$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3230332e39352e3132382e302f32332d3234203d3e2034383437.roa File: 3230332e39352e3132382e302f32332d3234203d3e2034383437.roa (raw, json) Hash identifier: raJHohu1PhKXXDQxq7Zw6mLF7Xtxfw/jencxtzoXqDY= Subject key identifier: 84:7F:0E:81:B8:97:40:D7:D4:3D:FE:AA:C9:22:12:BF:E5:A7:55:B9 Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434 Certificate serial: 41AD65B1B9B94B7F72394E085AC04BF00C3BA3 Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3230332e39352e3132382e302f32332d3234203d3e2034383437.roa Signing time: Sat 18 Apr 2026 10:31:28 +0000 ROA not before: Sat 18 Apr 2026 10:26:28 +0000 ROA not after: Sat 17 Apr 2027 10:31:28 +0000 asID: 4847 IP address blocks: 203.95.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 09:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ad:65:b1:b9:b9:4b:7f:72:39:4e:08:5a:c0:4b:f0:0c:3b:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434 Validity Not Before: Apr 18 10:26:28 2026 GMT Not After : Apr 17 10:31:28 2027 GMT Subject: CN=847F0E81B89740D7D43DFEAAC92212BFE5A755B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f8:d9:be:3a:77:b6:da:36:72:af:55:ec:a2: d7:2a:10:a8:53:74:67:89:7c:cf:f7:13:d1:5d:4c: 05:8c:21:e0:66:e7:38:07:ab:29:6a:2a:08:69:76: f3:1d:14:28:5d:1d:25:13:e7:14:c0:07:aa:2e:79: f3:fc:e0:8f:e1:a2:20:35:36:a0:21:8c:94:87:3e: f2:16:33:79:93:ec:8f:a0:9a:ac:ca:37:fa:e5:b0: 3a:8b:51:50:44:a3:9e:e0:f0:dc:df:fa:ab:00:e9: e0:31:4a:a0:ce:d2:ea:3d:21:13:26:cd:13:f8:40: 54:bd:5e:c3:41:a2:55:3e:3a:65:63:1c:2b:a2:8b: 40:74:8d:64:ac:37:07:76:70:d5:12:24:58:1e:ca: 08:75:80:eb:b1:3d:f7:5d:b1:ff:5e:15:0f:32:73: 89:df:2a:ab:91:52:6a:73:6a:a6:b4:44:f2:9c:14: 04:ac:9a:0d:67:ce:58:35:62:59:94:9d:85:64:b9: 8e:46:4e:b0:60:f3:27:f9:57:5c:bb:c5:70:73:72: 1d:28:42:51:fa:a3:87:68:05:03:64:c8:53:de:52: fa:10:a6:31:70:44:1c:27:6b:66:b4:d1:7b:41:fb: 9d:31:36:1d:bb:a8:9f:99:33:ab:14:a7:19:20:fb: 58:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7F:0E:81:B8:97:40:D7:D4:3D:FE:AA:C9:22:12:BF:E5:A7:55:B9 X509v3 Authority Key Identifier: keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3230332e39352e3132382e302f32332d3234203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.95.128.0/23 Signature Algorithm: sha256WithRSAEncryption 47:6a:57:73:d9:db:b3:61:05:ab:a1:24:5a:bd:52:ae:b3:c6: 9c:35:9d:5c:10:c3:a2:4d:21:a8:74:53:9d:25:ed:6b:ee:7e: f9:a9:3b:90:2d:a2:31:27:f4:32:83:99:31:ee:cc:44:4f:71: 84:2b:42:e8:fc:4b:90:0e:a6:04:b0:e5:5e:46:18:f4:52:4e: db:f6:9b:c3:89:db:8c:fe:36:a5:66:21:cc:f9:05:42:2d:de: 14:2d:d0:d5:19:39:9d:39:b8:f0:fc:40:15:7b:cf:f5:56:0f: c6:ae:42:9f:06:73:d8:54:ea:21:0b:64:ba:55:1c:12:37:2f: 8c:2e:9b:c9:32:5e:6f:71:46:c8:d7:9b:37:d2:cb:67:f0:8e: 3c:47:4d:21:5f:cb:fb:0b:0d:75:98:00:d4:4d:f7:3c:08:0a: d9:22:13:65:42:69:75:a5:d8:5f:c6:b8:27:9d:b8:05:df:c2: 8e:d8:ec:27:c3:5c:bf:e6:ed:b1:94:1b:6b:bf:9b:13:22:01: 8d:ae:40:93:ba:37:3b:50:0b:d6:b2:77:c4:2c:76:60:bd:63: f2:74:20:35:31:e1:6e:9b:16:08:b7:07:1d:29:82:19:26:f4: 57:e6:0e:a2:17:25:81:fa:f7:0c:0d:3a:ba:28:92:cd:ef:ce: 44:de:de:06 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgITQa1lsbm5S39yOU4IWsBL8Aw7ozANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygzRUMyRDg4NEE1NEU4NzhEODQ4RURFNDI1MTc0NjYxNTNG NzQ3NDM0MB4XDTI2MDQxODEwMjYyOFoXDTI3MDQxNzEwMzEyOFowMzExMC8GA1UE AxMoODQ3RjBFODFCODk3NDBEN0Q0M0RGRUFBQzkyMjEyQkZFNUE3NTVCOTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALr42b46d7baNnKvVeyi1yoQqFN0 Z4l8z/cT0V1MBYwh4GbnOAerKWoqCGl28x0UKF0dJRPnFMAHqi558/zgj+GiIDU2 oCGMlIc+8hYzeZPsj6CarMo3+uWwOotRUESjnuDw3N/6qwDp4DFKoM7S6j0hEybN E/hAVL1ew0GiVT46ZWMcK6KLQHSNZKw3B3Zw1RIkWB7KCHWA67E9912x/14VDzJz id8qq5FSanNqprRE8pwUBKyaDWfOWDViWZSdhWS5jkZOsGDzJ/lXXLvFcHNyHShC Ufqjh2gFA2TIU95S+hCmMXBEHCdrZrTRe0H7nTE2Hbuon5kzqxSnGSD7WBECAwEA AaOCAhEwggINMB0GA1UdDgQWBBSEfw6BuJdA19Q9/qrJIhK/5adVuTAfBgNVHSME GDAWgBQ+wtiEpU6HjYSO3kJRdGYVP3R0NDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0f BGwwajBooGagZIZicnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1 NTc2NzIzMzcxNzg2MjQyLzAvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2 MTUzRjc0NzQzNC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3lu YzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUwOTA2NzU3MTUv MS8zRUMyRDg4NEE1NEU4NzhEODQ4RURFNDI1MTc0NjYxNTNGNzQ3NDM0LmNlcjCB igYIKwYBBQUHAQsEfjB8MHoGCCsGAQUFBzALhm5yc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE3ODYyNDIvMC8zMjMwMzMyZTM5MzUy ZTMxMzIzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzgzNDM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBy1+AMA0GCSqGSIb3DQEBCwUAA4IBAQBHaldz2duzYQWroSRavVKus8acNZ1c EMOiTSGodFOdJe1r7n75qTuQLaIxJ/Qyg5kx7sxET3GEK0Lo/EuQDqYEsOVeRhj0 Uk7b9pvDiduM/jalZiHM+QVCLd4ULdDVGTmdObjw/EAVe8/1Vg/GrkKfBnPYVOoh C2S6VRwSNy+MLpvJMl5vcUbI15s30stn8I48R00hX8v7Cw11mADUTfc8CArZIhNl Qml1pdhfxrgnnbgF38KO2Ownw1y/5u2xlBtrv5sTIgGNrkCTujc7UAvWsnfELHZg vWPydCA1MeFumxYItwcdKYIZJvRX5g6iFyWB+vcMDTq6KJLN785E3t4G -----END CERTIFICATE-----Generated at Mon Apr 27 11:15:42 2026 by rpki-client