$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632003199041538/0/3132312e35322e3232342e302f31392d3139203d3e2034383337.roa File: 3132312e35322e3232342e302f31392d3139203d3e2034383337.roa (raw, json) Hash identifier: Du8DABN3Kd+HaS5bybrAvOEm0gL7RUVR+bQMHp9DzjM= Subject key identifier: 37:D5:29:DE:E4:8F:19:0A:3A:2D:F6:C6:C3:BA:89:89:EF:FD:B7:CB Certificate issuer: /CN=634581F1B95FBA204B1C8D0271BB81C7A7A08F63 Certificate serial: 0F163E9AA8045622D69876415E28126738CD9768 Authority key identifier: 63:45:81:F1:B9:5F:BA:20:4B:1C:8D:02:71:BB:81:C7:A7:A0:8F:63 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/3132312e35322e3232342e302f31392d3139203d3e2034383337.roa Signing time: Wed 15 Apr 2026 03:11:37 +0000 ROA not before: Wed 15 Apr 2026 03:06:37 +0000 ROA not after: Wed 14 Apr 2027 03:11:37 +0000 asID: 4837 IP address blocks: 121.52.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 19:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:16:3e:9a:a8:04:56:22:d6:98:76:41:5e:28:12:67:38:cd:97:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=634581F1B95FBA204B1C8D0271BB81C7A7A08F63 Validity Not Before: Apr 15 03:06:37 2026 GMT Not After : Apr 14 03:11:37 2027 GMT Subject: CN=37D529DEE48F190A3A2DF6C6C3BA8989EFFDB7CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:71:68:24:97:33:1e:4e:f6:77:2e:ac:39:39: 39:b8:9c:f0:39:14:99:a0:64:51:0c:af:ca:5f:af: 56:42:b1:fb:46:75:0d:97:73:6b:76:fb:51:30:37: a2:51:ba:9d:09:ca:68:72:79:c0:95:54:6b:8e:85: 02:56:7c:a9:12:30:a7:0d:77:aa:49:dd:38:3d:d7: d4:fc:a3:28:d2:23:23:dd:3d:ba:df:4b:8f:aa:15: e3:03:b4:04:f5:09:9a:cf:60:41:b0:88:3e:a5:f0: 9a:83:88:f5:13:0d:e2:11:44:43:52:0d:b7:ed:1f: 80:e5:ce:e5:17:67:6b:84:85:cc:13:64:f7:d9:c2: 32:4c:78:f5:a2:09:63:91:7f:f4:ad:3a:bc:21:1f: 12:a9:e3:3b:09:7e:93:44:c1:b9:37:e0:d1:53:af: 9a:e2:9e:71:cf:94:4a:1a:df:3c:d5:6c:43:8a:51: a8:f7:89:b2:7f:f6:f2:ee:5c:c5:75:c9:ff:dc:a9: 1c:20:e5:ff:9f:6b:0a:b3:80:5b:6b:ea:68:87:84: a7:ab:f8:9e:9f:aa:d5:7c:91:3b:e9:56:ad:2f:b0: ae:21:13:43:eb:7e:6b:4d:85:d8:d1:cf:a1:7a:65: b0:3e:82:e2:f5:4a:c6:f8:f5:0d:8e:e6:32:7a:b5: f9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D5:29:DE:E4:8F:19:0A:3A:2D:F6:C6:C3:BA:89:89:EF:FD:B7:CB X509v3 Authority Key Identifier: keyid:63:45:81:F1:B9:5F:BA:20:4B:1C:8D:02:71:BB:81:C7:A7:A0:8F:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/3132312e35322e3232342e302f31392d3139203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.52.224.0/19 Signature Algorithm: sha256WithRSAEncryption