$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3131372e37342e3133362e302f32322d3232203d3e2034383132.roa File: 3131372e37342e3133362e302f32322d3232203d3e2034383132.roa (raw, json) Hash identifier: A3jgln8L7FCj6nrGICiP8rRiROVpbxAhiphG6oEQwXY= Subject key identifier: 35:84:77:4A:8E:16:0E:07:9D:57:4A:58:CB:89:07:15:8C:B2:98:94 Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 63AF962AB94A6BCCF0A10945049584ABC0BD088A Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3131372e37342e3133362e302f32322d3232203d3e2034383132.roa Signing time: Mon 13 Apr 2026 02:50:25 +0000 ROA not before: Mon 13 Apr 2026 02:45:25 +0000 ROA not after: Mon 12 Apr 2027 02:50:25 +0000 asID: 4812 IP address blocks: 117.74.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:af:96:2a:b9:4a:6b:cc:f0:a1:09:45:04:95:84:ab:c0:bd:08:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 02:45:25 2026 GMT Not After : Apr 12 02:50:25 2027 GMT Subject: CN=3584774A8E160E079D574A58CB8907158CB29894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:54:11:d4:32:1a:4e:9a:47:53:05:41:6d:ba: 03:e9:af:79:16:f2:42:de:2e:f1:e5:30:d4:ff:28: a5:6f:fd:3a:5a:81:de:01:0f:4b:0a:23:c3:d2:dc: d5:9f:bb:84:ac:cd:70:3b:41:c7:dd:4d:cf:d8:be: da:fb:4b:dc:6f:a4:05:7a:a6:66:84:27:ef:8d:48: e1:65:73:4e:ee:12:cd:0b:0d:11:9c:d7:5e:6c:7c: 0a:2b:c9:87:b3:80:ab:05:f9:b2:8f:31:20:2e:98: 24:31:80:c0:c5:01:25:c8:12:41:bb:1f:58:bc:42: a3:7b:52:e3:9a:af:2d:da:e8:51:cb:ae:d0:63:d2: 2f:50:e3:d6:3a:92:50:57:c7:38:e4:bd:22:cc:3f: fc:60:50:b5:98:84:54:a0:7a:02:d1:1e:b0:ce:95: a1:32:42:65:44:88:6b:f9:fe:65:6e:91:cd:d6:41: 8f:68:c5:cf:50:8a:8a:84:a2:45:1b:aa:1f:90:19: 8b:b8:61:ae:0d:56:91:6b:43:da:2a:75:fb:9d:13: ad:ba:84:ea:03:0d:50:dd:49:b6:d4:1c:c6:80:f7: aa:02:28:7f:1c:2f:71:01:74:0a:1f:d5:8e:3b:9b: 75:a7:8a:b1:6c:d2:31:3f:8f:22:c5:a9:6b:b3:d0: dc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:84:77:4A:8E:16:0E:07:9D:57:4A:58:CB:89:07:15:8C:B2:98:94 X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3131372e37342e3133362e302f32322d3232203d3e2034383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.74.136.0/22 Signature Algorithm: sha256WithRSAEncryption a5:23:1c:55:a8:29:af:ad:5b:aa:b2:f2:6d:15:e7:f9:0f:e5: 6c:d4:21:e2:42:7b:cd:3d:58:96:ed:b1:e8:0a:59:e8:16:de: 31:d9:2f:e5:1d:96:99:93:04:68:12:37:e4:ee:ec:ce:51:a4: 42:c8:33:8d:e7:78:d3:d4:c7:78:a6:a7:6b:cb:d9:a6:1c:bb: b4:9b:9b:5e:62:3b:30:bb:00:1b:03:43:0c:d7:9e:05:96:9e: 3e:7d:7c:7a:af:f6:3d:4f:51:ad:87:f9:90:02:8c:3c:5a:f5: e9:c4:ac:d3:02:a5:ea:0f:0b:c9:1a:31:dd:32:67:f2:e3:d2: a3:43:af:5f:c1:a9:31:a3:b6:8c:59:08:80:e8:ae:c9:eb:da: 64:90:9e:2d:a0:9e:88:d2:fa:ba:96:6c:53:68:f3:9a:1a:93: ba:39:a3:34:e3:f1:e6:4c:33:65:b0:78:f2:92:ea:2c:4b:31: 9a:93:8e:d5:27:d9:32:73:a1:82:60:76:f9:cb:dd:16:a5:86: 01:c0:60:c4:6a:e6:22:a2:7d:4e:00:59:37:16:bd:de:7d:2a: f9:74:61:25:f3:0f:b2:b8:43:f7:0b:cb:73:a6:53:cf:98:f0: 1b:ee:c9:c5:ff:fe:3b:62:e1:45:39:bd:37:16:ed:5f:60:6f: 40:14:2e:d9 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUY6+WKrlKa8zwoQlFBJWEq8C9CIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMjQ1MjVaFw0yNzA0MTIwMjUwMjVaMDMxMTAvBgNV BAMTKDM1ODQ3NzRBOEUxNjBFMDc5RDU3NEE1OENCODkwNzE1OENCMjk4OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJVBHUMhpOmkdTBUFtugPpr3kW 8kLeLvHlMNT/KKVv/Tpagd4BD0sKI8PS3NWfu4SszXA7QcfdTc/Yvtr7S9xvpAV6 pmaEJ++NSOFlc07uEs0LDRGc115sfAoryYezgKsF+bKPMSAumCQxgMDFASXIEkG7 H1i8QqN7UuOary3a6FHLrtBj0i9Q49Y6klBXxzjkvSLMP/xgULWYhFSgegLRHrDO laEyQmVEiGv5/mVukc3WQY9oxc9QioqEokUbqh+QGYu4Ya4NVpFrQ9oqdfudE626 hOoDDVDdSbbUHMaA96oCKH8cL3EBdAof1Y47m3WnirFs0jE/jyLFqWuz0NyzAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUNYR3So4WDgedV0pYy4kHFYyymJQwHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1ODg3ODgwMDgzMDEzNjM1LzAvMzEzMTM3MmUzNzM0 MmUzMTMzMzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzEzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAnVKiDANBgkqhkiG9w0BAQsFAAOCAQEApSMcVagpr61bqrLybRXn+Q/lbNQh 4kJ7zT1Ylu2x6ApZ6BbeMdkv5R2WmZMEaBI35O7szlGkQsgzjed409THeKana8vZ phy7tJubXmI7MLsAGwNDDNeeBZaePn18eq/2PU9RrYf5kAKMPFr16cSs0wKl6g8L yRox3TJn8uPSo0OvX8GpMaO2jFkIgOiuyevaZJCeLaCeiNL6upZsU2jzmhqTujmj NOPx5kwzZbB48pLqLEsxmpOO1SfZMnOhgmB2+cvdFqWGAcBgxGrmIqJ9TgBZNxa9 3n0q+XRhJfMPsrhD9wvLc6ZTz5jwG+7Jxf/+O2LhRTm9NxbtX2BvQBQu2Q== -----END CERTIFICATE-----Generated at Mon Apr 13 13:53:31 2026 by rpki-client