$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3132332e3130382e38382e302f32332d3234203d3e20313331323734.roa File: 3132332e3130382e38382e302f32332d3234203d3e20313331323734.roa (raw, json) Hash identifier: KVw1ZsR5cRw8w43qTv7rnpualsEm8ADkkapwBBvNFYw= Subject key identifier: C4:B5:47:56:68:6C:02:F5:A0:AB:DA:36:9B:CC:A5:D9:5D:03:AC:49 Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Certificate serial: 3E0E90881B8E3B199312BE645B26217F8E757D9B Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3132332e3130382e38382e302f32332d3234203d3e20313331323734.roa Signing time: Fri 17 Apr 2026 01:59:39 +0000 ROA not before: Fri 17 Apr 2026 01:54:39 +0000 ROA not after: Fri 16 Apr 2027 01:59:39 +0000 asID: 131274 IP address blocks: 123.108.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 04:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:0e:90:88:1b:8e:3b:19:93:12:be:64:5b:26:21:7f:8e:75:7d:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Validity Not Before: Apr 17 01:54:39 2026 GMT Not After : Apr 16 01:59:39 2027 GMT Subject: CN=C4B54756686C02F5A0ABDA369BCCA5D95D03AC49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f0:f6:ec:de:4e:7c:bb:67:66:36:cf:0d:94: 9e:51:61:a4:18:e6:da:3f:02:8e:d9:6b:42:09:9d: 04:b2:db:0f:0f:21:09:47:65:7c:39:0b:7b:e7:ba: 9b:69:01:04:f0:48:77:9e:f9:5c:1f:ed:28:01:78: 3f:0a:1b:fb:5e:64:fb:dc:e1:14:be:3b:8c:2d:fc: 9b:2c:d5:94:63:75:d2:cf:02:75:29:8b:6e:40:3b: d0:7a:01:86:4b:88:b2:37:55:5b:65:cc:b3:6b:79: 5d:18:67:34:6b:bf:03:fa:b7:8c:93:e4:ae:d6:c6: 7f:6d:0f:c4:c8:c0:be:4c:47:86:da:a2:ea:99:f4: 95:b9:14:4a:97:39:4c:c4:24:19:19:d6:9e:b9:0d: 86:20:61:06:33:30:eb:58:cb:c1:30:ca:52:23:8f: 33:43:06:13:9e:e8:b5:18:94:ac:33:37:e4:af:a6: 70:30:1d:53:06:d2:1a:5f:9a:8c:74:6e:b5:a8:c2: 78:6f:00:fb:ab:05:8c:5c:cf:90:3c:39:78:6a:52: 69:57:f2:81:80:de:9e:f9:79:da:8c:30:80:3c:25: 3e:80:fa:93:c7:ba:ff:2e:65:9c:57:9e:00:ef:f2: 5f:16:00:b0:f0:d8:58:64:62:54:56:e1:c6:e2:6a: c6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B5:47:56:68:6C:02:F5:A0:AB:DA:36:9B:CC:A5:D9:5D:03:AC:49 X509v3 Authority Key Identifier: keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3132332e3130382e38382e302f32332d3234203d3e20313331323734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.108.88.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:ca:2e:43:f1:29:63:8b:f3:c3:ba:0c:61:56:86:37:c4:47: 1a:e4:6a:d9:c0:a7:65:3d:cc:cd:43:97:ef:cb:e7:e6:14:a6: 30:17:12:04:84:b3:2a:4b:8c:94:8c:90:3f:00:82:0d:b7:9a: 67:89:31:3a:92:8c:23:1c:87:76:60:26:96:80:86:b1:51:88: 64:55:ef:89:c3:0e:25:51:8f:d9:a5:59:01:4e:aa:1a:1a:7d: cb:c9:c9:25:3b:e8:e0:b9:1f:c8:44:62:8f:ec:e4:ae:6e:d1: 42:ce:a6:83:cf:33:3f:85:12:62:87:c7:f7:ab:02:b3:47:6e: aa:5c:ef:6c:ec:58:e6:5a:87:63:e0:ca:0e:cb:1d:8f:79:83: 78:fd:3d:57:3d:f6:fa:b0:b3:2f:78:f3:dd:98:04:de:01:19: 99:c2:52:ac:cb:5b:6b:fd:d4:93:f9:6d:bf:d4:02:86:e4:9e: 6e:35:c1:1b:7a:ac:77:96:bb:fa:a9:8b:c2:3a:94:b7:01:90: 14:a1:7d:bd:69:7b:17:6d:8a:21:a9:89:66:23:20:97:12:24: 20:6f:85:f1:f3:da:ea:ad:2f:e7:8c:79:5b:68:ef:84:23:b5: 9b:00:ce:16:1f:68:8a:4f:22:98:78:5d:34:b3:0b:1c:66:01: 68:ee:57:b3 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUPg6QiBuOOxmTEr5kWyYhf451fZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4 M0FCMjMzOTAeFw0yNjA0MTcwMTU0MzlaFw0yNzA0MTYwMTU5MzlaMDMxMTAvBgNV BAMTKEM0QjU0NzU2Njg2QzAyRjVBMEFCREEzNjlCQ0NBNUQ5NUQwM0FDNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ8Pbs3k58u2dmNs8NlJ5RYaQY 5to/Ao7Za0IJnQSy2w8PIQlHZXw5C3vnuptpAQTwSHee+Vwf7SgBeD8KG/teZPvc 4RS+O4wt/Jss1ZRjddLPAnUpi25AO9B6AYZLiLI3VVtlzLNreV0YZzRrvwP6t4yT 5K7Wxn9tD8TIwL5MR4baouqZ9JW5FEqXOUzEJBkZ1p65DYYgYQYzMOtYy8EwylIj jzNDBhOe6LUYlKwzN+SvpnAwHVMG0hpfmox0brWownhvAPurBYxcz5A8OXhqUmlX 8oGA3p75edqMMIA8JT6A+pPHuv8uZZxXngDv8l8WALDw2FhkYlRW4cbiasZPAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUxLVHVmhsAvWgq9o2m8yl2V0DrEkwHwYDVR0j BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2MDI5NDUvMC8zMTMyMzMyZTMx MzAzODJlMzgzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzMzMTMyMzczNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAXtsWDANBgkqhkiG9w0BAQsFAAOCAQEAfsouQ/EpY4vzw7oMYVaG N8RHGuRq2cCnZT3MzUOX78vn5hSmMBcSBISzKkuMlIyQPwCCDbeaZ4kxOpKMIxyH dmAmloCGsVGIZFXvicMOJVGP2aVZAU6qGhp9y8nJJTvo4LkfyERij+zkrm7RQs6m g88zP4USYofH96sCs0duqlzvbOxY5lqHY+DKDssdj3mDeP09Vz32+rCzL3jz3ZgE 3gEZmcJSrMtba/3Uk/ltv9QChuSebjXBG3qsd5a7+qmLwjqUtwGQFKF9vWl7F22K IamJZiMglxIkIG+F8fPa6q0v54x5W2jvhCO1mwDOFh9oik8imHhdNLMLHGYBaO5X sw== -----END CERTIFICATE-----Generated at Fri Apr 17 17:20:32 2026 by rpki-client