$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3231302e352e3134342e302f32312d3231203d3e203234313431.roa File: 3231302e352e3134342e302f32312d3231203d3e203234313431.roa (raw, json) Hash identifier: +lv73T9O9q5n81quuhvlQDnpqcRdKWzD0TRd2MlglfA= Subject key identifier: B6:25:09:6B:74:FC:E8:68:21:D1:42:EE:25:B2:8E:DD:1F:DC:15:DC Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 07BE1ED05C58B374BDB20110A680F192EA1441AC Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3231302e352e3134342e302f32312d3231203d3e203234313431.roa Signing time: Mon 13 Apr 2026 02:50:26 +0000 ROA not before: Mon 13 Apr 2026 02:45:26 +0000 ROA not after: Mon 12 Apr 2027 02:50:26 +0000 asID: 24141 IP address blocks: 210.5.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:be:1e:d0:5c:58:b3:74:bd:b2:01:10:a6:80:f1:92:ea:14:41:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 02:45:26 2026 GMT Not After : Apr 12 02:50:26 2027 GMT Subject: CN=B625096B74FCE86821D142EE25B28EDD1FDC15DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:05:a3:35:a3:5b:d3:05:5d:a5:e2:9b:ab:c1: 13:02:75:c5:20:4c:ce:c2:21:a7:89:db:d0:be:33: c1:cf:6f:e9:8b:9f:b7:e1:31:e7:4d:ed:65:e8:7c: da:2c:98:94:32:0a:fe:09:ce:71:62:0d:36:32:67: 41:e8:01:01:58:2e:a4:7b:3a:b5:82:7b:f0:b6:41: 89:11:97:c8:49:76:e7:5b:45:d3:d3:df:21:57:e5: 6d:40:12:8c:55:dc:21:e6:6a:ec:71:8f:52:59:70: c8:cb:d0:07:5f:05:db:57:9c:2d:2c:c8:b7:fb:66: b3:cb:eb:b7:f8:24:e4:e1:70:e8:b0:c1:f8:e4:ef: cd:74:ea:44:00:5f:ec:b9:cc:78:fc:1e:a1:bb:42: 32:ab:83:40:be:84:d2:93:68:3a:87:0a:8a:29:98: 7f:31:52:4a:e3:cf:22:1f:04:5e:b5:a7:66:8a:1f: 4c:78:78:62:3c:86:06:a1:af:a9:f1:fa:b2:0b:40: 28:3a:da:fd:48:56:df:e4:f0:99:ba:56:21:15:c1: 6d:d9:7d:d3:1c:59:49:82:0a:38:17:4b:6d:d0:50: 02:c4:d3:06:bc:64:87:2e:c3:fa:9d:c2:bf:73:c7: d6:7c:8f:b1:77:f5:3e:f2:46:67:05:52:9e:53:fc: 2f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:25:09:6B:74:FC:E8:68:21:D1:42:EE:25:B2:8E:DD:1F:DC:15:DC X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3231302e352e3134342e302f32312d3231203d3e203234313431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.5.144.0/21 Signature Algorithm: sha256WithRSAEncryption c3:c4:30:6b:a2:3c:16:05:d1:e5:78:d4:6b:6c:cf:9b:fd:c6: bd:66:65:de:36:69:2d:e0:24:2b:31:ae:b4:21:fc:a2:ca:1e: 8c:f8:f5:cf:bf:91:21:bf:a5:75:b2:bc:64:1a:87:16:b2:9f: 95:de:8c:c7:48:0e:d6:89:25:1e:fd:87:53:ed:69:97:b9:89: 53:5a:6d:d8:46:59:fd:8f:d4:e7:5a:85:54:dd:2f:6b:1d:48: c0:48:e8:cb:e7:60:41:96:ab:7a:5e:d0:46:1e:00:a9:54:9e: 34:8e:6e:15:7a:fa:dd:3a:1c:f9:72:c9:b1:84:4c:e9:6f:fb: ae:70:7b:ed:68:87:6f:f5:cf:de:d7:cb:c2:7d:d7:ad:fe:42: 2d:1c:38:8e:fa:84:40:4b:d6:0b:68:8b:bb:27:bf:8d:f7:d3: e4:62:df:9e:a7:c1:00:f8:24:35:e9:a2:b9:c6:ac:c3:1d:f6: 87:58:ef:5f:bf:81:cf:f1:c1:ed:08:61:87:2d:c5:3a:db:e5: 92:67:5a:4a:95:ec:14:17:a7:75:ae:4d:17:4e:d3:a9:44:49: 6e:18:20:0a:b1:da:a9:00:e4:4f:7e:13:34:b0:1f:31:7e:0e: 6c:56:54:16:ed:25:e2:87:e4:02:d0:b0:60:0c:ff:75:67:51: 77:ee:56:a8 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUB74e0FxYs3S9sgEQpoDxkuoUQawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMjQ1MjZaFw0yNzA0MTIwMjUwMjZaMDMxMTAvBgNV BAMTKEI2MjUwOTZCNzRGQ0U4NjgyMUQxNDJFRTI1QjI4RUREMUZEQzE1REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyBaM1o1vTBV2l4purwRMCdcUg TM7CIaeJ29C+M8HPb+mLn7fhMedN7WXofNosmJQyCv4JznFiDTYyZ0HoAQFYLqR7 OrWCe/C2QYkRl8hJdudbRdPT3yFX5W1AEoxV3CHmauxxj1JZcMjL0AdfBdtXnC0s yLf7ZrPL67f4JOThcOiwwfjk78106kQAX+y5zHj8HqG7QjKrg0C+hNKTaDqHCoop mH8xUkrjzyIfBF61p2aKH0x4eGI8hgahr6nx+rILQCg62v1IVt/k8Jm6ViEVwW3Z fdMcWUmCCjgXS23QUALE0wa8ZIcuw/qdwr9zx9Z8j7F39T7yRmcFUp5T/C/TAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUtiUJa3T86Ggh0ULuJbKO3R/cFdwwHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1ODg3ODgwMDgzMDEzNjM1LzAvMzIzMTMwMmUzNTJl MzEzNDM0MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzNDMxMzQzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA9IFkDANBgkqhkiG9w0BAQsFAAOCAQEAw8Qwa6I8FgXR5XjUa2zPm/3GvWZl 3jZpLeAkKzGutCH8osoejPj1z7+RIb+ldbK8ZBqHFrKfld6Mx0gO1oklHv2HU+1p l7mJU1pt2EZZ/Y/U51qFVN0vax1IwEjoy+dgQZarel7QRh4AqVSeNI5uFXr63Toc +XLJsYRM6W/7rnB77WiHb/XP3tfLwn3Xrf5CLRw4jvqEQEvWC2iLuye/jffT5GLf nqfBAPgkNemiucaswx32h1jvX7+Bz/HB7Qhhhy3FOtvlkmdaSpXsFBenda5NF07T qURJbhggCrHaqQDkT34TNLAfMX4ObFZUFu0l4ofkAtCwYAz/dWdRd+5WqA== -----END CERTIFICATE-----Generated at Mon Apr 13 13:53:31 2026 by rpki-client