$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3230332e38362e31362e302f32312d3231203d3e20313334373734.roa File: 3230332e38362e31362e302f32312d3231203d3e20313334373734.roa (raw, json) Hash identifier: hBn9HwND7ivXhR1g5I22n8zaouOC7UhUVQgsZUZehuc= Subject key identifier: 57:5D:BF:00:4A:D5:B8:A0:98:B8:3A:5B:7C:D9:D1:25:17:70:74:D5 Certificate issuer: /CN=9B87DFEBDCCDA813116988D4421B088404578168 Certificate serial: 23517E198565078FD92E1FB0E6EA402A9580FCF4 Authority key identifier: 9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3230332e38362e31362e302f32312d3231203d3e20313334373734.roa Signing time: Thu 09 Apr 2026 08:13:33 +0000 ROA not before: Thu 09 Apr 2026 08:08:33 +0000 ROA not after: Thu 08 Apr 2027 08:13:33 +0000 asID: 134774 IP address blocks: 203.86.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 02:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:51:7e:19:85:65:07:8f:d9:2e:1f:b0:e6:ea:40:2a:95:80:fc:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B87DFEBDCCDA813116988D4421B088404578168 Validity Not Before: Apr 9 08:08:33 2026 GMT Not After : Apr 8 08:13:33 2027 GMT Subject: CN=575DBF004AD5B8A098B83A5B7CD9D125177074D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b5:fc:8d:15:85:77:fb:8f:f9:89:70:f2:11: dc:7b:0a:3b:e4:84:7d:f5:f5:2f:df:61:b4:2a:9a: cd:a1:4e:7b:3d:55:d5:c2:f1:ac:54:ff:28:fd:9a: a1:34:a6:28:09:cc:ec:f4:9a:ad:8e:d2:7d:3a:a3: 30:be:33:46:4b:30:f2:0e:9f:98:16:50:6e:45:c0: b3:10:a3:65:b4:16:57:a3:6d:90:96:67:a5:0d:c9: c0:cc:b5:b6:a7:0d:13:12:c2:3c:68:b1:48:c9:a3: ee:db:db:83:8a:3c:2e:ce:bc:e9:81:98:49:09:c3: 3b:80:51:29:62:fd:3e:0f:49:83:13:6e:5e:1c:6d: ee:d5:29:ac:58:6d:74:f3:76:b1:47:e9:88:77:13: 1d:b7:fb:7a:80:b1:8e:64:2d:69:92:66:2b:99:56: 71:3e:5a:d3:ad:d7:31:24:66:75:61:f6:e6:6d:ee: 62:f6:4d:81:63:c4:52:ea:22:fd:41:be:83:29:99: 7a:9e:ca:60:8c:75:78:0d:c5:af:c6:cc:e9:57:80: 69:24:c0:0a:3e:e2:1c:b1:6d:de:a9:1b:d4:00:28: f4:04:c3:f0:92:90:aa:5e:b3:62:44:15:5a:97:f0: 4f:fe:6d:b1:8b:8c:0e:3c:8d:05:8d:1a:1f:32:19: 75:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5D:BF:00:4A:D5:B8:A0:98:B8:3A:5B:7C:D9:D1:25:17:70:74:D5 X509v3 Authority Key Identifier: keyid:9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3230332e38362e31362e302f32312d3231203d3e20313334373734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.86.16.0/21 Signature Algorithm: sha256WithRSAEncryption 71:9f:c3:cb:d9:68:57:32:88:f5:c5:11:d5:ca:0c:2a:f1:9c: 