$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3132332e39392e3139322e302f32342d3234203d3e203536303436.roa File: 3132332e39392e3139322e302f32342d3234203d3e203536303436.roa (raw, json) Hash identifier: xVw3215ouhyRfkrBawXAhYsYuaPozBqOB5JMIF6KvcI= Subject key identifier: 65:CF:D6:95:20:F9:D8:3C:9A:E1:86:F3:59:39:51:75:A0:D3:D1:D4 Certificate issuer: /CN=709E5125176627846677AF908E76CAE21FB95460 Certificate serial: 359DA8747288782B20736E7501ABB5FD42F83379 Authority key identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3132332e39392e3139322e302f32342d3234203d3e203536303436.roa Signing time: Tue 14 Apr 2026 07:45:08 +0000 ROA not before: Tue 14 Apr 2026 07:40:08 +0000 ROA not after: Tue 13 Apr 2027 07:45:08 +0000 asID: 56046 IP address blocks: 123.99.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:9d:a8:74:72:88:78:2b:20:73:6e:75:01:ab:b5:fd:42:f8:33:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709E5125176627846677AF908E76CAE21FB95460 Validity Not Before: Apr 14 07:40:08 2026 GMT Not After : Apr 13 07:45:08 2027 GMT Subject: CN=65CFD69520F9D83C9AE186F359395175A0D3D1D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:80:c2:3d:3b:8f:d2:3d:54:a9:fa:36:08:2e: fb:d6:3b:d4:83:92:40:a8:c7:92:e0:b2:5d:93:7e: 37:6c:01:7e:a7:bc:39:d8:30:27:a0:cc:bb:11:27: a6:85:d3:ea:37:cd:d3:26:4d:31:58:44:c9:27:71: 2f:b6:a5:43:ef:48:6b:e0:94:6f:91:e5:07:24:2e: d8:b6:39:5e:98:97:65:92:bb:26:3c:75:57:48:6b: 20:53:f3:5c:33:09:91:f5:0b:8c:01:11:9e:e0:1d: b6:89:a8:00:66:27:5d:8e:12:de:60:16:05:85:19: 7a:1d:64:2f:69:7b:cf:d8:58:7f:19:dc:a2:9d:d1: 19:49:e5:6a:27:4c:8c:40:2d:7a:40:7d:05:9b:d0: f4:5e:1c:7e:4a:10:76:e2:a0:b6:f1:34:35:0b:bd: 92:f5:80:40:41:47:fa:77:94:8e:23:09:0f:6d:b3: 05:87:d1:33:0a:fb:54:4d:e3:f9:bb:e6:af:f4:f1: 62:24:68:e3:f4:63:2b:ed:c5:e6:39:b9:3c:30:6c: 13:03:ba:0f:9f:a2:36:0d:a6:20:49:8a:84:d5:7e: 9e:50:a3:c7:f7:49:f2:39:5a:80:55:c1:6c:88:9a: 9b:11:54:a8:5b:27:2b:e5:e5:63:15:67:07:5b:3c: 95:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CF:D6:95:20:F9:D8:3C:9A:E1:86:F3:59:39:51:75:A0:D3:D1:D4 X509v3 Authority Key Identifier: keyid:70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3132332e39392e3139322e302f32342d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.99.192.0/24 Signature Algorithm: sha256WithRSAEncryption 80:bf:84:04:1a:c4:dd:75:22:3c:3f:9f:fd:a7:98:92:8e:3f: d3:5c:8a:35:cf:4a:b6:37:fc:51:cf:cc:3c:04:ba:a8:99:0e: 5a:86:54:c1:17:ce:79:54:df:c4:c7:40:21:12:d5:6e:61:af: 15:73:7f:9a:fd:97:48:d9:7c:5e:f5:80:52:a0:6a:87:e8:f1: f7:da:c1:64:35:1d:3b:6b:d3:9b:9a:dd:46:f9:28:a7:f1:4c: ff:df:1c:33:9c:3e:5f:a3:d0:60:09:10:5f:ae:e6:b6:54:0e: af:75:78:09:d7:bc:4f:76:73:42:e9:9b:ab:ec:b9:6b:5f:8a: 89:28:7d:03:d4:43:01:7d:4b:37:fb:a1:3f:df:e9:b2:cd:2f: 8a:61:65:36:ca:a0:3d:19:2c:1d:c2:c8:20:bd:3b:1a:5a:2b: 69:98:c5:f6:75:41:70:8d:33:af:53:30:99:6f:6a:30:1d:bd: 16:7d:f4:9f:21:88:1c:6a:85:dc:0c:a6:ef:28:86:13:c5:08: 7b:54:91:43:59:9d:6d:65:c9:f9:c2:90:92:8d:a9:6f:66:d1: ea:9e:21:50:13:e4:f1:97:08:d9:15:9d:98:6e:a0:40:e9:26: 35:52:29:44:d7:5a:18:54:02:df:69:94:5d:fe:6e:63:70:27: 5c:5c:cd:bb -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUNZ2odHKIeCsgc251Aau1/UL4M3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIx RkI5NTQ2MDAeFw0yNjA0MTQwNzQwMDhaFw0yNzA0MTMwNzQ1MDhaMDMxMTAvBgNV BAMTKDY1Q0ZENjk1MjBGOUQ4M0M5QUUxODZGMzU5Mzk1MTc1QTBEM0QxRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbgMI9O4/SPVSp+jYILvvWO9SD kkCox5Lgsl2TfjdsAX6nvDnYMCegzLsRJ6aF0+o3zdMmTTFYRMkncS+2pUPvSGvg lG+R5QckLti2OV6Yl2WSuyY8dVdIayBT81wzCZH1C4wBEZ7gHbaJqABmJ12OEt5g FgWFGXodZC9pe8/YWH8Z3KKd0RlJ5WonTIxALXpAfQWb0PReHH5KEHbioLbxNDUL vZL1gEBBR/p3lI4jCQ9tswWH0TMK+1RN4/m75q/08WIkaOP0YyvtxeY5uTwwbBMD ug+fojYNpiBJioTVfp5Qo8f3SfI5WoBVwWyImpsRVKhbJyvl5WMVZwdbPJU1AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUZc/WlSD52Dya4YbzWTlRdaDT0dQwHwYDVR0j BBgwFoAUcJ5RJRdmJ4Rmd6+QjnbK4h+5VGAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjM3NzYwMS8wLzcwOUU1MTI1MTc2NjI3ODQ2Njc3QUY5MDhFNzZD QUUyMUZCOTU0NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIxRkI5NTQ2MC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjMzMDg1OTA5MjM3NzYwMS8wLzMxMzIzMzJlMzkz OTJlMzEzOTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHtjwDANBgkqhkiG9w0BAQsFAAOCAQEAgL+EBBrE3XUiPD+f/aeYko4/ 01yKNc9Ktjf8Uc/MPAS6qJkOWoZUwRfOeVTfxMdAIRLVbmGvFXN/mv2XSNl8XvWA UqBqh+jx99rBZDUdO2vTm5rdRvkop/FM/98cM5w+X6PQYAkQX67mtlQOr3V4Cde8 T3ZzQumbq+y5a1+KiSh9A9RDAX1LN/uhP9/pss0vimFlNsqgPRksHcLIIL07Glor aZjF9nVBcI0zr1MwmW9qMB29Fn30nyGIHGqF3Aym7yiGE8UIe1SRQ1mdbWXJ+cKQ ko2pb2bR6p4hUBPk8ZcI2RWdmG6gQOkmNVIpRNdaGFQC32mUXf5uY3AnXFzNuw== -----END CERTIFICATE-----Generated at Sat Apr 18 00:59:26 2026 by rpki-client