$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3232302e3233312e3232342e302f31392d3139203d3e20313334373734.roa File: 3232302e3233312e3232342e302f31392d3139203d3e20313334373734.roa (raw, json) Hash identifier: v8/BtEjw5U99UDjVrIZbkxjssWK2itEHBVjELvk8Z6Y= Subject key identifier: 4A:AF:8A:48:06:3C:BB:E0:08:13:65:B7:0C:6B:62:5C:60:99:F3:99 Certificate issuer: /CN=9B87DFEBDCCDA813116988D4421B088404578168 Certificate serial: 1B8C9A8C7D9451CFE83865937B17C9A4F886E59B Authority key identifier: 9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3232302e3233312e3232342e302f31392d3139203d3e20313334373734.roa Signing time: Thu 09 Apr 2026 08:13:33 +0000 ROA not before: Thu 09 Apr 2026 08:08:33 +0000 ROA not after: Thu 08 Apr 2027 08:13:33 +0000 asID: 134774 IP address blocks: 220.231.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 02:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:8c:9a:8c:7d:94:51:cf:e8:38:65:93:7b:17:c9:a4:f8:86:e5:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B87DFEBDCCDA813116988D4421B088404578168 Validity Not Before: Apr 9 08:08:33 2026 GMT Not After : Apr 8 08:13:33 2027 GMT Subject: CN=4AAF8A48063CBBE0081365B70C6B625C6099F399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:48:4c:a8:3e:41:82:37:e0:26:eb:9d:5c:99: e6:2f:f3:22:21:9c:4c:88:f1:02:4d:24:39:14:3a: 9b:8e:c3:5b:82:f6:3b:b8:47:20:b3:89:d2:56:19: b7:57:8e:6e:44:9c:88:85:a4:37:49:74:75:7d:eb: bf:35:5a:1f:8a:84:4f:62:d6:23:93:e0:67:35:d3: 89:c1:b8:e7:83:f2:a5:48:a6:4f:f5:2a:ef:b0:84: 44:9f:99:72:c0:2b:51:28:fc:dd:e5:ab:65:ff:1a: 59:78:fd:97:d1:3c:e8:ed:1c:6d:0e:0d:00:50:c2: 49:6a:5a:54:b5:fd:83:71:45:03:d1:c8:2c:e8:83: a3:31:1c:b7:9d:d5:b4:11:15:29:dc:1b:f9:d2:a1: 6f:87:df:66:23:63:55:74:00:e1:9d:17:0e:e1:8f: fa:28:24:44:1a:99:7d:e8:66:27:b7:03:94:df:84: 83:36:74:02:f7:33:ea:41:41:41:71:38:bf:ad:7c: a8:fb:19:67:97:89:51:89:84:ab:6c:d7:d9:f7:12: 64:e8:7f:ae:d1:b0:32:d8:d4:0c:6c:9c:01:56:78: 0a:2b:30:e3:c4:16:da:8a:9b:da:a1:6b:92:3f:ea: c1:7d:1b:f8:86:15:eb:22:dd:9d:d9:bc:15:fa:78: be:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AF:8A:48:06:3C:BB:E0:08:13:65:B7:0C:6B:62:5C:60:99:F3:99 X509v3 Authority Key Identifier: keyid:9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3232302e3233312e3232342e302f31392d3139203d3e20313334373734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.231.224.0/19 Signature Algorithm: sha256WithRSAEncryption 4b:5f:c2:43:e1:b7:7b:a4:fb:ce:98:46:78:25:c0:e3:a6:df: 