$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3230332e38362e302e302f32312d3231203d3e20313334373734.roa File: 3230332e38362e302e302f32312d3231203d3e20313334373734.roa (raw, json) Hash identifier: 17szcJSTyT4O6wcgo8uI2gBQb3vjkv4WVEluy+xPuUc= Subject key identifier: B1:28:95:6B:22:50:13:17:56:6F:42:EC:08:FA:D4:52:EB:7D:AD:34 Certificate issuer: /CN=9B87DFEBDCCDA813116988D4421B088404578168 Certificate serial: 37AEA3C33495689F17F4990C40DEE940DFA55034 Authority key identifier: 9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3230332e38362e302e302f32312d3231203d3e20313334373734.roa Signing time: Thu 09 Apr 2026 08:13:33 +0000 ROA not before: Thu 09 Apr 2026 08:08:33 +0000 ROA not after: Thu 08 Apr 2027 08:13:33 +0000 asID: 134774 IP address blocks: 203.86.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 02:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ae:a3:c3:34:95:68:9f:17:f4:99:0c:40:de:e9:40:df:a5:50:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B87DFEBDCCDA813116988D4421B088404578168 Validity Not Before: Apr 9 08:08:33 2026 GMT Not After : Apr 8 08:13:33 2027 GMT Subject: CN=B128956B22501317566F42EC08FAD452EB7DAD34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a3:79:94:90:b5:87:4d:00:f3:09:38:43:07: 5f:7d:c6:33:85:31:4e:86:da:b6:3c:cb:ad:58:22: e4:5b:15:f0:69:93:9e:9b:81:a0:ef:74:37:6b:fc: df:c7:b7:0e:bd:85:14:e9:eb:33:7f:3f:96:13:b4: c7:90:90:f3:0c:ca:b6:ad:7c:ca:6b:e7:51:a3:55: e5:e6:d0:3c:5d:14:b9:64:3c:2e:82:90:63:16:a6: 11:be:98:6c:a8:a8:b9:64:94:52:73:51:05:71:dc: 05:96:75:58:24:48:7b:79:af:89:27:b9:b5:1d:1c: a8:ff:ae:4e:ef:7a:20:d6:0c:23:38:05:d6:7c:fb: 40:78:0b:f7:bb:35:ac:7c:d5:06:03:ba:45:34:d2: e3:38:02:1c:e6:b3:17:c3:3e:24:48:13:12:d5:54: 58:43:73:0b:5f:b1:62:59:b7:60:82:2c:31:bd:6a: 5c:50:91:29:c2:2e:db:90:0e:53:6f:4b:8c:79:ac: e6:b8:a6:8e:b3:47:98:3f:8a:60:33:e8:60:f1:56: 97:e8:ca:42:c5:fc:2c:c3:8e:f1:45:b3:95:ef:0f: 47:0d:8f:72:2b:54:b9:75:fe:c7:30:af:44:35:18: f2:26:fb:eb:41:c7:01:50:b8:98:d1:bd:30:88:b2: 9e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:28:95:6B:22:50:13:17:56:6F:42:EC:08:FA:D4:52:EB:7D:AD:34 X509v3 Authority Key Identifier: keyid:9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3230332e38362e302e302f32312d3231203d3e20313334373734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.86.0.0/21 Signature Algorithm: sha256WithRSAEncryption 74:f9:ca:c1:07:8e:b6:95:cb:9d:a0:96:61:0b:47:76:1a:06: