$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3132332e39392e3230372e302f32342d3234203d3e203536303436.roa File: 3132332e39392e3230372e302f32342d3234203d3e203536303436.roa (raw, json) Hash identifier: BMff2BnjPO6TURSDqwS2MmpOFH3VB1OPH2fMelWJ37w= Subject key identifier: CE:02:AA:E9:B8:42:C8:CB:01:B3:F1:BA:0B:8F:4D:4D:CE:B4:D1:52 Certificate issuer: /CN=709E5125176627846677AF908E76CAE21FB95460 Certificate serial: 383120BBD4C662610D0954C86B545A00EB6CB19C Authority key identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3132332e39392e3230372e302f32342d3234203d3e203536303436.roa Signing time: Tue 14 Apr 2026 07:45:08 +0000 ROA not before: Tue 14 Apr 2026 07:40:08 +0000 ROA not after: Tue 13 Apr 2027 07:45:08 +0000 asID: 56046 IP address blocks: 123.99.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 00:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:31:20:bb:d4:c6:62:61:0d:09:54:c8:6b:54:5a:00:eb:6c:b1:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709E5125176627846677AF908E76CAE21FB95460 Validity Not Before: Apr 14 07:40:08 2026 GMT Not After : Apr 13 07:45:08 2027 GMT Subject: CN=CE02AAE9B842C8CB01B3F1BA0B8F4D4DCEB4D152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:35:b8:da:8f:8b:4b:61:a8:a4:8d:b1:df:c3: cd:73:06:a8:3c:44:43:90:c2:7d:da:d1:6a:49:de: 53:53:b6:22:a7:a1:ce:b4:16:00:90:cc:6c:f5:f1: fd:bd:d0:21:44:08:8f:a1:c6:e4:07:3e:f2:b5:3c: a8:b5:54:a1:3f:83:3a:b8:08:49:dd:f0:ee:09:9d: 58:fd:8b:d4:af:24:5e:67:63:7b:86:09:ad:47:17: c5:24:03:03:b7:1a:59:db:93:e4:1b:ff:30:ff:a3: 25:b5:74:d7:99:94:8c:78:66:5e:41:65:bd:2b:c4: c2:b4:82:45:5f:a8:dd:4a:00:23:99:2e:64:9c:58: 91:5c:55:01:14:5b:b9:6c:87:50:2d:2a:bc:14:82: 1a:f2:65:3f:5d:cc:d5:28:95:32:d0:a5:01:b3:b7: 4f:02:ce:4b:97:38:e8:d3:a2:d9:ce:82:7f:92:19: e1:7a:14:bc:6b:b0:c0:cb:2b:96:f5:77:e9:a3:fc: 14:0c:0b:bb:74:ef:6b:c7:e1:3d:55:d9:0e:4b:de: e6:97:12:77:0c:b2:bd:7a:30:85:c6:1f:7b:65:ac: e9:c7:90:5c:f9:ed:b5:bd:7d:2f:08:a7:c0:f8:13: b9:5e:01:6f:5e:70:36:b8:a7:de:d2:33:b1:4e:09: 74:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:02:AA:E9:B8:42:C8:CB:01:B3:F1:BA:0B:8F:4D:4D:CE:B4:D1:52 X509v3 Authority Key Identifier: keyid:70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3132332e39392e3230372e302f32342d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.99.207.0/24 Signature Algorithm: sha256WithRSAEncryption 