$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e32342e302f32342d3234203d3e203338333435.roa File: 3230332e39392e32342e302f32342d3234203d3e203338333435.roa (raw, json) Hash identifier: t1SrNS7yXRoOvGYf44kJQbhLAmE5etkCcGU6oUm6Cfg= Subject key identifier: 29:0C:0C:45:25:B2:70:E0:F3:67:1C:C5:AC:0B:03:18:2F:A6:0B:2C Certificate issuer: /CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Certificate serial: 38025CFF370A70DF330CCC2FED99199D4C852A46 Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e32342e302f32342d3234203d3e203338333435.roa Signing time: Fri 10 Apr 2026 08:05:14 +0000 ROA not before: Fri 10 Apr 2026 08:00:14 +0000 ROA not after: Fri 09 Apr 2027 08:05:14 +0000 asID: 38345 IP address blocks: 203.99.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:02:5c:ff:37:0a:70:df:33:0c:cc:2f:ed:99:19:9d:4c:85:2a:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Validity Not Before: Apr 10 08:00:14 2026 GMT Not After : Apr 9 08:05:14 2027 GMT Subject: CN=290C0C4525B270E0F3671CC5AC0B03182FA60B2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a1:d8:23:c5:f8:15:39:9a:09:16:ce:8e:6e: 2b:e2:06:7c:1d:65:64:34:11:7f:7d:b0:bb:b8:3a: b8:5a:7a:60:e4:55:59:63:f6:70:26:be:c3:4c:ab: d7:04:09:33:e6:b2:17:31:8b:d3:d7:50:f3:62:d0: 17:bb:81:c4:be:a6:90:a4:5b:7f:c5:ca:f5:91:de: ae:38:a2:03:87:b5:3b:92:58:81:f7:1f:a5:8a:6d: 16:2b:84:2c:35:90:e6:d9:ae:1b:1f:12:a4:ba:33: 14:99:f5:77:2a:e8:58:13:73:c0:29:d9:d4:22:ac: 9f:47:a4:db:d7:8c:1d:5b:1e:d7:63:35:9e:6c:a1: f0:19:de:7f:b5:51:b3:41:3d:7e:a8:e4:fb:96:b7: 5d:10:68:21:dc:a8:38:f4:38:21:72:cf:ae:69:9c: 31:ec:bc:12:ca:6a:3d:75:3e:d6:5f:3a:5f:87:d5: 4b:6b:f9:1e:30:cb:6c:94:62:75:0e:0f:a6:bf:cd: 48:c9:cb:3d:ce:90:3e:e5:c1:6f:fd:a1:0a:8b:b6: 9b:b8:37:11:2b:9a:14:8d:11:a3:5d:f2:c0:0a:84: 77:b2:67:ee:18:97:8c:fe:9a:3d:16:11:30:6e:b2: 78:b1:94:33:f5:d9:d4:48:63:39:fe:0a:fe:b4:ec: 82:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0C:0C:45:25:B2:70:E0:F3:67:1C:C5:AC:0B:03:18:2F:A6:0B:2C X509v3 Authority Key Identifier: keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e32342e302f32342d3234203d3e203338333435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.99.24.0/24 Signature Algorithm: sha256WithRSAEncryption 31:86:7c:8e:ff:73:e4:9e:fa:ca:b3:5e:fb:ff:99:29:54:a7: 24:a1:8f:d8:67:46:8d:7a:94:88:df:bb:f8:f8:c8:7b:b7:23: bf:91:4c:a1:84:df:f3:b4:fd:a5:f4:b2:b1:62:e8:0d:02:eb: 41:14:cc:f5:ed:c2:d5:6a:65:fc:42:69:d1:4b:1b:04:90:ef: d7:38:81:61:42:b8:5a:2a:62:1b:3d:4f:51:b3:27:23:7f:59: 66:ba:72:2e:18:8c:59:21:cf:cc:d8:1f:61:98:34:22:89:30: 76:f5:62:46:84:fa:14:13:f4:5f:f8:1d:5f:f3:3c:4c:d7:d5: 44:8e:40:f1:55:44:6a:72:45:b8:bc:36:cb:50:9b:1b:01:42: 47:9c:1e:7c:f9:d9:e5:9b:5d:57:09:ab:4a:f2:cf:3a:c6:37: 3f:ae:7d:f2:40:92:06:91:e7:c4:dc:b4:23:f3:c6:8f:79:1b: eb:28:40:76:4a:b0:a3:7b:a1:0f:54:b9:46:46:ef:7c:1c:49: bd:15:9a:b2:1f:63:76:8a:2b:91:f5:27:5d:10:45:9f:78:c9: 8b:2a:cc:93:cd:c8:fe:5b:35:9f:23:46:1b:21:b2:35:e3:0b: 7c:b3:5c:15:24:e9:de:ba:9f:1e:ec:cc:e3:58:3d:12:0e:9f: 57:39:2c:bd -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUOAJc/zcKcN8zDMwv7ZkZnUyFKkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0 MzYwQUU4NjAeFw0yNjA0MTAwODAwMTRaFw0yNzA0MDkwODA1MTRaMDMxMTAvBgNV BAMTKDI5MEMwQzQ1MjVCMjcwRTBGMzY3MUNDNUFDMEIwMzE4MkZBNjBCMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkodgjxfgVOZoJFs6ObiviBnwd ZWQ0EX99sLu4OrhaemDkVVlj9nAmvsNMq9cECTPmshcxi9PXUPNi0Be7gcS+ppCk W3/FyvWR3q44ogOHtTuSWIH3H6WKbRYrhCw1kObZrhsfEqS6MxSZ9Xcq6FgTc8Ap 2dQirJ9HpNvXjB1bHtdjNZ5sofAZ3n+1UbNBPX6o5PuWt10QaCHcqDj0OCFyz65p nDHsvBLKaj11PtZfOl+H1Utr+R4wy2yUYnUOD6a/zUjJyz3OkD7lwW/9oQqLtpu4 NxErmhSNEaNd8sAKhHeyZ+4Yl4z+mj0WETBusnixlDP12dRIYzn+Cv607IKnAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUKQwMRSWycODzZxzFrAsDGC+mCywwHwYDVR0j BBgwFoAUpIKQt7RENULQRg/Um98bRENgroYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg4NDcyNzI1NDQ4Mjk0Ny8wL0E0ODI5MEI3QjQ0NDM1NDJEMDQ2MEZENDlCREYx QjQ0NDM2MEFFODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0MzYwQUU4Ni5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODg0NzI3MjU0NDgyOTQ3LzAvMzIzMDMzMmUzOTM5 MmUzMjM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzODMzMzQzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMtjGDANBgkqhkiG9w0BAQsFAAOCAQEAMYZ8jv9z5J76yrNe+/+ZKVSnJKGP 2GdGjXqUiN+7+PjIe7cjv5FMoYTf87T9pfSysWLoDQLrQRTM9e3C1Wpl/EJp0Usb BJDv1ziBYUK4WipiGz1PUbMnI39ZZrpyLhiMWSHPzNgfYZg0IokwdvViRoT6FBP0 X/gdX/M8TNfVRI5A8VVEanJFuLw2y1CbGwFCR5wefPnZ5ZtdVwmrSvLPOsY3P659 8kCSBpHnxNy0I/PGj3kb6yhAdkqwo3uhD1S5RkbvfBxJvRWash9jdoorkfUnXRBF n3jJiyrMk83I/ls1nyNGGyGyNeMLfLNcFSTp3rqfHuzM41g9Eg6fVzksvQ== -----END CERTIFICATE-----Generated at Mon Apr 13 12:23:27 2026 by rpki-client