$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230322e3133362e3231362e302f32332d3233203d3e2034383132.roa File: 3230322e3133362e3231362e302f32332d3233203d3e2034383132.roa (raw, json) Hash identifier: 5nY2Qwd6G9qtAhzlBDk/6R/77a/5eMpOO710Otrer40= Subject key identifier: E9:FA:CC:E2:D2:4A:FC:3C:DD:35:B4:EB:EA:D4:D9:B2:99:5F:73:54 Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 24A296161E3717A1429CD407D2D36383F9F2F47D Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230322e3133362e3231362e302f32332d3233203d3e2034383132.roa Signing time: Mon 13 Apr 2026 02:51:04 +0000 ROA not before: Mon 13 Apr 2026 02:46:04 +0000 ROA not after: Mon 12 Apr 2027 02:51:04 +0000 asID: 4812 IP address blocks: 202.136.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:a2:96:16:1e:37:17:a1:42:9c:d4:07:d2:d3:63:83:f9:f2:f4:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 02:46:04 2026 GMT Not After : Apr 12 02:51:04 2027 GMT Subject: CN=E9FACCE2D24AFC3CDD35B4EBEAD4D9B2995F7354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:aa:8b:2e:03:82:0c:02:df:7c:50:40:4f:0b: 7e:fa:06:d4:74:8d:06:11:d4:25:24:03:c3:fe:4d: b5:f7:23:34:62:38:ab:10:e4:51:f3:ac:83:1c:17: a3:ff:b5:5f:db:b1:af:85:7b:bc:5d:3f:a0:f2:fb: 44:46:71:44:24:7f:9b:e2:dd:61:fb:73:c3:3f:c4: 19:b6:c0:3f:94:2c:28:a5:69:16:01:41:f7:e5:42: ba:ef:97:3a:a3:fa:04:d5:82:52:ac:45:4f:e0:55: 31:ce:a6:9f:7d:56:b1:e7:c0:1b:dc:82:a9:e1:de: 9c:9a:de:94:bd:85:3e:2f:fd:05:ba:fc:2a:29:9f: 98:d7:89:60:41:cb:85:49:c1:c3:7c:6c:f5:c7:40: a4:06:f2:20:82:b2:98:26:2b:f4:25:56:19:43:5e: fc:92:c8:5f:95:c7:83:7f:54:4a:11:f2:b6:53:ff: 45:03:fb:ac:d0:dc:0b:26:7d:85:0d:dd:ca:9e:18: 98:4d:fa:bd:4c:ab:a8:4e:cd:94:a6:00:d5:9b:cd: f5:13:fa:25:5a:55:03:15:54:66:68:1b:1e:86:7e: 86:37:31:e7:ce:d0:f5:0f:4e:81:95:b1:3e:33:ad: b5:74:fc:d9:55:00:98:40:c4:6c:a5:27:cc:30:69: 4f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FA:CC:E2:D2:4A:FC:3C:DD:35:B4:EB:EA:D4:D9:B2:99:5F:73:54 X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230322e3133362e3231362e302f32332d3233203d3e2034383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.136.216.0/23 Signature Algorithm: sha256WithRSAEncryption 69:5b:99:cd:da:1b:9c:99:6c:d8:54:a5:ac:8f:f5:f8:8a:40: 85:59:4f:67:7f:07:ff:49:5d:b7:0b:0a:ca:a9:8d:6d:8d:d0: ed:a7:4f:82:45:72:ba:af:87:8f:5e:4d:22:83:46:8f:5f:fa: 4f:7b:89:4e:8d:82:b1:68:21:e3:d3:f9:1b:e6:45:da:55:15: 76:fb:dc:1c:f9:72:4f:24:be:0c:13:a1:54:b6:a7:46:a8:39: 15:a6:d5:ef:87:6b:7b:20:6d:64:70:17:dd:90:37:05:9a:df: f4:00:50:bb:fe:6e:da:2d:3b:22:f2:06:e5:63:9a:fa:11:d2: 57:d4:85:b7:82:0b:9d:b9:28:e7:44:e3:9e:32:69:a9:c5:45: 33:aa:9c:6a:67:2a:c9:f8:8b:99:7c:40:82:24:15:65:27:3f: d7:06:3e:30:27:44:4c:bb:7c:08:dc:98:80:e6:af:96:94:71: d7:f1:71:bc:23:67:3b:53:c9:28:50:c4:f9:6d:c0:2c:c6:8a: 43:52:a5:b6:d0:3b:9d:2d:f6:30:c5:aa:81:84:66:68:43:1c: 9b:8d:3c:6f:4d:1a:0a:d6:d6:6c:f4:eb:98:f0:09:89:ae:6c: 4f:65:b0:0e:22:8b:0d:6b:ab:6e:fa:dd:5a:ff:d8:12:45:e0: f9:a2:2d:a2 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUJKKWFh43F6FCnNQH0tNjg/ny9H0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMjQ2MDRaFw0yNzA0MTIwMjUxMDRaMDMxMTAvBgNV BAMTKEU5RkFDQ0UyRDI0QUZDM0NERDM1QjRFQkVBRDREOUIyOTk1RjczNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxqosuA4IMAt98UEBPC376BtR0 jQYR1CUkA8P+TbX3IzRiOKsQ5FHzrIMcF6P/tV/bsa+Fe7xdP6Dy+0RGcUQkf5vi 3WH7c8M/xBm2wD+ULCilaRYBQfflQrrvlzqj+gTVglKsRU/gVTHOpp99VrHnwBvc gqnh3pya3pS9hT4v/QW6/Copn5jXiWBBy4VJwcN8bPXHQKQG8iCCspgmK/QlVhlD XvySyF+Vx4N/VEoR8rZT/0UD+6zQ3AsmfYUN3cqeGJhN+r1Mq6hOzZSmANWbzfUT +iVaVQMVVGZoGx6GfoY3MefO0PUPToGVsT4zrbV0/NlVAJhAxGylJ8wwaU8jAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU6frM4tJK/DzdNbTr6tTZsplfc1QwHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTg4Nzg4MDA4MzAxMzYzNS8wLzMyMzAzMjJlMzEz MzM2MmUzMjMxMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzEzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAcqI2DANBgkqhkiG9w0BAQsFAAOCAQEAaVuZzdobnJls2FSlrI/1+IpA hVlPZ38H/0ldtwsKyqmNbY3Q7adPgkVyuq+Hj15NIoNGj1/6T3uJTo2CsWgh49P5 G+ZF2lUVdvvcHPlyTyS+DBOhVLanRqg5FabV74dreyBtZHAX3ZA3BZrf9ABQu/5u 2i07IvIG5WOa+hHSV9SFt4ILnbko50TjnjJpqcVFM6qcamcqyfiLmXxAgiQVZSc/ 1wY+MCdETLt8CNyYgOavlpRx1/FxvCNnO1PJKFDE+W3ALMaKQ1KlttA7nS32MMWq gYRmaEMcm408b00aCtbWbPTrmPAJia5sT2WwDiKLDWurbvrdWv/YEkXg+aItog== -----END CERTIFICATE-----Generated at Mon Apr 13 15:20:53 2026 by rpki-client