$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230322e3133362e3232312e302f32342d3234203d3e2030.roa File: 3230322e3133362e3232312e302f32342d3234203d3e2030.roa (raw, json) Hash identifier: jw6K4jbxX8BotBAL0cYgDRlD+uP6PPaf5dlMjJNsaZo= Subject key identifier: 8C:F9:CE:59:9F:65:30:52:D7:50:E9:F8:8C:AD:F8:1E:A2:45:B0:7A Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 44E256315BB23A8767B6FE27FAE850667F88B07C Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230322e3133362e3232312e302f32342d3234203d3e2030.roa Signing time: Mon 13 Apr 2026 02:58:10 +0000 ROA not before: Mon 13 Apr 2026 02:53:10 +0000 ROA not after: Mon 12 Apr 2027 02:58:10 +0000 asID: 0 IP address blocks: 202.136.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:e2:56:31:5b:b2:3a:87:67:b6:fe:27:fa:e8:50:66:7f:88:b0:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 02:53:10 2026 GMT Not After : Apr 12 02:58:10 2027 GMT Subject: CN=8CF9CE599F653052D750E9F88CADF81EA245B07A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9a:5a:38:9e:9e:ff:6e:97:cf:b9:d0:ad:f1: 2d:52:1c:67:cf:c6:cc:47:7b:7d:2b:17:85:d9:d3: 40:c6:31:db:e9:0e:ef:41:0b:66:e4:fd:1c:2d:98: e9:47:a3:de:8e:03:dc:21:ae:ca:74:1a:c2:ea:d9: e5:01:8a:68:09:2d:b4:ef:40:c8:b9:8f:d1:ee:e4: 87:43:6b:c6:55:db:c5:0c:d3:98:85:55:d3:61:d9: a2:0d:a8:f4:53:8d:6d:2e:d3:07:6a:0e:05:b9:c3: 49:49:91:61:bb:0b:ce:b4:71:32:2c:31:ff:dc:36: 25:15:7d:22:62:4e:be:96:e5:fe:10:32:80:b7:1f: 5a:d7:bd:f5:7d:ed:33:c1:ca:6a:56:4e:e1:9b:17: 08:c9:1b:48:4d:0c:5a:2e:b7:08:e6:b8:e7:92:24: ca:ce:19:a5:5b:74:a5:7d:e9:7d:e1:5e:18:62:6b: 7a:1b:b7:c6:30:4d:8b:bb:95:a4:2d:32:ca:03:67: 5f:65:28:17:fb:a2:11:10:10:f4:f9:3e:69:21:7b: 01:15:89:3a:7b:d3:75:43:dd:e1:f0:41:2b:17:ce: fd:36:b0:9f:b1:62:27:5a:93:59:cd:3c:9f:50:10: d1:bf:df:94:66:d5:e2:29:39:47:75:5c:9f:12:b1: 9e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F9:CE:59:9F:65:30:52:D7:50:E9:F8:8C:AD:F8:1E:A2:45:B0:7A X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230322e3133362e3232312e302f32342d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.136.221.0/24 Signature Algorithm: sha256WithRSAEncryption 56:a9:ad:0e:c3:a1:76:c0:d2:1a:1a:5d:22:a1:4d:ba:70:b5: a0:90:d9:9a:15:60:29:b5:fa:d3:7d:c0:99:b8:1e:ca:ae:0e: 8e:8f:8a:57:04:63:45:6a:26:b8:c8:84:54:60:fb:3a:59:aa: 9d:6f:f7:78:6a:e1:1f:de:2f:d6:96:8d:ed:e1:e0:9a:69:9e: 24:25:91:05:71:8a:b2:87:6d:d0:3f:e1:41:56:6e:9b:59:18: 01:d9:04:ef:df:02:f5:26:17:c2:8e:29:7d:35:94:d9:b6:49: 51:d9:88:d0:dc:18:32:ca:1c:87:3c:78:9b:58:37:f0:a8:42: 56:69:22:aa:7f:5d:2f:a4:1d:07:5d:c4:4b:86:25:12:08:96: 1c:94:d9:8f:50:38:98:33:4e:8f:18:88:38:88:fd:da:21:75: 16:03:17:91:8d:10:b0:f5:ad:68:06:a1:93:6f:fe:a8:5c:68: 50:54:2b:57:51:04:84:64:ff:bf:ca:55:a5:e6:4c:28:2e:bc: 2e:dd:39:e3:11:7c:30:39:e9:56:fc:1c:f5:c5:5f:40:d2:4a: 2a:61:3f:fa:07:e1:25:8d:c7:21:54:f5:02:48:29:83:2a:5c: e3:ad:48:6d:5d:f0:27:5b:7e:a2:b1:5b:60:30:c2:08:47:f6: e5:67:ac:be -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUROJWMVuyOodntv4n+uhQZn+IsHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMjUzMTBaFw0yNzA0MTIwMjU4MTBaMDMxMTAvBgNV BAMTKDhDRjlDRTU5OUY2NTMwNTJENzUwRTlGODhDQURGODFFQTI0NUIwN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmmlo4np7/bpfPudCt8S1SHGfP xsxHe30rF4XZ00DGMdvpDu9BC2bk/RwtmOlHo96OA9whrsp0GsLq2eUBimgJLbTv QMi5j9Hu5IdDa8ZV28UM05iFVdNh2aINqPRTjW0u0wdqDgW5w0lJkWG7C860cTIs Mf/cNiUVfSJiTr6W5f4QMoC3H1rXvfV97TPBympWTuGbFwjJG0hNDFoutwjmuOeS JMrOGaVbdKV96X3hXhhia3obt8YwTYu7laQtMsoDZ19lKBf7ohEQEPT5PmkhewEV iTp703VD3eHwQSsXzv02sJ+xYidak1nNPJ9QENG/35Rm1eIpOUd1XJ8SsZ5BAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUjPnOWZ9lMFLXUOn4jK34HqJFsHowHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1ODg3ODgwMDgzMDEzNjM1LzAvMzIzMDMyMmUzMTMz MzYyZTMyMzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA yojdMA0GCSqGSIb3DQEBCwUAA4IBAQBWqa0Ow6F2wNIaGl0ioU26cLWgkNmaFWAp tfrTfcCZuB7Krg6Oj4pXBGNFaia4yIRUYPs6Waqdb/d4auEf3i/Wlo3t4eCaaZ4k JZEFcYqyh23QP+FBVm6bWRgB2QTv3wL1JhfCjil9NZTZtklR2YjQ3BgyyhyHPHib WDfwqEJWaSKqf10vpB0HXcRLhiUSCJYclNmPUDiYM06PGIg4iP3aIXUWAxeRjRCw 9a1oBqGTb/6oXGhQVCtXUQSEZP+/ylWl5kwoLrwu3TnjEXwwOelW/Bz1xV9A0koq YT/6B+EljcchVPUCSCmDKlzjrUhtXfAnW36isVtgMMIIR/blZ6y+ -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:13 2026 by rpki-client