$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230322e3137332e392e302f32342d3234203d3e203338333435.roa File: 3230322e3137332e392e302f32342d3234203d3e203338333435.roa (raw, json) Hash identifier: 2di0cBNuTJeQU0TMZLX12tvH64Dra77voDmFV4PJ1AQ= Subject key identifier: 42:1A:43:D2:F1:C9:9C:07:CC:E8:C6:81:80:ED:E4:63:5D:E8:C4:33 Certificate issuer: /CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Certificate serial: 34BB4CEE7369D0F338C5B18AD47F3CF75B5DF8F5 Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230322e3137332e392e302f32342d3234203d3e203338333435.roa Signing time: Fri 10 Apr 2026 08:05:15 +0000 ROA not before: Fri 10 Apr 2026 08:00:15 +0000 ROA not after: Fri 09 Apr 2027 08:05:15 +0000 asID: 38345 IP address blocks: 202.173.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:bb:4c:ee:73:69:d0:f3:38:c5:b1:8a:d4:7f:3c:f7:5b:5d:f8:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Validity Not Before: Apr 10 08:00:15 2026 GMT Not After : Apr 9 08:05:15 2027 GMT Subject: CN=421A43D2F1C99C07CCE8C68180EDE4635DE8C433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e3:4e:c7:02:83:c2:85:51:1f:87:09:db:c3: de:72:31:88:53:b3:59:98:04:13:11:92:5c:3f:8a: d1:b3:44:b3:1e:a2:3d:d1:ab:da:05:61:3f:26:47: 8c:88:94:fd:e9:20:10:d1:c1:89:ba:48:39:c4:b3: 54:ba:38:2e:47:20:74:44:d2:99:ce:0a:95:8d:ed: c9:20:da:22:6d:a9:4b:7f:4f:c3:50:49:29:eb:30: c6:36:89:5e:54:81:e4:a6:03:ac:28:00:b6:42:cc: 4b:02:4e:0b:9a:20:12:84:6f:fc:7f:4f:ad:62:c5: f9:3f:71:3c:03:90:c3:10:c0:32:3e:2c:63:4c:5b: e2:ad:4f:38:e5:74:24:50:96:65:6c:a7:d9:a0:18: 93:0f:f0:39:f3:fa:60:ee:cc:a4:13:f9:46:6a:b5: 40:50:91:4e:3a:4f:a1:81:dc:6b:5c:c0:ee:74:48: 65:26:80:e9:0f:6e:4d:00:47:ec:62:7a:07:fd:1a: 93:b9:cb:3f:19:01:a2:98:ef:fa:a4:25:ce:da:ae: ef:40:99:ba:38:f5:e7:f0:1d:a8:38:fa:63:0a:76: f4:ba:59:d5:b2:4f:5b:8c:54:58:26:5b:8f:ee:99: d0:41:cf:b4:4a:ee:54:c0:a7:3d:e2:90:bb:f0:5a: 70:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1A:43:D2:F1:C9:9C:07:CC:E8:C6:81:80:ED:E4:63:5D:E8:C4:33 X509v3 Authority Key Identifier: keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230322e3137332e392e302f32342d3234203d3e203338333435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.173.9.0/24 Signature Algorithm: sha256WithRSAEncryption 73:3d:e9:45:80:10:2e:c5:96:4f:ba:bf:f4:76:c1:cd:50:cc: 39:1e:5c:a5:a5:c1:eb:53:f7:2d:b0:fd:58:4b:5a:e9:f3:8d: 4b:af:ab:bb:17:85:6c:2d:43:b1:2d:35:fe:fb:4d:94:29:34: 01:43:66:79:39:12:dd:5d:fb:47:f2:f1:fc:99:79:fe:df:6a: 26:ee:d5:1e:5e:20:ef:e2:79:48:d5:71:81:73:f5:96:e4:b4: e3:1f:c2:87:12:20:5c:2c:3b:69:c8:4e:de:97:e1:db:98:77: 94:80:c1:ee:c2:d4:66:e7:5b:85:0c:c1:32:af:43:40:12:fb: a8:00:07:1f:0f:4e:04:0f:9f:f9:81:0d:51:c8:ba:05:a3:27: 80:15:0b:e4:94:c3:68:cf:ab:65:4c:db:4c:5c:e1:66:51:59: d9:db:a3:0e:68:40:1b:f6:fa:db:b7:22:f2:87:1b:a2:d3:3a: c7:bf:cf:f4:7f:1d:83:0e:1c:ea:7c:bd:01:76:af:10:92:37: 41:20:da:2e:e9:e1:f9:b7:2e:8d:7e:9b:5d:5c:3b:a2:df:fd: fa:26:00:ec:d3:35:61:d8:e5:9a:38:17:3b:b5:c9:29:ec:7d: be:69:05:5a:2d:d3:6c:e5:8a:8c:ca:f0:3f:27:20:65:18:61: 98:51:47:e9 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUNLtM7nNp0PM4xbGK1H8891td+PUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0 MzYwQUU4NjAeFw0yNjA0MTAwODAwMTVaFw0yNzA0MDkwODA1MTVaMDMxMTAvBgNV BAMTKDQyMUE0M0QyRjFDOTlDMDdDQ0U4QzY4MTgwRURFNDYzNURFOEM0MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK407HAoPChVEfhwnbw95yMYhT s1mYBBMRklw/itGzRLMeoj3Rq9oFYT8mR4yIlP3pIBDRwYm6SDnEs1S6OC5HIHRE 0pnOCpWN7ckg2iJtqUt/T8NQSSnrMMY2iV5UgeSmA6woALZCzEsCTguaIBKEb/x/ T61ixfk/cTwDkMMQwDI+LGNMW+KtTzjldCRQlmVsp9mgGJMP8Dnz+mDuzKQT+UZq tUBQkU46T6GB3GtcwO50SGUmgOkPbk0AR+xiegf9GpO5yz8ZAaKY7/qkJc7aru9A mbo49efwHag4+mMKdvS6WdWyT1uMVFgmW4/umdBBz7RK7lTApz3ikLvwWnDDAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUQhpD0vHJnAfM6MaBgO3kY13oxDMwHwYDVR0j BBgwFoAUpIKQt7RENULQRg/Um98bRENgroYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg4NDcyNzI1NDQ4Mjk0Ny8wL0E0ODI5MEI3QjQ0NDM1NDJEMDQ2MEZENDlCREYx QjQ0NDM2MEFFODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0MzYwQUU4Ni5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODg0NzI3MjU0NDgyOTQ3LzAvMzIzMDMyMmUzMTM3 MzMyZTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzODMzMzQzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMqtCTANBgkqhkiG9w0BAQsFAAOCAQEAcz3pRYAQLsWWT7q/9HbBzVDMOR5c paXB61P3LbD9WEta6fONS6+ruxeFbC1DsS01/vtNlCk0AUNmeTkS3V37R/Lx/Jl5 /t9qJu7VHl4g7+J5SNVxgXP1luS04x/ChxIgXCw7achO3pfh25h3lIDB7sLUZudb hQzBMq9DQBL7qAAHHw9OBA+f+YENUci6BaMngBUL5JTDaM+rZUzbTFzhZlFZ2duj DmhAG/b627ci8ocbotM6x7/P9H8dgw4c6ny9AXavEJI3QSDaLunh+bcujX6bXVw7 ot/9+iYA7NM1YdjlmjgXO7XJKex9vmkFWi3TbOWKjMrwPycgZRhhmFFH6Q== -----END CERTIFICATE-----Generated at Mon Apr 13 13:54:28 2026 by rpki-client