$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3231302e352e3134342e302f32312d3231203d3e2034383132.roa File: 3231302e352e3134342e302f32312d3231203d3e2034383132.roa (raw, json) Hash identifier: MtpPUBiQt8TPtxsCGqf8Ze8tDRRRKP8x2cQp71EJDDk= Subject key identifier: 2C:BB:28:06:69:AD:D5:03:D2:5D:C5:2B:15:04:9C:3E:1C:CF:F9:30 Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 44D87A912EA06A2B4A194E073C240706B2442D1C Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3231302e352e3134342e302f32312d3231203d3e2034383132.roa Signing time: Mon 13 Apr 2026 02:50:26 +0000 ROA not before: Mon 13 Apr 2026 02:45:26 +0000 ROA not after: Mon 12 Apr 2027 02:50:26 +0000 asID: 4812 IP address blocks: 210.5.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:d8:7a:91:2e:a0:6a:2b:4a:19:4e:07:3c:24:07:06:b2:44:2d:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 02:45:26 2026 GMT Not After : Apr 12 02:50:26 2027 GMT Subject: CN=2CBB280669ADD503D25DC52B15049C3E1CCFF930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:51:de:e2:f4:2f:60:67:de:15:b3:b6:37:3c: d0:ca:fc:52:f3:3b:1b:d1:2f:cb:77:e7:71:04:ec: fd:95:a8:b3:c2:28:8c:e9:90:82:14:11:b7:76:27: 8b:9a:c2:45:3e:9b:90:d4:29:33:4c:25:51:9b:8d: 1e:05:13:18:7a:a0:05:17:bb:2b:e5:df:ee:a6:e9: cd:7c:e6:8c:58:00:65:9b:43:64:ff:02:03:66:70: 35:bf:9a:9b:d6:97:93:73:10:44:8e:65:dd:7d:c3: eb:07:10:5e:b6:c4:7c:f9:0e:0c:a8:14:68:3a:2a: f6:40:e4:6c:21:7a:98:d9:24:08:ca:d0:17:3a:7f: ef:35:bd:96:a1:2b:76:e6:e4:6d:3d:b2:70:b1:05: 54:d3:cd:82:e9:74:9f:ed:4e:28:8c:f4:cf:b2:89: 8f:4f:60:0e:e3:9c:fa:e7:5b:1a:8b:db:61:c7:99: 33:b6:e6:fc:7c:f2:fe:8e:8e:a8:5f:69:52:18:3b: f8:8b:6a:b5:80:9f:7e:3e:1f:cc:e4:cb:aa:65:fa: a6:72:29:77:cc:2f:fa:65:9f:9b:6d:16:a0:93:72: 92:da:4d:a0:5d:62:c5:60:c2:2c:40:67:cb:5c:6a: 65:07:b8:cd:49:5e:ae:7c:ae:85:2f:91:59:d3:44: 71:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BB:28:06:69:AD:D5:03:D2:5D:C5:2B:15:04:9C:3E:1C:CF:F9:30 X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3231302e352e3134342e302f32312d3231203d3e2034383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.5.144.0/21 Signature Algorithm: sha256WithRSAEncryption 06:64:63:74:08:72:d0:ea:d2:a2:64:18:e4:73:ba:af:66:07: b5:fe:2e:e6:00:4b:7d:2b:94:2d:a0:54:db:68:a8:b7:e9:0f: 99:c8:a8:bb:2d:e2:f8:96:d2:32:d3:5f:1f:f3:39:2d:1a:7c: f1:b1:2c:c3:70:c0:20:7f:fb:4b:71:f1:fd:78:35:a9:b0:46: b9:72:cd:ce:87:2e:38:23:89:f6:c2:b9:38:7f:c8:85:56:cd: 32:0e:bf:f8:07:45:32:1a:f8:dd:74:66:54:48:e2:20:cc:d5: 7e:07:5e:fe:e1:3e:a8:6b:f0:f2:21:39:2d:35:f8:04:17:fa: 9e:a1:98:61:7b:a9:df:ca:a3:34:62:10:f1:0d:44:08:08:50: 08:0c:43:e0:6a:5d:8d:19:57:df:5b:87:43:ef:82:6b:82:8c: 57:84:77:ed:de:52:c1:3f:6b:35:01:ae:5a:19:b3:41:9c:72: da:67:b1:2e:94:77:f5:b1:4c:46:0c:61:5a:7f:ab:22:3a:14: 2c:8c:66:fd:69:a9:52:7e:2b:34:6f:ef:02:1b:0f:61:a8:97: 74:c2:76:5d:d9:f2:54:9b:9c:9e:8d:1b:d8:fb:a5:8a:bb:64: 79:5b:be:9a:51:10:1d:07:70:9f:29:91:1d:10:06:89:a3:bf: 60:1d:30:7d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIURNh6kS6gaitKGU4HPCQHBrJELRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMjQ1MjZaFw0yNzA0MTIwMjUwMjZaMDMxMTAvBgNV BAMTKDJDQkIyODA2NjlBREQ1MDNEMjVEQzUyQjE1MDQ5QzNFMUNDRkY5MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Ud7i9C9gZ94Vs7Y3PNDK/FLz OxvRL8t353EE7P2VqLPCKIzpkIIUEbd2J4uawkU+m5DUKTNMJVGbjR4FExh6oAUX uyvl3+6m6c185oxYAGWbQ2T/AgNmcDW/mpvWl5NzEESOZd19w+sHEF62xHz5Dgyo FGg6KvZA5GwhepjZJAjK0Bc6f+81vZahK3bm5G09snCxBVTTzYLpdJ/tTiiM9M+y iY9PYA7jnPrnWxqL22HHmTO25vx88v6OjqhfaVIYO/iLarWAn34+H8zky6pl+qZy KXfML/pln5ttFqCTcpLaTaBdYsVgwixAZ8tcamUHuM1JXq58roUvkVnTRHEvAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQULLsoBmmt1QPSXcUrFQScPhzP+TAwHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1ODg3ODgwMDgzMDEzNjM1LzAvMzIzMTMwMmUzNTJl MzEzNDM0MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzQzODMxMzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAPSBZAwDQYJKoZIhvcNAQELBQADggEBAAZkY3QIctDq0qJkGORzuq9mB7X+LuYA S30rlC2gVNtoqLfpD5nIqLst4viW0jLTXx/zOS0afPGxLMNwwCB/+0tx8f14Namw Rrlyzc6HLjgjifbCuTh/yIVWzTIOv/gHRTIa+N10ZlRI4iDM1X4HXv7hPqhr8PIh OS01+AQX+p6hmGF7qd/KozRiEPENRAgIUAgMQ+BqXY0ZV99bh0PvgmuCjFeEd+3e UsE/azUBrloZs0GcctpnsS6Ud/WxTEYMYVp/qyI6FCyMZv1pqVJ+KzRv7wIbD2Go l3TCdl3Z8lSbnJ6NG9j7pYq7ZHlbvppREB0HcJ8pkR0QBomjv2AdMH0= -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:15 2026 by rpki-client