$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230322e3133362e3230382e302f32342d3234203d3e203234313431.roa File: 3230322e3133362e3230382e302f32342d3234203d3e203234313431.roa (raw, json) Hash identifier: IjbVnoWiWFPWKrEqj8jf4fiDbEpb/l0gTsF1NTgCbq0= Subject key identifier: 6D:04:DD:67:4E:1E:EE:2C:55:EE:9A:F0:3C:C6:45:62:2F:02:F6:8E Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 137181D55B6FCBCA7870310C6339CF6BA5F50C3B Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230322e3133362e3230382e302f32342d3234203d3e203234313431.roa Signing time: Mon 13 Apr 2026 02:52:25 +0000 ROA not before: Mon 13 Apr 2026 02:47:25 +0000 ROA not after: Mon 12 Apr 2027 02:52:25 +0000 asID: 24141 IP address blocks: 202.136.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:71:81:d5:5b:6f:cb:ca:78:70:31:0c:63:39:cf:6b:a5:f5:0c:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 02:47:25 2026 GMT Not After : Apr 12 02:52:25 2027 GMT Subject: CN=6D04DD674E1EEE2C55EE9AF03CC645622F02F68E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6e:7f:0d:7e:24:85:d2:b3:56:a8:a8:7f:c4: ce:85:8b:18:03:9d:3a:c7:55:00:ad:33:bc:cc:90: ee:4e:0b:90:b8:7e:a2:0e:ff:cf:9c:34:41:8c:60: dd:7a:c5:2a:37:63:59:23:3c:94:52:1a:60:84:55: dc:0a:f7:c3:90:e1:3c:90:07:c3:d7:93:20:22:ed: ad:20:20:ae:8b:23:af:94:1d:05:76:1d:6d:2a:9d: f8:83:f9:a6:4f:0d:d9:ad:82:8f:9c:94:e1:6b:4b: 2e:29:60:93:52:6d:8d:b6:36:9a:4c:5b:f8:a7:4d: 2a:df:8c:58:97:72:f7:e7:3a:c0:64:21:b9:99:03: eb:58:5a:1b:4a:74:dd:c5:1d:9a:fa:aa:e3:c4:60: 43:4b:29:db:00:94:cc:ed:da:b3:0b:7a:f4:f5:a5: 4e:af:5d:2a:43:ee:17:cd:2f:aa:2a:26:8f:0d:62: 10:ff:30:c0:a3:7f:0c:c1:30:0f:72:99:c9:83:9e: 2b:25:75:77:b9:69:ef:f8:90:f3:99:2c:32:34:c6: 58:04:72:a2:19:17:f9:7a:ea:b4:33:ef:ab:eb:13: 77:27:4e:16:41:2f:9c:3c:92:be:69:e4:6b:9d:a9: 3f:c3:36:bc:05:d6:80:bc:25:07:df:7b:bc:33:f1: c0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:04:DD:67:4E:1E:EE:2C:55:EE:9A:F0:3C:C6:45:62:2F:02:F6:8E X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230322e3133362e3230382e302f32342d3234203d3e203234313431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.136.208.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:ab:c5:d9:ae:32:eb:81:95:84:92:1a:39:44:07:b3:0d:76: 46:40:bc:95:0c:11:74:f2:d1:c2:7e:99:78:bf:fb:b7:5d:3a: 65:90:2e:1c:35:8e:26:b9:d1:08:e8:b9:4f:18:05:6d:38:a2: 0a:17:be:76:0d:8f:09:c1:76:ab:aa:49:91:e1:34:a0:f2:df: 69:55:9f:6f:54:6b:09:32:86:64:6f:3c:e0:2a:71:c8:0f:c7: 4a:e1:da:ce:c9:10:59:97:18:4b:26:8c:c8:49:98:53:5b:7e: 47:79:46:b9:39:e6:d0:91:30:c6:f1:59:72:2e:dd:45:c9:8d: 09:6f:91:54:27:51:88:80:68:3f:55:b1:c5:cb:00:b1:ec:1b: 21:05:28:44:0d:01:37:71:43:4b:7a:49:df:29:2a:0a:05:d3: 3d:4f:32:c2:0d:8a:ba:27:7a:51:a4:22:d6:2a:b8:af:ea:f8: 48:ae:2e:b7:6e:ba:75:e3:ed:76:e5:12:91:ee:e0:eb:13:17: d1:09:bb:5a:19:0e:54:fa:ba:38:81:1e:e7:d4:f3:e4:36:79: db:43:d8:59:4d:a0:7d:70:73:d8:62:e8:97:1f:10:87:6e:ac: e3:38:30:3b:71:ed:16:c0:f4:76:b7:40:32:d8:8c:de:6a:25: 77:43:33:82 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUE3GB1Vtvy8p4cDEMYznPa6X1DDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMjQ3MjVaFw0yNzA0MTIwMjUyMjVaMDMxMTAvBgNV BAMTKDZEMDRERDY3NEUxRUVFMkM1NUVFOUFGMDNDQzY0NTYyMkYwMkY2OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClbn8NfiSF0rNWqKh/xM6FixgD nTrHVQCtM7zMkO5OC5C4fqIO/8+cNEGMYN16xSo3Y1kjPJRSGmCEVdwK98OQ4TyQ B8PXkyAi7a0gIK6LI6+UHQV2HW0qnfiD+aZPDdmtgo+clOFrSy4pYJNSbY22NppM W/inTSrfjFiXcvfnOsBkIbmZA+tYWhtKdN3FHZr6quPEYENLKdsAlMzt2rMLevT1 pU6vXSpD7hfNL6oqJo8NYhD/MMCjfwzBMA9ymcmDnisldXe5ae/4kPOZLDI0xlgE cqIZF/l66rQz76vrE3cnThZBL5w8kr5p5GudqT/DNrwF1oC8JQffe7wz8cDnAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUbQTdZ04e7ixV7prwPMZFYi8C9o4wHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTU4ODc4ODAwODMwMTM2MzUvMC8zMjMwMzIyZTMx MzMzNjJlMzIzMDM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNDMxMzQzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMqI0DANBgkqhkiG9w0BAQsFAAOCAQEAD6vF2a4y64GVhJIaOUQH sw12RkC8lQwRdPLRwn6ZeL/7t106ZZAuHDWOJrnRCOi5TxgFbTiiChe+dg2PCcF2 q6pJkeE0oPLfaVWfb1RrCTKGZG884CpxyA/HSuHazskQWZcYSyaMyEmYU1t+R3lG uTnm0JEwxvFZci7dRcmNCW+RVCdRiIBoP1WxxcsAsewbIQUoRA0BN3FDS3pJ3ykq CgXTPU8ywg2Kuid6UaQi1iq4r+r4SK4ut266dePtduUSke7g6xMX0Qm7WhkOVPq6 OIEe59Tz5DZ520PYWU2gfXBz2GLolx8Qh26s4zgwO3HtFsD0drdAMtiM3mold0Mz gg== -----END CERTIFICATE-----Generated at Mon Apr 13 12:26:42 2026 by rpki-client