$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3132332e39392e3230332e302f32342d3234203d3e203536303436.roa File: 3132332e39392e3230332e302f32342d3234203d3e203536303436.roa (raw, json) Hash identifier: gfAT/QYxqrwRCsOjFxjfR5qS+KNxxqUXfE58ipVOHiA= Subject key identifier: 77:B4:39:77:53:A2:D8:6B:4C:92:7A:23:E6:29:55:39:00:1B:C5:21 Certificate issuer: /CN=709E5125176627846677AF908E76CAE21FB95460 Certificate serial: 1BF2520357900F9577A28BDE45387206C3C2C32E Authority key identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3132332e39392e3230332e302f32342d3234203d3e203536303436.roa Signing time: Tue 14 Apr 2026 07:45:08 +0000 ROA not before: Tue 14 Apr 2026 07:40:08 +0000 ROA not after: Tue 13 Apr 2027 07:45:08 +0000 asID: 56046 IP address blocks: 123.99.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 00:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:f2:52:03:57:90:0f:95:77:a2:8b:de:45:38:72:06:c3:c2:c3:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709E5125176627846677AF908E76CAE21FB95460 Validity Not Before: Apr 14 07:40:08 2026 GMT Not After : Apr 13 07:45:08 2027 GMT Subject: CN=77B4397753A2D86B4C927A23E6295539001BC521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6a:dc:41:c4:fe:ef:09:69:f7:3c:f7:e5:88: 3e:71:15:9e:6f:6f:b3:eb:89:4a:60:8e:d7:f1:03: a0:77:22:da:58:fe:3f:25:7b:3f:88:38:03:96:cb: 59:91:36:c3:3c:9f:1a:81:bc:d5:fb:3f:61:f2:5a: 9a:b8:01:f9:20:0f:75:5b:12:b4:93:d7:55:89:0d: 27:ad:50:03:b0:ff:5e:4d:2a:b8:52:79:c8:54:84: ea:4c:4c:b5:ff:81:23:53:23:7e:24:c2:36:5c:f3: bc:69:32:f4:ab:ff:b6:a6:ac:71:a6:03:fd:4d:33: d4:53:22:50:1c:60:41:56:f0:e9:ee:66:33:e5:4e: 9b:a1:17:3d:6d:c2:d8:94:4e:fa:28:6d:c8:92:f8: 39:77:b7:fb:24:59:1d:23:0b:44:14:70:2a:27:ce: 2b:5c:9c:25:1e:46:68:13:cc:c7:2d:fa:64:f8:6d: b6:be:7c:f4:29:9d:ef:d1:23:b9:83:74:0c:b5:fe: 69:28:27:af:f1:f9:1d:f4:04:a8:d4:04:92:bf:ab: ff:4e:7c:30:ee:65:e7:fc:0d:e9:8c:4a:5f:49:45: 01:95:7d:b9:86:b9:a9:56:2a:ad:f6:2d:db:8e:45: 94:0c:d0:dd:55:44:07:c8:e3:3c:9d:cf:7c:a7:6b: 73:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B4:39:77:53:A2:D8:6B:4C:92:7A:23:E6:29:55:39:00:1B:C5:21 X509v3 Authority Key Identifier: keyid:70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3132332e39392e3230332e302f32342d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.99.203.0/24 Signature Algorithm: sha256WithRSAEncryption