$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230332e3137362e3136382e302f32312d3231203d3e2030.roa File: 3230332e3137362e3136382e302f32312d3231203d3e2030.roa (raw, json) Hash identifier: ktYlnhepu1386GTakqSOMD/xAMbEFqEMJ4uaT/SuP0A= Subject key identifier: 46:94:B1:47:AB:17:73:20:F0:B6:96:A1:8B:04:6B:D8:A4:DF:18:48 Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 3C816EB5F4EA5AB2DB4E9139DF0A96E76C1F7B80 Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230332e3137362e3136382e302f32312d3231203d3e2030.roa Signing time: Mon 13 Apr 2026 02:59:06 +0000 ROA not before: Mon 13 Apr 2026 02:54:06 +0000 ROA not after: Mon 12 Apr 2027 02:59:06 +0000 asID: 0 IP address blocks: 203.176.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:81:6e:b5:f4:ea:5a:b2:db:4e:91:39:df:0a:96:e7:6c:1f:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 02:54:06 2026 GMT Not After : Apr 12 02:59:06 2027 GMT Subject: CN=4694B147AB177320F0B696A18B046BD8A4DF1848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ab:4c:c6:cc:86:d9:76:83:5e:c0:e3:11:f3: 06:9d:15:3c:ba:21:30:92:aa:71:39:89:ed:17:7e: 06:f0:f6:0d:6a:24:fb:f7:09:6d:06:62:c3:ee:26: de:f3:50:41:d0:8b:b4:74:c2:d2:a9:c0:e0:7d:12: 24:08:72:2f:83:b2:d3:03:76:d0:30:e0:50:92:fb: e2:fc:8a:18:7f:0f:4f:5d:c6:19:7d:22:e4:e4:61: 75:54:be:b4:9a:c2:5a:b7:0b:c9:cd:3c:7b:3e:f8: 1d:45:6a:1b:4a:db:87:b5:0f:0f:db:fd:f5:c6:49: 74:83:34:0a:c8:1d:f2:74:51:2a:39:57:dd:cd:9b: 5e:6e:18:02:ea:a1:70:ec:81:5c:4a:ac:cc:16:93: 58:6b:e9:22:48:33:41:43:96:e1:49:ed:67:f7:2e: f8:b6:59:ed:6f:cb:33:6c:81:ca:0e:c6:3e:c4:a9: ae:b1:06:3f:ed:9e:f1:47:6d:d7:14:8c:78:04:f9: 53:bb:07:29:3f:06:2b:21:b5:5a:18:71:18:90:72: 88:db:58:45:d5:81:24:8d:db:bc:42:6f:7b:5d:5c: bf:c0:f3:62:4b:74:79:f2:6b:40:a5:b7:28:20:5d: 34:65:96:35:50:c8:06:3d:c1:e5:c3:eb:52:e0:05: 8d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:94:B1:47:AB:17:73:20:F0:B6:96:A1:8B:04:6B:D8:A4:DF:18:48 X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230332e3137362e3136382e302f32312d3231203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.176.168.0/21 Signature Algorithm: sha256WithRSAEncryption 70:a2:09:ad:e3:a1:c5:31:3a:31:b7:4f:2e:10:30:f3:c1:98: a0:3b:a5:c1:6d:f0:ed:ac:09:ff:8a:9d:71:e6:5b:d3:4d:0a: ff:11:7a:5b:be:f7:54:b4:68:36:f8:fe:2a:8b:13:bd:cf:59: 6d:81:f6:33:2f:86:b0:37:a6:7f:fd:c1:63:6a:e2:de:51:02: e5:e2:53:76:47:37:e8:8b:70:7d:42:1d:2b:f6:c5:58:f5:f7: f2:f5:89:93:2d:7e:2a:5d:83:a3:42:16:05:a2:36:8b:88:57: 6b:10:08:fa:0a:68:ed:da:a9:c3:97:51:ab:ab:3a:a9:74:9e: ea:0b:bf:76:d5:33:6c:7a:b9:91:52:cf:82:17:99:a0:db:bc: 42:13:4f:39:90:28:af:43:e4:b5:86:a0:b2:9e:5e:3f:4d:ef: 5b:7a:08:b1:a3:81:b3:d5:46:3b:16:c4:20:af:c0:e2:59:05: f1:c8:4e:c9:56:d1:90:3f:3d:bb:72:e0:d0:d4:53:e9:d6:84: 34:79:fd:b5:b6:e9:19:fa:f2:97:2f:be:8b:eb:04:c0:8e:cb: 11:52:8e:36:9b:12:cf:24:41:bc:f1:95:9d:75:84:1c:1a:c9: 25:b8:5a:ca:83:8c:e7:b5:01:39:12:fb:e2:fa:1a:a7:a1:74: 7a:59:2d:5c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUPIFutfTqWrLbTpE53wqW52wfe4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMjU0MDZaFw0yNzA0MTIwMjU5MDZaMDMxMTAvBgNV BAMTKDQ2OTRCMTQ3QUIxNzczMjBGMEI2OTZBMThCMDQ2QkQ4QTRERjE4NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfq0zGzIbZdoNewOMR8wadFTy6 ITCSqnE5ie0Xfgbw9g1qJPv3CW0GYsPuJt7zUEHQi7R0wtKpwOB9EiQIci+DstMD dtAw4FCS++L8ihh/D09dxhl9IuTkYXVUvrSawlq3C8nNPHs++B1FahtK24e1Dw/b /fXGSXSDNArIHfJ0USo5V93Nm15uGALqoXDsgVxKrMwWk1hr6SJIM0FDluFJ7Wf3 Lvi2We1vyzNsgcoOxj7Eqa6xBj/tnvFHbdcUjHgE+VO7Byk/BishtVoYcRiQcojb WEXVgSSN27xCb3tdXL/A82JLdHnya0CltyggXTRlljVQyAY9weXD61LgBY2tAgMB AAGjggINMIICCTAdBgNVHQ4EFgQURpSxR6sXcyDwtpahiwRr2KTfGEgwHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1ODg3ODgwMDgzMDEzNjM1LzAvMzIzMDMzMmUzMTM3 MzYyZTMxMzYzODJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD y7CoMA0GCSqGSIb3DQEBCwUAA4IBAQBwogmt46HFMToxt08uEDDzwZigO6XBbfDt rAn/ip1x5lvTTQr/EXpbvvdUtGg2+P4qixO9z1ltgfYzL4awN6Z//cFjauLeUQLl 4lN2Rzfoi3B9Qh0r9sVY9ffy9YmTLX4qXYOjQhYFojaLiFdrEAj6Cmjt2qnDl1Gr qzqpdJ7qC7921TNsermRUs+CF5mg27xCE085kCivQ+S1hqCynl4/Te9begixo4Gz 1UY7FsQgr8DiWQXxyE7JVtGQPz27cuDQ1FPp1oQ0ef21tukZ+vKXL76L6wTAjssR Uo42mxLPJEG88ZWddYQcGskluFrKg4zntQE5Evvi+hqnoXR6WS1c -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:16 2026 by rpki-client