$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e38362e302f32342d3234203d3e2034383038.roa File: 3132322e3230302e38362e302f32342d3234203d3e2034383038.roa (raw, json) Hash identifier: oS2jMaoEFE4sG5rQcBiPluuvCuNl0NOgHIY832u8x+I= Subject key identifier: 48:1B:ED:4D:61:0D:F8:46:23:64:5F:6E:CD:11:EF:FA:91:69:C4:4D Certificate issuer: /CN=29BAE90B795BA6BB50390EB31964E6F823BAB331 Certificate serial: 1C3E6809F01F35D100DF174B64ED4C7ABBA884AB Authority key identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e38362e302f32342d3234203d3e2034383038.roa Signing time: Wed 15 Apr 2026 02:50:22 +0000 ROA not before: Wed 15 Apr 2026 02:45:22 +0000 ROA not after: Wed 14 Apr 2027 02:50:22 +0000 asID: 4808 IP address blocks: 122.200.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 13:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:3e:68:09:f0:1f:35:d1:00:df:17:4b:64:ed:4c:7a:bb:a8:84:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29BAE90B795BA6BB50390EB31964E6F823BAB331 Validity Not Before: Apr 15 02:45:22 2026 GMT Not After : Apr 14 02:50:22 2027 GMT Subject: CN=481BED4D610DF84623645F6ECD11EFFA9169C44D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:51:01:69:21:d2:26:4f:81:dc:3d:cd:61:8a: 8f:13:da:50:ca:d1:24:fc:46:8d:5c:3d:74:b7:34: 70:f4:c2:1f:ea:c5:34:2c:d6:dc:75:e5:c2:8a:d6: bd:e6:c4:60:29:58:30:88:23:ec:9b:06:ca:97:31: 26:18:fc:b5:e3:11:38:3d:f5:c4:6f:70:ba:a7:38: 8b:60:ad:09:88:8e:10:3d:e8:fe:4f:a2:dc:67:49: e4:5f:51:be:79:85:37:80:b7:2b:b1:27:0b:ad:ee: b5:da:7d:bc:30:0e:90:2f:12:2f:cd:0c:d2:a1:52: f4:0a:92:de:5e:fd:e2:f3:8a:94:c3:4a:de:59:1f: ca:2b:b3:74:02:9b:f2:41:b0:e4:aa:10:6f:03:3d: f4:56:90:34:7e:62:b2:7e:ef:00:51:71:6a:77:c6: a9:0d:de:c3:da:f7:54:91:2c:11:a9:cb:65:e1:66: bd:33:c4:bf:b9:95:03:2c:b1:15:27:16:55:f0:81: e9:07:df:26:c2:c6:ed:46:f3:db:ca:a0:b2:0d:27: 8e:48:e1:3c:a8:92:15:a8:44:ef:43:91:7e:32:1d: a8:0c:0e:3a:ff:39:6d:da:2b:fc:16:db:70:9d:9f: 95:5d:d1:c6:fb:38:ae:61:5b:26:9d:5d:14:37:4f: 06:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1B:ED:4D:61:0D:F8:46:23:64:5F:6E:CD:11:EF:FA:91:69:C4:4D X509v3 Authority Key Identifier: keyid:29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/3132322e3230302e38362e302f32342d3234203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.200.86.0/24 Signature Algorithm: sha256WithRSAEncryption 17:6c:10:64:7e:f1:35:51:a0:aa:b3:4b:56:e9:88:43:7d:f4: