$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230322e3137332e382e302f32342d3234203d3e203338333435.roa File: 3230322e3137332e382e302f32342d3234203d3e203338333435.roa (raw, json) Hash identifier: BrCynri9EVrweVqyd+Gybo6WHR7hAT623IMMKPvMvdk= Subject key identifier: 77:29:D4:22:B0:82:6A:A3:77:14:FB:0A:03:83:65:A2:6D:59:BB:32 Certificate issuer: /CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Certificate serial: 20A722E13F8DB1340CA9DC16E1B61D24CD635CD1 Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230322e3137332e382e302f32342d3234203d3e203338333435.roa Signing time: Fri 10 Apr 2026 08:05:15 +0000 ROA not before: Fri 10 Apr 2026 08:00:15 +0000 ROA not after: Fri 09 Apr 2027 08:05:15 +0000 asID: 38345 IP address blocks: 202.173.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a7:22:e1:3f:8d:b1:34:0c:a9:dc:16:e1:b6:1d:24:cd:63:5c:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Validity Not Before: Apr 10 08:00:15 2026 GMT Not After : Apr 9 08:05:15 2027 GMT Subject: CN=7729D422B0826AA37714FB0A038365A26D59BB32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c8:a0:6c:27:ce:cf:62:a7:85:dc:ff:fe:4d: cd:d8:f8:c5:f6:90:04:6a:c5:62:e3:c9:b2:11:73: e3:25:61:46:ba:5c:56:53:ea:d7:d9:8d:3c:43:cb: 6c:1f:a3:45:6d:90:37:bd:e5:42:87:0a:63:bb:4a: 28:be:1b:16:1b:3b:ae:51:18:8d:13:9e:07:77:2f: ee:0b:f5:9f:4e:d2:c0:b6:1b:6f:20:f6:cd:f6:fd: 28:96:08:fa:12:ff:3c:62:6a:a2:1e:d8:b6:38:6c: 0c:c0:95:aa:60:c5:82:ea:4c:54:fd:cf:b5:0f:0f: b1:be:17:d7:0c:c3:21:0d:aa:36:b1:e3:58:5d:23: 45:da:cd:30:8e:d1:7d:71:6d:77:fd:74:2b:c4:1f: 0c:a0:45:44:ed:85:3e:7d:83:fc:d9:dc:db:37:74: 0f:fc:47:b1:18:b0:92:7a:89:83:1b:40:7c:ce:e1: 57:01:95:b6:a8:59:da:a8:4a:38:84:5e:62:cf:42: 5a:4e:79:6a:16:2c:1e:a5:40:7e:e6:2c:60:48:59: 11:49:5c:d0:b9:07:90:60:85:16:58:e8:c3:21:10: 79:94:4f:98:1d:fc:b2:41:c4:7a:b8:fe:b8:e7:9b: 39:82:12:97:4b:ee:0e:98:e2:c3:30:68:59:dd:61: 76:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:29:D4:22:B0:82:6A:A3:77:14:FB:0A:03:83:65:A2:6D:59:BB:32 X509v3 Authority Key Identifier: keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230322e3137332e382e302f32342d3234203d3e203338333435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.173.8.0/24 Signature Algorithm: sha256WithRSAEncryption b6:9d:29:21:86:ea:eb:1c:39:55:2f:2a:6e:e5:04:0b:d4:b7: 42:03:d3:0f:22:ee:81:db:a0:5c:7b:e0:4e:86:8f:5b:cb:b6: 24:c8:85:b9:ae:e6:f8:03:24:b2:f0:a2:f8:75:38:e3:38:9e: b9:76:b6:b0:a7:bd:47:04:9e:41:93:76:a9:97:c7:6f:f9:4e: 31:f9:f8:34:1f:56:bd:59:3a:aa:ab:74:1e:fd:70:10:be:a7: a3:3f:b3:90:a6:d7:a1:e5:9f:7e:d8:10:30:ce:02:4c:da:d9: 35:51:e5:36:e0:af:6b:76:32:9b:e4:42:b4:3f:fb:1b:42:e9: be:c0:5c:f5:dd:55:36:86:5a:9c:99:62:5e:d3:cd:83:55:52: 3f:3e:16:25:61:0b:da:5e:25:41:37:96:6b:15:3f:73:1c:f7: a2:a3:e3:5b:31:78:f6:c6:ec:3e:a2:90:a3:ff:f0:51:ab:5e: a6:d6:4a:db:ef:d6:65:b4:d2:94:2d:b4:4e:f5:f4:fb:58:50: 1b:65:bd:29:71:45:db:dd:3c:c1:59:32:ca:e8:21:4b:44:dd: 9e:6e:11:3d:e8:50:9e:2f:b5:23:ce:09:e4:08:3a:6e:57:b5: 24:bc:4d:6a:c8:d4:ca:85:cb:1a:5f:d2:1b:17:92:3d:69:1d: a6:e1:49:f7 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUIKci4T+NsTQMqdwW4bYdJM1jXNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0 MzYwQUU4NjAeFw0yNjA0MTAwODAwMTVaFw0yNzA0MDkwODA1MTVaMDMxMTAvBgNV BAMTKDc3MjlENDIyQjA4MjZBQTM3NzE0RkIwQTAzODM2NUEyNkQ1OUJCMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSyKBsJ87PYqeF3P/+Tc3Y+MX2 kARqxWLjybIRc+MlYUa6XFZT6tfZjTxDy2wfo0VtkDe95UKHCmO7Sii+GxYbO65R GI0Tngd3L+4L9Z9O0sC2G28g9s32/SiWCPoS/zxiaqIe2LY4bAzAlapgxYLqTFT9 z7UPD7G+F9cMwyENqjax41hdI0XazTCO0X1xbXf9dCvEHwygRUTthT59g/zZ3Ns3 dA/8R7EYsJJ6iYMbQHzO4VcBlbaoWdqoSjiEXmLPQlpOeWoWLB6lQH7mLGBIWRFJ XNC5B5BghRZY6MMhEHmUT5gd/LJBxHq4/rjnmzmCEpdL7g6Y4sMwaFndYXZ5AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUdynUIrCCaqN3FPsKA4Nlom1ZuzIwHwYDVR0j BBgwFoAUpIKQt7RENULQRg/Um98bRENgroYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg4NDcyNzI1NDQ4Mjk0Ny8wL0E0ODI5MEI3QjQ0NDM1NDJEMDQ2MEZENDlCREYx QjQ0NDM2MEFFODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0MzYwQUU4Ni5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODg0NzI3MjU0NDgyOTQ3LzAvMzIzMDMyMmUzMTM3 MzMyZTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzODMzMzQzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMqtCDANBgkqhkiG9w0BAQsFAAOCAQEAtp0pIYbq6xw5VS8qbuUEC9S3QgPT DyLugdugXHvgToaPW8u2JMiFua7m+AMksvCi+HU44zieuXa2sKe9RwSeQZN2qZfH b/lOMfn4NB9WvVk6qqt0Hv1wEL6noz+zkKbXoeWfftgQMM4CTNrZNVHlNuCva3Yy m+RCtD/7G0LpvsBc9d1VNoZanJliXtPNg1VSPz4WJWEL2l4lQTeWaxU/cxz3oqPj WzF49sbsPqKQo//wUateptZK2+/WZbTSlC20TvX0+1hQG2W9KXFF2908wVkyyugh S0Tdnm4RPehQni+1I84J5Ag6ble1JLxNasjUyoXLGl/SGxeSPWkdpuFJ9w== -----END CERTIFICATE-----Generated at Mon Apr 13 13:54:25 2026 by rpki-client