9e:e9:ff:eb:82:07:13:d9:c9:79:29:ec:ae:02:6c:f0:89:21: 0a:0d:82:d9:ad:ee:4d:1c:67:0a:fb:42:da:41:ce:a3:58:68: 23:d5:32:66:cd:d3:45:4f:2e:f0:33:a2:98:26:88:9e:28:5a: 7c:21:20:65:fa:32:c2:89:07:2a:23:98:b0:d4:6d:d5:c6:31: 50:f3:0b:bc:44:28:03:6a:7f:41:76:bb:d2:b4:1e:ed:b6:57: 45:7e:da:c9:5d:65:ee:62:9e:17:4a:4c:b7:2a:9b:9a:9c:8b: a6:9c:c5:64:7d:1e:bf:29:dc:77:98:02:ab:e5:32:c0:66:18: a4:14:6f:62:4a:2d:cb:59:2e:eb:bb:be:3a:3a:f7:7b:79:6b: 01:45:72:91:e6:88:ce:44:f5:99:ce:b3:e4:ee:89:a7:ee:31: 8f:e7:20:16:dc:37:99:c7:53:ab:65:68:18:75:61:e4:7b:3a: 5f:8a:35:79:7b:44:df:5c:64:8d:6b:66:82:58:54:66:8b:3b: 85:2b:ac:55:cc:5b:65:56:d4:26:d3:15:01:d6:31:e0:08:b9: 40:57:9d:7d:5a:b0:10:26:1f:6a:d6:cc:1f:84:e5:de:9f:f0: 09:62:e8:75 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUI1F+GYVlB4/ZLh+w5upAKpWA/PQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI4N0RGRUJEQ0NEQTgxMzExNjk4OEQ0NDIxQjA4ODQw NDU3ODE2ODAeFw0yNjA0MDkwODA4MzNaFw0yNzA0MDgwODEzMzNaMDMxMTAvBgNV BAMTKDU3NURCRjAwNEFENUI4QTA5OEI4M0E1QjdDRDlEMTI1MTc3MDc0RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCitfyNFYV3+4/5iXDyEdx7Cjvk hH319S/fYbQqms2hTns9VdXC8axU/yj9mqE0pigJzOz0mq2O0n06ozC+M0ZLMPIO n5gWUG5FwLMQo2W0FlejbZCWZ6UNycDMtbanDRMSwjxosUjJo+7b24OKPC7OvOmB mEkJwzuAUSli/T4PSYMTbl4cbe7VKaxYbXTzdrFH6Yh3Ex23+3qAsY5kLWmSZiuZ VnE+WtOt1zEkZnVh9uZt7mL2TYFjxFLqIv1BvoMpmXqeymCMdXgNxa/GzOlXgGkk wAo+4hyxbd6pG9QAKPQEw/CSkKpes2JEFVqX8E/+bbGLjA48jQWNGh8yGXUVAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUV12/AErVuKCYuDpbfNnRJRdwdNUwHwYDVR0j BBgwFoAUm4ff69zNqBMRaYjUQhsIhARXgWgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDc0OTk1My8wLzlCODdERkVCRENDREE4MTMxMTY5ODhENDQyMUIw ODg0MDQ1NzgxNjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUI4N0RGRUJEQ0NEQTgxMzExNjk4OEQ0NDIxQjA4ODQwNDU3ODE2OC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTc5NjcxNDc0OTk1My8wLzMyMzAzMzJlMzgz NjJlMzEzNjJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMxMzMzNDM3MzczNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA8tWEDANBgkqhkiG9w0BAQsFAAOCAQEAcZ/Dy9loVzKI9cUR1coMKvGc nun/64IHE9nJeSnsrgJs8IkhCg2C2a3uTRxnCvtC2kHOo1hoI9UyZs3TRU8u8DOi mCaInihafCEgZfoywokHKiOYsNRt1cYxUPMLvEQoA2p/QXa70rQe7bZXRX7ayV1l 7mKeF0pMtyqbmpyLppzFZH0evyncd5gCq+UywGYYpBRvYkoty1ku67u+Ojr3e3lr AUVykeaIzkT1mc6z5O6Jp+4xj+cgFtw3mcdTq2VoGHVh5Hs6X4o1eXtE31xkjWtm glhUZos7hSusVcxbZVbUJtMVAdYx4Ai5QFedfVqwECYfatbMH4Tl3p/wCWLodQ== -----END CERTIFICATE-----Generated at Mon Apr 13 15:30:57 2026 by rpki-client