$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1088651015181303810/0/3231392e3233322e34342e302f32322d3232203d3e2034383437.roa File: 3231392e3233322e34342e302f32322d3232203d3e2034383437.roa (raw, json) Hash identifier: 5nVAN8TukMmhCfRksOm2Om3KwxeVxz5mu4z2JJ0Wqo4= Subject key identifier: 84:67:16:55:6F:E7:7A:1D:41:96:31:B4:C0:F8:04:C4:95:BC:A1:9F Certificate issuer: /CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Certificate serial: 5290294CE859D5AC1A0E29A1FE2842EBC4B75B0F Authority key identifier: D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/3231392e3233322e34342e302f32322d3232203d3e2034383437.roa Signing time: Sun 19 Apr 2026 10:10:19 +0000 ROA not before: Sun 19 Apr 2026 10:05:19 +0000 ROA not after: Sun 18 Apr 2027 10:10:19 +0000 asID: 4847 IP address blocks: 219.232.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 21:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:90:29:4c:e8:59:d5:ac:1a:0e:29:a1:fe:28:42:eb:c4:b7:5b:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Validity Not Before: Apr 19 10:05:19 2026 GMT Not After : Apr 18 10:10:19 2027 GMT Subject: CN=846716556FE77A1D419631B4C0F804C495BCA19F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9c:f8:9b:34:99:90:45:0b:29:c1:00:9c:26: 8e:38:bd:3a:5c:9f:51:2e:95:c7:d6:90:cb:61:7f: 22:2b:02:f9:ed:d5:ee:87:90:5e:5f:6a:af:1e:50: 17:83:af:4f:b0:20:c0:e8:a1:46:40:6c:a8:ff:cf: 6b:ee:13:af:c4:db:22:56:51:24:a8:37:a2:92:bb: 75:bd:8f:ac:bb:44:09:ee:bb:99:4e:83:3a:d2:08: 51:4c:85:e5:e0:aa:fc:f6:5d:0b:14:0f:88:ea:12: fe:a2:c6:9b:89:b3:e3:ed:26:41:a2:2d:84:9d:1b: fa:e1:95:f3:6d:99:ab:ac:93:bf:82:ae:b3:0c:c8: f8:dc:61:e8:a3:03:fd:f7:04:a4:43:4a:2f:e3:60: 4e:8e:28:fc:82:de:4d:f4:2c:c7:25:2b:d7:a4:31: d8:40:c4:51:eb:af:73:a4:55:c4:59:14:3b:4c:92: 46:29:8a:dd:95:90:d1:fd:5c:aa:3f:08:bd:44:40: 7c:9e:f6:6e:9b:e0:ef:a7:48:9e:20:24:59:65:a9: 0e:d5:cb:bb:6b:f8:49:94:98:67:ac:bd:ff:19:6a: 4a:4e:d7:8a:59:30:03:97:2b:a1:42:95:f6:66:55: 4b:49:b8:31:63:85:a7:4b:82:8e:41:c0:8e:c4:fd: 50:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:67:16:55:6F:E7:7A:1D:41:96:31:B4:C0:F8:04:C4:95:BC:A1:9F X509v3 Authority Key Identifier: keyid:D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/3231392e3233322e34342e302f32322d3232203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.232.44.0/22 Signature Algorithm: sha256WithRSAEncryption 