$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3133362e302f32322d3234203d3e20333939313338.roa File: 3132342e34322e3133362e302f32322d3234203d3e20333939313338.roa (raw, json) Hash identifier: bQiErAXOjI0VPmUr3ttraVD7Ty086lxsuve+vR9dswU= Subject key identifier: 7A:F6:A1:2F:B6:21:F5:19:02:A7:20:B5:22:DE:FD:4B:DF:DF:C1:27 Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 461368F9BE3F60AE80FE92B58196C580EF5FB811 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3133362e302f32322d3234203d3e20333939313338.roa Signing time: Wed 28 Jan 2026 07:46:23 +0000 ROA not before: Wed 28 Jan 2026 07:41:23 +0000 ROA not after: Wed 27 Jan 2027 07:46:23 +0000 asID: 399138 IP address blocks: 124.42.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:13:68:f9:be:3f:60:ae:80:fe:92:b5:81:96:c5:80:ef:5f:b8:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Jan 28 07:41:23 2026 GMT Not After : Jan 27 07:46:23 2027 GMT Subject: CN=7AF6A12FB621F51902A720B522DEFD4BDFDFC127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ab:ff:fa:da:a2:03:af:82:0d:e0:be:d0:c7: 9e:77:97:a9:f9:eb:b3:e9:ab:0a:0d:be:27:a5:0c: 0b:79:48:61:99:12:c1:da:b7:84:86:4b:d9:71:1e: 9b:0e:a8:d8:a4:1f:4a:e3:4d:55:00:79:73:21:6a: 58:9f:01:db:0d:51:0d:12:13:e3:2d:6d:0c:50:f6: 45:47:93:b1:0c:66:be:66:20:22:90:05:24:a8:3f: 7a:2d:dd:5f:7b:15:7a:cb:43:1c:bf:2b:c0:17:da: 73:6a:cf:fe:92:0a:62:7d:a5:ef:b2:62:67:73:39: 0c:35:a8:b3:3d:8b:9d:c6:58:f3:e9:33:c2:78:4e: a7:5e:09:d5:71:39:c6:eb:bd:a4:2e:f0:99:f4:7d: bb:5c:b1:8d:b2:9d:94:90:49:26:2a:7d:c3:15:b2: a5:c9:ad:20:17:54:37:73:22:97:13:38:f2:f5:99: d2:7b:32:b9:dd:f8:b1:72:18:09:e5:f3:05:40:c3: 5f:c8:fe:9e:e1:73:0a:86:4a:45:c7:94:7c:2b:72: 9b:be:99:ee:6b:d3:6f:fc:14:d5:d0:36:fa:e4:e4: 5b:99:10:f7:20:94:64:f3:7c:c7:db:5d:39:57:4f: 18:1b:e3:ee:ef:56:93:8a:1b:83:b2:37:30:53:ae: 02:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F6:A1:2F:B6:21:F5:19:02:A7:20:B5:22:DE:FD:4B:DF:DF:C1:27 X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3133362e302f32322d3234203d3e20333939313338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.42.136.0/22 Signature Algorithm: sha256WithRSAEncryption bd:11:16:4b:f8:c1:86:a7:83:89:2c:71:33:d1:ba:98:a7:9c: c1:85:84:55:fa:f2:f7:dd:cf:c8:a4:18:c1:ac:d8:49:67:96: 08:08:21:3c:3a:ad:fe:43:e6:82:d4:1f:b9:2d:42:f2:3e:28: 66:26:a2:96:56:b1:85:db:bb:65:50:2c:64:e0:1a:5a:5a:ee: e1:f4:29:af:3b:31:36:07:fd:b7:5c:e5:1a:2d:50:62:2e:6a: f8:f7:11:f1:2a:04:ba:80:59:a7:9c:4f:24:bb:4d:33:a4:2a: 55:f4:e7:d5:ea:ac:09:25:77:00:26:c3:81:a0:55:03:7c:31: 8e:16:37:0d:95:5f:89:c8:16:ae:71:82:dc:14:17:df:2f:2d: 39:ab:c7:4e:82:c1:4f:6d:3e:ce:f6:c7:08:e3:15:5c:9b:c5: 10:59:2d:8d:f1:44:6b:a3:2d:ed:a9:79:93:0b:cf:48:b8:33: 43:d3:5c:67:9a:31:92:32:8f:22:6a:25:87:6b:f5:f3:07:f0: 8c:4c:2e:ef:24:ce:b4:0b:f9:be:c4:55:db:ed:f6:cf:cc:93: 92:99:be:30:f9:a4:33:db:17:8b:b3:c5:ca:df:44:13:93:36: e3:85:1a:93:e5:06:ae:c0:a2:c6:f9:16:a3:3e:c5:36:86:fc: 04:39:b0:77 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIURhNo+b4/YK6A/pK1gZbFgO9fuBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjAxMjgwNzQxMjNaFw0yNzAxMjcwNzQ2MjNaMDMxMTAvBgNV BAMTKDdBRjZBMTJGQjYyMUY1MTkwMkE3MjBCNTIyREVGRDRCREZERkMxMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXq//62qIDr4IN4L7Qx553l6n5 67PpqwoNvielDAt5SGGZEsHat4SGS9lxHpsOqNikH0rjTVUAeXMhalifAdsNUQ0S E+MtbQxQ9kVHk7EMZr5mICKQBSSoP3ot3V97FXrLQxy/K8AX2nNqz/6SCmJ9pe+y YmdzOQw1qLM9i53GWPPpM8J4TqdeCdVxOcbrvaQu8Jn0fbtcsY2ynZSQSSYqfcMV sqXJrSAXVDdzIpcTOPL1mdJ7Mrnd+LFyGAnl8wVAw1/I/p7hcwqGSkXHlHwrcpu+ me5r02/8FNXQNvrk5FuZEPcglGTzfMfbXTlXTxgb4+7vVpOKG4OyNzBTrgI/AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUevahL7Yh9RkCpyC1It79S9/fwScwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC8zMTMyMzQyZTM0 MzIyZTMxMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMzMzkzOTMxMzMzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAnwqiDANBgkqhkiG9w0BAQsFAAOCAQEAvREWS/jBhqeDiSxxM9G6 mKecwYWEVfry993PyKQYwazYSWeWCAghPDqt/kPmgtQfuS1C8j4oZiaillaxhdu7 ZVAsZOAaWlru4fQprzsxNgf9t1zlGi1QYi5q+PcR8SoEuoBZp5xPJLtNM6QqVfTn 1eqsCSV3ACbDgaBVA3wxjhY3DZVficgWrnGC3BQX3y8tOavHToLBT20+zvbHCOMV XJvFEFktjfFEa6Mt7al5kwvPSLgzQ9NcZ5oxkjKPImolh2v18wfwjEwu7yTOtAv5 vsRV2+32z8yTkpm+MPmkM9sXi7PFyt9EE5M244Uak+UGrsCixvkWoz7FNob8BDmw dw== -----END CERTIFICATE-----Generated at Mon Mar 2 15:45:45 2026 by rpki-client