28:2c:1a:7a:b2:a1:57:ec:f9:a2:4b:ff:35:a5:fa:e7:62:2b: bf:7e:e3:c2:b5:da:65:1d:e5:d2:dd:1d:99:ea:92:b6:a9:5e: 86:16:83:1e:f1:7f:89:53:b8:fd:af:bf:46:44:ab:fd:96:8e: 0e:7c:25:11:a7:4b:b2:b6:90:c9:56:3a:bf:9b:3a:07:79:ce: 6d:b8:5f:d5:df:f5:af:0b:f6:8a:34:83:0b:0c:a8:1b:d4:40: b5:b2:da:f4:bc:57:f5:43:e8:4b:1a:22:ad:52:5e:73:1e:ee: 87:e2:e2:7e:d9:4d:2f:45:79:40:3b:10:84:34:9d:72:03:30: 9e:8f:3b:47:8d:8a:3b:79:ec:3f:e4:91:ec:0e:83:d7:32:39: 3d:00:bf:69:be:3e:43:10:f9:d3:03:1d:97:70:8d:37:1f:af: 75:e7:1d:5f:01:ae:17:bf:58:21:51:2c:11:c2:e2:cf:de:b6: 21:9f:4f:ba:08:38:08:8a:e3:41:d4:56:64:f4:c6:53:b8:b1: 9e:f0:58:59:3a:47:be:65:ea:8c:c6:7b:0c:ed:02:3f:3e:a9: 91:14:c2:53:7e:26:2e:e6:c8:f6:a8:a1:2c:b8:05:03:67:5d: 9d:c2:33:ee -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUG4yajH2UUc/oOGWTexfJpPiG5ZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI4N0RGRUJEQ0NEQTgxMzExNjk4OEQ0NDIxQjA4ODQw NDU3ODE2ODAeFw0yNjA0MDkwODA4MzNaFw0yNzA0MDgwODEzMzNaMDMxMTAvBgNV BAMTKDRBQUY4QTQ4MDYzQ0JCRTAwODEzNjVCNzBDNkI2MjVDNjA5OUYzOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiSEyoPkGCN+Am651cmeYv8yIh nEyI8QJNJDkUOpuOw1uC9ju4RyCzidJWGbdXjm5EnIiFpDdJdHV96781Wh+KhE9i 1iOT4Gc104nBuOeD8qVIpk/1Ku+whESfmXLAK1Eo/N3lq2X/Gll4/ZfRPOjtHG0O DQBQwklqWlS1/YNxRQPRyCzog6MxHLed1bQRFSncG/nSoW+H32YjY1V0AOGdFw7h j/ooJEQamX3oZie3A5TfhIM2dAL3M+pBQUFxOL+tfKj7GWeXiVGJhKts19n3EmTo f67RsDLY1AxsnAFWeAorMOPEFtqKm9qha5I/6sF9G/iGFesi3Z3ZvBX6eL7fAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUSq+KSAY8u+AIE2W3DGtiXGCZ85kwHwYDVR0j BBgwFoAUm4ff69zNqBMRaYjUQhsIhARXgWgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDc0OTk1My8wLzlCODdERkVCRENDREE4MTMxMTY5ODhENDQyMUIw ODg0MDQ1NzgxNjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUI4N0RGRUJEQ0NEQTgxMzExNjk4OEQ0NDIxQjA4ODQwNDU3ODE2OC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0NzQ5OTUzLzAvMzIzMjMwMmUz MjMzMzEyZTMyMzIzNDJlMzAyZjMxMzkyZDMxMzkyMDNkM2UyMDMxMzMzNDM3Mzcz NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEBdzn4DANBgkqhkiG9w0BAQsFAAOCAQEAS1/CQ+G3e6T7zphG eCXA46bfKCwaerKhV+z5okv/NaX652Irv37jwrXaZR3l0t0dmeqStqlehhaDHvF/ iVO4/a+/RkSr/ZaODnwlEadLsraQyVY6v5s6B3nObbhf1d/1rwv2ijSDCwyoG9RA tbLa9LxX9UPoSxoirVJecx7uh+LiftlNL0V5QDsQhDSdcgMwno87R42KO3nsP+SR 7A6D1zI5PQC/ab4+QxD50wMdl3CNNx+vdecdXwGuF79YIVEsEcLiz962IZ9Pugg4 CIrjQdRWZPTGU7ixnvBYWTpHvmXqjMZ7DO0CPz6pkRTCU34mLubI9qihLLgFA2dd ncIz7g== -----END CERTIFICATE-----Generated at Mon Apr 13 15:30:50 2026 by rpki-client