$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230322e3133362e3231382e302f32342d3234203d3e203137363231.roa File: 3230322e3133362e3231382e302f32342d3234203d3e203137363231.roa (raw, json) Hash identifier: S3k9nkhW8JiHW7HA1P7oI4rU1lVF7/FTM2rJjszLFy8= Subject key identifier: 43:9F:FC:A6:66:9C:94:4F:8E:58:48:71:E0:D8:7C:AE:4F:39:78:EB Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 79E98B56CFB1AC3E4E11B413D101740F64E33F35 Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230322e3133362e3231382e302f32342d3234203d3e203137363231.roa Signing time: Mon 13 Apr 2026 02:50:26 +0000 ROA not before: Mon 13 Apr 2026 02:45:26 +0000 ROA not after: Mon 12 Apr 2027 02:50:26 +0000 asID: 17621 IP address blocks: 202.136.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:e9:8b:56:cf:b1:ac:3e:4e:11:b4:13:d1:01:74:0f:64:e3:3f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 02:45:26 2026 GMT Not After : Apr 12 02:50:26 2027 GMT Subject: CN=439FFCA6669C944F8E584871E0D87CAE4F3978EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cd:ba:63:f8:a0:9d:5d:7c:a9:32:fd:5d:1c: a0:bb:27:ef:b1:02:01:0c:92:53:54:7d:18:fe:48: 54:4c:b3:f5:04:ac:ff:d0:05:11:e9:7d:f3:a8:3c: 51:31:a2:6f:71:1a:c6:ee:ec:f1:9a:46:b2:68:01: 35:dc:ac:62:51:6c:03:db:b3:1d:14:69:fe:41:57: f9:1d:ab:30:9c:ec:a1:f1:9e:3b:03:80:ba:75:2d: 7f:a8:33:4c:9e:7b:b6:d0:30:d5:a4:95:cc:a8:0f: f6:df:54:a8:12:5d:26:35:f5:d9:b4:6a:5b:f8:30: 3e:75:5e:96:02:d1:89:89:3f:c8:e7:f6:25:b0:3d: cd:77:0f:57:9f:77:13:52:57:02:23:29:62:54:30: fb:d6:6a:11:ac:e4:26:aa:3d:e9:b6:91:f5:89:e6: c3:13:b0:99:03:8d:09:90:14:63:5e:09:69:39:60: 67:d5:2a:cc:d4:7c:2d:15:23:28:13:c3:91:4b:8d: 63:31:d4:0d:b5:5c:fc:35:22:af:dd:e9:3f:33:3b: 14:52:3e:2a:28:c4:89:ff:68:e2:ab:82:3f:5b:18: b5:bc:63:9d:84:2b:8c:81:57:96:ab:52:99:0e:4a: 6e:37:c3:0f:dc:b6:13:64:cc:9e:6a:71:19:3e:51: e1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9F:FC:A6:66:9C:94:4F:8E:58:48:71:E0:D8:7C:AE:4F:39:78:EB X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230322e3133362e3231382e302f32342d3234203d3e203137363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.136.218.0/24 Signature Algorithm: sha256WithRSAEncryption 61:e8:9f:fa:30:5a:ff:d8:2e:bd:13:d0:60:38:62:9b:38:e1: 69:b3:c3:3a:8a:67:b2:c0:89:1d:70:43:cf:03:ab:e8:26:18: 2b:77:d7:37:71:0e:28:75:13:76:11:9d:33:73:f1:2e:fc:f8: 61:10:0f:2e:27:70:e0:48:fc:84:5e:7d:26:95:cb:55:7e:26: 88:2f:2c:e4:be:b1:e3:76:4d:54:b1:2b:07:a7:e4:ac:0b:b5: e8:a4:95:36:9c:8b:e7:e7:d2:65:8c:72:a5:57:26:81:01:fe: 01:11:da:78:79:c8:32:97:45:da:cb:d3:ec:11:76:8c:1b:24: 74:fc:db:11:24:c9:35:cd:9f:46:10:e3:92:d5:a3:a2:68:36: cb:43:bc:a3:a9:a9:5a:64:60:07:24:7a:76:89:5b:ee:36:44: 02:30:ce:cd:ee:f8:ce:6f:8b:23:ce:f4:57:6a:20:84:68:80: 30:90:53:73:e4:39:39:fd:db:8f:77:87:86:ce:9e:f3:88:02: 0b:8c:06:06:60:fa:42:98:f2:b2:3a:b7:dd:14:a2:51:60:8d: 15:89:e5:f2:3a:42:7b:78:45:e4:c9:89:3f:75:ed:21:e0:cf: 35:b9:a6:64:97:da:67:5d:22:3f:09:2e:f8:71:ed:91:3b:19: 15:1c:52:bb -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUeemLVs+xrD5OEbQT0QF0D2TjPzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMjQ1MjZaFw0yNzA0MTIwMjUwMjZaMDMxMTAvBgNV BAMTKDQzOUZGQ0E2NjY5Qzk0NEY4RTU4NDg3MUUwRDg3Q0FFNEYzOTc4RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVzbpj+KCdXXypMv1dHKC7J++x AgEMklNUfRj+SFRMs/UErP/QBRHpffOoPFExom9xGsbu7PGaRrJoATXcrGJRbAPb sx0Uaf5BV/kdqzCc7KHxnjsDgLp1LX+oM0yee7bQMNWklcyoD/bfVKgSXSY19dm0 alv4MD51XpYC0YmJP8jn9iWwPc13D1efdxNSVwIjKWJUMPvWahGs5CaqPem2kfWJ 5sMTsJkDjQmQFGNeCWk5YGfVKszUfC0VIygTw5FLjWMx1A21XPw1Iq/d6T8zOxRS PiooxIn/aOKrgj9bGLW8Y52EK4yBV5arUpkOSm43ww/cthNkzJ5qcRk+UeEPAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUQ5/8pmaclE+OWEhx4Nh8rk85eOswHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTU4ODc4ODAwODMwMTM2MzUvMC8zMjMwMzIyZTMx MzMzNjJlMzIzMTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM2MzIzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMqI2jANBgkqhkiG9w0BAQsFAAOCAQEAYeif+jBa/9guvRPQYDhi mzjhabPDOopnssCJHXBDzwOr6CYYK3fXN3EOKHUTdhGdM3PxLvz4YRAPLidw4Ej8 hF59JpXLVX4miC8s5L6x43ZNVLErB6fkrAu16KSVNpyL5+fSZYxypVcmgQH+ARHa eHnIMpdF2svT7BF2jBskdPzbESTJNc2fRhDjktWjomg2y0O8o6mpWmRgByR6dolb 7jZEAjDOze74zm+LI870V2oghGiAMJBTc+Q5Of3bj3eHhs6e84gCC4wGBmD6Qpjy sjq33RSiUWCNFYnl8jpCe3hF5MmJP3XtIeDPNbmmZJfaZ10iPwku+HHtkTsZFRxS uw== -----END CERTIFICATE-----Generated at Mon Apr 13 13:56:12 2026 by rpki-client