$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3132332e39392e3139352e302f32342d3234203d3e203536303436.roa File: 3132332e39392e3139352e302f32342d3234203d3e203536303436.roa (raw, json) Hash identifier: p34BhMVqzACE3HYHCwUwUpaatMkPt30PeQFJ7o50hLU= Subject key identifier: 88:8C:8D:F2:E9:9E:4A:79:3C:D9:C7:48:EB:64:32:0F:D8:83:E2:01 Certificate issuer: /CN=709E5125176627846677AF908E76CAE21FB95460 Certificate serial: 1CFC800D158835B1FC782423893D6C5747A6FC29 Authority key identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3132332e39392e3139352e302f32342d3234203d3e203536303436.roa Signing time: Tue 14 Apr 2026 07:45:08 +0000 ROA not before: Tue 14 Apr 2026 07:40:08 +0000 ROA not after: Tue 13 Apr 2027 07:45:08 +0000 asID: 56046 IP address blocks: 123.99.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:fc:80:0d:15:88:35:b1:fc:78:24:23:89:3d:6c:57:47:a6:fc:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709E5125176627846677AF908E76CAE21FB95460 Validity Not Before: Apr 14 07:40:08 2026 GMT Not After : Apr 13 07:45:08 2027 GMT Subject: CN=888C8DF2E99E4A793CD9C748EB64320FD883E201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1c:b0:cd:a1:81:54:59:c9:be:4c:e7:93:57: 8a:fd:0b:18:df:e8:a4:c8:af:2d:9c:91:8a:18:16: 72:16:0a:c2:01:69:fc:11:77:03:61:5e:ba:38:fd: d9:d6:4b:54:a2:86:3b:af:4f:35:c6:b9:83:c6:50: db:c0:0d:17:db:5e:68:bb:b9:8a:1a:ae:38:26:6a: 10:55:0e:0b:d1:34:98:aa:82:1c:39:a5:45:7c:dd: dc:b2:7a:39:bc:57:41:32:ae:ba:70:22:1b:a7:61: 9a:5d:f5:3e:bd:7c:b1:9f:73:f3:7c:a2:d7:d5:8e: 14:76:2c:07:89:d0:00:6e:51:b5:c3:ee:d0:0b:42: 86:cc:55:af:30:0a:0a:bf:ee:7e:a8:b8:0e:a5:29: 96:44:02:75:e6:fb:36:19:13:4f:83:64:af:8f:66: 2d:a7:db:9a:a7:15:29:2b:79:49:3c:f9:5c:a2:4b: ba:44:3a:58:4f:ec:2c:70:5d:f9:8e:05:94:6e:65: 45:f4:f5:ae:1c:3a:45:59:ff:ee:d3:bb:d8:5a:21: 94:c0:93:f0:8e:10:ce:a0:55:17:54:0c:3b:4f:49: 48:fb:5e:58:cf:74:1e:e2:3a:39:3c:1c:38:9a:16: 7f:48:79:35:b9:0c:38:98:50:7e:e1:4b:18:ae:c7: c8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8C:8D:F2:E9:9E:4A:79:3C:D9:C7:48:EB:64:32:0F:D8:83:E2:01 X509v3 Authority Key Identifier: keyid:70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3132332e39392e3139352e302f32342d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.99.195.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:b5:da:78:c1:16:05:42:62:77:4a:00:6d:d1:9b:0c:c5:21: 03:4d:5d:ca:b9:51:1a:f9:47:23:15:43:07:23:15:5e:14:ab: 3c:66:a9:43:c3:bc:05:4e:be:4d:a5:0a:81:cf:91:d4:67:a7: fe:39:b8:01:f7:c1:6e:0d:77:2c:6f:0d:06:64:74:2b:03:3b: bc:23:17:c2:51:76:ad:4e:87:63:c0:f3:1f:ae:69:b6:8f:a1: 30:da:35:c4:1f:5d:b2:a6:10:51:54:b3:ca:32:6c:55:67:65: c7:39:f2:3a:22:be:1a:86:93:5e:0a:57:67:85:bd:c2:30:86: fb:02:34:5e:56:f6:c3:73:4d:02:13:a5:15:5f:99:13:59:cc: 24:ec:61:ec:0b:08:af:2c:12:24:5c:57:d3:37:12:2b:67:62: 33:db:61:a7:f3:c2:78:32:4f:60:95:b7:04:3a:eb:f0:2d:05: d9:71:6b:b4:43:f9:15:56:c8:2c:cc:9d:08:a1:eb:6e:bf:80: ed:0d:33:69:96:15:5c:87:a4:7f:b2:a9:c3:bc:a2:0b:b3:4e: 35:21:fb:77:19:21:c6:c0:06:f7:90:fe:88:04:c9:3d:fb:f4: 48:e8:e5:45:36:5b:d8:13:0d:f6:6f:71:7d:b1:17:2b:01:a9: e4:44:93:58 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUHPyADRWINbH8eCQjiT1sV0em/CkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIx RkI5NTQ2MDAeFw0yNjA0MTQwNzQwMDhaFw0yNzA0MTMwNzQ1MDhaMDMxMTAvBgNV BAMTKDg4OEM4REYyRTk5RTRBNzkzQ0Q5Qzc0OEVCNjQzMjBGRDg4M0UyMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbHLDNoYFUWcm+TOeTV4r9Cxjf 6KTIry2ckYoYFnIWCsIBafwRdwNhXro4/dnWS1SihjuvTzXGuYPGUNvADRfbXmi7 uYoarjgmahBVDgvRNJiqghw5pUV83dyyejm8V0EyrrpwIhunYZpd9T69fLGfc/N8 otfVjhR2LAeJ0ABuUbXD7tALQobMVa8wCgq/7n6ouA6lKZZEAnXm+zYZE0+DZK+P Zi2n25qnFSkreUk8+VyiS7pEOlhP7CxwXfmOBZRuZUX09a4cOkVZ/+7Tu9haIZTA k/COEM6gVRdUDDtPSUj7XljPdB7iOjk8HDiaFn9IeTW5DDiYUH7hSxiux8jvAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUiIyN8umeSnk82cdI62QyD9iD4gEwHwYDVR0j BBgwFoAUcJ5RJRdmJ4Rmd6+QjnbK4h+5VGAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjM3NzYwMS8wLzcwOUU1MTI1MTc2NjI3ODQ2Njc3QUY5MDhFNzZD QUUyMUZCOTU0NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIxRkI5NTQ2MC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjMzMDg1OTA5MjM3NzYwMS8wLzMxMzIzMzJlMzkz OTJlMzEzOTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHtjwzANBgkqhkiG9w0BAQsFAAOCAQEAPrXaeMEWBUJid0oAbdGbDMUh A01dyrlRGvlHIxVDByMVXhSrPGapQ8O8BU6+TaUKgc+R1Gen/jm4AffBbg13LG8N BmR0KwM7vCMXwlF2rU6HY8DzH65pto+hMNo1xB9dsqYQUVSzyjJsVWdlxznyOiK+ GoaTXgpXZ4W9wjCG+wI0Xlb2w3NNAhOlFV+ZE1nMJOxh7AsIrywSJFxX0zcSK2di M9thp/PCeDJPYJW3BDrr8C0F2XFrtEP5FVbILMydCKHrbr+A7Q0zaZYVXIekf7Kp w7yiC7NONSH7dxkhxsAG95D+iATJPfv0SOjlRTZb2BMN9m9xfbEXKwGp5ESTWA== -----END CERTIFICATE-----Generated at Fri Apr 17 20:25:49 2026 by rpki-client