$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e32392e302f32342d3234203d3e203338333435.roa File: 3230332e39392e32392e302f32342d3234203d3e203338333435.roa (raw, json) Hash identifier: 3aHRX5QY7hbP54IwVFh3/sRdI7n9w+k1+JFZyASOJsc= Subject key identifier: C6:E3:CA:23:6F:93:A4:F8:50:13:58:88:6B:7B:95:05:90:2B:70:00 Certificate issuer: /CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Certificate serial: 12E702ADB3B90D445A1DA02AFCF9E08827967FB6 Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e32392e302f32342d3234203d3e203338333435.roa Signing time: Fri 10 Apr 2026 08:05:15 +0000 ROA not before: Fri 10 Apr 2026 08:00:15 +0000 ROA not after: Fri 09 Apr 2027 08:05:15 +0000 asID: 38345 IP address blocks: 203.99.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e7:02:ad:b3:b9:0d:44:5a:1d:a0:2a:fc:f9:e0:88:27:96:7f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Validity Not Before: Apr 10 08:00:15 2026 GMT Not After : Apr 9 08:05:15 2027 GMT Subject: CN=C6E3CA236F93A4F8501358886B7B9505902B7000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b6:4c:8d:24:81:d2:82:cf:a3:5a:71:3c:73: f4:41:e9:b6:b4:ae:b6:fa:76:43:4e:e2:dc:d9:cc: bc:1e:73:10:aa:1c:73:8c:0d:9d:18:f1:73:f4:d3: b4:50:da:43:7d:12:b9:49:2b:b4:cd:a5:5e:ed:70: 9d:51:1d:b8:5d:a1:21:82:14:2a:f4:77:2b:69:49: 2b:56:92:99:05:5b:87:b1:d9:4e:3f:00:d4:48:08: 38:fb:4c:1c:87:cf:71:30:65:ea:c9:8c:b7:a7:40: 92:c7:85:29:16:68:b9:45:0a:5a:6a:c3:82:6b:ab: d6:05:32:89:9e:b6:31:a6:97:e3:22:0e:3a:fc:80: 71:b4:ea:fe:21:35:ee:e1:53:a9:1d:25:18:92:c4: cd:45:5c:36:51:f4:56:3f:fc:b4:2e:6b:9a:b5:23: b8:cb:54:97:74:9e:06:5c:99:8b:4f:6b:24:6d:93: d0:4f:5e:8f:8f:fc:5b:6f:47:e5:d0:a4:6b:4c:28: d8:e3:4d:f1:08:e7:f7:d9:b6:78:f3:06:b3:6b:67: 3b:76:db:af:5e:a5:fc:f4:d9:4b:9b:94:17:1c:16: 9b:54:65:61:18:8c:95:ef:64:81:99:4f:51:6a:8f: 44:ca:91:9b:e6:10:a6:45:e7:83:eb:12:29:5d:7b: f3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E3:CA:23:6F:93:A4:F8:50:13:58:88:6B:7B:95:05:90:2B:70:00 X509v3 Authority Key Identifier: keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e32392e302f32342d3234203d3e203338333435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.99.29.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:80:c7:e3:34:f8:24:4e:c7:ad:84:f1:ee:99:63:be:88:b5: 4a:d2:a4:e9:54:d0:69:ca:d4:4c:2f:47:f0:c3:73:6a:44:19: a1:ed:99:54:1f:14:56:fb:ee:23:93:63:b9:ca:55:22:7f:c4: 6a:bc:2c:91:5c:3d:fa:2d:b3:a8:a8:5f:66:3d:c0:34:22:1d: 19:9c:3e:51:5d:77:c7:30:b9:57:d0:e9:ec:61:b0:26:20:21: 8b:c2:43:93:ef:db:3b:d4:33:16:31:87:a1:e7:46:6b:a6:75: 9b:e2:25:cb:48:7d:d4:50:3a:7d:50:53:f9:f6:14:ce:18:14: 0e:e7:f3:8f:b3:01:04:92:58:d9:7e:7c:86:70:82:ba:96:31: c0:97:26:44:95:78:e6:1d:8a:bd:19:ac:a5:d3:31:4e:dd:16: 64:ef:dc:91:0b:44:45:a1:46:52:75:35:ee:ce:f2:ea:82:d8: 91:03:ab:9a:a2:88:a7:18:1c:bd:ce:8b:1e:18:58:05:81:91: 34:80:01:5a:f6:0c:3b:71:3a:fe:7a:bd:6e:1c:ac:68:30:58: 58:4a:ca:db:04:77:12:e4:de:eb:ab:6e:7e:6f:31:7e:d2:98: 87:ec:04:61:48:95:dc:c5:6d:55:33:5b:05:68:f7:3c:e9:db: 3b:19:5d:23 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUEucCrbO5DURaHaAq/PngiCeWf7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0 MzYwQUU4NjAeFw0yNjA0MTAwODAwMTVaFw0yNzA0MDkwODA1MTVaMDMxMTAvBgNV BAMTKEM2RTNDQTIzNkY5M0E0Rjg1MDEzNTg4ODZCN0I5NTA1OTAyQjcwMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPtkyNJIHSgs+jWnE8c/RB6ba0 rrb6dkNO4tzZzLwecxCqHHOMDZ0Y8XP007RQ2kN9ErlJK7TNpV7tcJ1RHbhdoSGC FCr0dytpSStWkpkFW4ex2U4/ANRICDj7TByHz3EwZerJjLenQJLHhSkWaLlFClpq w4Jrq9YFMometjGml+MiDjr8gHG06v4hNe7hU6kdJRiSxM1FXDZR9FY//LQua5q1 I7jLVJd0ngZcmYtPayRtk9BPXo+P/FtvR+XQpGtMKNjjTfEI5/fZtnjzBrNrZzt2 269epfz02UublBccFptUZWEYjJXvZIGZT1Fqj0TKkZvmEKZF54PrEilde/NRAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUxuPKI2+TpPhQE1iIa3uVBZArcAAwHwYDVR0j BBgwFoAUpIKQt7RENULQRg/Um98bRENgroYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg4NDcyNzI1NDQ4Mjk0Ny8wL0E0ODI5MEI3QjQ0NDM1NDJEMDQ2MEZENDlCREYx QjQ0NDM2MEFFODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0MzYwQUU4Ni5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODg0NzI3MjU0NDgyOTQ3LzAvMzIzMDMzMmUzOTM5 MmUzMjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzODMzMzQzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMtjHTANBgkqhkiG9w0BAQsFAAOCAQEAfoDH4zT4JE7HrYTx7pljvoi1StKk 6VTQacrUTC9H8MNzakQZoe2ZVB8UVvvuI5NjucpVIn/EarwskVw9+i2zqKhfZj3A NCIdGZw+UV13xzC5V9Dp7GGwJiAhi8JDk+/bO9QzFjGHoedGa6Z1m+Ily0h91FA6 fVBT+fYUzhgUDufzj7MBBJJY2X58hnCCupYxwJcmRJV45h2KvRmspdMxTt0WZO/c kQtERaFGUnU17s7y6oLYkQOrmqKIpxgcvc6LHhhYBYGRNIABWvYMO3E6/nq9bhys aDBYWErK2wR3EuTe66tufm8xftKYh+wEYUiV3MVtVTNbBWj3POnbOxldIw== -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:12 2026 by rpki-client