$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e3135322e302f32342d3234203d3e20313336393539.roa File: 3132342e3137322e3135322e302f32342d3234203d3e20313336393539.roa (raw, json) Hash identifier: 6exd/vy6MvXXap8mD3bdwyyyD5xEmaoJ4hstFjT+zJM= Subject key identifier: 2E:8F:D0:D1:54:4A:A8:A4:5B:F1:28:D9:BF:18:7E:02:2A:1B:2A:D4 Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 600DB769EE388A7DA2B6EC54372ADDC8C84C7473 Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e3135322e302f32342d3234203d3e20313336393539.roa Signing time: Tue 14 Apr 2026 03:29:05 +0000 ROA not before: Tue 14 Apr 2026 03:24:05 +0000 ROA not after: Tue 13 Apr 2027 03:29:05 +0000 asID: 136959 IP address blocks: 124.172.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 08:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:0d:b7:69:ee:38:8a:7d:a2:b6:ec:54:37:2a:dd:c8:c8:4c:74:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Apr 14 03:24:05 2026 GMT Not After : Apr 13 03:29:05 2027 GMT Subject: CN=2E8FD0D1544AA8A45BF128D9BF187E022A1B2AD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ee:7f:47:ea:a0:eb:d1:ee:9a:49:d1:72:8d: c2:a8:95:ce:fd:d3:4a:a3:88:98:3f:4e:93:83:5f: 87:93:9e:6d:c6:cf:35:55:1f:63:5a:8e:80:c2:42: 75:46:db:d8:20:64:d3:f5:22:db:53:4f:e5:19:fd: 7e:03:ff:f9:a5:78:2c:7e:1a:92:e4:35:60:13:db: 62:f5:a5:d1:f0:08:fa:6e:5e:ce:1d:68:0a:c3:4f: 30:9e:44:2f:73:df:3a:50:db:07:c0:b2:71:77:08: 06:7d:1b:26:d9:c7:da:b0:a6:50:ff:06:17:56:eb: f9:2e:1a:8f:63:28:49:e6:90:d0:c7:a6:a3:c4:54: 52:02:77:76:d6:ff:40:e4:4c:01:ed:a9:0a:20:f5: 52:0e:56:d1:71:99:13:b3:4a:a7:34:ff:e5:9f:bd: 3f:6d:f7:9d:5e:7c:98:6b:b5:8d:83:f2:28:4b:c5: d9:5f:87:55:07:cb:54:c9:c0:4e:f6:89:0f:ae:79: 97:91:c8:23:5d:b0:05:db:d5:39:c0:83:8b:14:a2: 19:7c:87:05:d6:de:13:b9:18:1a:93:bd:6b:6c:f7: 8b:e5:08:e3:ed:ce:2d:61:b0:26:4d:45:80:41:c5: 4a:47:39:0f:ef:06:b0:f9:96:2c:18:0b:a4:59:30: 8a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8F:D0:D1:54:4A:A8:A4:5B:F1:28:D9:BF:18:7E:02:2A:1B:2A:D4 X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e3135322e302f32342d3234203d3e20313336393539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.172.152.0/24 Signature Algorithm: sha256WithRSAEncryption 00:a5:48:af:f9:32:b7:57:b5:f1:97:ce:d8:a8:e6:3c:1b:21: dc:0e:51:3d:64:91:fb:36:41:95:18:49:77:0e:d6:a4:60:b3: 4b:e0:a7:7a:da:c3:63:68:11:cf:bb:97:7e:a3:06:c0:21:cb: c2:d6:05:e0:09:c2:d7:f0:90:12:8b:31:81:b7:ee:db:7b:6e: 45:44:62:65:57:6b:4a:6f:58:f5:a9:f6:ea:fe:24:3e:d6:1e: 9d:1a:e0:af:23:e9:b1:6d:e2:bc:82:d1:f4:dd:1c:37:98:dc: 81:e6:29:86:07:a7:27:15:5e:da:ca:88:9d:5c:14:b9:49:e6: e4:e1:b9:2c:66:2b:4d:32:78:c8:60:61:5c:aa:cc:44:28:5f: 35:8a:c8:b8:63:a1:4a:11:85:4f:6b:5e:27:d8:d3:97:c0:59: ab:73:24:38:e4:de:7e:bd:69:ec:78:ea:08:ce:32:41:32:54: b7:fb:b2:ec:ff:fc:5e:9f:6f:e7:de:15:d0:d0:dd:77:15:cb: f5:2c:9d:78:9d:c4:5d:d9:66:c8:af:7b:fb:31:84:48:b5:33: ec:e8:e9:ed:00:ec:70:9a:af:9f:3f:ee:a1:84:58:cc:be:2b: 66:f3:97:f3:fc:04:6f:c8:df:3c:61:a7:c5:5b:7c:49:40:e9: ee:ca:01:22 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUYA23ae44in2ituxUNyrdyMhMdHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA0MTQwMzI0MDVaFw0yNzA0MTMwMzI5MDVaMDMxMTAvBgNV BAMTKDJFOEZEMEQxNTQ0QUE4QTQ1QkYxMjhEOUJGMTg3RTAyMkExQjJBRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC77n9H6qDr0e6aSdFyjcKolc79 00qjiJg/TpODX4eTnm3GzzVVH2NajoDCQnVG29ggZNP1IttTT+UZ/X4D//mleCx+ GpLkNWAT22L1pdHwCPpuXs4daArDTzCeRC9z3zpQ2wfAsnF3CAZ9GybZx9qwplD/ BhdW6/kuGo9jKEnmkNDHpqPEVFICd3bW/0DkTAHtqQog9VIOVtFxmROzSqc0/+Wf vT9t951efJhrtY2D8ihLxdlfh1UHy1TJwE72iQ+ueZeRyCNdsAXb1TnAg4sUohl8 hwXW3hO5GBqTvWts94vlCOPtzi1hsCZNRYBBxUpHOQ/vBrD5liwYC6RZMIpVAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQULo/Q0VRKqKRb8SjZvxh+AiobKtQwHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODEyODY3LzAvMzEzMjM0MmUz MTM3MzIyZTMxMzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM5MzUz OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAHysmDANBgkqhkiG9w0BAQsFAAOCAQEAAKVIr/kyt1e18ZfO 2KjmPBsh3A5RPWSR+zZBlRhJdw7WpGCzS+CnetrDY2gRz7uXfqMGwCHLwtYF4AnC 1/CQEosxgbfu23tuRURiZVdrSm9Y9an26v4kPtYenRrgryPpsW3ivILR9N0cN5jc geYphgenJxVe2sqInVwUuUnm5OG5LGYrTTJ4yGBhXKrMRChfNYrIuGOhShGFT2te J9jTl8BZq3MkOOTefr1p7HjqCM4yQTJUt/uy7P/8Xp9v594V0NDddxXL9SydeJ3E XdlmyK97+zGESLUz7Ojp7QDscJqvnz/uoYRYzL4rZvOX8/wEb8jfPGGnxVt8SUDp 7soBIg== -----END CERTIFICATE-----Generated at Fri Apr 17 19:26:33 2026 by rpki-client