$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3132332e39392e3139322e302f31382d3138203d3e203538343631.roa File: 3132332e39392e3139322e302f31382d3138203d3e203538343631.roa (raw, json) Hash identifier: eCLJQ6hVMH0Y1HWI+4+FPraClXX4hypXVvkpKYboMtE= Subject key identifier: A3:0D:4A:A6:01:7B:5B:1E:FD:72:7F:5C:A9:1D:A5:68:6B:C9:9F:89 Certificate issuer: /CN=709E5125176627846677AF908E76CAE21FB95460 Certificate serial: 05BC975BC320893B6CB733E0F8197DECDBF384BB Authority key identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3132332e39392e3139322e302f31382d3138203d3e203538343631.roa Signing time: Tue 14 Apr 2026 07:45:08 +0000 ROA not before: Tue 14 Apr 2026 07:40:08 +0000 ROA not after: Tue 13 Apr 2027 07:45:08 +0000 asID: 58461 IP address blocks: 123.99.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:bc:97:5b:c3:20:89:3b:6c:b7:33:e0:f8:19:7d:ec:db:f3:84:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709E5125176627846677AF908E76CAE21FB95460 Validity Not Before: Apr 14 07:40:08 2026 GMT Not After : Apr 13 07:45:08 2027 GMT Subject: CN=A30D4AA6017B5B1EFD727F5CA91DA5686BC99F89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:61:9f:ad:ed:c8:22:b8:25:56:ba:3c:c8:ec: 85:23:1e:d6:8d:1b:8c:f8:fe:e1:9e:21:db:b7:32: 0c:76:fb:3c:13:2c:09:d6:75:e5:36:92:35:ac:a0: 57:2b:86:b3:d0:20:20:68:5c:74:af:f5:55:8a:20: 84:fd:88:fb:4a:78:1f:86:5a:2e:e6:d0:e3:f5:f7: eb:cb:49:d1:4b:de:77:2a:1e:10:4f:ae:3e:b0:d7: fb:fd:87:1f:53:c8:d7:48:3e:71:f7:05:80:be:80: 43:d6:27:b9:52:9c:63:80:91:cc:50:72:33:15:6c: e4:ef:08:6b:06:74:e1:6e:20:5f:93:0d:bd:1e:f0: ea:60:7e:03:c1:ca:b6:73:69:5c:46:db:1e:34:01: f9:54:69:11:05:fa:4a:da:01:29:09:c2:9b:bd:73: 8a:ce:71:07:dc:d7:13:ac:08:8b:b9:fa:74:7b:29: 0d:1d:7c:7a:8f:91:8c:71:12:ac:95:b6:31:e0:ae: c1:9f:43:f5:2c:c9:65:34:1e:17:f9:d1:e5:2e:be: 87:22:2b:40:81:89:a0:db:43:b6:89:e9:c9:77:ee: 93:61:94:e8:33:27:2a:2e:5b:93:7f:e5:7b:5c:7f: 5a:e7:07:e8:5d:6f:27:9f:c0:7e:49:f6:6b:2d:4a: 56:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0D:4A:A6:01:7B:5B:1E:FD:72:7F:5C:A9:1D:A5:68:6B:C9:9F:89 X509v3 Authority Key Identifier: keyid:70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3132332e39392e3139322e302f31382d3138203d3e203538343631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.99.192.0/18 Signature Algorithm: sha256WithRSAEncryption a0:20:85:23:8b:48:6e:d4:9d:b0:ba:79:eb:11:47:7e:80:0d: 