$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3132332e39392e3230302e302f32342d3234203d3e203536303436.roa File: 3132332e39392e3230302e302f32342d3234203d3e203536303436.roa (raw, json) Hash identifier: ad/fG94fMIfMdL3XbD+RZEpVQd9HnnPMGe3MotwlNTU= Subject key identifier: 9E:DA:AF:04:03:AE:A8:D8:69:0B:65:AB:C8:3D:86:55:E4:73:81:F4 Certificate issuer: /CN=709E5125176627846677AF908E76CAE21FB95460 Certificate serial: 792EEA93547B370F9135A90300247F108EBA3482 Authority key identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3132332e39392e3230302e302f32342d3234203d3e203536303436.roa Signing time: Tue 14 Apr 2026 07:45:08 +0000 ROA not before: Tue 14 Apr 2026 07:40:08 +0000 ROA not after: Tue 13 Apr 2027 07:45:08 +0000 asID: 56046 IP address blocks: 123.99.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 00:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:2e:ea:93:54:7b:37:0f:91:35:a9:03:00:24:7f:10:8e:ba:34:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709E5125176627846677AF908E76CAE21FB95460 Validity Not Before: Apr 14 07:40:08 2026 GMT Not After : Apr 13 07:45:08 2027 GMT Subject: CN=9EDAAF0403AEA8D8690B65ABC83D8655E47381F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8e:60:84:2d:ca:25:2b:91:db:0f:d5:a4:d2: a3:26:56:b6:b0:a7:1a:bb:78:38:01:30:e6:39:0d: 4d:f8:df:c1:b2:21:9a:a3:cf:27:e2:ad:9a:de:ac: 6f:2f:41:4d:e0:8a:c0:4f:c2:cd:7e:49:06:70:55: bb:f2:7c:4f:c0:9c:00:bb:b2:3e:e4:72:4e:26:33: 61:3f:06:32:a7:bc:a0:a8:5f:43:5c:5a:13:ac:92: c6:ee:bd:ac:84:86:a5:a9:76:bf:c8:b9:91:5c:74: 87:13:fb:99:56:85:d9:f9:cf:1f:75:45:6a:c2:81: 53:0b:26:35:42:37:2b:c8:b3:32:25:aa:30:06:10: 87:85:fe:e1:90:ef:2b:07:cc:bd:59:ee:da:9c:ec: 03:17:96:13:0f:19:7f:e0:5f:81:58:ca:c6:e0:71: c2:8c:32:9c:40:55:f7:d6:08:46:dd:1e:f1:8c:63: 70:34:08:a0:47:d2:af:a3:3e:b1:9b:55:73:ce:88: 9a:d9:31:96:d4:73:96:e3:5d:9e:77:19:53:9b:4c: 0b:11:16:6b:76:c1:20:58:e9:b6:55:4b:99:c8:ca: d4:00:a4:d3:99:04:95:cf:16:e0:1a:04:78:67:94: 57:91:af:58:a1:7b:56:84:3d:46:a6:e4:09:a4:63: 67:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DA:AF:04:03:AE:A8:D8:69:0B:65:AB:C8:3D:86:55:E4:73:81:F4 X509v3 Authority Key Identifier: keyid:70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3132332e39392e3230302e302f32342d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.99.200.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:b1:7c:e5:7c:2f:77:cd:3e:ba:f2:46:ad:bd:bf:20:08:fe: 08:bb:6c:44:78:2b:55:81:7e:1f:e9:e1:86:f0:89:b4:67:5d: f8:be:95:19:48:2a:ff:96:fc:4e:a3:69:80:ed:8d:47:11:64: 89:87:72:24:13:89:25:e7:86:fd:f5:13:38:af:e5:8e:41:f7: 3f:eb:bb:34:ae:08:92:d0:b4:f5:b6:3e:21:ca:df:cf:f8:6d: bf:ff:aa:29:ec:0a:b5:ab:c9:16:d1:ac:1f:2a:15:bc:08:8c: d6:ce:ad:43:4e:9e:fb:5c:9d:f7:5c:77:dd:2a:8d:b4:ff:e5: 3a:ed:d4:85:0d:fc:22:fd:c3:f1:fe:21:e7:54:75:27:ff:f0: cb:de:31:a3:5e:93:94:62:e8:93:94:dd:f5:b2:17:36:9f:d3: 24:26:87:c1:a8:c8:63:6d:d0:15:2d:51:6f:f0:7b:a7:82:0b: e2:93:4a:79:cf:e0:be:5d:83:f5:dd:bf:00:29:d4:7d:04:cd: fe:98:1b:1f:26:69:d6:50:ec:03:31:d4:be:7b:45:1f:a0:d6: 26:d6:62:b5:83:10:ac:1d:bd:de:5b:3a:5c:21:76:f3:1f:0c: 93:cb:d4:d1:4f:27:a6:56:db:09:04:6d:cd:f1:bd:bc:6b:98: eb:2f:01:2b -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUeS7qk1R7Nw+RNakDACR/EI66NIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIx RkI5NTQ2MDAeFw0yNjA0MTQwNzQwMDhaFw0yNzA0MTMwNzQ1MDhaMDMxMTAvBgNV BAMTKDlFREFBRjA0MDNBRUE4RDg2OTBCNjVBQkM4M0Q4NjU1RTQ3MzgxRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDijmCELcolK5HbD9Wk0qMmVraw pxq7eDgBMOY5DU3438GyIZqjzyfirZrerG8vQU3gisBPws1+SQZwVbvyfE/AnAC7 sj7kck4mM2E/BjKnvKCoX0NcWhOsksbuvayEhqWpdr/IuZFcdIcT+5lWhdn5zx91 RWrCgVMLJjVCNyvIszIlqjAGEIeF/uGQ7ysHzL1Z7tqc7AMXlhMPGX/gX4FYysbg ccKMMpxAVffWCEbdHvGMY3A0CKBH0q+jPrGbVXPOiJrZMZbUc5bjXZ53GVObTAsR Fmt2wSBY6bZVS5nIytQApNOZBJXPFuAaBHhnlFeRr1ihe1aEPUam5AmkY2epAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUntqvBAOuqNhpC2WryD2GVeRzgfQwHwYDVR0j BBgwFoAUcJ5RJRdmJ4Rmd6+QjnbK4h+5VGAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjM3NzYwMS8wLzcwOUU1MTI1MTc2NjI3ODQ2Njc3QUY5MDhFNzZD QUUyMUZCOTU0NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIxRkI5NTQ2MC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjMzMDg1OTA5MjM3NzYwMS8wLzMxMzIzMzJlMzkz OTJlMzIzMDMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHtjyDANBgkqhkiG9w0BAQsFAAOCAQEAXLF85Xwvd80+uvJGrb2/IAj+ CLtsRHgrVYF+H+nhhvCJtGdd+L6VGUgq/5b8TqNpgO2NRxFkiYdyJBOJJeeG/fUT OK/ljkH3P+u7NK4IktC09bY+Icrfz/htv/+qKewKtavJFtGsHyoVvAiM1s6tQ06e +1yd91x33SqNtP/lOu3UhQ38Iv3D8f4h51R1J//wy94xo16TlGLok5Td9bIXNp/T JCaHwajIY23QFS1Rb/B7p4IL4pNKec/gvl2D9d2/ACnUfQTN/pgbHyZp1lDsAzHU vntFH6DWJtZitYMQrB293ls6XCF28x8Mk8vU0U8nplbbCQRtzfG9vGuY6y8BKw== -----END CERTIFICATE-----Generated at Fri Apr 17 17:20:06 2026 by rpki-client