$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3132332e39392e3139342e302f32342d3234203d3e203536303436.roa File: 3132332e39392e3139342e302f32342d3234203d3e203536303436.roa (raw, json) Hash identifier: /LyhXxadlJVq5IFaPmqd8NuURpfRzUDXKVkraXRzuKI= Subject key identifier: 99:2F:1A:AF:51:9A:30:22:2E:9B:D3:62:F3:7F:23:19:3C:23:E6:45 Certificate issuer: /CN=709E5125176627846677AF908E76CAE21FB95460 Certificate serial: 4E2234F7AE4828A644580C08CBA49D53491408FB Authority key identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3132332e39392e3139342e302f32342d3234203d3e203536303436.roa Signing time: Tue 14 Apr 2026 07:45:08 +0000 ROA not before: Tue 14 Apr 2026 07:40:08 +0000 ROA not after: Tue 13 Apr 2027 07:45:08 +0000 asID: 56046 IP address blocks: 123.99.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:22:34:f7:ae:48:28:a6:44:58:0c:08:cb:a4:9d:53:49:14:08:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709E5125176627846677AF908E76CAE21FB95460 Validity Not Before: Apr 14 07:40:08 2026 GMT Not After : Apr 13 07:45:08 2027 GMT Subject: CN=992F1AAF519A30222E9BD362F37F23193C23E645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f7:0a:a8:05:6d:90:34:f1:85:81:f0:71:4f: ae:aa:3b:66:b3:82:85:12:b1:9f:5b:c7:84:ab:17: 62:58:3e:d0:c0:0f:2d:ff:26:20:af:17:9f:ee:13: 72:40:bc:45:e7:de:d1:44:0d:46:9c:7c:67:d9:ba: 93:c5:a3:ec:7a:4d:cd:e8:9c:c9:e0:ad:c9:8c:ef: 29:fa:36:50:57:46:8f:01:b6:ad:5c:2e:81:84:fa: 36:3b:04:ff:88:fd:ab:5d:d8:ec:cb:14:9d:10:ca: c4:f9:f3:2b:ad:a0:79:dc:05:81:6a:93:4d:30:36: 46:09:49:7a:bb:56:c6:71:77:e0:b3:b0:eb:62:41: b0:aa:6b:fd:56:be:08:4c:c6:df:5b:d2:de:a3:bc: 22:e4:ea:63:fe:48:a9:ba:ad:e2:de:fd:60:f4:b1: 54:2b:c1:ae:7e:55:83:81:9d:33:d3:cb:67:f5:05: d4:2b:5b:70:47:6d:2f:1c:66:f2:43:84:ea:f0:d6: 71:8d:96:9c:f4:3c:f5:93:fa:ba:25:12:42:35:ae: d4:f4:7c:84:09:73:7a:fc:7e:7f:2d:08:e4:cc:34: d9:1a:36:88:c3:4d:6a:96:6e:f6:5d:5a:10:68:86: 60:65:72:13:3c:f4:55:0b:ae:5e:14:9f:a2:5e:8a: 98:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2F:1A:AF:51:9A:30:22:2E:9B:D3:62:F3:7F:23:19:3C:23:E6:45 X509v3 Authority Key Identifier: keyid:70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3132332e39392e3139342e302f32342d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.99.194.0/24 Signature Algorithm: sha256WithRSAEncryption 57:a9:95:5f:15:07:40:79:4c:af:8a:66:81:1c:91:83:af:b3: 41:a5:42:db:88:35:87:fc:6d:d6:27:d0:89:62:88:ed:d8:a5: 94:6c:d8:1f:39:25:f4:b1:54:bf:3a:29:8c:18:18:dd:5d:a3: 98:1b:8d:e0:54:35:f0:eb:2a:93:31:6c:24:2f:aa:6c:6c:40: 06:68:a8:85:82:c0:c6:8c:85:f1:77:06:c1:7f:b6:16:ea:2c: a3:f7:5c:a3:31:8a:b1:10:02:94:9e:17:5b:2b:5c:b7:0d:1d: ef:60:7c:24:dc:5f:8f:3e:2e:f2:7b:bf:9e:92:43:00:68:9d: 84:32:84:e1:44:4e:a0:dd:36:99:f2:02:81:2c:0b:ee:0b:79: 30:55:86:2c:2f:01:e9:e6:6d:e2:dc:45:20:2b:03:71:ba:12: 80:00:da:5d:f1:d8:f9:ae:4d:db:2e:6e:e3:23:47:01:ef:e7: 1d:5b:1d:f5:1d:21:09:5e:4c:9f:31:06:d8:3b:f2:6e:9a:e6: 2e:92:df:42:e4:16:3b:b9:70:6b:4f:29:1c:a3:f4:a9:3d:07: b7:10:d0:fc:55:9d:f6:c7:0d:29:a7:7a:6a:44:99:9e:0e:bd: 5b:c3:78:78:12:d4:ca:58:a2:4e:3c:bd:c7:56:93:4e:2d:51: de:87:91:6c -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUTiI0965IKKZEWAwIy6SdU0kUCPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIx RkI5NTQ2MDAeFw0yNjA0MTQwNzQwMDhaFw0yNzA0MTMwNzQ1MDhaMDMxMTAvBgNV BAMTKDk5MkYxQUFGNTE5QTMwMjIyRTlCRDM2MkYzN0YyMzE5M0MyM0U2NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX9wqoBW2QNPGFgfBxT66qO2az goUSsZ9bx4SrF2JYPtDADy3/JiCvF5/uE3JAvEXn3tFEDUacfGfZupPFo+x6Tc3o nMngrcmM7yn6NlBXRo8Btq1cLoGE+jY7BP+I/atd2OzLFJ0QysT58yutoHncBYFq k00wNkYJSXq7VsZxd+CzsOtiQbCqa/1WvghMxt9b0t6jvCLk6mP+SKm6reLe/WD0 sVQrwa5+VYOBnTPTy2f1BdQrW3BHbS8cZvJDhOrw1nGNlpz0PPWT+rolEkI1rtT0 fIQJc3r8fn8tCOTMNNkaNojDTWqWbvZdWhBohmBlchM89FULrl4Un6JeipjjAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUmS8ar1GaMCIum9Ni838jGTwj5kUwHwYDVR0j BBgwFoAUcJ5RJRdmJ4Rmd6+QjnbK4h+5VGAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjM3NzYwMS8wLzcwOUU1MTI1MTc2NjI3ODQ2Njc3QUY5MDhFNzZD QUUyMUZCOTU0NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIxRkI5NTQ2MC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjMzMDg1OTA5MjM3NzYwMS8wLzMxMzIzMzJlMzkz OTJlMzEzOTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHtjwjANBgkqhkiG9w0BAQsFAAOCAQEAV6mVXxUHQHlMr4pmgRyRg6+z QaVC24g1h/xt1ifQiWKI7dillGzYHzkl9LFUvzopjBgY3V2jmBuN4FQ18OsqkzFs JC+qbGxABmiohYLAxoyF8XcGwX+2Fuoso/dcozGKsRAClJ4XWytctw0d72B8JNxf jz4u8nu/npJDAGidhDKE4UROoN02mfICgSwL7gt5MFWGLC8B6eZt4txFICsDcboS gADaXfHY+a5N2y5u4yNHAe/nHVsd9R0hCV5MnzEG2DvybprmLpLfQuQWO7lwa08p HKP0qT0HtxDQ/FWd9scNKad6akSZng69W8N4eBLUyliiTjy9x1aTTi1R3oeRbA== -----END CERTIFICATE-----Generated at Fri Apr 17 19:10:04 2026 by rpki-client