$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3132332e3137362e38302e302f32302d3234203d3e20313331353136.roa File: 3132332e3137362e38302e302f32302d3234203d3e20313331353136.roa (raw, json) Hash identifier: 5fiZ5GttxYaOcgluy/azTpDTtS6E6CiNnc8yymDFWMk= Subject key identifier: C0:6E:8E:90:06:45:D4:C7:69:30:36:CD:3A:C5:1A:90:D5:DF:C7:23 Certificate issuer: /CN=25C6596195B162409A5AFAA92570F258BAD3C42D Certificate serial: 4D6620A50DAFF75B4B3867807B64F78267EA7CD2 Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3132332e3137362e38302e302f32302d3234203d3e20313331353136.roa Signing time: Tue 14 Apr 2026 09:24:46 +0000 ROA not before: Tue 14 Apr 2026 09:19:46 +0000 ROA not after: Tue 13 Apr 2027 09:24:46 +0000 asID: 131516 IP address blocks: 123.176.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 14:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:66:20:a5:0d:af:f7:5b:4b:38:67:80:7b:64:f7:82:67:ea:7c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D Validity Not Before: Apr 14 09:19:46 2026 GMT Not After : Apr 13 09:24:46 2027 GMT Subject: CN=C06E8E900645D4C7693036CD3AC51A90D5DFC723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:88:c5:4a:13:2d:a7:65:59:fc:e9:10:db:0f: d6:30:20:e6:29:c5:cb:94:a6:24:e5:34:42:ef:f4: 20:12:b0:11:ca:34:16:ab:73:b2:45:94:a0:9c:ee: da:46:63:d4:83:39:6c:0a:69:83:2f:1c:6b:2e:ee: 04:55:73:e8:04:4a:95:35:5c:33:ef:bb:a2:e1:34: ba:e3:59:cd:c9:fb:74:4b:ff:6b:d1:f7:35:3b:6e: 98:a5:df:7d:83:eb:48:2e:6d:26:00:00:55:69:1f: 2e:60:80:c5:84:f3:db:bc:0e:ce:0f:4d:a1:2a:bb: e5:14:eb:5c:a6:c2:5d:a2:41:5e:81:32:6b:3f:eb: d7:b1:86:fd:e5:d5:bf:59:a8:db:10:5c:19:c4:ba: 99:f6:2d:a4:df:01:04:70:bb:a3:06:72:d5:25:94: bd:d0:07:8d:39:0a:89:11:91:b6:84:6a:20:27:bc: e3:21:e3:ca:d1:ae:de:45:44:57:fd:5a:48:2e:8b: 5f:9e:86:80:28:af:fa:d1:cf:c2:5a:78:92:11:69: cc:83:31:61:e2:3b:cd:f2:db:83:86:0c:d0:45:0b: 47:30:a5:b6:ce:7b:21:21:d8:2f:81:e0:4c:0f:3b: 74:63:94:56:eb:0e:15:07:85:5f:b6:e7:61:a6:8c: cc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6E:8E:90:06:45:D4:C7:69:30:36:CD:3A:C5:1A:90:D5:DF:C7:23 X509v3 Authority Key Identifier: keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3132332e3137362e38302e302f32302d3234203d3e20313331353136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.176.80.0/20 Signature Algorithm: sha256WithRSAEncryption 8f:56:17:6c:0f:0b:16:c6:18:f7:1f:cb:13:e9:0b:a3:a5:40: e1:15:a1:9d:b3:6f:19:7a:11:1e:94:93:bb:6b:76:5c:a8:5a: d6:65:62:23:e9:b2:b5:a8:9f:66:3e:f9:8e:71:20:07:37:da: 0f:8d:20:12:ba:e1:fa:ca:b6:1d:8c:4f:b0:9d:62:66:ea:df: e3:aa:05:bc:aa:7b:03:d1:e9:72:c8:e3:e1:ea:88:ed:27:40: c6:28:c4:00:5b:b6:93:1e:91:b8:5b:25:04:0a:5f:8f:dd:d7: 7a:6b:a4:6f:74:f9:ec:ce:5e:93:31:c2:74:1f:9f:dd:21:3f: 55:00:54:19:d9:1d:a5:73:e7:91:ec:c5:aa:69:61:93:7b:b1: 33:3f:e3:1d:65:82:06:cf:53:72:da:1c:04:73:f2:2b:7d:cf: 25:50:99:22:4e:99:ef:35:f9:d9:4c:d2:29:31:5b:8f:7c:0e: 79:70:84:1f:fe:e2:74:b1:73:e8:9e:25:af:44:68:9f:e1:27: 3e:d3:fb:56:a0:ff:1c:3e:d1:7d:85:b7:25:8f:55:be:e4:31: 6f:ba:06:18:5a:4d:a5:fe:64:d5:5a:ee:4c:4c:e7:fb:57:49: 11:66:66:f2:3c:73:a4:4c:c0:05:3a:af:73:56:e5:6e:96:90: 48:e1:80:9f -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUTWYgpQ2v91tLOGeAe2T3gmfqfNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThC QUQzQzQyRDAeFw0yNjA0MTQwOTE5NDZaFw0yNzA0MTMwOTI0NDZaMDMxMTAvBgNV BAMTKEMwNkU4RTkwMDY0NUQ0Qzc2OTMwMzZDRDNBQzUxQTkwRDVERkM3MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEiMVKEy2nZVn86RDbD9YwIOYp xcuUpiTlNELv9CASsBHKNBarc7JFlKCc7tpGY9SDOWwKaYMvHGsu7gRVc+gESpU1 XDPvu6LhNLrjWc3J+3RL/2vR9zU7bpil332D60gubSYAAFVpHy5ggMWE89u8Ds4P TaEqu+UU61ymwl2iQV6BMms/69exhv3l1b9ZqNsQXBnEupn2LaTfAQRwu6MGctUl lL3QB405CokRkbaEaiAnvOMh48rRrt5FRFf9Wkgui1+ehoAor/rRz8JaeJIRacyD MWHiO83y24OGDNBFC0cwpbbOeyEh2C+B4EwPO3RjlFbrDhUHhV+252GmjMxDAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUwG6OkAZF1MdpMDbNOsUakNXfxyMwHwYDVR0j BBgwFoAUJcZZYZWxYkCaWvqpJXDyWLrTxC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNjk5NjM1NS8wLzI1QzY1OTYxOTVCMTYyNDA5QTVBRkFBOTI1NzBG MjU4QkFEM0M0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThCQUQzQzQyRC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTY5OTYzNTUvMC8zMTMyMzMyZTMx MzczNjJlMzgzMDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMxMzMzMTM1MzEzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBHuwUDANBgkqhkiG9w0BAQsFAAOCAQEAj1YXbA8LFsYY9x/LE+kL o6VA4RWhnbNvGXoRHpSTu2t2XKha1mViI+mytaifZj75jnEgBzfaD40gErrh+sq2 HYxPsJ1iZurf46oFvKp7A9Hpcsjj4eqI7SdAxijEAFu2kx6RuFslBApfj93Xemuk b3T57M5ekzHCdB+f3SE/VQBUGdkdpXPnkezFqmlhk3uxMz/jHWWCBs9TctocBHPy K33PJVCZIk6Z7zX52UzSKTFbj3wOeXCEH/7idLFz6J4lr0Ron+EnPtP7VqD/HD7R fYW3JY9VvuQxb7oGGFpNpf5k1VruTEzn+1dJEWZm8jxzpEzABTqvc1blbpaQSOGA nw== -----END CERTIFICATE-----Generated at Fri Apr 17 18:22:05 2026 by rpki-client