$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3231302e352e3135322e302f32312d3231203d3e2034383132.roa File: 3231302e352e3135322e302f32312d3231203d3e2034383132.roa (raw, json) Hash identifier: +ZHNbMnaFGN/uSkWabSmE75mffioRCBu0BsefK4v1lY= Subject key identifier: EE:1F:D5:5A:C8:BE:39:32:04:EB:E8:0B:CF:52:42:89:1A:48:93:F1 Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 6508DFF89E40FF143681B7F817332DD780DC8B6F Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3231302e352e3135322e302f32312d3231203d3e2034383132.roa Signing time: Mon 13 Apr 2026 02:50:26 +0000 ROA not before: Mon 13 Apr 2026 02:45:26 +0000 ROA not after: Mon 12 Apr 2027 02:50:26 +0000 asID: 4812 IP address blocks: 210.5.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:08:df:f8:9e:40:ff:14:36:81:b7:f8:17:33:2d:d7:80:dc:8b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 02:45:26 2026 GMT Not After : Apr 12 02:50:26 2027 GMT Subject: CN=EE1FD55AC8BE393204EBE80BCF5242891A4893F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0a:fc:93:cc:db:f2:14:d1:a7:57:16:d8:04: 2d:1a:47:e1:8b:a4:d6:40:6b:c8:18:a1:83:07:df: 44:7a:af:59:4f:05:5e:ff:9d:b1:6c:5e:50:6c:71: 22:be:7c:eb:fa:54:7e:3a:f3:1b:9b:fa:35:be:2c: e1:60:a7:d5:f3:83:ba:2d:98:cf:9f:94:31:89:92: 5b:f2:0a:86:37:80:18:69:10:50:0d:6d:f3:30:35: 4f:69:d5:a5:d4:55:4b:08:6e:3e:ff:0c:be:2b:35: 5b:cb:69:6b:2c:7e:fa:b5:c7:2e:12:1c:32:dc:bc: 00:f2:a6:a4:55:41:3f:28:6b:19:2a:d3:99:30:26: f6:53:9b:c1:2f:43:e6:4e:06:5a:e5:51:a4:5c:27: 7c:53:35:a2:c8:29:17:5f:30:de:1a:0f:be:87:b0: ae:14:8d:3f:66:03:5e:03:46:11:ad:8d:8e:bc:01: b4:9d:85:b3:5a:a2:11:2c:87:58:1f:72:1b:c1:50: 07:4c:f6:c3:97:a4:b5:a2:1e:5a:94:c5:11:6c:60: 45:69:27:7c:1e:bf:73:8a:c6:b3:92:69:23:39:d6: 4d:37:37:4b:cd:cd:9c:95:fb:6a:9f:c6:e6:14:3d: 1a:b6:15:3f:c9:da:53:dc:94:c3:19:f8:a8:c6:71: 74:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:1F:D5:5A:C8:BE:39:32:04:EB:E8:0B:CF:52:42:89:1A:48:93:F1 X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3231302e352e3135322e302f32312d3231203d3e2034383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.5.152.0/21 Signature Algorithm: sha256WithRSAEncryption bf:fc:c8:b8:04:02:43:b4:9d:56:8f:86:fb:a7:2a:8e:82:ce: f0:07:16:70:74:a8:25:e7:9e:e6:85:ca:fe:ac:0d:32:c7:13: 17:2f:4d:67:20:3f:eb:47:45:79:7b:9e:eb:aa:0f:70:f5:16: 67:64:fc:17:80:e7:2f:e7:b0:73:c9:b3:bd:92:ca:a1:8d:76: 3d:81:84:4f:d2:8a:86:f9:72:de:56:a9:4d:3c:9c:a3:82:30: 04:47:9d:2e:ef:c3:3a:ef:c9:40:9c:9c:25:09:2e:d0:29:c6: 91:51:6b:18:68:bf:de:d4:a0:ce:52:7f:6f:5a:76:f3:56:e9: 64:38:67:90:2b:05:be:9b:a4:1b:e3:3c:6b:4a:f4:fd:02:d6: c6:7c:08:d7:c0:f9:5b:d1:71:7b:44:ff:0b:e7:68:cd:f6:f2: 26:32:a6:c1:27:d7:5c:37:e0:57:c2:e6:d0:fc:77:2b:f6:54: 11:a7:97:d0:eb:60:21:ff:51:40:bc:12:54:55:ca:cb:2c:dd: cf:79:0e:47:ac:68:63:3b:90:04:09:f0:ea:10:f5:45:e9:e2: 75:88:28:92:28:8d:d5:5b:a6:9d:b6:eb:58:ee:fb:b1:3d:98: f2:85:ec:d0:4f:68:27:24:5e:ca:92:d6:1b:49:62:ef:a1:ab: 85:61:48:37 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUZQjf+J5A/xQ2gbf4FzMt14Dci28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMjQ1MjZaFw0yNzA0MTIwMjUwMjZaMDMxMTAvBgNV BAMTKEVFMUZENTVBQzhCRTM5MzIwNEVCRTgwQkNGNTI0Mjg5MUE0ODkzRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdCvyTzNvyFNGnVxbYBC0aR+GL pNZAa8gYoYMH30R6r1lPBV7/nbFsXlBscSK+fOv6VH468xub+jW+LOFgp9Xzg7ot mM+flDGJklvyCoY3gBhpEFANbfMwNU9p1aXUVUsIbj7/DL4rNVvLaWssfvq1xy4S HDLcvADypqRVQT8oaxkq05kwJvZTm8EvQ+ZOBlrlUaRcJ3xTNaLIKRdfMN4aD76H sK4UjT9mA14DRhGtjY68AbSdhbNaohEsh1gfchvBUAdM9sOXpLWiHlqUxRFsYEVp J3wev3OKxrOSaSM51k03N0vNzZyV+2qfxuYUPRq2FT/J2lPclMMZ+KjGcXQ1AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQU7h/VWsi+OTIE6+gLz1JCiRpIk/EwHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1ODg3ODgwMDgzMDEzNjM1LzAvMzIzMTMwMmUzNTJl MzEzNTMyMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzQzODMxMzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAPSBZgwDQYJKoZIhvcNAQELBQADggEBAL/8yLgEAkO0nVaPhvunKo6CzvAHFnB0 qCXnnuaFyv6sDTLHExcvTWcgP+tHRXl7nuuqD3D1Fmdk/BeA5y/nsHPJs72SyqGN dj2BhE/Siob5ct5WqU08nKOCMARHnS7vwzrvyUCcnCUJLtApxpFRaxhov97UoM5S f29advNW6WQ4Z5ArBb6bpBvjPGtK9P0C1sZ8CNfA+VvRcXtE/wvnaM328iYypsEn 11w34FfC5tD8dyv2VBGnl9DrYCH/UUC8ElRVysss3c95DkesaGM7kAQJ8OoQ9UXp 4nWIKJIojdVbpp2261ju+7E9mPKF7NBPaCckXsqS1htJYu+hq4VhSDc= -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:17 2026 by rpki-client