b7:99:0a:ad:1a:04:9c:c6:b6:96:6e:38:5d:c4:0d:78:5d:6a: ca:ef:d4:ee:ad:5e:e6:b8:20:1c:ad:e6:f8:1b:58:fc:bf:3d: 18:5c:61:11:7f:3f:15:66:33:c3:8a:52:42:da:a5:23:c8:5a: f2:d8:10:a2:21:18:01:43:41:bf:4b:60:31:ec:57:05:2d:25: 6f:b7:ca:24:0c:2f:ec:f2:12:68:1a:e6:60:98:5d:1a:f9:91: 55:5a:bb:71:58:34:b6:26:d4:35:69:a5:be:ef:7c:3e:ef:6d: d0:7c:5f:a2:a8:27:e7:ee:3d:07:a7:c4:5f:46:c6:5f:b8:36: 56:98:9a:a3:e3:85:f2:3a:b8:83:42:3b:32:02:c0:c7:a2:4f: 49:c3:6a:10:79:cd:d5:c5:f1:91:c0:d6:04:dd:fc:93:81:b6: f1:b3:2f:5c:b5:20:8c:d0:0d:87:82:39:e6:13:87:53:21:a3: 76:c0:9c:1c:c7:71:84:64:40:d7:7b:7b:a0:9d:e8:11:83:d4: 0f:bf:de:be:b8:73:a5:69:d6:9f:d0:b9:f0:90:be:aa:3a:9e: f8:b6:09:57:b4:fd:08:8d:52:b8:90:89:ef:53:e7:56:e9:8f: 9d:65:29:17 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUHD5oCfAfNdEA3xdLZO1MeruohKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlCQUU5MEI3OTVCQTZCQjUwMzkwRUIzMTk2NEU2Rjgy M0JBQjMzMTAeFw0yNjA0MTUwMjQ1MjJaFw0yNzA0MTQwMjUwMjJaMDMxMTAvBgNV BAMTKDQ4MUJFRDRENjEwREY4NDYyMzY0NUY2RUNEMTFFRkZBOTE2OUM0NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcUQFpIdImT4HcPc1hio8T2lDK 0ST8Ro1cPXS3NHD0wh/qxTQs1tx15cKK1r3mxGApWDCII+ybBsqXMSYY/LXjETg9 9cRvcLqnOItgrQmIjhA96P5PotxnSeRfUb55hTeAtyuxJwut7rXafbwwDpAvEi/N DNKhUvQKkt5e/eLzipTDSt5ZH8ors3QCm/JBsOSqEG8DPfRWkDR+YrJ+7wBRcWp3 xqkN3sPa91SRLBGpy2XhZr0zxL+5lQMssRUnFlXwgekH3ybCxu1G89vKoLINJ45I 4TyokhWoRO9DkX4yHagMDjr/OW3aK/wW23Cdn5Vd0cb7OK5hWyadXRQ3TwbnAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUSBvtTWEN+EYjZF9uzRHv+pFpxE0wHwYDVR0j BBgwFoAUKbrpC3lbprtQOQ6zGWTm+CO6szEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3MTE0OTY1MDY0MDg5Ny8wLzI5QkFFOTBCNzk1QkE2QkI1MDM5MEVCMzE5NjRF NkY4MjNCQUIzMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjlCQUU5MEI3OTVCQTZCQjUwMzkwRUIzMTk2NEU2RjgyM0JBQjMzMS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODcxMTQ5NjUwNjQwODk3LzAvMzEzMjMyMmUzMjMw MzAyZTM4MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHrIVjANBgkqhkiG9w0BAQsFAAOCAQEAF2wQZH7xNVGgqrNLVumIQ330t5kK rRoEnMa2lm44XcQNeF1qyu/U7q1e5rggHK3m+BtY/L89GFxhEX8/FWYzw4pSQtql I8ha8tgQoiEYAUNBv0tgMexXBS0lb7fKJAwv7PISaBrmYJhdGvmRVVq7cVg0tibU NWmlvu98Pu9t0Hxfoqgn5+49B6fEX0bGX7g2Vpiao+OF8jq4g0I7MgLAx6JPScNq EHnN1cXxkcDWBN38k4G28bMvXLUgjNANh4I55hOHUyGjdsCcHMdxhGRA13t7oJ3o EYPUD7/evrhzpWnWn9C58JC+qjqe+LYJV7T9CI1SuJCJ71PnVumPnWUpFw== -----END CERTIFICATE-----Generated at Fri Apr 17 19:09:32 2026 by rpki-client