b5:8e:54:b9:19:e8:6f:e2:fe:9a:06:35:81:ef:51:19:4d:d9: b7:28:20:e9:2a:70:e5:74:78:0e:b4:67:2b:c7:7a:57:7a:6d: 2d:c8:a7:a0:8d:81:76:70:7a:d3:69:b7:e0:7f:ce:26:e0:dc: ee:df:62:ab:6f:83:48:c0:14:e9:d7:38:3e:c6:58:9c:00:1c: 0d:da:c2:e3:89:79:c3:a8:9a:5b:58:48:7c:16:0c:42:a3:90: 4b:0a:9b:67:b2:94:09:c8:73:db:3e:6a:8d:a9:ce:3b:ca:8e: 86:d7:db:64:7a:4b:47:51:59:bc:fb:2d:a6:2d:e3:eb:d6:be: 42:9d:8c:a2:eb:66:46:99:5f:ca:8c:d3:05:e2:87:aa:af:a0: e4:a5:56:25:05:f9:3e:2c:f9:cd:31:84:09:1e:ba:8f:51:27: 46:62:ac:6d:46:5b:3f:23:23:51:08:0c:53:b3:c8:58:6b:78: 9d:b5:2c:fc:50:a0:c2:44:a6:8e:a8:60:ba:a2:17:61:a9:3b: 69:00:0d:d3:f8:81:b3:25:5b:bf:df:e4:a0:ee:24:3f:af:12: 38:d0:f9:3b:98:b0:0c:5c:4e:c9:43:42:32:07:54:a2:f2:ef: 9d:f6:04:98:1e:e9:2d:84:31:30:c3:9a:4d:3e:0d:1d:94:21: 84:64:86:99 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUG/JSA1eQD5V3ooveRThyBsPCwy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIx RkI5NTQ2MDAeFw0yNjA0MTQwNzQwMDhaFw0yNzA0MTMwNzQ1MDhaMDMxMTAvBgNV BAMTKDc3QjQzOTc3NTNBMkQ4NkI0QzkyN0EyM0U2Mjk1NTM5MDAxQkM1MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbatxBxP7vCWn3PPfliD5xFZ5v b7PriUpgjtfxA6B3ItpY/j8lez+IOAOWy1mRNsM8nxqBvNX7P2HyWpq4AfkgD3Vb ErST11WJDSetUAOw/15NKrhSechUhOpMTLX/gSNTI34kwjZc87xpMvSr/7amrHGm A/1NM9RTIlAcYEFW8OnuZjPlTpuhFz1twtiUTvoobciS+Dl3t/skWR0jC0QUcCon zitcnCUeRmgTzMct+mT4bba+fPQpne/RI7mDdAy1/mkoJ6/x+R30BKjUBJK/q/9O fDDuZef8DemMSl9JRQGVfbmGualWKq32LduORZQM0N1VRAfI4zydz3yna3OjAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUd7Q5d1Oi2GtMknoj5ilVOQAbxSEwHwYDVR0j BBgwFoAUcJ5RJRdmJ4Rmd6+QjnbK4h+5VGAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjM3NzYwMS8wLzcwOUU1MTI1MTc2NjI3ODQ2Njc3QUY5MDhFNzZD QUUyMUZCOTU0NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIxRkI5NTQ2MC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjMzMDg1OTA5MjM3NzYwMS8wLzMxMzIzMzJlMzkz OTJlMzIzMDMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHtjyzANBgkqhkiG9w0BAQsFAAOCAQEAtY5UuRnob+L+mgY1ge9RGU3Z tygg6Spw5XR4DrRnK8d6V3ptLcinoI2BdnB602m34H/OJuDc7t9iq2+DSMAU6dc4 PsZYnAAcDdrC44l5w6iaW1hIfBYMQqOQSwqbZ7KUCchz2z5qjanOO8qOhtfbZHpL R1FZvPstpi3j69a+Qp2MoutmRplfyozTBeKHqq+g5KVWJQX5Piz5zTGECR66j1En RmKsbUZbPyMjUQgMU7PIWGt4nbUs/FCgwkSmjqhguqIXYak7aQAN0/iBsyVbv9/k oO4kP68SOND5O5iwDFxOyUNCMgdUovLvnfYEmB7pLYQxMMOaTT4NHZQhhGSGmQ== -----END CERTIFICATE-----Generated at Fri Apr 17 17:37:28 2026 by rpki-client