$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e32312e302f32342d3234203d3e203338333435.roa File: 3230332e39392e32312e302f32342d3234203d3e203338333435.roa (raw, json) Hash identifier: cretV4ApIeUAuoE11ntj4ElsnnN7UW6BfgYX+ISmfuI= Subject key identifier: B4:AD:92:D5:D0:E7:0A:60:52:C5:73:58:E8:D5:9C:55:7D:D2:B9:4A Certificate issuer: /CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Certificate serial: 5E525E0567373D76612C33DFC103A3628E16DC56 Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e32312e302f32342d3234203d3e203338333435.roa Signing time: Fri 10 Apr 2026 08:05:14 +0000 ROA not before: Fri 10 Apr 2026 08:00:14 +0000 ROA not after: Fri 09 Apr 2027 08:05:14 +0000 asID: 38345 IP address blocks: 203.99.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:52:5e:05:67:37:3d:76:61:2c:33:df:c1:03:a3:62:8e:16:dc:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Validity Not Before: Apr 10 08:00:14 2026 GMT Not After : Apr 9 08:05:14 2027 GMT Subject: CN=B4AD92D5D0E70A6052C57358E8D59C557DD2B94A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7e:6a:90:c1:22:cf:9f:72:48:eb:95:64:b2: 8a:96:c4:b1:9f:f6:1f:62:96:be:91:f9:65:64:9c: 9f:39:83:81:05:dd:5a:eb:22:85:6e:8f:57:1e:57: ac:21:79:76:d1:b1:67:74:a2:a7:bf:8e:dc:d2:62: b0:a5:24:d0:36:df:ab:18:9c:b8:42:fc:3d:93:80: 00:61:d9:84:df:68:5f:58:ba:df:10:17:b5:d3:de: b2:eb:9c:58:ea:8c:22:5d:a3:fb:2f:b0:26:88:95: 85:fa:4a:bb:b2:00:28:94:90:a5:6a:89:a9:11:cb: c5:40:38:bf:d3:a5:f5:7e:02:51:07:f0:35:1e:c3: 9b:d4:5b:ee:be:af:e2:ea:c8:6b:39:dc:27:01:eb: 37:12:34:f0:92:d2:b7:f2:38:b3:a2:56:95:a7:5e: d7:67:a1:14:77:49:59:20:32:11:e4:67:07:b9:97: 5e:1a:67:0b:a4:1b:ff:21:8a:42:0e:de:71:ba:4e: 1d:50:fe:07:19:a6:8a:45:c9:b7:60:4b:fb:64:46: cd:81:cb:44:9a:bf:93:cb:e9:11:f7:1a:f8:79:f8: cc:fb:36:f0:59:69:15:1b:f7:bb:52:61:88:e1:e2: d6:f8:f1:67:03:64:2e:e9:85:17:a9:3a:95:38:4e: 32:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AD:92:D5:D0:E7:0A:60:52:C5:73:58:E8:D5:9C:55:7D:D2:B9:4A X509v3 Authority Key Identifier: keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e32312e302f32342d3234203d3e203338333435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.99.21.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:be:0f:5a:09:de:06:d1:51:f9:3d:98:a2:93:f2:c9:0e:f3: 76:cf:a7:a0:69:4e:a5:87:bc:02:23:96:38:81:69:90:bd:d1: 17:fa:6c:fc:96:66:34:a1:b0:c5:5d:a4:43:6e:42:8e:bb:e4: 32:2d:c4:d6:47:6a:41:7f:b6:f6:97:f3:57:c3:1c:af:d7:eb: 25:6d:ec:cf:19:95:26:93:d3:64:2f:ee:82:e1:39:bb:13:a1: 2d:64:de:65:c6:87:0a:10:dd:e9:b6:93:f3:13:32:67:40:8c: e9:d4:02:46:b3:e8:7e:4f:78:a9:1b:5a:98:9f:70:1e:b0:06: a7:3a:52:9c:20:c4:7e:9e:a8:b1:58:8b:19:34:c2:c7:ca:9e: 93:a4:d4:8c:e3:5a:27:1d:87:5f:a5:bf:ac:3e:8b:61:57:88: 00:2e:bb:8f:7b:77:25:8a:75:dc:8d:6f:81:03:5a:de:a2:39: fe:c4:a1:53:f4:e2:fa:4a:9a:8a:18:82:d6:22:77:cc:ba:d6: 54:60:8f:01:6e:e8:d6:33:e8:db:5f:05:8e:62:80:4f:91:31: a2:4c:a4:5d:6e:19:4f:cb:52:f3:0f:d5:04:bb:df:70:d3:cf: d1:60:ca:78:30:b5:97:84:d1:66:31:92:aa:b2:77:12:b7:1d: 53:57:82:51 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUXlJeBWc3PXZhLDPfwQOjYo4W3FYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0 MzYwQUU4NjAeFw0yNjA0MTAwODAwMTRaFw0yNzA0MDkwODA1MTRaMDMxMTAvBgNV BAMTKEI0QUQ5MkQ1RDBFNzBBNjA1MkM1NzM1OEU4RDU5QzU1N0REMkI5NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyfmqQwSLPn3JI65VksoqWxLGf 9h9ilr6R+WVknJ85g4EF3VrrIoVuj1ceV6wheXbRsWd0oqe/jtzSYrClJNA236sY nLhC/D2TgABh2YTfaF9Yut8QF7XT3rLrnFjqjCJdo/svsCaIlYX6SruyACiUkKVq iakRy8VAOL/TpfV+AlEH8DUew5vUW+6+r+LqyGs53CcB6zcSNPCS0rfyOLOiVpWn XtdnoRR3SVkgMhHkZwe5l14aZwukG/8hikIO3nG6Th1Q/gcZpopFybdgS/tkRs2B y0Sav5PL6RH3Gvh5+Mz7NvBZaRUb97tSYYjh4tb48WcDZC7phRepOpU4TjJZAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUtK2S1dDnCmBSxXNY6NWcVX3SuUowHwYDVR0j BBgwFoAUpIKQt7RENULQRg/Um98bRENgroYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg4NDcyNzI1NDQ4Mjk0Ny8wL0E0ODI5MEI3QjQ0NDM1NDJEMDQ2MEZENDlCREYx QjQ0NDM2MEFFODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0MzYwQUU4Ni5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODg0NzI3MjU0NDgyOTQ3LzAvMzIzMDMzMmUzOTM5 MmUzMjMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzODMzMzQzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMtjFTANBgkqhkiG9w0BAQsFAAOCAQEAD74PWgneBtFR+T2YopPyyQ7zds+n oGlOpYe8AiOWOIFpkL3RF/ps/JZmNKGwxV2kQ25CjrvkMi3E1kdqQX+29pfzV8Mc r9frJW3szxmVJpPTZC/uguE5uxOhLWTeZcaHChDd6baT8xMyZ0CM6dQCRrPofk94 qRtamJ9wHrAGpzpSnCDEfp6osViLGTTCx8qek6TUjONaJx2HX6W/rD6LYVeIAC67 j3t3JYp13I1vgQNa3qI5/sShU/Ti+kqaihiC1iJ3zLrWVGCPAW7o1jPo218FjmKA T5ExokykXW4ZT8tS8w/VBLvfcNPP0WDKeDC1l4TRZjGSqrJ3ErcdU1eCUQ== -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:15 2026 by rpki-client