:64:28:E5:E6:5B:6E:1C:C4:6C:EE:CF:6E:5C:7B:1A:AB:2A:49:CC X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e302e302f31372d3234203d3e2032393134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.172.0.0/17 Signature Algorithm: sha256WithRSAEncryption 36:73:39:d3:6a:59:30:7b:82:d9:79:58:93:8d:4d:fe:fc:dd: d2:aa:96:0e:86:34:a5:fd:3d:9b:b1:4a:7e:d7:8f:be:53:cb: ab:a7:dc:ca:f6:56:45:c6:a8:43:36:5f:d6:15:95:f9:a7:a1: 00:05:cc:2b:bd:5f:c8:72:5c:26:60:d0:2f:92:96:d2:3b:ff: 63:3f:0e:de:41:64:90:6e:63:62:86:6b:6d:2c:de:23:fb:cf: fe:07:9e:9f:01:ba:c2:1b:2b:bc:97:f9:24:83:8d:4d:62:c1: 82:ba:4c:00:f9:1c:29:33:22:61:d5:cd:12:13:8c:ab:da:70: 4c:69:b2:1a:73:b0:60:92:f9:7b:25:35:e9:d3:79:93:4f:60: 8b:62:5b:bf:39:17:c2:3a:38:9d:cb:42:85:32:bc:cf:5e:1a: 0e:12:37:77:4f:79:44:40:88:3a:3d:fa:98:f1:1f:a5:9b:6a: 47:5d:97:66:9e:90:4e:89:41:fe:94:c8:fa:5d:57:d0:19:db: f8:86:08:0d:9e:a4:24:f8:92:2b:66:25:dc:93:6b:b8:c6:10: 80:20:da:40:1b:7f:1b:74:28:9a:b1:e4:d4:45:13:0c:ad:8d: 19:ad:09:41:94:a6:4b:02:2c:84:90:ac:79:eb:66:11:05:dd: 5c:63:eb:10 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUe+9ebPy8xPwfQh+hBJXDb5RgdeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA5MTExMjIwMjRaFw0yNzA5MTAxMjI1MjRaMDMxMTAvBgNV BAMTKEY0NjQyOEU1RTY1QjZFMUNDNDZDRUVDRjZFNUM3QjFBQUIyQTQ5Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI916NH1PlhgCpzN6sNAGNghXi tXIapeE885xe6CP+8bQfPosfQPCeRZqsI6ENcnzZ5pssXCei7+SM9MpEAZHosK3W uZTVE2A9XksAiUlMQKRc70CP5W/AWC+8XpiVxXTTz2EqmniQcdMxg7P+UaG986nt HDjRuTbC/oWDo7xgFWuarHUy2INReQH5rx2xPgQWBgZQ+0A1m0s3bwhUE3oq39uH 1aBb9eCHfLqK9dwiluASXeatKiozF0KVAnGq0oGy4W9QueP0yWYRLXEbbWXP2bZG fjmFiZtSj0hNmIHUfIrwWQaIwqPxcSRp1TJIpaN7vHauCA+r1jw2nXmfR2mZAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQU9GQo5eZbbhzEbO7Pblx7GqsqScwwHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODEyODY3LzAvMzEzMjM0MmUzMTM3 MzIyZTMwMmUzMDJmMzEzNzJkMzIzNDIwM2QzZTIwMzIzOTMxMzQucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAd8rAAwDQYJKoZIhvcNAQELBQADggEBADZzOdNqWTB7gtl5WJONTf783dKqlg6G NKX9PZuxSn7Xj75Ty6un3Mr2VkXGqEM2X9YVlfmnoQAFzCu9X8hyXCZg0C+SltI7 /2M/Dt5BZJBuY2KGa20s3iP7z/4Hnp8BusIbK7yX+SSDjU1iwYK6TAD5HCkzImHV zRITjKvacExpshpzsGCS+XslNenTeZNPYItiW785F8I6OJ3LQoUyvM9eGg4SN3dP eURAiDo9+pjxH6Wbakddl2aekE6JQf6UyPpdV9AZ2/iGCA2epCT4kitmJdyTa7jG EIAg2kAbfxt0KJqx5NRFEwytjRmtCUGUpksCLISQrHnrZhEF3Vxj6xA= -----END CERTIFICATE-----Generated at Wed Sep 23 10:04:49 2026 by rpki-client