$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e38342e302f32332d3233203d3e2034383437.roa File: 3132322e3230302e38342e302f32332d3233203d3e2034383437.roa (raw, json) Hash identifier: Sy0DoHCGElAr96NNn+1jmBipOF87gYOaf8SMvzlgHcI= Subject key identifier: A3:33:CE:5C:7F:03:80:8E:E5:62:E8:C5:91:1A:CC:6B:0F:13:77:4F Certificate issuer: /CN=29BAE90B795BA6BB50390EB31964E6F823BAB331 Certificate serial: 67F752B1C192CC50B08602AB2B6236102D6AD2D9 Authority key identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e38342e302f32332d3233203d3e2034383437.roa Signing time: Wed 15 Apr 2026 02:50:22 +0000 ROA not before: Wed 15 Apr 2026 02:45:22 +0000 ROA not after: Wed 14 Apr 2027 02:50:22 +0000 asID: 4847 IP address blocks: 122.200.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 13:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f7:52:b1:c1:92:cc:50:b0:86:02:ab:2b:62:36:10:2d:6a:d2:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29BAE90B795BA6BB50390EB31964E6F823BAB331 Validity Not Before: Apr 15 02:45:22 2026 GMT Not After : Apr 14 02:50:22 2027 GMT Subject: CN=A333CE5C7F03808EE562E8C5911ACC6B0F13774F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6f:6b:11:18:c2:75:e3:7c:37:e6:3e:c3:79: 0d:9b:af:4f:c0:1a:2d:bc:4f:9a:20:cd:b0:36:79: 24:cc:8a:31:b2:b5:6e:00:87:2b:8e:32:a7:70:2d: f4:c1:f9:b1:5c:5e:2c:5a:fc:d4:3a:a3:8a:81:c6: f9:b5:b2:dd:93:5f:5a:1b:cf:36:12:c0:aa:c0:6b: 8d:34:b5:8e:ea:88:3f:34:e7:89:cc:d3:5f:19:c3: d1:c3:51:fe:8f:da:c2:63:f2:9f:84:b9:07:37:63: ef:7f:07:78:11:7d:d7:1a:d7:ff:a0:6e:d3:83:a5: 2e:79:9f:0d:19:db:6c:e0:d3:1d:b5:bb:da:95:65: bd:4d:2a:eb:76:d1:cf:f7:48:f0:0d:ea:55:03:d8: 10:0a:1f:bc:4f:28:90:02:cc:51:e2:e2:0d:d1:bd: e7:45:ff:fd:86:fd:15:0a:a7:67:4a:20:c9:80:61: 44:18:4d:15:8e:f1:0e:99:9c:b5:d4:c7:21:b0:31: d4:5c:6a:a5:44:61:b9:fd:36:1d:9d:38:14:80:4d: 7b:bd:68:1c:d5:2b:76:45:c2:3d:6f:b0:94:2f:37: 8b:6c:0c:dc:23:7f:12:43:2d:ae:38:60:2e:b9:54: e9:95:35:b1:0a:58:dd:97:6a:17:8e:9f:d5:7f:b9: 0b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:33:CE:5C:7F:03:80:8E:E5:62:E8:C5:91:1A:CC:6B:0F:13:77:4F X509v3 Authority Key Identifier: keyid:29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e38342e302f32332d3233203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.200.84.