$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230322e3133362e3231322e302f32342d3234203d3e203234313431.roa File: 3230322e3133362e3231322e302f32342d3234203d3e203234313431.roa (raw, json) Hash identifier: beRK1qLRKKVBo4oFVTclAKL8M9jWFocQD/UUN6TnlTI= Subject key identifier: 37:FB:09:EC:C9:88:AD:5B:91:C2:CC:39:D2:89:40:54:66:58:66:F3 Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 1304AD4BC8A14925651C1BB8C182C8C7FDF8AE2B Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230322e3133362e3231322e302f32342d3234203d3e203234313431.roa Signing time: Mon 13 Apr 2026 02:52:24 +0000 ROA not before: Mon 13 Apr 2026 02:47:24 +0000 ROA not after: Mon 12 Apr 2027 02:52:24 +0000 asID: 24141 IP address blocks: 202.136.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:04:ad:4b:c8:a1:49:25:65:1c:1b:b8:c1:82:c8:c7:fd:f8:ae:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 02:47:24 2026 GMT Not After : Apr 12 02:52:24 2027 GMT Subject: CN=37FB09ECC988AD5B91C2CC39D2894054665866F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bc:88:61:e0:a0:f8:04:9e:ba:da:34:b8:06: 51:74:47:4e:93:0f:e8:90:f6:e3:67:51:e8:3a:dc: 1f:71:74:77:cd:c5:8b:5c:5e:ce:a7:dc:b8:a8:2f: dd:04:0f:98:62:e1:a6:d4:d3:7c:8e:d7:79:6c:9d: a0:7a:d3:db:de:c9:37:b5:06:8c:de:a3:93:06:8a: f1:6a:54:e2:a4:41:6d:70:3f:d4:1c:c3:bc:bb:0f: 39:95:7e:5a:e6:a8:9a:01:80:d6:68:8f:ae:99:39: 3d:4b:fd:5a:83:45:bd:8a:93:95:6d:cf:69:5e:91: bf:fa:19:a6:c6:ff:db:71:73:f5:91:b0:fe:82:45: 87:03:23:b7:9b:15:8a:53:48:ab:d8:37:6c:78:a6: ee:53:96:cb:93:f4:0d:8f:c0:4b:9f:2c:82:77:bf: 95:dc:39:a0:a1:50:da:ed:db:9e:53:48:bb:fc:bc: 5b:f3:a1:13:74:9b:61:1e:0f:8c:83:58:02:d7:61: 78:0d:dd:13:b7:e0:ba:12:15:ec:f2:f9:0d:18:0e: 16:94:b4:82:80:a1:07:4f:bb:71:d9:1f:9b:f6:b6: 63:55:a7:4c:2d:25:4e:15:e6:d8:2f:64:d9:7e:e0: 10:5d:62:fe:38:27:37:73:e8:93:e9:a0:da:59:d8: 07:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FB:09:EC:C9:88:AD:5B:91:C2:CC:39:D2:89:40:54:66:58:66:F3 X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230322e3133362e3231322e302f32342d3234203d3e203234313431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.136.212.0/24 Signature Algorithm: sha256WithRSAEncryption 97:0b:67:c6:6a:46:60:96:9b:24:b1:aa:67:a3:54:80:5d:2f: 62:fe:6b:d2:63:f2:53:56:49:de:22:e3:d5:e2:08:d5:ae:40: aa:0b:bf:63:cc:16:a5:fe:92:48:41:77:e1:3a:4d:a3:7f:85: 72:80:68:c3:fb:d5:de:1b:1e:d9:0b:49:df:db:71:05:89:c1: 03:a6:23:ce:86:cb:96:60:fe:25:21:f6:f5:b1:aa:bb:38:05: fe:92:74:29:6e:04:a4:9e:09:74:9b:06:e4:e8:b3:0e:d0:88: 2d:71:f5:b7:f1:f4:9b:e1:2d:04:25:8f:88:8a:31:d8:be:5b: ac:0f:7f:fc:12:fb:51:a8:a8:20:09:6e:4f:99:aa:52:7e:31: 7f:9a:e7:81:75:8e:33:d5:fa:f5:2f:26:50:25:3f:c7:90:eb: 56:23:9d:44:9c:30:00:14:56:2b:c2:cc:08:f1:d9:e6:f4:72: d3:47:d9:35:73:76:21:40:10:fc:db:bc:98:54:d3:77:0a:75: 4e:ad:91:c1:8e:12:83:bc:68:6c:a8:2f:f2:54:ed:1c:8b:b2: d1:5c:33:a8:c9:50:88:ba:d2:d2:0d:41:58:88:7f:1b:c2:7c: 97:46:b7:32:73:c6:0b:7f:2c:0e:8e:70:eb:a6:f3:a7:43:41: 98:a9:6c:ea -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUEwStS8ihSSVlHBu4wYLIx/34riswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMjQ3MjRaFw0yNzA0MTIwMjUyMjRaMDMxMTAvBgNV BAMTKDM3RkIwOUVDQzk4OEFENUI5MUMyQ0MzOUQyODk0MDU0NjY1ODY2RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCavIhh4KD4BJ662jS4BlF0R06T D+iQ9uNnUeg63B9xdHfNxYtcXs6n3LioL90ED5hi4abU03yO13lsnaB609veyTe1 Bozeo5MGivFqVOKkQW1wP9Qcw7y7DzmVflrmqJoBgNZoj66ZOT1L/VqDRb2Kk5Vt z2lekb/6GabG/9txc/WRsP6CRYcDI7ebFYpTSKvYN2x4pu5TlsuT9A2PwEufLIJ3 v5XcOaChUNrt255TSLv8vFvzoRN0m2EeD4yDWALXYXgN3RO34LoSFezy+Q0YDhaU tIKAoQdPu3HZH5v2tmNVp0wtJU4V5tgvZNl+4BBdYv44Jzdz6JPpoNpZ2AefAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUN/sJ7MmIrVuRwsw50olAVGZYZvMwHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTU4ODc4ODAwODMwMTM2MzUvMC8zMjMwMzIyZTMx MzMzNjJlMzIzMTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNDMxMzQzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMqI1DANBgkqhkiG9w0BAQsFAAOCAQEAlwtnxmpGYJabJLGqZ6NU gF0vYv5r0mPyU1ZJ3iLj1eII1a5Aqgu/Y8wWpf6SSEF34TpNo3+FcoBow/vV3hse 2QtJ39txBYnBA6YjzobLlmD+JSH29bGquzgF/pJ0KW4EpJ4JdJsG5OizDtCILXH1 t/H0m+EtBCWPiIox2L5brA9//BL7UaioIAluT5mqUn4xf5rngXWOM9X69S8mUCU/ x5DrViOdRJwwABRWK8LMCPHZ5vRy00fZNXN2IUAQ/Nu8mFTTdwp1Tq2RwY4Sg7xo bKgv8lTtHIuy0VwzqMlQiLrS0g1BWIh/G8J8l0a3MnPGC38sDo5w66bzp0NBmKls 6g== -----END CERTIFICATE-----Generated at Mon Apr 13 12:26:36 2026 by rpki-client