84:5f:01:bf:e0:76:6f:27:29:81:55:35:27:16:5a:ef:c1:6b: cd:b8:80:1b:a6:08:9a:ce:0b:10:38:2e:12:a0:2f:ed:68:7b: b2:b3:75:10:5c:f5:4d:de:be:f6:29:df:a4:18:de:ba:49:c8: 6c:fe:a2:0b:3b:95:fd:51:1f:1e:0f:aa:db:8f:10:b7:a2:05: d6:bf:a3:a3:47:86:d1:f8:b6:7b:c2:79:56:46:38:8d:2a:7f: 25:60:a4:16:c3:53:54:02:e9:ed:10:1d:39:02:fe:00:f1:13: fe:6e:bf:38:ab:73:ec:ef:51:4d:91:78:41:10:92:4a:f1:80: 0e:d6:fd:a0:b2:1b:aa:d0:47:21:d3:f3:48:85:8a:41:68:cf: 8d:8f:92:1e:d8:d2:07:5e:f3:27:cb:fa:af:31:b5:14:82:f3: 88:62:3f:a5:d9:30:b5:4a:49:b6:fa:68:f2:a6:3e:a9:6a:06: 4c:c5:3b:7f:18:e2:8c:de:ba:23:2b:34:90:ec:f7:0e:89:c7: ef:d9:06:9d:8b:53:22:5a:d3:e0:24:43:8c:49:41:09:df:1b: 8c:31:da:2a:60:c8:9e:0f:92:97:72:6b:c8:4c:8c:9c:38:23: f0:07:1e:3c:e3:84:79:df:df:7a:d3:52:76:56:2c:64:d3:31: 24:3b:d0:59 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUODEgu9TGYmENCVTIa1RaAOtssZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIx RkI5NTQ2MDAeFw0yNjA0MTQwNzQwMDhaFw0yNzA0MTMwNzQ1MDhaMDMxMTAvBgNV BAMTKENFMDJBQUU5Qjg0MkM4Q0IwMUIzRjFCQTBCOEY0RDREQ0VCNEQxNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxNbjaj4tLYaikjbHfw81zBqg8 REOQwn3a0WpJ3lNTtiKnoc60FgCQzGz18f290CFECI+hxuQHPvK1PKi1VKE/gzq4 CEnd8O4JnVj9i9SvJF5nY3uGCa1HF8UkAwO3Glnbk+Qb/zD/oyW1dNeZlIx4Zl5B Zb0rxMK0gkVfqN1KACOZLmScWJFcVQEUW7lsh1AtKrwUghryZT9dzNUolTLQpQGz t08CzkuXOOjTotnOgn+SGeF6FLxrsMDLK5b1d+mj/BQMC7t072vH4T1V2Q5L3uaX EncMsr16MIXGH3tlrOnHkFz57bW9fS8Ip8D4E7leAW9ecDa4p97SM7FOCXSVAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUzgKq6bhCyMsBs/G6C49NTc600VIwHwYDVR0j BBgwFoAUcJ5RJRdmJ4Rmd6+QjnbK4h+5VGAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjM3NzYwMS8wLzcwOUU1MTI1MTc2NjI3ODQ2Njc3QUY5MDhFNzZD QUUyMUZCOTU0NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIxRkI5NTQ2MC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjMzMDg1OTA5MjM3NzYwMS8wLzMxMzIzMzJlMzkz OTJlMzIzMDM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHtjzzANBgkqhkiG9w0BAQsFAAOCAQEAhF8Bv+B2bycpgVU1JxZa78Fr zbiAG6YIms4LEDguEqAv7Wh7srN1EFz1Td6+9infpBjeuknIbP6iCzuV/VEfHg+q 248Qt6IF1r+jo0eG0fi2e8J5VkY4jSp/JWCkFsNTVALp7RAdOQL+APET/m6/OKtz 7O9RTZF4QRCSSvGADtb9oLIbqtBHIdPzSIWKQWjPjY+SHtjSB17zJ8v6rzG1FILz iGI/pdkwtUpJtvpo8qY+qWoGTMU7fxjijN66Iys0kOz3DonH79kGnYtTIlrT4CRD jElBCd8bjDHaKmDIng+Sl3JryEyMnDgj8AcePOOEed/fetNSdlYsZNMxJDvQWQ== -----END CERTIFICATE-----Generated at Fri Apr 17 17:20:25 2026 by rpki-client