$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e35362e302f32342d3234203d3e203233383438.roa File: 3132342e3139362e35362e302f32342d3234203d3e203233383438.roa (raw, json) Hash identifier: gpBeNkXI+eHLNoGx9qjrw2fk0034WFmlxOXWuB/XxMg= Subject key identifier: 33:17:15:DD:3E:EF:32:82:6C:D5:80:0A:24:A7:44:6C:66:88:93:AD Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D Certificate serial: 7805DE8BCDA88472BCF6D62BE266879B33D7B59E Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e35362e302f32342d3234203d3e203233383438.roa Signing time: Thu 16 Apr 2026 09:13:35 +0000 ROA not before: Thu 16 Apr 2026 09:08:35 +0000 ROA not after: Thu 15 Apr 2027 09:13:35 +0000 asID: 23848 IP address blocks: 124.196.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 05:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:05:de:8b:cd:a8:84:72:bc:f6:d6:2b:e2:66:87:9b:33:d7:b5:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D Validity Not Before: Apr 16 09:08:35 2026 GMT Not After : Apr 15 09:13:35 2027 GMT Subject: CN=331715DD3EEF32826CD5800A24A7446C668893AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:57:83:e2:a6:26:1f:92:8f:f4:54:d0:09:7b: 53:f8:5d:3b:b3:f1:5a:65:a2:31:45:c6:5a:ca:27: 82:70:4b:67:63:42:84:15:ef:74:d0:70:a7:0a:9c: 3e:2d:b7:42:a7:c7:10:69:fe:ea:6b:c0:f6:b6:19: db:be:d2:d9:95:ce:b7:6b:ed:e6:ff:24:c3:44:fe: b2:95:ed:e1:1e:62:35:4f:cb:00:75:c7:d1:a6:6b: 90:e3:fc:68:d2:81:ad:ea:12:3e:1f:bf:1f:3d:21: 39:a0:70:60:52:9c:b9:0a:71:f0:82:a1:8b:a0:73: 23:0d:4a:92:62:d0:59:40:4a:af:69:cb:33:fe:1e: bb:25:d0:0a:97:7d:b4:3d:de:2a:8b:e6:4a:b9:a1: e8:ba:70:64:00:68:2f:48:7b:2a:53:41:ed:69:5a: 99:85:8b:27:6a:6b:62:be:ea:ba:15:b6:dc:22:e3: c2:67:37:d9:b7:9f:c4:d1:af:14:4c:22:5d:39:12: 8c:76:7d:25:ab:dc:5a:02:75:5c:ab:1e:ec:ed:43: 93:7c:51:bf:14:22:98:81:bc:e5:8b:27:f6:df:5f: fd:ca:f3:f3:2f:42:45:29:13:bc:d4:31:f4:c7:d6: a0:95:54:c9:8d:08:27:e3:47:bb:f6:52:37:08:e4: da:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:17:15:DD:3E:EF:32:82:6C:D5:80:0A:24:A7:44:6C:66:88:93:AD X509v3 Authority Key Identifier: keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3132342e3139362e35362e302f32342d3234203d3e203233383438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.196.56.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:29:65:24:92:08:44:2a:3c:fc:d6:98:32:69:05:07:84:00: a4:d7:2a:6a:fa:cc:a6:7a:ab:b6:df:6d:3a:3a:fe:e3:6f:41: 14:ab:af:33:9d:80:c0:d8:37:9a:a9:cf:66:ff:1b:a5:e9:91: c0:da:4e:43:64:0d:8a:a7:dc:df:f4:83:37:06:de:41:9a:14: 5d:e9:ab:e8:e6:16:fc:2e:6d:c0:84:8f:15:62:ad:d4:84:c5: 60:47:11:db:0d:7f:34:c0:8f:8b:22:b1:4c:fc:9b:af:63:d4: 64:e0:0e:32:c6:89:5a:3e:e8:84:01:c8:a5:f6:86:8f:28:6f: 29:cb:fe:77:d4:43:68:dd:ad:9d:9a:5b:b5:99:bc:87:a4:2a: 85:e7:e3:f0:0a:ee:09:ca:db:d9:22:f6:8e:7c:83:d7:67:92: ed:ec:f8:95:45:8e:09:b2:de:23:62:5b:28:7a:83:63:18:55: 1e:fe:ec:1d:29:c1:51:0f:a4:92:b7:40:89:d2:28:ad:60:79: 47:fb:54:a8:e7:45:a5:39:e1:d4:27:f3:f2:57:11:60:c3:84: f7:35:d4:b9:5f:26:fe:86:5d:59:be:d3:97:18:72:61:df:6b: 29:a1:f5:cc:ac:5b:b0:7c:ee:10:e5:16:6e:9d:a3:d6:68:59: 2c:28:a0:87 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUeAXei82ohHK89tYr4maHmzPXtZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEw RTI3MDQyRDAeFw0yNjA0MTYwOTA4MzVaFw0yNzA0MTUwOTEzMzVaMDMxMTAvBgNV BAMTKDMzMTcxNUREM0VFRjMyODI2Q0Q1ODAwQTI0QTc0NDZDNjY4ODkzQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4V4PipiYfko/0VNAJe1P4XTuz 8VplojFFxlrKJ4JwS2djQoQV73TQcKcKnD4tt0KnxxBp/uprwPa2Gdu+0tmVzrdr 7eb/JMNE/rKV7eEeYjVPywB1x9Gma5Dj/GjSga3qEj4fvx89ITmgcGBSnLkKcfCC oYugcyMNSpJi0FlASq9pyzP+Hrsl0AqXfbQ93iqL5kq5oei6cGQAaC9IeypTQe1p WpmFiydqa2K+6roVttwi48JnN9m3n8TRrxRMIl05Eox2fSWr3FoCdVyrHuztQ5N8 Ub8UIpiBvOWLJ/bfX/3K8/MvQkUpE7zUMfTH1qCVVMmNCCfjR7v2UjcI5NpDAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUMxcV3T7vMoJs1YAKJKdEbGaIk60wHwYDVR0j BBgwFoAU7aiEp5dI1X60k2ZwTLaoEQ4nBC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA4MzUzMjM1NTgyOTc2My8wL0VEQTg4NEE3OTc0OEQ1N0VCNDkzNjY3MDRDQjZB ODExMEUyNzA0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEwRTI3MDQyRC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NzA4MzUzMjM1NTgyOTc2My8wLzMxMzIzNDJlMzEz OTM2MmUzNTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM4MzQzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHzEODANBgkqhkiG9w0BAQsFAAOCAQEAfyllJJIIRCo8/NaYMmkFB4QA pNcqavrMpnqrtt9tOjr+429BFKuvM52AwNg3mqnPZv8bpemRwNpOQ2QNiqfc3/SD NwbeQZoUXemr6OYW/C5twISPFWKt1ITFYEcR2w1/NMCPiyKxTPybr2PUZOAOMsaJ Wj7ohAHIpfaGjyhvKcv+d9RDaN2tnZpbtZm8h6Qqhefj8AruCcrb2SL2jnyD12eS 7ez4lUWOCbLeI2JbKHqDYxhVHv7sHSnBUQ+kkrdAidIorWB5R/tUqOdFpTnh1Cfz 8lcRYMOE9zXUuV8m/oZdWb7TlxhyYd9rKaH1zKxbsHzuEOUWbp2j1mhZLCighw== -----END CERTIFICATE-----Generated at Fri Apr 17 23:25:55 2026 by rpki-client