$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e3135322e302f32342d3234203d3e203233383532.roa File: 3132342e3137322e3135322e302f32342d3234203d3e203233383532.roa (raw, json) Hash identifier: fLPEzXGiNJLLcqM9HjDBpfH30ya2Wx7AYPTXET+fzEA= Subject key identifier: 03:D5:FE:D7:7F:92:3F:2B:87:F1:FD:BC:C9:15:CD:38:79:B9:A4:2B Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 74BF9117082D0462E41035EBDDA670DC85218435 Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e3135322e302f32342d3234203d3e203233383532.roa Signing time: Tue 14 Apr 2026 03:29:05 +0000 ROA not before: Tue 14 Apr 2026 03:24:05 +0000 ROA not after: Tue 13 Apr 2027 03:29:05 +0000 asID: 23852 IP address blocks: 124.172.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 08:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:bf:91:17:08:2d:04:62:e4:10:35:eb:dd:a6:70:dc:85:21:84:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Apr 14 03:24:05 2026 GMT Not After : Apr 13 03:29:05 2027 GMT Subject: CN=03D5FED77F923F2B87F1FDBCC915CD3879B9A42B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f9:d7:42:13:19:1b:48:9d:1d:8f:70:90:b6: 99:c1:85:59:06:49:62:0f:f9:94:d0:0a:5d:1d:2b: 17:5f:16:fc:bf:bc:2f:bd:4c:40:a3:a7:5f:a9:f2: 95:55:16:93:78:82:bb:8a:30:96:4c:22:7f:b1:96: 5d:6e:5f:da:6f:7e:4a:45:94:77:1c:ac:09:06:55: 13:d8:2a:bf:8b:57:f8:9f:5e:58:a7:3b:ff:d6:e6: ab:bd:2b:46:32:7a:df:44:53:84:ea:0a:4b:46:51: 89:52:62:62:6f:ec:14:99:c0:89:bf:9e:a4:b7:03: ba:81:6a:18:d8:b4:34:f1:bb:74:97:28:00:84:06: cf:c6:e8:f7:da:dd:4c:38:d9:9c:f8:9f:9f:a1:52: 96:ff:db:b0:a0:71:7b:e8:4b:43:7f:46:84:4d:4d: 5b:b7:3e:56:c4:64:26:4c:0f:4f:8a:19:c8:eb:15: 4c:ac:d2:49:5f:41:7d:42:bc:c6:50:aa:fb:2a:6c: 34:2d:b7:7f:df:8a:78:a5:0d:35:14:b9:79:92:08: 79:62:f0:c2:fe:13:a7:e7:dd:a9:93:f7:24:12:ce: d1:8a:2f:cd:b7:ce:03:c9:37:4d:21:cb:d4:58:69: c9:e0:f4:14:ea:7e:2f:1b:43:eb:4f:48:7f:cf:55: b8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D5:FE:D7:7F:92:3F:2B:87:F1:FD:BC:C9:15:CD:38:79:B9:A4:2B X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e3135322e302f32342d3234203d3e203233383532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.172.152.0/24 Signature Algorithm: sha256WithRSAEncryption 51:77:1e:d2:ad:b6:e7:bc:1c:d1:80:ae:10:84:96:cc:96:cb: 58:b4:50:cc:ad:e3:26:d1:5d:b6:df:6a:7b:05:4c:dc:c9:57: e1:ec:93:41:7a:d7:e9:1d:1e:d6:a2:d5:1f:25:38:f3:73:d9: c5:38:c9:e9:ea:7e:88:eb:29:7b:31:99:36:87:72:e2:c1:ac: 8d:dd:8c:0f:bf:21:5f:86:09:33:e1:69:ea:aa:c2:d9:99:67: 11:6f:90:ab:4c:29:a2:9d:02:12:89:cc:16:ac:3e:49:90:07: c5:80:9a:cf:ab:30:e1:ed:f0:f7:6a:db:26:70:e1:30:29:69: 69:81:dc:70:99:b9:99:f1:72:4d:aa:f4:f2:9e:92:8b:cb:b9: f2:f4:55:cc:60:71:7f:83:47:7c:d0:74:86:bc:3a:bc:29:4b: 9e:a7:b7:4e:e6:20:26:95:0a:7a:ab:47:19:b2:26:00:33:27: 2a:a4:93:7e:01:27:0a:47:52:6a:7b:fe:85:b0:e6:5e:73:53: a5:c7:9b:94:18:06:71:19:5a:57:54:f1:33:7a:2c:2c:c7:91: 49:16:78:79:49:10:71:e3:58:97:6a:18:24:0b:36:bc:30:7c: e5:b4:51:fd:d4:5f:16:2d:9e:b0:5a:3a:9d:12:91:e9:c9:0b: 3c:4f:da:5a -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUdL+RFwgtBGLkEDXr3aZw3IUhhDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA0MTQwMzI0MDVaFw0yNzA0MTMwMzI5MDVaMDMxMTAvBgNV BAMTKDAzRDVGRUQ3N0Y5MjNGMkI4N0YxRkRCQ0M5MTVDRDM4NzlCOUE0MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7+ddCExkbSJ0dj3CQtpnBhVkG SWIP+ZTQCl0dKxdfFvy/vC+9TECjp1+p8pVVFpN4gruKMJZMIn+xll1uX9pvfkpF lHccrAkGVRPYKr+LV/ifXlinO//W5qu9K0Yyet9EU4TqCktGUYlSYmJv7BSZwIm/ nqS3A7qBahjYtDTxu3SXKACEBs/G6Pfa3Uw42Zz4n5+hUpb/27CgcXvoS0N/RoRN TVu3PlbEZCZMD0+KGcjrFUys0klfQX1CvMZQqvsqbDQtt3/finilDTUUuXmSCHli 8ML+E6fn3amT9yQSztGKL823zgPJN00hy9RYacng9BTqfi8bQ+tPSH/PVbgtAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUA9X+13+SPyuH8f28yRXNOHm5pCswHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc4MTI4NjcvMC8zMTMyMzQyZTMx MzczMjJlMzEzNTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM4MzUzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAHysmDANBgkqhkiG9w0BAQsFAAOCAQEAUXce0q2257wc0YCuEISW zJbLWLRQzK3jJtFdtt9qewVM3MlX4eyTQXrX6R0e1qLVHyU483PZxTjJ6ep+iOsp ezGZNody4sGsjd2MD78hX4YJM+Fp6qrC2ZlnEW+Qq0wpop0CEonMFqw+SZAHxYCa z6sw4e3w92rbJnDhMClpaYHccJm5mfFyTar08p6Si8u58vRVzGBxf4NHfNB0hrw6 vClLnqe3TuYgJpUKeqtHGbImADMnKqSTfgEnCkdSanv+hbDmXnNTpceblBgGcRla V1TxM3osLMeRSRZ4eUkQceNYl2oYJAs2vDB85bRR/dRfFi2esFo6nRKR6ckLPE/a Wg== -----END CERTIFICATE-----Generated at Fri Apr 17 19:26:34 2026 by rpki-client