$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3131372e37342e3132382e302f32312d3231203d3e2034383132.roa File: 3131372e37342e3132382e302f32312d3231203d3e2034383132.roa (raw, json) Hash identifier: 7u1P3VkjpxSppg+34NH/Zm1EsjCmHFLZUKt9OAhN12I= Subject key identifier: C4:81:65:2B:B1:3C:34:CE:29:67:46:8A:56:10:12:68:B4:B1:B7:D5 Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 48551C57D9C6B12021DCC8ACEDFA37A1DB254754 Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3131372e37342e3132382e302f32312d3231203d3e2034383132.roa Signing time: Mon 13 Apr 2026 02:50:25 +0000 ROA not before: Mon 13 Apr 2026 02:45:25 +0000 ROA not after: Mon 12 Apr 2027 02:50:25 +0000 asID: 4812 IP address blocks: 117.74.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:55:1c:57:d9:c6:b1:20:21:dc:c8:ac:ed:fa:37:a1:db:25:47:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 02:45:25 2026 GMT Not After : Apr 12 02:50:25 2027 GMT Subject: CN=C481652BB13C34CE2967468A56101268B4B1B7D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:83:1a:0c:07:34:a8:58:f5:c3:5c:d5:70: 21:23:07:63:fd:0f:65:6a:dc:b4:6e:52:53:85:54: ac:3e:fd:24:5e:86:6b:ca:a1:ae:06:79:a7:4b:65: a9:8b:95:87:2c:8f:3c:6b:5e:af:58:b8:0d:0f:ec: 5a:c0:96:fe:ee:f8:69:c6:5b:51:95:01:0d:71:0c: 1e:82:09:0f:ef:b5:ca:62:32:ba:24:b9:2a:43:6a: c7:1a:da:72:49:f8:0d:b1:1b:17:75:12:3f:00:3b: 39:78:fa:ea:5b:bd:e1:51:f6:e4:68:8f:56:fc:b0: a3:26:d9:e3:68:fd:32:d6:2c:19:c0:71:7e:96:f2: 49:81:6c:9e:e0:70:93:aa:38:21:d7:f5:b0:1d:00: a6:18:00:87:8f:93:92:b6:66:0b:11:8f:77:f4:c3: 17:91:20:46:b9:3d:3b:e5:c6:22:b7:8c:6f:1b:88: 2a:26:39:4b:0e:5c:97:53:eb:d4:a9:63:f6:06:77: de:8e:c7:02:8d:cc:ba:4a:7d:49:f5:88:98:2f:ef: fd:4e:1a:7f:03:26:d0:19:ae:f8:5a:1b:0f:4a:00: 10:ba:39:96:6e:cc:5e:45:01:6d:14:8c:d3:ff:2b: 41:5b:e6:2a:d2:c1:9d:f3:a2:f3:c7:16:9f:25:3b: e9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:81:65:2B:B1:3C:34:CE:29:67:46:8A:56:10:12:68:B4:B1:B7:D5 X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3131372e37342e3132382e302f32312d3231203d3e2034383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.74.128.0/21 Signature Algorithm: sha256WithRSAEncryption 2c:f9:83:d3:5b:56:2a:73:17:a5:de:96:b8:af:cc:a9:a0:f4: f4:59:6c:78:bd:de:6d:60:14:dd:00:d6:2b:bc:42:f2:f2:48: e5:35:54:ba:3c:9e:67:03:c9:84:8a:3d:b6:80:42:da:18:2f: 6d:d1:6e:ab:8d:03:ca:34:13:be:ee:3f:af:bc:02:9b:2f:0f: 30:65:5f:82:7a:b4:6f:07:88:f1:7b:09:06:98:0c:7f:0d:95: 81:b2:50:0d:a3:2e:66:dc:61:27:8e:4c:0f:af:b0:0b:e6:24: 94:12:b4:c9:ba:11:e1:f7:53:7e:c0:c3:1d:6e:c8:1f:c7:a7: f2:91:94:7c:41:84:d1:93:a3:28:d6:09:5b:f4:8e:32:0d:84: cb:47:12:08:01:fd:e5:95:1b:25:dd:a3:1c:ea:06:e3:7d:b8: 4d:16:f1:00:ad:5e:6d:86:25:07:b2:e3:91:0c:be:6b:4b:e0: ea:01:f2:ef:88:48:e3:e3:72:5c:5e:9b:9f:5a:be:a1:c4:3d: f2:de:99:9f:af:6e:2d:77:25:2c:49:5e:06:02:96:21:30:7a: d7:69:44:ec:19:06:8a:9c:7b:5d:b3:04:93:11:a0:be:3f:46: c7:f3:eb:dc:f5:bc:0e:37:6e:89:08:2f:0e:91:97:d3:84:2c: 98:1c:d2:d8 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUSFUcV9nGsSAh3Mis7fo3odslR1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMjQ1MjVaFw0yNzA0MTIwMjUwMjVaMDMxMTAvBgNV BAMTKEM0ODE2NTJCQjEzQzM0Q0UyOTY3NDY4QTU2MTAxMjY4QjRCMUI3RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0UoMaDAc0qFj1w1zVcCEjB2P9 D2Vq3LRuUlOFVKw+/SRehmvKoa4GeadLZamLlYcsjzxrXq9YuA0P7FrAlv7u+GnG W1GVAQ1xDB6CCQ/vtcpiMrokuSpDasca2nJJ+A2xGxd1Ej8AOzl4+upbveFR9uRo j1b8sKMm2eNo/TLWLBnAcX6W8kmBbJ7gcJOqOCHX9bAdAKYYAIePk5K2ZgsRj3f0 wxeRIEa5PTvlxiK3jG8biComOUsOXJdT69SpY/YGd96OxwKNzLpKfUn1iJgv7/1O Gn8DJtAZrvhaGw9KABC6OZZuzF5FAW0UjNP/K0Fb5irSwZ3zovPHFp8lO+mVAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUxIFlK7E8NM4pZ0aKVhASaLSxt9UwHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1ODg3ODgwMDgzMDEzNjM1LzAvMzEzMTM3MmUzNzM0 MmUzMTMyMzgyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDM4MzEzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA3VKgDANBgkqhkiG9w0BAQsFAAOCAQEALPmD01tWKnMXpd6WuK/MqaD09Fls eL3ebWAU3QDWK7xC8vJI5TVUujyeZwPJhIo9toBC2hgvbdFuq40DyjQTvu4/r7wC my8PMGVfgnq0bweI8XsJBpgMfw2VgbJQDaMuZtxhJ45MD6+wC+YklBK0yboR4fdT fsDDHW7IH8en8pGUfEGE0ZOjKNYJW/SOMg2Ey0cSCAH95ZUbJd2jHOoG4324TRbx AK1ebYYlB7LjkQy+a0vg6gHy74hI4+NyXF6bn1q+ocQ98t6Zn69uLXclLEleBgKW ITB612lE7BkGipx7XbMEkxGgvj9Gx/Pr3PW8DjduiQgvDpGX04QsmBzS2A== -----END CERTIFICATE-----Generated at Mon Apr 13 13:53:31 2026 by rpki-client