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:31:ac:5c:6a:11:6d:76:b8:3f:0d:80:c8:31:26:c5:ec:bf: 9a:ed:1b:ef:de:e7:d4:81:93:af:b0:89:76:5a:37:99:a4:63: 31:56:35:cf:c8:50:85:9a:43:e7:81:9f:80:f1:cb:d6:4c:b6: e4:c8:56:80:94:a2:b6:63:55:63:a1:1e:d6:65:e5:e6:34:23: ac:eb:39:bc:2e:58:83:f1:fb:1a:ab:1a:9e:2d:f7:5a:62:bd: 81:e6:77:fb:b5:af:46:99:d6:75:dd:ed:5a:bc:13:e6:13:be: 28:7d:2f:fb:1d:82:ad:e7:77:e4:dd:a7:36:8e:c1:b5:1d:9b: c1:2d:9b:d6:0a:de:1a:15:8d:5a:0a:ce:39:6e:04:f1:50:95: a1:af:6a:87:6e:bb:86:d8:ca:c0:44:91:f1:b3:41:10:07:50: 9c:e5:aa:60:76:84:c2:89:68:97:14:ed:c2:59:7b:5c:fc:e7: 72:f8:85:6a:c2:30:fb:0d:8c:bc:81:51:40:8d:16:f9:d7:2a: 72:34:c6:77:f8:c2:e6:48:a5:dd:ba:1c:a9:08:b0:f5:54:6c: 9b:57:e6:d8:0d:64:22:2c:3b:28:0e:49:7b:2e:44:3f:88:6d: 5d:e0:70:40:c1:e5:b8:d0:ee:0a:24:6b:90:6c:74:bf:89:c6: 99:27:cb:53 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUZ/dSscGSzFCwhgKrK2I2EC1q0tkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlCQUU5MEI3OTVCQTZCQjUwMzkwRUIzMTk2NEU2Rjgy M0JBQjMzMTAeFw0yNjA0MTUwMjQ1MjJaFw0yNzA0MTQwMjUwMjJaMDMxMTAvBgNV BAMTKEEzMzNDRTVDN0YwMzgwOEVFNTYyRThDNTkxMUFDQzZCMEYxMzc3NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXb2sRGMJ143w35j7DeQ2br0/A Gi28T5ogzbA2eSTMijGytW4AhyuOMqdwLfTB+bFcXixa/NQ6o4qBxvm1st2TX1ob zzYSwKrAa400tY7qiD8054nM018Zw9HDUf6P2sJj8p+EuQc3Y+9/B3gRfdca1/+g btODpS55nw0Z22zg0x21u9qVZb1NKut20c/3SPAN6lUD2BAKH7xPKJACzFHi4g3R vedF//2G/RUKp2dKIMmAYUQYTRWO8Q6ZnLXUxyGwMdRcaqVEYbn9Nh2dOBSATXu9 aBzVK3ZFwj1vsJQvN4tsDNwjfxJDLa44YC65VOmVNbEKWN2XaheOn9V/uQvDAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUozPOXH8DgI7lYujFkRrMaw8Td08wHwYDVR0j BBgwFoAUKbrpC3lbprtQOQ6zGWTm+CO6szEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3MTE0OTY1MDY0MDg5Ny8wLzI5QkFFOTBCNzk1QkE2QkI1MDM5MEVCMzE5NjRF NkY4MjNCQUIzMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjlCQUU5MEI3OTVCQTZCQjUwMzkwRUIzMTk2NEU2RjgyM0JBQjMzMS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODcxMTQ5NjUwNjQwODk3LzAvMzEzMjMyMmUzMjMw MzAyZTM4MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAXrIVDANBgkqhkiG9w0BAQsFAAOCAQEAOzGsXGoRbXa4Pw2AyDEmxey/mu0b 797n1IGTr7CJdlo3maRjMVY1z8hQhZpD54GfgPHL1ky25MhWgJSitmNVY6Ee1mXl 5jQjrOs5vC5Yg/H7Gqsani33WmK9geZ3+7WvRpnWdd3tWrwT5hO+KH0v+x2Cred3 5N2nNo7BtR2bwS2b1greGhWNWgrOOW4E8VCVoa9qh267htjKwESR8bNBEAdQnOWq YHaEwololxTtwll7XPzncviFasIw+w2MvIFRQI0W+dcqcjTGd/jC5kil3bocqQiw 9VRsm1fm2A1kIiw7KA5Jey5EP4htXeBwQMHluNDuCiRrkGx0v4nGmSfLUw== -----END CERTIFICATE-----Generated at Fri Apr 17 17:20:33 2026 by rpki-client