$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230322e3133362e3232322e302f32332d3233203d3e203137363231.roa File: 3230322e3133362e3232322e302f32332d3233203d3e203137363231.roa (raw, json) Hash identifier: F0Ayq3cjkuvxzFYX3SHZlSLuhDvOKIvqp12/bsu/n/4= Subject key identifier: 75:06:68:6B:15:CC:88:B5:49:10:BC:CF:A0:F7:A2:CC:0D:C5:55:42 Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 6F791E15E42215C83BB4B74D759E30715FB817C1 Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230322e3133362e3232322e302f32332d3233203d3e203137363231.roa Signing time: Mon 13 Apr 2026 02:50:26 +0000 ROA not before: Mon 13 Apr 2026 02:45:26 +0000 ROA not after: Mon 12 Apr 2027 02:50:26 +0000 asID: 17621 IP address blocks: 202.136.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:79:1e:15:e4:22:15:c8:3b:b4:b7:4d:75:9e:30:71:5f:b8:17:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 02:45:26 2026 GMT Not After : Apr 12 02:50:26 2027 GMT Subject: CN=7506686B15CC88B54910BCCFA0F7A2CC0DC55542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a7:dc:40:f8:b4:e9:fa:b7:91:06:d4:b4:4f: 1a:a3:bf:36:c4:a8:f9:09:37:e1:3f:b5:d0:4b:96: 1c:4f:b1:eb:ef:8d:94:57:2b:59:09:a3:80:cd:be: f3:7d:bd:f5:2d:1d:ba:a1:16:e1:d2:b0:27:1f:51: 15:d0:6d:3c:63:e4:82:d0:68:dd:77:e4:2a:93:64: e4:1a:b2:2d:89:18:25:93:f2:3b:17:2a:8f:56:a6: c9:e6:39:b1:76:fc:68:e7:39:3e:a3:2e:be:98:66: 17:1f:bd:df:0c:c6:91:7d:24:b5:93:06:3f:de:37: af:04:d9:30:a0:0f:f0:ae:8a:4f:6f:29:7b:4e:4f: 4b:ab:d7:06:68:0e:04:b5:9b:8b:b4:62:16:7f:05: 5e:6e:fe:76:ab:97:1e:89:c0:a7:e7:df:87:87:d6: f5:bf:9d:b3:d8:e6:6e:65:7b:64:e6:5f:13:f7:74: ed:35:8b:15:be:bd:fd:97:55:81:c5:9d:8f:db:43: 13:f0:a9:b4:bf:d5:7d:ee:8f:fe:58:ae:79:66:9f: e8:87:57:84:08:81:2d:1a:b0:59:dc:14:a1:f2:9a: 18:1e:58:18:e8:bc:06:61:74:40:f2:b3:09:f3:ba: 5d:10:48:4c:2e:bf:fe:f6:8f:a7:49:28:3e:04:63: a0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:06:68:6B:15:CC:88:B5:49:10:BC:CF:A0:F7:A2:CC:0D:C5:55:42 X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230322e3133362e3232322e302f32332d3233203d3e203137363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.136.222.0/23 Signature Algorithm: sha256WithRSAEncryption a7:96:26:c8:84:5e:ec:a0:90:11:9d:0b:15:dc:a8:e0:01:d1: 35:de:dd:cd:18:64:9a:aa:9f:a0:47:a0:35:71:c2:f6:cf:d0: 24:da:10:c0:7f:57:fe:bb:09:4f:df:27:af:df:06:30:5a:a3: ee:db:cb:33:2c:55:30:65:8a:da:30:7e:4a:22:0f:6f:d3:8e: 45:2b:19:60:f1:c9:de:b4:ab:d2:4a:d4:7d:56:bb:cb:90:fb: 30:1d:24:38:31:60:db:7e:2c:6e:cc:a3:bc:67:20:70:fd:d4: 56:59:5e:e4:d8:ef:fb:fe:d4:a7:a0:79:10:09:b9:50:8b:4b: a6:27:01:de:3f:0e:22:84:51:dd:8f:88:40:83:f0:17:3d:ab: a5:03:29:ad:69:7f:14:99:9e:f9:2c:10:c9:c1:fc:9a:4b:7d: f0:21:78:2a:c6:7c:d7:27:01:ab:a8:f1:51:93:b3:b5:f7:d9: 4f:ac:05:13:e8:24:e5:4e:33:30:da:a9:d9:1d:90:e7:02:f8: 2b:d4:11:0e:f0:96:17:9c:b6:35:2e:1a:f3:78:d1:8a:85:aa: 83:e6:98:61:4b:e1:b0:d3:24:f9:09:f7:4f:b9:44:f7:20:37: da:38:27:19:c7:9c:8c:a1:5b:53:58:fa:27:85:94:81:bb:04: 4d:c8:2a:71 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUb3keFeQiFcg7tLdNdZ4wcV+4F8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMjQ1MjZaFw0yNzA0MTIwMjUwMjZaMDMxMTAvBgNV BAMTKDc1MDY2ODZCMTVDQzg4QjU0OTEwQkNDRkEwRjdBMkNDMERDNTU1NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAp9xA+LTp+reRBtS0TxqjvzbE qPkJN+E/tdBLlhxPsevvjZRXK1kJo4DNvvN9vfUtHbqhFuHSsCcfURXQbTxj5ILQ aN135CqTZOQasi2JGCWT8jsXKo9WpsnmObF2/GjnOT6jLr6YZhcfvd8MxpF9JLWT Bj/eN68E2TCgD/Cuik9vKXtOT0ur1wZoDgS1m4u0YhZ/BV5u/narlx6JwKfn34eH 1vW/nbPY5m5le2TmXxP3dO01ixW+vf2XVYHFnY/bQxPwqbS/1X3uj/5Yrnlmn+iH V4QIgS0asFncFKHymhgeWBjovAZhdEDyswnzul0QSEwuv/72j6dJKD4EY6CHAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUdQZoaxXMiLVJELzPoPeizA3FVUIwHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTU4ODc4ODAwODMwMTM2MzUvMC8zMjMwMzIyZTMx MzMzNjJlMzIzMjMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEzNzM2MzIzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAcqI3jANBgkqhkiG9w0BAQsFAAOCAQEAp5YmyIRe7KCQEZ0LFdyo 4AHRNd7dzRhkmqqfoEegNXHC9s/QJNoQwH9X/rsJT98nr98GMFqj7tvLMyxVMGWK 2jB+SiIPb9OORSsZYPHJ3rSr0krUfVa7y5D7MB0kODFg234sbsyjvGcgcP3UVlle 5Njv+/7Up6B5EAm5UItLpicB3j8OIoRR3Y+IQIPwFz2rpQMprWl/FJme+SwQycH8 mkt98CF4KsZ81ycBq6jxUZOztffZT6wFE+gk5U4zMNqp2R2Q5wL4K9QRDvCWF5y2 NS4a83jRioWqg+aYYUvhsNMk+Qn3T7lE9yA32jgnGcecjKFbU1j6J4WUgbsETcgq cQ== -----END CERTIFICATE-----Generated at Mon Apr 13 15:20:54 2026 by rpki-client