$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e33302e302f32342d3234203d3e203338333435.roa File: 3230332e39392e33302e302f32342d3234203d3e203338333435.roa (raw, json) Hash identifier: klGHPREMeA+0+awH1Ds2RAxV5GtJQkBZFTYEz22XuJ0= Subject key identifier: E1:4A:38:53:54:9B:21:0A:94:57:DD:97:75:EF:7A:7E:43:ED:B4:1B Certificate issuer: /CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Certificate serial: 344402B5AD356FE4D0B79AF940E438D37FB1A77F Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e33302e302f32342d3234203d3e203338333435.roa Signing time: Fri 10 Apr 2026 07:58:36 +0000 ROA not before: Fri 10 Apr 2026 07:53:36 +0000 ROA not after: Fri 09 Apr 2027 07:58:36 +0000 asID: 38345 IP address blocks: 203.99.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:44:02:b5:ad:35:6f:e4:d0:b7:9a:f9:40:e4:38:d3:7f:b1:a7:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Validity Not Before: Apr 10 07:53:36 2026 GMT Not After : Apr 9 07:58:36 2027 GMT Subject: CN=E14A3853549B210A9457DD9775EF7A7E43EDB41B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f1:1f:10:1f:52:58:bc:e6:6f:e9:e1:f0:25: 1f:53:c3:28:c1:e1:a9:88:18:63:6d:71:35:5e:31: a2:e0:3f:ba:b8:45:fe:37:20:af:e8:0c:e0:2b:e4: c4:7f:7e:2e:00:2e:07:e1:9e:5f:29:51:6d:94:0d: 07:df:4d:c9:1e:eb:b5:80:cd:e3:58:42:1c:bd:fb: 94:43:e8:85:11:02:d2:b2:de:0a:4f:87:aa:b9:df: 56:c9:d9:d6:23:22:fe:10:6c:43:05:81:0a:4b:41: 9b:94:91:d0:1f:3e:35:bd:41:44:85:f3:b7:f6:f3: db:02:22:68:4d:c9:61:c6:a6:37:7b:1a:2e:9b:b5: 72:0a:7f:bb:7c:bf:12:06:ab:a6:27:f0:b3:98:a5: ed:77:48:42:f6:bc:14:84:88:ef:2e:b4:fc:1a:26: 5a:1d:a3:02:77:13:e8:ee:5f:2e:64:66:c9:3a:c4: 3c:3e:08:b3:ef:3f:1a:3a:32:89:ff:fc:ee:7a:99: 1b:a0:37:fc:60:1c:50:51:92:a3:52:e5:16:c6:f5: e4:77:06:e4:5c:c2:ef:31:b2:39:bd:aa:d2:a5:11: db:15:2d:f1:d5:78:49:9b:fe:25:2e:21:f7:e9:ea: bd:14:09:be:79:3e:df:44:12:73:30:a6:f2:29:7a: 02:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4A:38:53:54:9B:21:0A:94:57:DD:97:75:EF:7A:7E:43:ED:B4:1B X509v3 Authority Key Identifier: keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e33302e302f32342d3234203d3e203338333435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.99.30.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:0d:6d:3d:25:83:55:be:a0:a8:1e:a7:3b:9b:96:08:45:c1: 8b:4b:98:4b:c6:2c:28:10:38:43:f8:63:e1:c2:64:d3:cd:07: 71:70:cd:bc:b4:e7:59:bb:47:d1:7a:26:08:c1:bb:d9:47:38: 56:d3:2c:62:75:c4:d6:af:e1:61:f9:f8:bb:c3:45:11:5d:3f: 6e:6a:19:cf:f5:fa:73:db:a9:ef:b4:9f:6d:83:d7:ff:e6:87: 5f:64:df:f6:4b:11:94:63:e7:57:51:d1:ba:e6:2c:30:e5:ff: 3c:87:c7:2e:40:c6:b3:21:30:1b:9a:6e:56:06:c8:cb:1b:7f: 28:87:ff:67:1c:06:e1:bb:c5:03:03:07:92:c1:d6:d9:8b:00: aa:bc:3c:7c:00:59:6a:bf:c6:e5:55:0a:eb:a9:d5:50:a7:6c: 07:d9:24:d5:40:2e:c3:87:dd:9f:5c:fd:b0:b0:49:69:64:57: fa:d0:62:db:1f:ed:73:b1:d1:20:66:a4:c3:ec:84:6e:74:ff: cd:27:d5:4a:fc:49:3e:37:98:19:22:dd:4b:39:92:bd:01:7e: 51:34:a4:bf:5c:4e:e2:10:ae:25:ea:58:03:05:66:63:db:31: 7b:9d:5a:d0:7d:ae:0e:c8:e9:9a:04:a0:01:13:4d:8c:46:fd: a5:32:59:46 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUNEQCta01b+TQt5r5QOQ403+xp38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0 MzYwQUU4NjAeFw0yNjA0MTAwNzUzMzZaFw0yNzA0MDkwNzU4MzZaMDMxMTAvBgNV BAMTKEUxNEEzODUzNTQ5QjIxMEE5NDU3REQ5Nzc1RUY3QTdFNDNFREI0MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI8R8QH1JYvOZv6eHwJR9TwyjB 4amIGGNtcTVeMaLgP7q4Rf43IK/oDOAr5MR/fi4ALgfhnl8pUW2UDQffTcke67WA zeNYQhy9+5RD6IURAtKy3gpPh6q531bJ2dYjIv4QbEMFgQpLQZuUkdAfPjW9QUSF 87f289sCImhNyWHGpjd7Gi6btXIKf7t8vxIGq6Yn8LOYpe13SEL2vBSEiO8utPwa JlodowJ3E+juXy5kZsk6xDw+CLPvPxo6Mon//O56mRugN/xgHFBRkqNS5RbG9eR3 BuRcwu8xsjm9qtKlEdsVLfHVeEmb/iUuIffp6r0UCb55Pt9EEnMwpvIpegLvAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU4Uo4U1SbIQqUV92Xde96fkPttBswHwYDVR0j BBgwFoAUpIKQt7RENULQRg/Um98bRENgroYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg4NDcyNzI1NDQ4Mjk0Ny8wL0E0ODI5MEI3QjQ0NDM1NDJEMDQ2MEZENDlCREYx QjQ0NDM2MEFFODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0MzYwQUU4Ni5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODg0NzI3MjU0NDgyOTQ3LzAvMzIzMDMzMmUzOTM5 MmUzMzMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzODMzMzQzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMtjHjANBgkqhkiG9w0BAQsFAAOCAQEADg1tPSWDVb6gqB6nO5uWCEXBi0uY S8YsKBA4Q/hj4cJk080HcXDNvLTnWbtH0XomCMG72Uc4VtMsYnXE1q/hYfn4u8NF EV0/bmoZz/X6c9up77SfbYPX/+aHX2Tf9ksRlGPnV1HRuuYsMOX/PIfHLkDGsyEw G5puVgbIyxt/KIf/ZxwG4bvFAwMHksHW2YsAqrw8fABZar/G5VUK66nVUKdsB9kk 1UAuw4fdn1z9sLBJaWRX+tBi2x/tc7HRIGakw+yEbnT/zSfVSvxJPjeYGSLdSzmS vQF+UTSkv1xO4hCuJepYAwVmY9sxe51a0H2uDsjpmgSgARNNjEb9pTJZRg== -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:18 2026 by rpki-client