$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e302e302f32322d3232203d3e2034313334.roa File: 3132312e34362e302e302f32322d3232203d3e2034313334.roa (raw, json) Hash identifier: EDTiC+u4ugBqPJnhF6BUcw7ZPqRRKD+TEN/MTIrROy4= Subject key identifier: 3E:F0:D6:6F:8F:8D:AF:B2:FB:6C:62:CA:C5:95:9E:DD:08:A9:21:C0 Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6 Certificate serial: 19FD58950F82E0B9CE135FE7915C98616265374F Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e302e302f32322d3232203d3e2034313334.roa Signing time: Tue 14 Apr 2026 03:57:48 +0000 ROA not before: Tue 14 Apr 2026 03:52:48 +0000 ROA not after: Tue 13 Apr 2027 03:57:48 +0000 asID: 4134 IP address blocks: 121.46.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 12:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:fd:58:95:0f:82:e0:b9:ce:13:5f:e7:91:5c:98:61:62:65:37:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6 Validity Not Before: Apr 14 03:52:48 2026 GMT Not After : Apr 13 03:57:48 2027 GMT Subject: CN=3EF0D66F8F8DAFB2FB6C62CAC5959EDD08A921C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:16:aa:88:70:6b:bc:36:74:42:d2:8c:15:be: 3e:e2:9e:76:ce:8f:b4:a9:cc:04:c4:5a:3c:a5:25: 20:6d:8f:81:56:11:bb:f0:06:04:cd:de:ed:36:02: 10:7f:b3:04:8c:6c:c9:28:f4:50:f2:83:50:df:7f: be:58:1f:f8:ec:f8:fd:ea:d0:15:15:6f:4c:db:ad: 0b:c0:5b:85:cd:9f:bf:de:c6:07:62:54:52:98:50: f3:57:e9:2e:10:f9:20:02:3a:65:81:56:d7:b2:a9: e6:4e:aa:d0:2a:40:4a:8e:25:63:3b:e5:7a:1c:7f: 0b:4f:78:75:92:95:fc:4c:a2:d2:2f:a1:bd:88:51: a6:92:42:d3:3c:71:43:e4:59:9b:87:1f:b7:aa:f2: da:5d:d9:84:5e:8b:14:15:67:d5:79:06:44:89:28: 1f:32:a6:50:bc:6d:23:ad:c2:5a:1f:51:cc:02:a8: 92:89:99:6e:b3:15:77:1c:91:03:69:0d:5a:b4:1e: 24:f2:f7:96:7f:0b:ed:5e:e5:ed:20:46:e2:27:bf: 7b:50:62:ea:12:66:5e:0c:8b:05:13:0b:4e:3a:8d: e8:08:eb:20:b6:78:63:aa:0c:8f:24:22:10:a7:42: ad:15:9f:8f:80:16:ae:4c:87:d9:2b:0d:d8:fc:c8: 5e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F0:D6:6F:8F:8D:AF:B2:FB:6C:62:CA:C5:95:9E:DD:08:A9:21:C0 X509v3 Authority Key Identifier: keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e302e302f32322d3232203d3e2034313334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.46.0.0/22 Signature Algorithm: sha256WithRSAEncryption 48:d0:b7:2d:b8:1a:f6:5a:61:e1:2f:cd:e1:f7:4d:af:86:45: 5b:41:66:b0:c1:ab:fb:9d:c3:c3:46:f9:c6:66:d1:75:ea:64: 38:2b:a3:87:a2:46:7f:43:8b:6b:44:42:80:fa:10:82:e0:c0: e1:55:b4:c7:32:0f:c9:4f:8d:4a:75:b5:4b:a3:d8:a2:5f:b8: 6f:9a:d0:35:6b:be:42:44:80:2b:d4:fa:3f:5f:0e:8e:dc:6b: e4:1a:10:79:6d:bb:40:4d:06:a1:5b:cd:eb:1d:6e:20:0e:db: d1:8b:d9:f6:91:7d:16:de:0f:db:23:9a:03:6c:ae:5a:1a:44: 43:64:42:e0:89:8d:40:1f:01:95:a7:45:fc:7d:a7:30:d6:5e: 09:3b:a9:be:dc:0c:86:25:5b:07:2f:ea:dc:d8:7e:48:db:e6: df:99:a2:6f:a8:6d:f5:c2:e9:07:e6:78:82:95:5b:76:e1:f6: 8f:64:48:e6:ee:37:52:96:86:a2:c1:d6:85:97:4c:4a:56:1a: 87:9f:12:09:26:a8:99:b7:6b:c5:77:dc:e5:49:c3:06:35:4c: 91:ac:8e:f0:bf:0d:cb:38:82:16:ed:6e:ef:a3:5d:9f:73:bf: 91:38:5a:5b:2c:dd:01:45:3d:10:2a:4e:47:5b:e8:dc:f8:24: 08:3e:14:1a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUGf1YlQ+C4LnOE1/nkVyYYWJlN08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD MUE4NjlFNjAeFw0yNjA0MTQwMzUyNDhaFw0yNzA0MTMwMzU3NDhaMDMxMTAvBgNV BAMTKDNFRjBENjZGOEY4REFGQjJGQjZDNjJDQUM1OTU5RUREMDhBOTIxQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNFqqIcGu8NnRC0owVvj7innbO j7SpzATEWjylJSBtj4FWEbvwBgTN3u02AhB/swSMbMko9FDyg1Dff75YH/js+P3q 0BUVb0zbrQvAW4XNn7/exgdiVFKYUPNX6S4Q+SACOmWBVteyqeZOqtAqQEqOJWM7 5XocfwtPeHWSlfxMotIvob2IUaaSQtM8cUPkWZuHH7eq8tpd2YReixQVZ9V5BkSJ KB8yplC8bSOtwlofUcwCqJKJmW6zFXcckQNpDVq0HiTy95Z/C+1e5e0gRuInv3tQ YuoSZl4MiwUTC046jegI6yC2eGOqDI8kIhCnQq0Vn4+AFq5Mh9krDdj8yF6LAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUPvDWb4+Nr7L7bGLKxZWe3QipIcAwHwYDVR0j BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0 MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2Mjc1MzMwNzc3MzUwMTQ2LzAvMzEzMjMxMmUzNDM2 MmUzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM0MzEzMzM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC eS4AMA0GCSqGSIb3DQEBCwUAA4IBAQBI0LctuBr2WmHhL83h902vhkVbQWawwav7 ncPDRvnGZtF16mQ4K6OHokZ/Q4trREKA+hCC4MDhVbTHMg/JT41KdbVLo9iiX7hv mtA1a75CRIAr1Po/Xw6O3GvkGhB5bbtATQahW83rHW4gDtvRi9n2kX0W3g/bI5oD bK5aGkRDZELgiY1AHwGVp0X8facw1l4JO6m+3AyGJVsHL+rc2H5I2+bfmaJvqG31 wukH5niClVt24faPZEjm7jdSloaiwdaFl0xKVhqHnxIJJqiZt2vFd9zlScMGNUyR rI7wvw3LOIIW7W7vo12fc7+ROFpbLN0BRT0QKk5HW+jc+CQIPhQa -----END CERTIFICATE-----Generated at Fri Apr 17 16:12:03 2026 by rpki-client