$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e3135352e302f32342d3234203d3e203233383532.roa File: 3132342e3137322e3135352e302f32342d3234203d3e203233383532.roa (raw, json) Hash identifier: htPrmbssb85umKdwSEc8fwLNo1RcYwdu42XQGEQmp8E= Subject key identifier: 03:BE:05:23:AE:1D:1B:68:B5:11:6C:D9:92:5E:CA:18:09:F1:92:E9 Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 30D1DFCC4BE8DB91AF8EEE31F4749F0DD905F17A Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e3135352e302f32342d3234203d3e203233383532.roa Signing time: Tue 14 Apr 2026 03:30:16 +0000 ROA not before: Tue 14 Apr 2026 03:25:16 +0000 ROA not after: Tue 13 Apr 2027 03:30:16 +0000 asID: 23852 IP address blocks: 124.172.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 08:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:d1:df:cc:4b:e8:db:91:af:8e:ee:31:f4:74:9f:0d:d9:05:f1:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Apr 14 03:25:16 2026 GMT Not After : Apr 13 03:30:16 2027 GMT Subject: CN=03BE0523AE1D1B68B5116CD9925ECA1809F192E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:97:ee:64:e7:cc:3a:35:b5:36:b4:0c:15:5f: d6:7c:59:d7:f5:e2:6d:3c:3e:b1:bd:5d:1a:f7:70: 89:0d:3b:9d:b7:6e:95:c1:f3:b3:ba:3f:3a:88:c3: 07:cd:d1:42:25:64:09:66:5d:6b:83:8f:ba:87:ef: f7:d7:57:99:75:af:d9:83:cd:f4:79:1c:b3:4f:96: 5a:ab:c6:82:f7:27:12:c6:7d:09:9e:89:47:95:bd: 99:a3:1d:36:e8:0a:15:6e:6c:ea:40:69:ab:4d:84: b3:e2:52:7c:5b:cc:8f:21:47:f7:20:1c:e5:e0:bb: dd:b7:c4:24:aa:8f:e8:8e:e1:71:86:28:f1:83:35: d9:8f:58:bf:07:96:d6:ec:b1:86:28:15:ca:e7:a2: 58:45:55:e0:4b:ba:2e:3f:c0:60:58:32:50:47:a9: 21:90:9d:73:81:3e:21:f9:13:29:fb:17:9e:cd:60: 03:bb:b4:16:d8:15:8d:82:d8:37:32:b9:2d:5b:07: a4:b4:11:9f:bb:39:7a:5f:70:8a:3a:9c:0e:2f:48: bf:38:2d:ce:da:ea:b8:1e:62:64:16:1e:0c:f9:0d: f7:16:d7:ee:b1:5d:97:5c:f4:8d:7e:22:15:f1:b2: 51:99:79:74:05:dc:91:d7:f7:f6:1f:f8:ca:48:ec: ab:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BE:05:23:AE:1D:1B:68:B5:11:6C:D9:92:5E:CA:18:09:F1:92:E9 X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e3135352e302f32342d3234203d3e203233383532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.172.155.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:55:94:16:70:5b:32:0f:36:c0:2a:9f:ed:72:69:19:b3:c0: e8:78:fd:da:c0:a5:1a:b5:32:a8:4c:88:a0:56:4f:5a:06:04: a8:11:a9:c0:a3:85:04:e7:fc:72:71:66:e9:6d:4d:fe:7c:e5: 64:50:10:1a:7f:bb:36:e2:d1:90:6d:08:96:66:5e:5e:a4:23: 92:8d:bc:82:06:03:16:d8:a6:e5:c4:97:f9:d1:46:7f:70:53: 03:47:a2:47:6a:ef:a7:f3:85:f2:b1:20:98:bd:3f:88:65:66: 4d:df:14:9a:fa:46:04:76:15:4d:d0:6c:16:8b:8a:87:97:d0: 5a:ca:a2:2e:39:d2:c8:36:b3:84:74:8f:ef:ae:5a:ff:34:6b: 82:62:5c:ca:d1:41:32:76:f8:15:f4:3e:63:1b:5e:82:cd:30: d6:f1:59:a3:d2:8f:81:36:9f:f5:ee:fc:eb:8b:14:59:12:14: 67:46:0a:b7:6f:52:08:fb:ab:9b:63:50:0d:de:64:a2:85:86: 78:45:38:86:df:47:04:ed:7f:b1:67:fa:0c:be:d6:3b:d9:56: 26:57:eb:0e:f0:b5:d4:e9:4a:0e:79:40:e4:29:7a:92:16:d5: 52:2c:27:21:57:f5:d3:bf:09:77:43:c6:87:7b:58:03:5d:ae: af:d8:ef:63 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUMNHfzEvo25Gvju4x9HSfDdkF8XowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA0MTQwMzI1MTZaFw0yNzA0MTMwMzMwMTZaMDMxMTAvBgNV BAMTKDAzQkUwNTIzQUUxRDFCNjhCNTExNkNEOTkyNUVDQTE4MDlGMTkyRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOl+5k58w6NbU2tAwVX9Z8Wdf1 4m08PrG9XRr3cIkNO523bpXB87O6PzqIwwfN0UIlZAlmXWuDj7qH7/fXV5l1r9mD zfR5HLNPllqrxoL3JxLGfQmeiUeVvZmjHTboChVubOpAaatNhLPiUnxbzI8hR/cg HOXgu923xCSqj+iO4XGGKPGDNdmPWL8HltbssYYoFcrnolhFVeBLui4/wGBYMlBH qSGQnXOBPiH5Eyn7F57NYAO7tBbYFY2C2DcyuS1bB6S0EZ+7OXpfcIo6nA4vSL84 Lc7a6rgeYmQWHgz5DfcW1+6xXZdc9I1+IhXxslGZeXQF3JHX9/Yf+MpI7KsNAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUA74FI64dG2i1EWzZkl7KGAnxkukwHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc4MTI4NjcvMC8zMTMyMzQyZTMx MzczMjJlMzEzNTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM4MzUzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAHysmzANBgkqhkiG9w0BAQsFAAOCAQEAbVWUFnBbMg82wCqf7XJp GbPA6Hj92sClGrUyqEyIoFZPWgYEqBGpwKOFBOf8cnFm6W1N/nzlZFAQGn+7NuLR kG0IlmZeXqQjko28ggYDFtim5cSX+dFGf3BTA0eiR2rvp/OF8rEgmL0/iGVmTd8U mvpGBHYVTdBsFouKh5fQWsqiLjnSyDazhHSP765a/zRrgmJcytFBMnb4FfQ+Yxte gs0w1vFZo9KPgTaf9e7864sUWRIUZ0YKt29SCPurm2NQDd5kooWGeEU4ht9HBO1/ sWf6DL7WO9lWJlfrDvC11OlKDnlA5Cl6khbVUiwnIVf1078Jd0PGh3tYA12ur9jv Yw== -----END CERTIFICATE-----Generated at Fri Apr 17 19:26:34 2026 by rpki-client