$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3132302e35352e302e302f31362d3234203d3e203337393633.roa File: 3132302e35352e302e302f31362d3234203d3e203337393633.roa (raw, json) Hash identifier: H+y/VzVbADmTJObePIg1uBs+BFcu4tKAHAOJgFR0ga8= Subject key identifier: BF:A6:8F:BB:C1:0A:C4:15:86:5E:55:23:76:C1:97:B2:21:84:06:EC Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Certificate serial: 04925A876128C9F4EBCC0F6C8925BB39EBCD9B28 Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3132302e35352e302e302f31362d3234203d3e203337393633.roa Signing time: Thu 16 Apr 2026 08:19:52 +0000 ROA not before: Thu 16 Apr 2026 08:14:52 +0000 ROA not after: Thu 15 Apr 2027 08:19:52 +0000 asID: 37963 IP address blocks: 120.55.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 11:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:92:5a:87:61:28:c9:f4:eb:cc:0f:6c:89:25:bb:39:eb:cd:9b:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Validity Not Before: Apr 16 08:14:52 2026 GMT Not After : Apr 15 08:19:52 2027 GMT Subject: CN=BFA68FBBC10AC415865E552376C197B2218406EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d3:65:87:1d:68:b6:0b:ac:d5:f8:4f:e6:52: 66:64:58:91:a4:3f:62:f8:f0:f6:59:81:7a:6a:e5: 52:ff:5c:f7:3e:a6:55:b3:e2:7b:c1:9c:5c:e4:c9: 6a:d4:f6:3d:d2:6e:0d:78:fc:88:c6:70:83:28:cc: a6:b3:82:d2:c2:2f:c7:6b:bf:04:d6:e5:b4:4c:b0: c4:ef:a7:30:b1:05:a5:84:33:ed:5d:7f:b0:7a:f9: ce:60:81:49:d5:14:2b:99:aa:7f:c6:a3:74:9c:08: 7e:7f:9c:34:7f:70:2d:98:c2:d7:dd:3a:cf:c5:6f: ed:1a:f4:f4:74:03:be:01:1b:8b:ec:c7:16:9f:51: 50:33:e9:e6:de:df:c7:e7:57:29:81:89:9b:86:96: 43:18:fd:7c:31:b5:d1:6a:bf:9a:85:ad:f2:ce:a0: ee:7c:1f:94:d9:e1:ed:ec:49:f9:98:ee:3b:b2:8f: ad:d6:72:3e:e1:7b:af:c0:48:b9:ef:16:d0:1d:16: 28:58:fe:23:6a:62:e6:09:23:b8:21:86:75:79:48: a5:32:38:eb:f1:74:38:95:14:60:a7:f5:33:08:60: a7:2c:f5:d4:3f:95:9b:23:3f:aa:b8:25:fe:89:7c: 25:fb:63:5f:a4:0b:eb:63:52:a3:09:49:61:b1:81: 55:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A6:8F:BB:C1:0A:C4:15:86:5E:55:23:76:C1:97:B2:21:84:06:EC X509v3 Authority Key Identifier: keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3132302e35352e302e302f31362d3234203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.55.0.0/16 Signature Algorithm: sha256WithRSAEncryption b7:96:8e:ad:68:48:a3:9b:79:cc:82:1a:f4:65:44:e5:5d:af: 15:5f:d1:30:68:d0:9f:3b:e8:75:ff:32:64:ca:6f:f5:cf:8f: 20:39:fd:c3:5b:0f:32:ac:e4:5b:c6:00:dc:b4:48:6a:46:88: 72:cc:31:a2:2a:23:23:92:b4:f2:63:05:fc:a8:34:5c:fa:8a: 50:df:d2:7b:ae:da:b9:01:9d:32:dc:0f:2e:23:56:f4:44:85: ed:3d:12:56:90:f9:d5:13:7f:a5:68:94:6f:a4:14:f4:eb:13: be:92:1e:5a:b2:cd:34:a2:50:6c:12:a5:53:d6:52:1d:7a:57: fc:a3:9f:7c:a3:9b:51:57:69:cc:bd:67:b5:df:9b:1a:1e:26: e4:0b:31:4e:b0:e2:04:c4:fc:1a:f7:5c:3d:02:8e:b0:fd:f0: 0a:67:3d:58:41:95:4a:df:ce:7e:7e:12:ec:d5:1d:48:ff:61: ae:4d:7b:a6:fe:8d:8a:78:0e:24:8b:f0:52:4d:4c:57:2a:77: d6:eb:26:13:1a:5f:06:e1:91:6d:d1:46:63:e0:de:d0:85:c9: 5a:57:e4:e3:e7:53:eb:d8:fd:db:ef:5f:5c:18:c8:30:5d:1e: 69:36:7c:e5:2a:65:2c:e5:d0:aa:b8:7d:cd:e3:4e:97:5f:f5: 10:dc:2d:1a -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUBJJah2EoyfTrzA9siSW7OevNmygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx NTdEMEM4RTAeFw0yNjA0MTYwODE0NTJaFw0yNzA0MTUwODE5NTJaMDMxMTAvBgNV BAMTKEJGQTY4RkJCQzEwQUM0MTU4NjVFNTUyMzc2QzE5N0IyMjE4NDA2RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi02WHHWi2C6zV+E/mUmZkWJGk P2L48PZZgXpq5VL/XPc+plWz4nvBnFzkyWrU9j3Sbg14/IjGcIMozKazgtLCL8dr vwTW5bRMsMTvpzCxBaWEM+1df7B6+c5ggUnVFCuZqn/Go3ScCH5/nDR/cC2Ywtfd Os/Fb+0a9PR0A74BG4vsxxafUVAz6ebe38fnVymBiZuGlkMY/XwxtdFqv5qFrfLO oO58H5TZ4e3sSfmY7juyj63Wcj7he6/ASLnvFtAdFihY/iNqYuYJI7ghhnV5SKUy OOvxdDiVFGCn9TMIYKcs9dQ/lZsjP6q4Jf6JfCX7Y1+kC+tjUqMJSWGxgVVXAgMB AAGjggIOMIICCjAdBgNVHQ4EFgQUv6aPu8EKxBWGXlUjdsGXsiGEBuwwHwYDVR0j BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5 MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzAvMzEzMjMwMmUzNTM1 MmUzMDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMzMzczOTM2MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwB4NzANBgkqhkiG9w0BAQsFAAOCAQEAt5aOrWhIo5t5zIIa9GVE5V2vFV/RMGjQ nzvodf8yZMpv9c+PIDn9w1sPMqzkW8YA3LRIakaIcswxoiojI5K08mMF/Kg0XPqK UN/Se67auQGdMtwPLiNW9ESF7T0SVpD51RN/pWiUb6QU9OsTvpIeWrLNNKJQbBKl U9ZSHXpX/KOffKObUVdpzL1ntd+bGh4m5AsxTrDiBMT8GvdcPQKOsP3wCmc9WEGV St/Ofn4S7NUdSP9hrk17pv6NingOJIvwUk1MVyp31usmExpfBuGRbdFGY+De0IXJ Wlfk4+dT69j92+9fXBjIMF0eaTZ85SplLOXQqrh9zeNOl1/1ENwtGg== -----END CERTIFICATE-----Generated at Fri Apr 17 23:54:59 2026 by rpki-client