$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230332e3137362e3137302e302f32342d3234203d3e203234313431.roa File: 3230332e3137362e3137302e302f32342d3234203d3e203234313431.roa (raw, json) Hash identifier: dLZCqmYnbpIP4WgY5kD3pZF1/DxQRaLbx47WEz5mzfQ= Subject key identifier: 7B:D3:6C:46:EE:00:B7:C9:B3:F0:EB:A9:54:D4:1C:9B:0D:B1:FF:90 Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 659E11A524711F90D44F0C34BDCBD43948B9F6FB Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230332e3137362e3137302e302f32342d3234203d3e203234313431.roa Signing time: Mon 13 Apr 2026 02:51:03 +0000 ROA not before: Mon 13 Apr 2026 02:46:03 +0000 ROA not after: Mon 12 Apr 2027 02:51:03 +0000 asID: 24141 IP address blocks: 203.176.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:9e:11:a5:24:71:1f:90:d4:4f:0c:34:bd:cb:d4:39:48:b9:f6:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 02:46:03 2026 GMT Not After : Apr 12 02:51:03 2027 GMT Subject: CN=7BD36C46EE00B7C9B3F0EBA954D41C9B0DB1FF90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:da:b3:36:e1:d0:94:95:82:00:f8:6a:97:9c: ee:fe:a3:28:3a:ee:c6:a1:f4:9f:a6:ab:3e:88:08: 37:c4:5e:23:36:d1:a2:a9:c5:7d:29:6f:77:b1:19: 13:d1:f9:7c:da:98:4f:6f:1d:b0:bd:25:ce:ee:c7: b3:f7:98:d6:e7:09:37:bf:52:4d:87:8c:b5:18:60: 72:7f:ac:50:66:38:c6:b8:4f:87:18:0d:40:94:0f: 41:50:a8:9d:dd:1a:19:68:71:cb:f0:df:77:de:d5: 47:62:3f:5e:c7:b0:43:32:9e:83:a2:74:f6:77:a2: 2d:d4:4f:64:b2:1b:00:92:74:e4:c9:38:bf:30:44: 5b:ef:dd:4c:a8:5c:3c:b8:5d:85:55:71:61:5a:cf: 08:5b:39:75:be:f8:a1:98:62:01:4a:86:d4:7f:92: db:ec:9a:27:84:20:dd:f9:e2:56:a2:d3:60:0a:29: c8:2a:80:1f:40:cd:4f:c5:33:3d:a2:36:b0:3f:d9: fd:aa:98:ec:6a:0b:47:cc:da:8b:5c:d2:0c:54:af: 10:75:6f:88:fd:59:ee:aa:e0:2e:b6:b1:bd:7f:97: e0:5a:c8:47:4c:fe:70:fe:5b:b4:79:f5:1c:6b:fe: 5c:30:1c:f0:a5:25:30:a8:11:71:d1:13:27:6b:32: 6b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D3:6C:46:EE:00:B7:C9:B3:F0:EB:A9:54:D4:1C:9B:0D:B1:FF:90 X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3230332e3137362e3137302e302f32342d3234203d3e203234313431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.176.170.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:80:57:58:92:11:70:64:51:02:c4:96:86:b1:e3:81:d1:8e: 83:ea:cd:4e:71:70:cc:63:74:44:cc:94:c7:61:69:aa:b8:5f: 16:4d:95:09:8f:9b:d1:0a:03:97:9c:dd:25:54:8d:e4:be:8b: 40:51:b6:42:5e:32:13:f9:be:8b:f3:63:1e:7a:03:7c:30:fd: dc:74:59:f1:b8:d8:99:d9:e1:0c:e7:d2:ad:32:9e:bb:dd:4b: 43:d0:6a:d2:29:ad:a9:b0:aa:ac:20:f3:29:88:02:82:02:29: 18:0e:77:ac:4f:15:03:2e:36:0e:0b:e9:7b:1b:d3:63:61:59: d2:30:11:21:5c:7f:c9:4c:7b:2e:ed:6b:d3:77:47:74:3e:45: 62:92:a8:ae:34:6a:31:3e:03:db:9d:5f:20:c2:9b:6c:f9:37: 6c:75:36:25:d8:69:d5:d8:09:41:f2:78:69:9e:a3:ee:5a:d3: c2:54:20:1b:e7:54:ca:fc:76:16:11:f1:c2:a2:d0:8d:d6:65: 30:89:a3:3b:f8:66:99:33:c4:be:35:48:1c:1e:02:4f:18:22: e7:9d:0d:52:17:77:d3:8b:25:67:f8:aa:81:95:2c:3a:bb:2d: 2d:7b:35:cb:1b:8d:25:dc:84:28:31:e1:aa:ed:84:8f:2a:69: 67:43:b7:20 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUZZ4RpSRxH5DUTww0vcvUOUi59vswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMjQ2MDNaFw0yNzA0MTIwMjUxMDNaMDMxMTAvBgNV BAMTKDdCRDM2QzQ2RUUwMEI3QzlCM0YwRUJBOTU0RDQxQzlCMERCMUZGOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC12rM24dCUlYIA+GqXnO7+oyg6 7sah9J+mqz6ICDfEXiM20aKpxX0pb3exGRPR+XzamE9vHbC9Jc7ux7P3mNbnCTe/ Uk2HjLUYYHJ/rFBmOMa4T4cYDUCUD0FQqJ3dGhloccvw33fe1UdiP17HsEMynoOi dPZ3oi3UT2SyGwCSdOTJOL8wRFvv3UyoXDy4XYVVcWFazwhbOXW++KGYYgFKhtR/ ktvsmieEIN354lai02AKKcgqgB9AzU/FMz2iNrA/2f2qmOxqC0fM2otc0gxUrxB1 b4j9We6q4C62sb1/l+BayEdM/nD+W7R59Rxr/lwwHPClJTCoEXHREydrMmsTAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUe9NsRu4At8mz8OupVNQcmw2x/5AwHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTU4ODc4ODAwODMwMTM2MzUvMC8zMjMwMzMyZTMx MzczNjJlMzEzNzMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNDMxMzQzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMuwqjANBgkqhkiG9w0BAQsFAAOCAQEAmoBXWJIRcGRRAsSWhrHj gdGOg+rNTnFwzGN0RMyUx2FpqrhfFk2VCY+b0QoDl5zdJVSN5L6LQFG2Ql4yE/m+ i/NjHnoDfDD93HRZ8bjYmdnhDOfSrTKeu91LQ9Bq0imtqbCqrCDzKYgCggIpGA53 rE8VAy42DgvpexvTY2FZ0jARIVx/yUx7Lu1r03dHdD5FYpKorjRqMT4D251fIMKb bPk3bHU2Jdhp1dgJQfJ4aZ6j7lrTwlQgG+dUyvx2FhHxwqLQjdZlMImjO/hmmTPE vjVIHB4CTxgi550NUhd304slZ/iqgZUsOrstLXs1yxuNJdyEKDHhqu2EjyppZ0O3 IA== -----END CERTIFICATE-----Generated at Mon Apr 13 12:26:41 2026 by rpki-client