$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230322e3133362e3230382e302f32322d3232203d3e203137363231.roa File: 3230322e3133362e3230382e302f32322d3232203d3e203137363231.roa (raw, json) Hash identifier: Z9J0afLCLJZwi8MldJRUz1J6biRfJ6fEP/d2kNLGKC4= Subject key identifier: 5F:86:80:FF:39:E7:35:80:C5:B6:79:20:F4:6B:8F:2A:FD:91:7E:CF Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 62CB2A7FFE20343219E357E23B7D4762A505BE6B Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230322e3133362e3230382e302f32322d3232203d3e203137363231.roa Signing time: Mon 13 Apr 2026 02:50:26 +0000 ROA not before: Mon 13 Apr 2026 02:45:26 +0000 ROA not after: Mon 12 Apr 2027 02:50:26 +0000 asID: 17621 IP address blocks: 202.136.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:cb:2a:7f:fe:20:34:32:19:e3:57:e2:3b:7d:47:62:a5:05:be:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 02:45:26 2026 GMT Not After : Apr 12 02:50:26 2027 GMT Subject: CN=5F8680FF39E73580C5B67920F46B8F2AFD917ECF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6d:6d:2f:84:65:fd:88:fe:d8:f7:1e:21:7b: 26:2f:e3:a6:d8:9d:aa:d5:d4:57:df:2f:1e:10:72: bf:9c:b3:f7:4d:cc:ca:39:63:50:f8:7f:4d:5f:01: 4c:58:6a:ef:54:24:43:aa:df:4d:08:1b:95:3e:ae: 71:16:73:27:ae:cb:67:56:90:40:08:65:c2:a6:37: e6:c4:07:31:8a:57:8c:e1:d4:4b:32:2e:f5:95:79: 7c:3f:e0:2b:9b:b5:01:e0:9e:e2:e5:c0:16:b0:6e: bd:81:d7:17:b8:f1:a9:05:bc:f4:15:af:36:32:25: 4a:b6:f1:35:84:dd:58:b4:11:65:89:f4:51:17:9b: 1c:f5:27:8e:b4:54:88:ff:77:9d:1d:a2:87:22:f7: 5f:79:90:21:4e:5c:59:81:9d:91:23:2e:41:12:61: 65:ec:d7:2f:c9:05:0f:bb:74:80:9a:71:a2:27:f5: 0d:fa:3e:98:9d:e5:24:a9:34:a2:6b:3f:4a:c8:f3: a7:ec:3f:be:89:90:9b:34:0b:e0:95:52:5a:ff:70: 52:f0:5f:13:bb:04:65:bd:96:09:76:f1:a4:dc:b1: c6:f2:46:37:93:53:10:8b:09:60:7c:e8:e1:64:b9: fe:c7:7f:c7:f0:20:12:9a:20:2b:33:0d:ff:24:ad: a4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:86:80:FF:39:E7:35:80:C5:B6:79:20:F4:6B:8F:2A:FD:91:7E:CF X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230322e3133362e3230382e302f32322d3232203d3e203137363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.136.208.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:2e:7a:2b:a4:97:89:dc:fc:17:6a:96:52:c7:bf:6d:ff:93: d1:15:89:7a:83:60:50:02:7e:40:61:67:65:e2:90:2a:a4:0d: ff:6a:7b:ac:d6:69:aa:54:22:8d:af:ee:f2:d4:02:01:4a:af: 50:a1:46:34:4d:b5:c5:fa:9a:29:3f:82:4f:bd:9e:e9:99:9a: 96:45:65:2c:91:6d:08:83:a0:29:c2:68:fb:fe:db:32:72:fa: 4b:21:e2:53:38:e4:da:36:3c:dd:ee:15:87:39:96:d1:a7:55: fc:2d:c6:5d:fb:89:99:54:9f:c9:e9:f1:a2:e3:eb:4c:57:b2: 2a:af:b6:6d:9f:3a:b4:d4:b8:d5:2f:73:1d:db:8b:d0:e3:b4: 7e:b5:7e:61:15:7d:dc:9d:71:56:d2:40:4c:df:5b:98:68:14: 02:d3:b1:52:73:2f:f8:da:07:9c:d4:46:e4:3e:db:b3:45:59: e6:22:15:e4:69:af:74:93:5c:60:30:86:85:c5:1e:03:b4:74: b6:fd:81:0c:21:7a:1c:2f:80:4d:77:f6:8b:89:c5:dc:95:68: d9:99:a2:e1:6d:0f:4e:11:06:3e:eb:24:33:64:f8:ce:a4:23: 54:31:2c:0d:f0:45:48:60:d5:a1:47:28:fe:f3:d8:13:42:38: a4:a1:0f:28 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUYssqf/4gNDIZ41fiO31HYqUFvmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMjQ1MjZaFw0yNzA0MTIwMjUwMjZaMDMxMTAvBgNV BAMTKDVGODY4MEZGMzlFNzM1ODBDNUI2NzkyMEY0NkI4RjJBRkQ5MTdFQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDbW0vhGX9iP7Y9x4heyYv46bY narV1FffLx4Qcr+cs/dNzMo5Y1D4f01fAUxYau9UJEOq300IG5U+rnEWcyeuy2dW kEAIZcKmN+bEBzGKV4zh1EsyLvWVeXw/4CubtQHgnuLlwBawbr2B1xe48akFvPQV rzYyJUq28TWE3Vi0EWWJ9FEXmxz1J460VIj/d50dooci9195kCFOXFmBnZEjLkES YWXs1y/JBQ+7dICacaIn9Q36Ppid5SSpNKJrP0rI86fsP76JkJs0C+CVUlr/cFLw XxO7BGW9lgl28aTcscbyRjeTUxCLCWB86OFkuf7Hf8fwIBKaICszDf8kraQBAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUX4aA/znnNYDFtnkg9GuPKv2Rfs8wHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTU4ODc4ODAwODMwMTM2MzUvMC8zMjMwMzIyZTMx MzMzNjJlMzIzMDM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzNzM2MzIzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAsqI0DANBgkqhkiG9w0BAQsFAAOCAQEAfi56K6SXidz8F2qWUse/ bf+T0RWJeoNgUAJ+QGFnZeKQKqQN/2p7rNZpqlQija/u8tQCAUqvUKFGNE21xfqa KT+CT72e6ZmalkVlLJFtCIOgKcJo+/7bMnL6SyHiUzjk2jY83e4VhzmW0adV/C3G XfuJmVSfyenxouPrTFeyKq+2bZ86tNS41S9zHduL0OO0frV+YRV93J1xVtJATN9b mGgUAtOxUnMv+NoHnNRG5D7bs0VZ5iIV5GmvdJNcYDCGhcUeA7R0tv2BDCF6HC+A TXf2i4nF3JVo2Zmi4W0PThEGPuskM2T4zqQjVDEsDfBFSGDVoUco/vPYE0I4pKEP KA== -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:26 2026 by rpki-client