e2:2a:8f:d1:93:b7:3c:b4:99:c5:5f:b5:b6:d5:8d:49:e0:9e: 56:2b:d6:64:03:fd:af:fe:22:5f:c3:27:8b:7f:cd:e1:4a:9a: 89:32:d7:a8:16:49:8b:20:61:f6:50:2c:7c:c1:a7:56:b1:b1: 69:2a:ff:4a:a8:19:c4:e4:14:e4:d7:1f:f1:a9:ec:05:a5:c9: 7c:d9:83:76:1d:89:b2:13:89:ec:ef:39:c3:97:e2:71:ab:99: 01:c8:e8:3a:29:aa:86:f6:af:c2:d6:3d:07:75:2c:75:d9:c3: f2:f3:19:70:08:bc:c5:ae:78:b6:88:80:c0:f3:5d:35:ae:96: 27:c1:a1:52:c3:9c:f9:6f:56:2d:2e:d3:bd:1e:ad:e7:39:37: 15:a9:63:e8:73:ac:d9:5c:9f:b6:68:8f:b6:64:33:96:c1:7d: 6e:a1:5e:56:7c:53:6b:d8:ae:3c:57:f9:f4:32:1c:0c:ff:44: 49:d0:58:46:59:72:48:3b:a3:bf:a0:20:39:e5:08:ce:56:47: c0:78:60:8e:21:1f:01:75:cb:bf:01:d1:86:5d:33:4d:e3:4e: 8f:18:bf:bf:b7:2b:89:48:e4:36:6f:c4:31:20:c3:ba:94:93: 75:9e:ba:20 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUN66jwzSVaJ8X9JkMQN7pQN+lUDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI4N0RGRUJEQ0NEQTgxMzExNjk4OEQ0NDIxQjA4ODQw NDU3ODE2ODAeFw0yNjA0MDkwODA4MzNaFw0yNzA0MDgwODEzMzNaMDMxMTAvBgNV BAMTKEIxMjg5NTZCMjI1MDEzMTc1NjZGNDJFQzA4RkFENDUyRUI3REFEMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgo3mUkLWHTQDzCThDB199xjOF MU6G2rY8y61YIuRbFfBpk56bgaDvdDdr/N/Htw69hRTp6zN/P5YTtMeQkPMMyrat fMpr51GjVeXm0DxdFLlkPC6CkGMWphG+mGyoqLlklFJzUQVx3AWWdVgkSHt5r4kn ubUdHKj/rk7veiDWDCM4BdZ8+0B4C/e7Nax81QYDukU00uM4AhzmsxfDPiRIExLV VFhDcwtfsWJZt2CCLDG9alxQkSnCLtuQDlNvS4x5rOa4po6zR5g/imAz6GDxVpfo ykLF/CzDjvFFs5XvD0cNj3IrVLl1/scwr0Q1GPIm++tBxwFQuJjRvTCIsp5pAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUsSiVayJQExdWb0LsCPrUUut9rTQwHwYDVR0j BBgwFoAUm4ff69zNqBMRaYjUQhsIhARXgWgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDc0OTk1My8wLzlCODdERkVCRENDREE4MTMxMTY5ODhENDQyMUIw ODg0MDQ1NzgxNjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUI4N0RGRUJEQ0NEQTgxMzExNjk4OEQ0NDIxQjA4ODQwNDU3ODE2OC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0NzQ5OTUzLzAvMzIzMDMzMmUzODM2 MmUzMDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMxMzMzNDM3MzczNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA8tWADANBgkqhkiG9w0BAQsFAAOCAQEAdPnKwQeOtpXLnaCWYQtHdhoG4iqP 0ZO3PLSZxV+1ttWNSeCeVivWZAP9r/4iX8Mni3/N4UqaiTLXqBZJiyBh9lAsfMGn VrGxaSr/SqgZxOQU5Ncf8ansBaXJfNmDdh2JshOJ7O85w5ficauZAcjoOimqhvav wtY9B3UsddnD8vMZcAi8xa54toiAwPNdNa6WJ8GhUsOc+W9WLS7TvR6t5zk3Falj 6HOs2VyftmiPtmQzlsF9bqFeVnxTa9iuPFf59DIcDP9ESdBYRllySDujv6AgOeUI zlZHwHhgjiEfAXXLvwHRhl0zTeNOjxi/v7criUjkNm/EMSDDupSTdZ66IA== -----END CERTIFICATE-----Generated at Mon Apr 13 15:30:49 2026 by rpki-client