a1:d5:da:94:90:6b:6e:7a:0a:84:4c:d8:f6:50:0a:ef:9a:56: af:65:a1:c7:9b:0d:25:9c:bf:d0:fa:ac:a6:4a:88:bf:48:8d: 27:3d:ff:27:5c:58:0b:9e:bc:6a:d8:98:9f:32:1b:b0:cb:1e: 42:63:c7:9f:ea:e6:02:f7:52:28:8f:dc:a2:eb:13:4a:30:c0: 2f:a8:4a:3e:a8:7a:54:2f:37:5a:62:25:9e:8d:9e:7e:c4:28: a3:fe:cc:70:ef:d7:f0:51:a2:a0:c3:ae:9b:fc:e6:22:35:de: 82:c4:d6:51:25:5c:cd:01:d1:e7:a7:9c:42:eb:61:af:d9:2e: ff:b2:69:2c:1e:50:c9:1a:d0:29:52:48:5f:47:b8:14:df:8c: 10:52:bc:cd:2f:e6:8d:d5:fc:b2:d0:36:d2:1c:24:ae:eb:48: 38:57:9a:18:95:55:3f:d4:5c:9b:f3:c4:22:aa:8a:28:de:4e: c8:a5:49:d3:d7:2f:10:ac:b3:23:ce:8c:29:d7:1a:ae:ab:14: 88:07:56:4e:24:3a:6c:72:67:5e:e6:95:76:69:90:9e:4a:ff: 4e:ef:70:d1:b6:67:5b:20:cc:9f:69:ac:83:75:bf:8a:c4:d4: 28:82:10:99:39:88:15:55:aa:c9:f9:e3:3b:aa:a8:de:45:35: bd:67:01:75 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUDxY+mqgEViLWmHZBXigSZzjNl2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM0NTgxRjFCOTVGQkEyMDRCMUM4RDAyNzFCQjgxQzdB N0EwOEY2MzAeFw0yNjA0MTUwMzA2MzdaFw0yNzA0MTQwMzExMzdaMDMxMTAvBgNV BAMTKDM3RDUyOURFRTQ4RjE5MEEzQTJERjZDNkMzQkE4OTg5RUZGREI3Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4cWgklzMeTvZ3Lqw5OTm4nPA5 FJmgZFEMr8pfr1ZCsftGdQ2Xc2t2+1EwN6JRup0JymhyecCVVGuOhQJWfKkSMKcN d6pJ3Tg919T8oyjSIyPdPbrfS4+qFeMDtAT1CZrPYEGwiD6l8JqDiPUTDeIRRENS DbftH4DlzuUXZ2uEhcwTZPfZwjJMePWiCWORf/StOrwhHxKp4zsJfpNEwbk34NFT r5rinnHPlEoa3zzVbEOKUaj3ibJ/9vLuXMV1yf/cqRwg5f+fawqzgFtr6miHhKer +J6fqtV8kTvpVq0vsK4hE0PrfmtNhdjRz6F6ZbA+guL1Ssb49Q2O5jJ6tflrAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUN9Up3uSPGQo6LfbGw7qJie/9t8swHwYDVR0j BBgwFoAUY0WB8blfuiBLHI0CcbuBx6egj2MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzMjAwMzE5OTA0MTUzOC8wLzYzNDU4MUYxQjk1RkJBMjA0QjFDOEQwMjcxQkI4 MUM3QTdBMDhGNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjM0NTgxRjFCOTVGQkEyMDRCMUM4RDAyNzFCQjgxQzdBN0EwOEY2My5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2NjMyMDAzMTk5MDQxNTM4LzAvMzEzMjMxMmUzNTMy MmUzMjMyMzQyZTMwMmYzMTM5MmQzMTM5MjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBXk04DANBgkqhkiG9w0BAQsFAAOCAQEAodXalJBrbnoKhEzY9lAK75pWr2Wh x5sNJZy/0PqspkqIv0iNJz3/J1xYC568atiYnzIbsMseQmPHn+rmAvdSKI/cousT SjDAL6hKPqh6VC83WmIlno2efsQoo/7McO/X8FGioMOum/zmIjXegsTWUSVczQHR 56ecQuthr9ku/7JpLB5QyRrQKVJIX0e4FN+MEFK8zS/mjdX8stA20hwkrutIOFea GJVVP9Rcm/PEIqqKKN5OyKVJ09cvEKyzI86MKdcarqsUiAdWTiQ6bHJnXuaVdmmQ nkr/Tu9w0bZnWyDMn2msg3W/isTUKIIQmTmIFVWqyfnjO6qo3kU1vWcBdQ== -----END CERTIFICATE-----Generated at Sun Apr 19 10:20:07 2026 by rpki-client