46:7b:39:8c:ed:3f:93:3f:71:9c:39:e3:53:da:e9:eb:e4:a8: d4:16:88:36:9f:bb:e9:5e:eb:7a:d2:67:87:a2:87:a9:20:bc: 62:49:33:77:e4:ae:87:76:77:b5:91:b1:dd:9f:e4:03:04:45: e8:2b:f4:a2:c1:a3:b1:e8:5a:0c:f1:c4:35:0d:58:86:ba:28: 1e:e2:b6:22:04:86:f5:f2:1f:0c:9b:90:ab:41:97:07:8a:b9: 62:60:a2:3f:c0:c3:13:d5:86:75:a4:62:8d:e9:83:50:e1:13: 57:9a:40:40:2b:18:65:4d:06:95:db:cc:dc:e6:d0:47:5f:05: 64:33:e7:4a:ee:40:e5:bc:35:79:96:9c:1e:4b:f0:90:ad:ba: 78:c9:9c:de:ce:29:b2:7e:a1:f9:c6:ae:1a:4e:17:90:8d:fc: 9c:97:98:52:bb:52:e4:a4:d3:ab:c2:ee:20:cd:48:eb:5d:3d: 01:5d:14:fb:1e:bf:3e:65:b5:9d:15:74:b4:96:b9:15:c5:c6: fd:c3:57:de:cc:5a:01:e0:51:ef:9d:fe:4c:67:9c:09:45:ef: 40:62:9b:db:fb:b1:7a:57:93:13:90:8d:54:89:04:ee:61:47: 25:a5:c2:bd:5e:43:17:ff:70:3a:a2:b4:68:d6:f8:1a:02:ef: e0:56:01:b5 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUUpApTOhZ1awaDimh/ihC68S3Ww8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVE MkZDMkY4MDAeFw0yNjA0MTkxMDA1MTlaFw0yNzA0MTgxMDEwMTlaMDMxMTAvBgNV BAMTKDg0NjcxNjU1NkZFNzdBMUQ0MTk2MzFCNEMwRjgwNEM0OTVCQ0ExOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2nPibNJmQRQspwQCcJo44vTpc n1EulcfWkMthfyIrAvnt1e6HkF5faq8eUBeDr0+wIMDooUZAbKj/z2vuE6/E2yJW USSoN6KSu3W9j6y7RAnuu5lOgzrSCFFMheXgqvz2XQsUD4jqEv6ixpuJs+PtJkGi LYSdG/rhlfNtmausk7+CrrMMyPjcYeijA/33BKRDSi/jYE6OKPyC3k30LMclK9ek MdhAxFHrr3OkVcRZFDtMkkYpit2VkNH9XKo/CL1EQHye9m6b4O+nSJ4gJFllqQ7V y7tr+EmUmGesvf8ZakpO14pZMAOXK6FClfZmVUtJuDFjhadLgo5BwI7E/VANAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUhGcWVW/neh1BljG0wPgExJW8oZ8wHwYDVR0j BBgwFoAU1e8qeSFm+U++Mzd+AjkDTtL8L4AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 ODY1MTAxNTE4MTMwMzgxMC8wL0Q1RUYyQTc5MjE2NkY5NEZCRTMzMzc3RTAyMzkw MzRFRDJGQzJGODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVEMkZDMkY4MC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDg4NjUxMDE1MTgxMzAzODEwLzAvMzIzMTM5MmUzMjMz MzIyZTM0MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAtvoLDANBgkqhkiG9w0BAQsFAAOCAQEARns5jO0/kz9xnDnjU9rp6+So1BaI Np+76V7retJnh6KHqSC8Ykkzd+Suh3Z3tZGx3Z/kAwRF6Cv0osGjsehaDPHENQ1Y hrooHuK2IgSG9fIfDJuQq0GXB4q5YmCiP8DDE9WGdaRijemDUOETV5pAQCsYZU0G ldvM3ObQR18FZDPnSu5A5bw1eZacHkvwkK26eMmc3s4psn6h+cauGk4XkI38nJeY UrtS5KTTq8LuIM1I6109AV0U+x6/PmW1nRV0tJa5FcXG/cNX3sxaAeBR753+TGec CUXvQGKb2/uxeleTE5CNVIkE7mFHJaXCvV5DF/9wOqK0aNb4GgLv4FYBtQ== -----END CERTIFICATE-----Generated at Mon Apr 27 13:46:38 2026 by rpki-client