3d:22:0b:ff:26:c7:32:99:db:53:01:72:fb:8c:0d:3b:ad:5f: 1e:3f:d5:58:57:e9:c6:b4:06:fd:93:ad:52:b1:56:f0:d9:8d: 0b:e1:a7:3d:bd:58:6a:3a:6c:f0:5f:47:a8:46:26:4a:3c:79: 67:20:ee:d8:cb:9f:dd:ec:21:a0:57:e8:b5:3f:c3:e0:b2:db: 0c:ea:7b:56:f0:c7:eb:55:91:c0:b3:2d:2d:0d:d1:76:29:17: f0:8f:0b:56:aa:29:8e:c5:f4:d1:11:5b:c6:8b:66:9a:08:fe: 24:72:d5:a4:c6:09:b8:6a:99:e8:5b:72:c5:6d:ed:aa:5e:d5: 5a:5d:14:bd:b4:8b:07:16:95:4d:1c:fe:4b:63:94:35:b3:ec: 07:a2:b6:36:94:4d:09:14:2a:40:b7:02:ef:11:c0:85:9d:9b: 6f:4e:ec:b6:98:48:ae:cc:f0:9a:1a:e3:09:30:91:41:a3:a9: 42:55:5a:8c:21:9f:dd:f4:13:32:10:9c:dd:e0:cc:60:84:ef: f1:90:17:ee:4d:ef:9c:12:bf:3a:47:a9:d6:ea:24:76:9b:ec: 59:3d:36:d0:13:d0:2f:47:b8:65:6d:4f:26:46:c0:9b:41:52: 7b:87:78:cd -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUBbyXW8MgiTtstzPg+Bl97NvzhLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIx RkI5NTQ2MDAeFw0yNjA0MTQwNzQwMDhaFw0yNzA0MTMwNzQ1MDhaMDMxMTAvBgNV BAMTKEEzMEQ0QUE2MDE3QjVCMUVGRDcyN0Y1Q0E5MURBNTY4NkJDOTlGODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUYZ+t7cgiuCVWujzI7IUjHtaN G4z4/uGeIdu3Mgx2+zwTLAnWdeU2kjWsoFcrhrPQICBoXHSv9VWKIIT9iPtKeB+G Wi7m0OP19+vLSdFL3ncqHhBPrj6w1/v9hx9TyNdIPnH3BYC+gEPWJ7lSnGOAkcxQ cjMVbOTvCGsGdOFuIF+TDb0e8OpgfgPByrZzaVxG2x40AflUaREF+kraASkJwpu9 c4rOcQfc1xOsCIu5+nR7KQ0dfHqPkYxxEqyVtjHgrsGfQ/UsyWU0Hhf50eUuvoci K0CBiaDbQ7aJ6cl37pNhlOgzJyouW5N/5Xtcf1rnB+hdbyefwH5J9mstSlbVAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUow1KpgF7Wx79cn9cqR2laGvJn4kwHwYDVR0j BBgwFoAUcJ5RJRdmJ4Rmd6+QjnbK4h+5VGAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjM3NzYwMS8wLzcwOUU1MTI1MTc2NjI3ODQ2Njc3QUY5MDhFNzZD QUUyMUZCOTU0NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIxRkI5NTQ2MC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjMzMDg1OTA5MjM3NzYwMS8wLzMxMzIzMzJlMzkz OTJlMzEzOTMyMmUzMDJmMzEzODJkMzEzODIwM2QzZTIwMzUzODM0MzYzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBntjwDANBgkqhkiG9w0BAQsFAAOCAQEAoCCFI4tIbtSdsLp56xFHfoAN PSIL/ybHMpnbUwFy+4wNO61fHj/VWFfpxrQG/ZOtUrFW8NmNC+GnPb1Yajps8F9H qEYmSjx5ZyDu2Muf3ewhoFfotT/D4LLbDOp7VvDH61WRwLMtLQ3RdikX8I8LVqop jsX00RFbxotmmgj+JHLVpMYJuGqZ6FtyxW3tql7VWl0UvbSLBxaVTRz+S2OUNbPs B6K2NpRNCRQqQLcC7xHAhZ2bb07stphIrszwmhrjCTCRQaOpQlVajCGf3fQTMhCc 3eDMYITv8ZAX7k3vnBK/Okep1uokdpvsWT020BPQL0e4ZW1PJkbAm0FSe4d4zQ== -----END CERTIFICATE-----Generated at Sat Apr 18 00:59:19 2026 by rpki-client