$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1088651015181303810/0/3231392e3233322e33362e302f32322d3232203d3e2034383437.roa File: 3231392e3233322e33362e302f32322d3232203d3e2034383437.roa (raw, json) Hash identifier: bmOU5gtClm+CxO3KqtpunOqLSiUQw3h4LJIR2hU/7uc= Subject key identifier: CA:C0:BA:DC:EB:B5:F0:8C:E0:DC:7E:FD:09:63:27:7C:84:07:F0:8F Certificate issuer: /CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Certificate serial: 2C4B7730584EA2368E8E870652150679682556D6 Authority key identifier: D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/3231392e3233322e33362e302f32322d3232203d3e2034383437.roa Signing time: Sun 19 Apr 2026 10:08:44 +0000 ROA not before: Sun 19 Apr 2026 10:03:44 +0000 ROA not after: Sun 18 Apr 2027 10:08:44 +0000 asID: 4847 IP address blocks: 219.232.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 21:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:4b:77:30:58:4e:a2:36:8e:8e:87:06:52:15:06:79:68:25:56:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Validity Not Before: Apr 19 10:03:44 2026 GMT Not After : Apr 18 10:08:44 2027 GMT Subject: CN=CAC0BADCEBB5F08CE0DC7EFD0963277C8407F08F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:13:ed:b6:4e:9b:b3:4f:12:b8:9e:53:93:20: 78:0e:09:36:e7:d6:88:52:83:3a:42:33:91:11:3f: 1a:1b:eb:df:56:e5:bb:01:08:b5:83:4b:15:8c:3c: 26:7a:1c:3d:e2:77:5b:ea:fa:34:c5:84:5c:cb:b0: 5a:7c:38:2c:ab:92:83:6b:dc:be:b9:71:a6:85:24: 74:8c:10:d5:59:5c:de:53:f6:50:66:7b:16:82:8c: 5a:99:f2:b0:1c:d9:09:c9:83:c4:25:cb:51:75:41: 53:56:bd:89:38:bb:1a:85:03:2b:95:08:b4:3f:08: fa:ce:20:17:84:0a:92:04:03:42:6e:cf:28:2d:65: 93:4c:02:d1:1c:02:46:de:01:46:32:cb:90:a9:af: bd:be:1d:0f:80:b8:e9:64:b6:8f:59:f3:e3:9a:81: bd:5c:8f:3e:9c:3b:9c:2a:1b:e7:d5:dc:1b:bc:2c: 66:5c:c8:0c:63:08:a9:6a:8d:73:54:8c:32:b9:58: 36:e6:e3:90:66:4a:0b:4f:e2:9b:29:35:7c:6d:66: d8:53:2e:fa:15:0f:fa:db:cb:69:c2:64:bc:07:a7: 90:33:62:db:cf:2f:eb:06:20:d9:d5:36:37:89:94: 2c:ef:53:79:83:23:18:9e:15:ea:6d:92:db:f3:3e: b6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C0:BA:DC:EB:B5:F0:8C:E0:DC:7E:FD:09:63:27:7C:84:07:F0:8F X509v3 Authority Key Identifier: keyid:D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/3231392e3233322e33362e302f32322d3232203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.232.36.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:c8:87:cb:e1:59:38:fd:9a:27:39:49:f6:6d:c4:f9:c8:99: 01:21:80:8f:66:16:c6:f4:90:fe:d3:02:76:81:68:9a:eb:b5: 72:39:39:53:66:25:1e:77:b8:5b:c3:6f:70:66:9b:a8:ad:e2: 73:fb:9f:46:47:9a:ff:e3:09:70:fa:cc:e2:da:d4:74:77:0d: 15:08:29:64:64:3f:b1:03:cf:eb:ca:9c:88:ff:ad:22:c4:62: a8:11:e3:95:7a:23:c1:b2:24:a8:94:6e:d3:4d:51:07:53:e8: ee:d9:f4:53:4e:b7:ab:67:be:c5:85:91:d5:36:79:25:a1:05: 3d:71:02:5b:b1:2b:79:76:b9:e1:bc:f7:57:60:b3:bd:bd:df: ec:c7:ac:56:dd:fb:92:ab:f7:df:05:61:bd:06:4a:61:36:73: 65:01:32:0a:f2:80:15:b8:26:f9:67:f9:dd:ce:ba:d9:6a:64: f7:31:99:ab:76:9c:23:b8:d0:be:2c:a1:b4:a6:bd:46:01:8d: ae:3a:23:d6:90:69:38:96:d7:16:b3:76:9c:d1:1d:de:da:50: e9:7e:27:e3:b1:84:13:5b:02:23:e7:3c:3c:a6:e7:1a:e3:aa: 08:41:88:b5:d1:8c:46:62:f3:73:c4:18:c3:bb:e0:51:be:27: 34:76:7b:d7 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIULEt3MFhOojaOjocGUhUGeWglVtYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVE MkZDMkY4MDAeFw0yNjA0MTkxMDAzNDRaFw0yNzA0MTgxMDA4NDRaMDMxMTAvBgNV BAMTKENBQzBCQURDRUJCNUYwOENFMERDN0VGRDA5NjMyNzdDODQwN0YwOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbE+22TpuzTxK4nlOTIHgOCTbn 1ohSgzpCM5ERPxob699W5bsBCLWDSxWMPCZ6HD3id1vq+jTFhFzLsFp8OCyrkoNr 3L65caaFJHSMENVZXN5T9lBmexaCjFqZ8rAc2QnJg8Qly1F1QVNWvYk4uxqFAyuV CLQ/CPrOIBeECpIEA0JuzygtZZNMAtEcAkbeAUYyy5Cpr72+HQ+AuOlkto9Z8+Oa gb1cjz6cO5wqG+fV3Bu8LGZcyAxjCKlqjXNUjDK5WDbm45BmSgtP4pspNXxtZthT LvoVD/rby2nCZLwHp5AzYtvPL+sGINnVNjeJlCzvU3mDIxieFeptktvzPrZLAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUysC63Ou18Izg3H79CWMnfIQH8I8wHwYDVR0j BBgwFoAU1e8qeSFm+U++Mzd+AjkDTtL8L4AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 ODY1MTAxNTE4MTMwMzgxMC8wL0Q1RUYyQTc5MjE2NkY5NEZCRTMzMzc3RTAyMzkw MzRFRDJGQzJGODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVEMkZDMkY4MC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDg4NjUxMDE1MTgxMzAzODEwLzAvMzIzMTM5MmUzMjMz MzIyZTMzMzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAtvoJDANBgkqhkiG9w0BAQsFAAOCAQEADsiHy+FZOP2aJzlJ9m3E+ciZASGA j2YWxvSQ/tMCdoFomuu1cjk5U2YlHne4W8NvcGabqK3ic/ufRkea/+MJcPrM4trU dHcNFQgpZGQ/sQPP68qciP+tIsRiqBHjlXojwbIkqJRu001RB1Po7tn0U063q2e+ xYWR1TZ5JaEFPXECW7EreXa54bz3V2Czvb3f7MesVt37kqv33wVhvQZKYTZzZQEy CvKAFbgm+Wf53c662Wpk9zGZq3acI7jQviyhtKa9RgGNrjoj1pBpOJbXFrN2nNEd 3tpQ6X4n47GEE1sCI+c8PKbnGuOqCEGItdGMRmLzc8QYw7vgUb4nNHZ71w== -----END CERTIFICATE-----Generated at Mon Apr 27 13:46:38 2026 by rpki-client