$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3231302e352e3134342e302f32342d3234203d3e203234313431.roa File: 3231302e352e3134342e302f32342d3234203d3e203234313431.roa (raw, json) Hash identifier: E3vH9UEyKbEi4T5ttbo2AVGXtsJPxhKpOg/Z6viL11k= Subject key identifier: C9:BD:03:65:67:12:CC:8F:0C:47:CB:E2:CC:AD:56:85:50:27:18:86 Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 39E31618298598EF91E2D209E459F9989297B3EF Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3231302e352e3134342e302f32342d3234203d3e203234313431.roa Signing time: Mon 13 Apr 2026 02:52:24 +0000 ROA not before: Mon 13 Apr 2026 02:47:24 +0000 ROA not after: Mon 12 Apr 2027 02:52:24 +0000 asID: 24141 IP address blocks: 210.5.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:e3:16:18:29:85:98:ef:91:e2:d2:09:e4:59:f9:98:92:97:b3:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 02:47:24 2026 GMT Not After : Apr 12 02:52:24 2027 GMT Subject: CN=C9BD03656712CC8F0C47CBE2CCAD568550271886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4e:75:71:a1:16:55:c4:35:7c:82:fb:c3:7d: 56:cc:8e:a4:76:3a:34:0e:39:18:73:62:0d:55:b4: 7a:43:2a:bb:b6:2b:c8:1d:74:ae:98:4c:de:f8:7e: 69:ec:17:eb:13:29:17:b2:1d:6c:1c:d6:8b:ef:8b: 4f:a2:39:86:6e:21:8b:e9:1b:49:eb:26:40:a6:96: bc:eb:6f:96:44:f1:db:7d:6a:d6:57:4e:b5:5c:70: 9c:c6:8f:7f:09:e0:d4:3f:1d:88:d9:2a:b9:9f:5a: e2:f7:ba:03:53:ef:c8:cf:e8:75:50:8a:53:df:d1: a8:52:95:13:71:16:56:10:6f:3e:f7:4b:2c:af:30: 0a:b5:42:1e:21:56:aa:ae:ee:19:26:ef:d0:96:28: eb:3f:a9:12:22:3b:87:dd:ca:a8:9c:4c:73:37:d0: 30:e6:e4:05:01:27:cf:a1:90:d2:55:0d:00:4f:54: c4:27:cc:60:c7:e7:ed:54:3f:7c:3c:fe:4f:c7:15: ab:fa:14:4b:6d:f6:17:7a:78:0a:39:bf:5e:c4:83: e3:71:13:57:4d:cf:ce:b3:6c:f3:ab:a0:e9:e5:51: 99:05:95:2b:70:21:b4:f8:9c:98:3c:cd:79:66:a4: 25:21:f8:c7:03:23:3d:38:d1:9f:43:36:af:f0:49: e4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BD:03:65:67:12:CC:8F:0C:47:CB:E2:CC:AD:56:85:50:27:18:86 X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3231302e352e3134342e302f32342d3234203d3e203234313431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.5.144.0/24 Signature Algorithm: sha256WithRSAEncryption c1:8b:ff:39:9c:a6:87:c3:52:38:9c:f6:2d:90:bc:68:ba:71: 72:aa:50:9c:72:ff:13:aa:11:23:3d:8c:8c:83:05:6f:ed:ca: 45:31:8f:94:fa:24:e1:b9:45:d5:cd:96:a6:66:7d:a7:9a:73: c6:22:c0:94:24:eb:41:e3:ef:b0:2a:b2:53:71:58:77:e2:8f: a0:a9:7b:74:e9:43:f2:34:86:91:70:56:91:0e:e2:f4:76:5a: 9b:9e:80:4c:45:7b:05:ab:b7:e7:86:87:be:34:eb:cc:d6:b3: eb:ef:48:17:e3:9d:f2:51:e4:cb:ea:fc:1a:e1:81:7e:2b:48: c2:50:f2:8e:93:a9:f6:bb:27:47:89:cd:8e:49:dc:99:44:c3: 8d:06:95:18:7c:24:7f:d3:e9:a9:25:c2:ad:c2:0f:20:cb:d9: ed:9a:66:a4:0e:47:0e:5c:cb:96:10:34:6f:0e:25:1f:d9:81: e4:8c:79:89:73:cf:ce:e1:69:da:7a:73:77:ff:7b:89:55:1e: d5:54:17:f0:b1:a9:ba:8b:7c:f0:3e:92:96:05:ca:c9:a8:7a: 95:74:b5:53:52:56:93:5a:8e:e2:12:cb:14:f0:b4:6c:6b:f3: 0c:ae:74:5d:bd:78:1f:39:05:d1:d2:9d:ac:07:20:b0:14:4c: 9a:2e:5a:8d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUOeMWGCmFmO+R4tIJ5Fn5mJKXs+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMjQ3MjRaFw0yNzA0MTIwMjUyMjRaMDMxMTAvBgNV BAMTKEM5QkQwMzY1NjcxMkNDOEYwQzQ3Q0JFMkNDQUQ1Njg1NTAyNzE4ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoTnVxoRZVxDV8gvvDfVbMjqR2 OjQOORhzYg1VtHpDKru2K8gddK6YTN74fmnsF+sTKReyHWwc1ovvi0+iOYZuIYvp G0nrJkCmlrzrb5ZE8dt9atZXTrVccJzGj38J4NQ/HYjZKrmfWuL3ugNT78jP6HVQ ilPf0ahSlRNxFlYQbz73SyyvMAq1Qh4hVqqu7hkm79CWKOs/qRIiO4fdyqicTHM3 0DDm5AUBJ8+hkNJVDQBPVMQnzGDH5+1UP3w8/k/HFav6FEtt9hd6eAo5v17Eg+Nx E1dNz86zbPOroOnlUZkFlStwIbT4nJg8zXlmpCUh+McDIz040Z9DNq/wSeQ/AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUyb0DZWcSzI8MR8vizK1WhVAnGIYwHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1ODg3ODgwMDgzMDEzNjM1LzAvMzIzMTMwMmUzNTJl MzEzNDM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNDMxMzQzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANIFkDANBgkqhkiG9w0BAQsFAAOCAQEAwYv/OZymh8NSOJz2LZC8aLpxcqpQ nHL/E6oRIz2MjIMFb+3KRTGPlPok4blF1c2WpmZ9p5pzxiLAlCTrQePvsCqyU3FY d+KPoKl7dOlD8jSGkXBWkQ7i9HZam56ATEV7Bau354aHvjTrzNaz6+9IF+Od8lHk y+r8GuGBfitIwlDyjpOp9rsnR4nNjkncmUTDjQaVGHwkf9PpqSXCrcIPIMvZ7Zpm pA5HDlzLlhA0bw4lH9mB5Ix5iXPPzuFp2npzd/97iVUe1VQX8LGpuot88D6SlgXK yah6lXS1U1JWk1qO4hLLFPC0bGvzDK50Xb14HzkF0dKdrAcgsBRMmi5ajQ== -----END CERTIFICATE-----Generated at Mon Apr 13 13:53:24 2026 by rpki-client