$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e32382e302f32342d3234203d3e203338333435.roa File: 3230332e39392e32382e302f32342d3234203d3e203338333435.roa (raw, json) Hash identifier: 9JU9+A0dTLN6zB7B41CLR1fqu9C40ySKOokVq08oL9M= Subject key identifier: 34:D2:78:59:8A:D1:85:CD:1C:4C:C5:F2:8E:D5:26:BA:85:93:87:ED Certificate issuer: /CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Certificate serial: 6A464C1CD51DDC0B44E2E3E0CD3F797281DB9D00 Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e32382e302f32342d3234203d3e203338333435.roa Signing time: Fri 10 Apr 2026 08:05:14 +0000 ROA not before: Fri 10 Apr 2026 08:00:14 +0000 ROA not after: Fri 09 Apr 2027 08:05:14 +0000 asID: 38345 IP address blocks: 203.99.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:46:4c:1c:d5:1d:dc:0b:44:e2:e3:e0:cd:3f:79:72:81:db:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Validity Not Before: Apr 10 08:00:14 2026 GMT Not After : Apr 9 08:05:14 2027 GMT Subject: CN=34D278598AD185CD1C4CC5F28ED526BA859387ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:69:11:8d:36:f7:2c:75:69:0e:b2:11:81:77: 9d:e5:b0:93:38:1a:cf:58:ef:46:36:51:df:d5:2d: 71:65:7b:46:7f:24:29:ee:d5:be:48:48:5e:ea:89: 56:15:15:29:b4:e5:c5:b2:9d:31:78:e1:d8:92:fc: 73:e1:dc:b9:32:12:60:6a:0a:e6:aa:bf:d1:2c:8b: 3c:05:5f:e7:81:8e:c0:f7:a0:95:a0:29:00:f0:9b: 24:fa:3b:18:40:18:1a:d2:99:53:82:99:a0:1c:ce: 60:fe:e7:a5:df:76:33:7b:00:81:53:79:b9:ca:84: f2:39:ab:75:44:c0:a3:91:31:53:c9:c4:22:41:57: 80:86:53:d7:b3:ea:51:fb:0e:aa:74:28:e9:4f:de: 88:c3:58:41:83:15:a0:ac:55:23:c7:1c:66:90:f6: bc:27:03:76:ff:93:87:31:44:ab:62:0b:5b:57:9e: d4:73:8a:4a:bb:69:b7:5e:af:7d:74:3a:6a:2a:f5: ba:8f:17:22:c9:24:51:88:c9:97:f6:7d:51:3a:7e: 23:c9:9e:b9:12:df:5a:98:85:b0:84:ff:5b:d2:10: 5a:39:0b:6c:c0:bb:dc:b1:7d:bc:75:6b:42:2c:37: e0:d3:57:38:d4:63:c2:55:05:58:27:71:a0:5d:37: d4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D2:78:59:8A:D1:85:CD:1C:4C:C5:F2:8E:D5:26:BA:85:93:87:ED X509v3 Authority Key Identifier: keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e32382e302f32342d3234203d3e203338333435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.99.28.0/24 Signature Algorithm: sha256WithRSAEncryption 97:d5:f4:54:c5:7d:e2:69:b8:24:3b:c4:fc:24:14:fe:d0:61: f7:a6:b1:e5:60:e4:45:61:e7:d5:28:4c:a3:47:5c:87:67:e1: b6:66:c8:4b:c1:98:d6:36:6a:ae:4c:71:55:0c:65:ea:87:3c: 1b:e9:d8:cb:f2:a7:da:02:1f:96:ad:d6:cb:7d:6b:4f:d6:a1: af:b5:71:c0:ef:ce:c7:66:d4:cc:5b:44:a2:48:c6:7b:40:9a: 62:95:83:7a:69:24:56:76:a2:aa:55:e6:1c:a2:71:13:4b:12: 67:a7:7a:a2:ab:33:d1:e6:73:10:e3:ab:ef:64:55:a8:04:58: 0b:ab:f6:2a:da:8f:c2:9e:8a:5b:e6:5a:37:e3:23:c5:b0:33: 1b:eb:c6:e4:a3:a9:af:79:db:aa:8d:61:15:fa:62:7e:69:7e: 15:e5:04:1f:c7:ec:60:49:71:b2:1b:69:af:9e:ca:3d:b8:40: 62:ad:3e:41:d5:5b:3b:02:e5:3f:84:13:9d:57:ca:a9:88:89: 5a:df:22:72:1c:5c:9f:96:2d:43:c1:99:77:34:bd:ee:ef:20: 04:91:bc:fc:a9:64:24:b8:cd:3d:e0:4f:97:aa:37:33:21:0a: a4:75:f1:4f:5e:e9:17:e2:1d:85:7a:c0:1d:38:30:30:96:6c: ea:18:4c:e5 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUakZMHNUd3AtE4uPgzT95coHbnQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0 MzYwQUU4NjAeFw0yNjA0MTAwODAwMTRaFw0yNzA0MDkwODA1MTRaMDMxMTAvBgNV BAMTKDM0RDI3ODU5OEFEMTg1Q0QxQzRDQzVGMjhFRDUyNkJBODU5Mzg3RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZaRGNNvcsdWkOshGBd53lsJM4 Gs9Y70Y2Ud/VLXFle0Z/JCnu1b5ISF7qiVYVFSm05cWynTF44diS/HPh3LkyEmBq Cuaqv9EsizwFX+eBjsD3oJWgKQDwmyT6OxhAGBrSmVOCmaAczmD+56XfdjN7AIFT ebnKhPI5q3VEwKORMVPJxCJBV4CGU9ez6lH7Dqp0KOlP3ojDWEGDFaCsVSPHHGaQ 9rwnA3b/k4cxRKtiC1tXntRzikq7abder310Omoq9bqPFyLJJFGIyZf2fVE6fiPJ nrkS31qYhbCE/1vSEFo5C2zAu9yxfbx1a0IsN+DTVzjUY8JVBVgncaBdN9RjAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUNNJ4WYrRhc0cTMXyjtUmuoWTh+0wHwYDVR0j BBgwFoAUpIKQt7RENULQRg/Um98bRENgroYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg4NDcyNzI1NDQ4Mjk0Ny8wL0E0ODI5MEI3QjQ0NDM1NDJEMDQ2MEZENDlCREYx QjQ0NDM2MEFFODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0MzYwQUU4Ni5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODg0NzI3MjU0NDgyOTQ3LzAvMzIzMDMzMmUzOTM5 MmUzMjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzODMzMzQzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMtjHDANBgkqhkiG9w0BAQsFAAOCAQEAl9X0VMV94mm4JDvE/CQU/tBh96ax 5WDkRWHn1ShMo0dch2fhtmbIS8GY1jZqrkxxVQxl6oc8G+nYy/Kn2gIflq3Wy31r T9ahr7VxwO/Ox2bUzFtEokjGe0CaYpWDemkkVnaiqlXmHKJxE0sSZ6d6oqsz0eZz EOOr72RVqARYC6v2KtqPwp6KW+ZaN+MjxbAzG+vG5KOpr3nbqo1hFfpifml+FeUE H8fsYElxshtpr57KPbhAYq0+QdVbOwLlP4QTnVfKqYiJWt8ichxcn5YtQ8GZdzS9 7u8gBJG8/KlkJLjNPeBPl6o3MyEKpHXxT17pF+IdhXrAHTgwMJZs6hhM5Q== -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:12 2026 by rpki-client