$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230322e3133362e3231322e302f32322d3232203d3e2034383132.roa File: 3230322e3133362e3231322e302f32322d3232203d3e2034383132.roa (raw, json) Hash identifier: 0XWbWX26rruXa4apWMj3I3fHxpgDOl2SGcq4AhkL8tU= Subject key identifier: F6:CF:A7:28:DC:27:B5:C5:BC:38:57:E4:7E:55:6D:0B:70:78:D2:ED Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 7B2A868EDE38CED9F5976288ED89CECB7FE3E889 Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230322e3133362e3231322e302f32322d3232203d3e2034383132.roa Signing time: Mon 13 Apr 2026 02:50:26 +0000 ROA not before: Mon 13 Apr 2026 02:45:26 +0000 ROA not after: Mon 12 Apr 2027 02:50:26 +0000 asID: 4812 IP address blocks: 202.136.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:2a:86:8e:de:38:ce:d9:f5:97:62:88:ed:89:ce:cb:7f:e3:e8:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 02:45:26 2026 GMT Not After : Apr 12 02:50:26 2027 GMT Subject: CN=F6CFA728DC27B5C5BC3857E47E556D0B7078D2ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:c8:f9:62:ce:15:a5:20:6c:45:f6:54:7b:97: ef:7f:47:a4:9c:f6:8f:9e:5f:82:07:09:f5:6e:1b: 6f:4a:94:f9:8d:e4:6a:14:a0:ca:42:68:c7:21:75: 0f:cd:9c:18:cb:5b:a4:2c:36:94:e8:ee:26:59:9f: 73:39:35:6a:2b:fa:26:f6:62:f1:aa:40:9a:02:08: 3f:09:a9:91:74:ef:91:40:46:3f:3b:9c:55:b8:b9: d9:1d:68:8a:ec:8c:f7:57:e9:54:40:28:4d:a7:3e: 04:bb:9b:c8:fb:fa:b6:07:f2:5d:e2:54:d5:71:b1: 0a:c7:37:03:d8:1c:36:6d:a4:a0:7f:ae:2e:c6:b9: e7:40:52:c3:3e:dc:5f:63:87:09:72:f6:2e:29:12: c9:48:e5:29:93:c1:8a:85:f8:6a:59:39:15:1d:e8: 9e:2d:0f:e8:5e:a9:d9:32:e9:18:de:b0:cf:2a:0e: 1c:92:7e:77:0a:b0:54:b2:77:6b:55:cd:1f:2f:15: 19:03:be:25:cc:4a:43:dc:1b:db:d4:d6:54:13:a5: e4:2d:34:e5:97:07:5e:77:84:f2:d4:68:cf:48:9c: 7a:9a:9c:3f:d1:38:08:fd:1d:a8:9a:04:22:09:0c: f3:61:98:61:1d:f8:14:bb:b4:5a:86:74:5f:a2:2f: d8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:CF:A7:28:DC:27:B5:C5:BC:38:57:E4:7E:55:6D:0B:70:78:D2:ED X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230322e3133362e3231322e302f32322d3232203d3e2034383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.136.212.0/22 Signature Algorithm: sha256WithRSAEncryption 12:27:2b:7d:dc:55:58:d8:b8:71:b6:a0:1c:f4:0f:85:38:42: c6:b9:89:9d:e5:b9:7a:e5:6c:e0:97:9e:34:48:ed:0e:a1:55: 43:5b:ce:16:73:e5:cf:85:d2:81:76:8c:e0:43:06:f2:b2:30: 82:9f:2d:a3:b7:2e:10:70:ea:8c:7a:18:53:36:1b:da:fa:26: aa:51:bc:9a:98:dd:0b:60:1f:68:c5:2d:9d:c8:70:36:02:9d: 0a:14:bd:c1:99:49:62:03:94:82:42:3d:5d:ec:0b:20:ee:06: 57:e3:4f:48:71:a9:2b:4e:73:ef:d0:49:d6:fa:9f:d9:82:68: 1e:7b:66:39:10:57:2c:a3:78:fa:ac:94:7f:d0:db:5b:ca:20: 82:a6:d5:da:4c:e5:13:53:b6:3d:f9:a7:97:98:8a:16:57:9f: a1:f7:09:1f:81:5f:2f:56:55:e9:c5:43:ca:5f:d6:52:41:48: 4d:51:95:91:95:60:3d:44:39:16:b0:2e:0f:7a:97:a3:a2:ef: fc:82:34:d3:76:c1:e2:92:b3:35:a4:49:72:2c:7c:e3:cc:22: 68:62:0e:37:75:59:5d:ff:0a:e0:3e:e6:e0:2d:b0:83:72:b9: 43:5c:27:2c:f4:64:bd:80:bf:4a:f2:93:02:85:f4:55:8d:65: 6e:8f:51:43 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUeyqGjt44ztn1l2KI7YnOy3/j6IkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMjQ1MjZaFw0yNzA0MTIwMjUwMjZaMDMxMTAvBgNV BAMTKEY2Q0ZBNzI4REMyN0I1QzVCQzM4NTdFNDdFNTU2RDBCNzA3OEQyRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzyPlizhWlIGxF9lR7l+9/R6Sc 9o+eX4IHCfVuG29KlPmN5GoUoMpCaMchdQ/NnBjLW6QsNpTo7iZZn3M5NWor+ib2 YvGqQJoCCD8JqZF075FARj87nFW4udkdaIrsjPdX6VRAKE2nPgS7m8j7+rYH8l3i VNVxsQrHNwPYHDZtpKB/ri7GuedAUsM+3F9jhwly9i4pEslI5SmTwYqF+GpZORUd 6J4tD+heqdky6RjesM8qDhySfncKsFSyd2tVzR8vFRkDviXMSkPcG9vU1lQTpeQt NOWXB153hPLUaM9InHqanD/ROAj9HaiaBCIJDPNhmGEd+BS7tFqGdF+iL9gbAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU9s+nKNwntcW8OFfkflVtC3B40u0wHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTg4Nzg4MDA4MzAxMzYzNS8wLzMyMzAzMjJlMzEz MzM2MmUzMjMxMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzEzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAsqI1DANBgkqhkiG9w0BAQsFAAOCAQEAEicrfdxVWNi4cbagHPQPhThC xrmJneW5euVs4JeeNEjtDqFVQ1vOFnPlz4XSgXaM4EMG8rIwgp8to7cuEHDqjHoY UzYb2vomqlG8mpjdC2AfaMUtnchwNgKdChS9wZlJYgOUgkI9XewLIO4GV+NPSHGp K05z79BJ1vqf2YJoHntmORBXLKN4+qyUf9DbW8oggqbV2kzlE1O2Pfmnl5iKFlef ofcJH4FfL1ZV6cVDyl/WUkFITVGVkZVgPUQ5FrAuD3qXo6Lv/II003bB4pKzNaRJ cix848wiaGION3VZXf8K4D7m4C2wg3K5Q1wnLPRkvYC/SvKTAoX0VY1lbo9RQw== -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:35 2026 by rpki-client