$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230332e3137362e3136382e302f32342d3234203d3e203234313431.roa File: 3230332e3137362e3136382e302f32342d3234203d3e203234313431.roa (raw, json) Hash identifier: p1FCixDnJqtsdkEziz27tBFzBNgaXMoFXtfqlMoYfIc= Subject key identifier: EB:A8:5A:18:51:70:FE:80:FB:BE:2B:72:1E:D5:60:52:E5:B8:9E:70 Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 61C1C3C7B12D862EC86FA07C7A6ADABEC6AD12FB Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230332e3137362e3136382e302f32342d3234203d3e203234313431.roa Signing time: Mon 13 Apr 2026 02:51:03 +0000 ROA not before: Mon 13 Apr 2026 02:46:03 +0000 ROA not after: Mon 12 Apr 2027 02:51:03 +0000 asID: 24141 IP address blocks: 203.176.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:c1:c3:c7:b1:2d:86:2e:c8:6f:a0:7c:7a:6a:da:be:c6:ad:12:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 02:46:03 2026 GMT Not After : Apr 12 02:51:03 2027 GMT Subject: CN=EBA85A185170FE80FBBE2B721ED56052E5B89E70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:64:e9:11:cb:dc:36:6d:9c:52:b7:11:ed:45: d7:7e:de:ba:6a:7f:82:5b:b9:ae:db:c8:70:87:a4: 4e:d5:99:3d:14:5d:40:4f:27:34:86:b4:1b:98:40: 7d:e8:c0:4c:ff:3b:71:aa:4e:fb:e3:53:19:a5:53: bc:1a:9f:b5:7a:ee:0b:a1:84:bd:0b:50:6a:8d:a1: d2:d7:06:4d:2a:58:38:e6:56:57:1e:44:9a:6a:8e: e6:8c:74:41:1f:a4:d2:14:00:b5:ce:68:8d:77:04: 17:f4:e4:90:8a:29:31:fc:1a:6a:e7:e8:ac:57:5c: 5a:bd:cf:95:49:44:06:56:61:cd:9c:c1:82:12:75: 50:3d:aa:c0:55:76:83:48:f2:49:16:45:16:99:f5: 03:3e:54:4d:79:47:2a:84:19:62:7f:7b:75:c7:f4: 5a:c4:8c:03:b2:e6:6c:7d:62:1b:79:fd:69:00:c4: 96:d1:18:4c:52:4a:28:8b:6f:05:73:8b:10:06:1c: 88:c5:77:ee:8a:a0:b3:e4:9a:4e:a1:56:f1:16:71: a5:f5:13:f2:da:0e:5f:e9:f4:ac:78:0a:c3:21:c8: fe:b0:b7:85:d1:9c:c3:a1:17:d9:94:6e:ad:a3:17: 70:7e:84:97:9c:6d:8f:05:67:e0:9e:a0:92:bb:4b: a1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A8:5A:18:51:70:FE:80:FB:BE:2B:72:1E:D5:60:52:E5:B8:9E:70 X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230332e3137362e3136382e302f32342d3234203d3e203234313431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.176.168.0/24 Signature Algorithm: sha256WithRSAEncryption a3:21:5b:6f:92:cc:40:d4:84:70:c3:6b:95:5a:ea:bc:f0:19: 1a:c1:f3:f0:d0:0b:ae:fb:74:29:07:0f:43:37:a0:62:97:b3: d2:00:7b:25:ee:34:71:3a:8d:5f:a3:fe:12:16:a4:28:58:63: 41:3d:32:37:fc:2c:0f:1f:28:1e:94:7f:8b:7d:2e:9f:62:99: 83:61:21:e7:2c:af:a2:ad:2a:7b:cc:9d:1a:bf:b6:72:84:ec: e5:6f:55:e8:f1:c3:82:28:23:51:7e:73:90:64:42:8b:9c:e9: cc:23:59:05:74:9f:10:9f:12:b4:a3:cc:9d:b7:df:e1:e3:0d: 45:5c:93:87:37:f8:19:57:92:e1:eb:32:2b:40:6c:d3:05:a8: 20:f8:8f:56:c1:8d:e1:83:43:96:6f:11:e4:dd:f7:ea:2a:eb: 9d:6c:27:bc:84:3d:f3:f9:f3:9b:9d:de:ad:92:fd:60:e7:20: c1:e4:68:12:9c:d4:79:eb:b0:c0:03:8e:1d:55:f5:61:12:23: 21:51:79:7f:5c:db:fc:9b:06:4f:af:f7:ca:3a:07:40:3c:46: bb:6a:4b:43:10:cd:c2:dc:18:dd:72:dc:32:04:69:71:62:bd: 7e:c2:65:78:a3:bb:d0:58:b7:a9:46:11:69:bc:56:cf:2d:22: 3f:a5:45:8e -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUYcHDx7Ethi7Ib6B8emravsatEvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMjQ2MDNaFw0yNzA0MTIwMjUxMDNaMDMxMTAvBgNV BAMTKEVCQTg1QTE4NTE3MEZFODBGQkJFMkI3MjFFRDU2MDUyRTVCODlFNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSZOkRy9w2bZxStxHtRdd+3rpq f4Jbua7byHCHpE7VmT0UXUBPJzSGtBuYQH3owEz/O3GqTvvjUxmlU7wan7V67guh hL0LUGqNodLXBk0qWDjmVlceRJpqjuaMdEEfpNIUALXOaI13BBf05JCKKTH8Gmrn 6KxXXFq9z5VJRAZWYc2cwYISdVA9qsBVdoNI8kkWRRaZ9QM+VE15RyqEGWJ/e3XH 9FrEjAOy5mx9Yht5/WkAxJbRGExSSiiLbwVzixAGHIjFd+6KoLPkmk6hVvEWcaX1 E/LaDl/p9Kx4CsMhyP6wt4XRnMOhF9mUbq2jF3B+hJecbY8FZ+CeoJK7S6EdAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU66haGFFw/oD7vityHtVgUuW4nnAwHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTU4ODc4ODAwODMwMTM2MzUvMC8zMjMwMzMyZTMx MzczNjJlMzEzNjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNDMxMzQzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMuwqDANBgkqhkiG9w0BAQsFAAOCAQEAoyFbb5LMQNSEcMNrlVrq vPAZGsHz8NALrvt0KQcPQzegYpez0gB7Je40cTqNX6P+EhakKFhjQT0yN/wsDx8o HpR/i30un2KZg2Eh5yyvoq0qe8ydGr+2coTs5W9V6PHDgigjUX5zkGRCi5zpzCNZ BXSfEJ8StKPMnbff4eMNRVyThzf4GVeS4esyK0Bs0wWoIPiPVsGN4YNDlm8R5N33 6irrnWwnvIQ98/nzm53erZL9YOcgweRoEpzUeeuwwAOOHVX1YRIjIVF5f1zb/JsG T6/3yjoHQDxGu2pLQxDNwtwY3XLcMgRpcWK9fsJleKO70Fi3qUYRabxWzy0iP6VF jg== -----END CERTIFICATE-----Generated at Mon Apr 13 12:26:39 2026 by rpki-client