$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e32302e302f32342d3234203d3e203338333435.roa File: 3230332e39392e32302e302f32342d3234203d3e203338333435.roa (raw, json) Hash identifier: YKNuZqio/zzTld4FUffYrqs/i7j7f9EPRat5+XQ4HaE= Subject key identifier: 46:97:97:1E:D5:18:94:8A:AB:0E:29:CF:3A:AE:41:72:1D:45:A5:63 Certificate issuer: /CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Certificate serial: 6435E3A0AE1791D2F9FB87637F4A134DAFDBFA1B Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e32302e302f32342d3234203d3e203338333435.roa Signing time: Fri 10 Apr 2026 08:05:14 +0000 ROA not before: Fri 10 Apr 2026 08:00:14 +0000 ROA not after: Fri 09 Apr 2027 08:05:14 +0000 asID: 38345 IP address blocks: 203.99.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:35:e3:a0:ae:17:91:d2:f9:fb:87:63:7f:4a:13:4d:af:db:fa:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Validity Not Before: Apr 10 08:00:14 2026 GMT Not After : Apr 9 08:05:14 2027 GMT Subject: CN=4697971ED518948AAB0E29CF3AAE41721D45A563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b3:cc:b7:ea:ae:f1:02:7f:78:4a:f3:d6:07: 92:bd:10:b5:48:ed:19:0c:a1:7b:7b:53:f2:3c:89: d3:f4:ce:4f:9b:32:c4:3a:b6:ed:a6:82:d6:02:9b: 33:9a:f4:ef:8b:b8:47:79:26:a1:77:81:07:af:30: b8:55:5c:87:c4:35:6f:5b:4d:d4:a5:51:90:f4:a9: 5b:ca:81:52:f6:f3:3a:e6:68:80:24:ff:f3:c4:88: 9f:d4:5b:f4:8d:47:80:3b:b6:26:9e:2e:21:02:8c: c1:9e:25:7f:ff:b0:9c:10:47:8c:58:1c:14:70:93: 25:c7:f0:71:af:48:92:c9:a6:57:56:dd:57:be:6d: 26:e8:ea:9a:09:e9:33:4f:cd:38:58:d9:a8:af:87: 74:72:e0:8b:74:85:c2:b1:f2:59:53:95:82:40:2a: b7:71:ff:0a:d7:0d:a2:42:e5:a2:0c:3a:f5:b8:d3: 17:ea:31:32:25:33:41:1a:8f:f3:21:99:9c:02:39: 42:5f:62:2c:df:b8:d4:8e:ad:72:e5:86:87:38:3e: d9:18:37:a5:64:ba:b2:45:9a:4f:62:b8:c8:66:4e: 5e:0a:3d:0e:2c:8f:aa:7d:01:1c:5b:f5:69:cf:e7: f4:1d:0f:3f:63:d4:85:cc:15:71:ef:14:22:ab:02: 9b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:97:97:1E:D5:18:94:8A:AB:0E:29:CF:3A:AE:41:72:1D:45:A5:63 X509v3 Authority Key Identifier: keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e32302e302f32342d3234203d3e203338333435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.99.20.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:4f:9e:33:81:91:9d:ec:15:06:a1:65:1e:85:09:50:1d:57: dd:d1:fc:75:a7:01:7e:39:5d:8a:80:3e:d4:43:df:4a:32:97: 11:45:d2:3d:f1:71:59:2a:1a:31:1b:8f:f5:e6:b8:2f:c9:6a: 5c:e9:8a:fa:b4:ed:b0:e1:9c:cc:70:84:b9:af:f9:fd:82:71: 94:39:80:c4:a5:f8:9e:a6:fb:85:09:41:b6:a5:4d:27:09:ae: 46:4e:71:c0:b3:33:59:ed:cc:f7:ac:c2:fe:bc:20:65:99:02: 60:bc:17:3f:07:ee:44:60:85:9b:7e:2d:03:10:05:4b:6e:c7: e7:47:74:eb:aa:0c:76:8d:24:69:dc:3b:ba:54:05:df:ee:45: 07:96:ad:bf:b5:b3:dc:d4:a5:c2:59:b9:88:90:db:e4:98:d6: dc:9c:56:4a:aa:11:2d:54:74:9a:da:ee:c1:e8:5b:47:ab:41: eb:cf:e1:52:e3:75:6b:36:7f:03:be:d2:08:a9:48:de:d7:8f: 23:37:46:7f:cc:f3:ec:35:25:9a:e5:6d:00:a2:8f:91:be:73: e8:9b:25:9d:c9:60:ab:c3:4e:b7:65:b8:97:3d:2c:7d:28:a0: ba:45:e2:5a:34:be:bc:56:68:a6:d2:b1:c8:aa:16:4b:89:8c: df:dc:e0:b8 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUZDXjoK4XkdL5+4djf0oTTa/b+hswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0 MzYwQUU4NjAeFw0yNjA0MTAwODAwMTRaFw0yNzA0MDkwODA1MTRaMDMxMTAvBgNV BAMTKDQ2OTc5NzFFRDUxODk0OEFBQjBFMjlDRjNBQUU0MTcyMUQ0NUE1NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjs8y36q7xAn94SvPWB5K9ELVI 7RkMoXt7U/I8idP0zk+bMsQ6tu2mgtYCmzOa9O+LuEd5JqF3gQevMLhVXIfENW9b TdSlUZD0qVvKgVL28zrmaIAk//PEiJ/UW/SNR4A7tiaeLiECjMGeJX//sJwQR4xY HBRwkyXH8HGvSJLJpldW3Ve+bSbo6poJ6TNPzThY2aivh3Ry4It0hcKx8llTlYJA Krdx/wrXDaJC5aIMOvW40xfqMTIlM0Eaj/MhmZwCOUJfYizfuNSOrXLlhoc4PtkY N6VkurJFmk9iuMhmTl4KPQ4sj6p9ARxb9WnP5/QdDz9j1IXMFXHvFCKrApsfAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQURpeXHtUYlIqrDinPOq5Bch1FpWMwHwYDVR0j BBgwFoAUpIKQt7RENULQRg/Um98bRENgroYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg4NDcyNzI1NDQ4Mjk0Ny8wL0E0ODI5MEI3QjQ0NDM1NDJEMDQ2MEZENDlCREYx QjQ0NDM2MEFFODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0MzYwQUU4Ni5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODg0NzI3MjU0NDgyOTQ3LzAvMzIzMDMzMmUzOTM5 MmUzMjMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzODMzMzQzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMtjFDANBgkqhkiG9w0BAQsFAAOCAQEAPU+eM4GRnewVBqFlHoUJUB1X3dH8 dacBfjldioA+1EPfSjKXEUXSPfFxWSoaMRuP9ea4L8lqXOmK+rTtsOGczHCEua/5 /YJxlDmAxKX4nqb7hQlBtqVNJwmuRk5xwLMzWe3M96zC/rwgZZkCYLwXPwfuRGCF m34tAxAFS27H50d066oMdo0kadw7ulQF3+5FB5atv7Wz3NSlwlm5iJDb5JjW3JxW SqoRLVR0mtruwehbR6tB68/hUuN1azZ/A77SCKlI3tePIzdGf8zz7DUlmuVtAKKP kb5z6Jslnclgq8NOt2W4lz0sfSigukXiWjS+vFZoptKxyKoWS4mM39zguA== -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:18 2026 by rpki-client