$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135302e39382e302f32342d3234203d3e2039383033.roa File: 3231312e3135302e39382e302f32342d3234203d3e2039383033.roa (raw, json) Hash identifier: nN7sg8ZrxgBmgmAOtQzkRhBQ5w8spWBZgpshEw2bK94= Subject key identifier: EF:31:E9:35:BD:CE:A3:B2:C9:11:80:EE:3D:3E:10:C7:E4:B2:3D:1C Certificate issuer: /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC Certificate serial: 7FE68EBD76D7F8E0CE37404C8F65189CB6DB66A1 Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135302e39382e302f32342d3234203d3e2039383033.roa Signing time: Mon 13 Apr 2026 04:07:09 +0000 ROA not before: Mon 13 Apr 2026 04:02:09 +0000 ROA not after: Mon 12 Apr 2027 04:07:09 +0000 asID: 9803 IP address blocks: 211.150.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:e6:8e:bd:76:d7:f8:e0:ce:37:40:4c:8f:65:18:9c:b6:db:66:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC Validity Not Before: Apr 13 04:02:09 2026 GMT Not After : Apr 12 04:07:09 2027 GMT Subject: CN=EF31E935BDCEA3B2C91180EE3D3E10C7E4B23D1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3a:8e:bd:63:66:93:76:1f:54:34:ae:5e:b4: 76:52:62:58:f4:e5:2c:44:b0:bd:b0:58:04:a0:24: e1:c6:a6:d6:c9:3b:04:5b:31:d6:a6:b3:b4:38:a1: 38:a7:20:8d:90:87:71:61:39:de:87:fe:43:fe:c9: 13:ad:62:eb:9e:7f:cb:30:f6:b4:89:52:21:ca:2e: 74:ca:81:c7:50:b5:a1:b5:2a:d0:ba:a0:b7:8e:f4: 49:68:cb:78:6c:64:e2:5b:93:82:be:2e:0b:6c:ba: 8a:1d:c3:41:77:77:0c:fa:1a:e5:a0:0d:8d:c3:8e: d8:a6:8d:f7:0f:b0:a7:67:29:75:66:68:00:ed:c7: 8a:07:4c:d5:0e:39:24:95:65:f7:24:a1:f8:c4:aa: 44:ba:e6:a7:a2:fe:45:cc:92:bf:17:65:b9:e1:02: 01:26:6a:f7:55:5d:64:18:87:b6:ea:c9:0e:de:0e: 4b:ee:ef:75:78:2b:5d:c2:b7:f4:f6:9f:02:89:8e: b0:ec:97:c4:d5:05:61:3e:e7:07:94:59:c8:b7:01: d4:01:42:47:52:14:2e:b9:fb:d0:cb:05:61:2b:ea: ec:9c:7d:2f:70:c0:7f:89:37:68:8c:70:5b:67:77: 6d:0b:95:83:1c:c6:6c:b2:ba:e5:99:58:2b:a7:66: 68:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:31:E9:35:BD:CE:A3:B2:C9:11:80:EE:3D:3E:10:C7:E4:B2:3D:1C X509v3 Authority Key Identifier: keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135302e39382e302f32342d3234203d3e2039383033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.150.98.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:ad:05:6d:d1:ae:ac:d6:40:fc:2c:db:1c:15:27:16:97:d5: 1c:99:1d:f4:08:b7:21:ff:31:f5:ed:7c:7c:97:11:6d:03:63: ca:70:6c:d3:6a:6e:b2:2e:89:4f:f4:7f:47:2d:9f:94:84:d4: 6b:7a:ad:cd:dc:a1:6b:87:c4:fd:99:b3:09:a2:5e:f6:68:85: 9c:d3:a7:53:4d:f6:1c:c6:d4:61:c1:db:92:2d:57:07:e5:c5: b4:d9:18:37:d9:c6:ad:d5:aa:d1:39:07:b8:33:9f:76:6a:ce: b8:93:a2:ac:99:d4:92:a7:74:09:2e:4f:45:34:ca:6b:22:0f: fb:3c:cc:e1:72:7c:00:cd:87:8f:d0:c3:1b:3a:37:8d:bd:f1: 72:e5:67:80:02:f6:bc:ee:45:5f:3f:fb:e9:01:dc:24:c6:e6: 8b:03:bb:2a:cf:1b:cc:c2:32:4c:e2:43:20:ec:7f:31:df:44: ee:19:2a:37:82:19:80:3e:63:d6:49:ce:0d:3e:ef:f6:16:76: 94:49:54:9a:53:ba:bf:a1:cc:da:c4:c7:12:d5:d0:d6:3c:69: 91:54:1b:57:df:b4:3b:01:3a:c6:9d:0e:e5:d9:ca:ae:3c:e3: 72:a8:68:87:b1:92:4c:52:12:9b:41:3e:09:9b:11:ba:73:7b: 30:f4:4d:2b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUf+aOvXbX+ODON0BMj2UYnLbbZqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYy NDM1NTNDQzAeFw0yNjA0MTMwNDAyMDlaFw0yNzA0MTIwNDA3MDlaMDMxMTAvBgNV BAMTKEVGMzFFOTM1QkRDRUEzQjJDOTExODBFRTNEM0UxMEM3RTRCMjNEMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZOo69Y2aTdh9UNK5etHZSYlj0 5SxEsL2wWASgJOHGptbJOwRbMdams7Q4oTinII2Qh3FhOd6H/kP+yROtYuuef8sw 9rSJUiHKLnTKgcdQtaG1KtC6oLeO9Eloy3hsZOJbk4K+Lgtsuoodw0F3dwz6GuWg DY3DjtimjfcPsKdnKXVmaADtx4oHTNUOOSSVZfckofjEqkS65qei/kXMkr8XZbnh AgEmavdVXWQYh7bqyQ7eDkvu73V4K13Ct/T2nwKJjrDsl8TVBWE+5weUWci3AdQB QkdSFC65+9DLBWEr6uycfS9wwH+JN2iMcFtnd20LlYMcxmyyuuWZWCunZmjHAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU7zHpNb3Oo7LJEYDuPT4Qx+SyPRwwHwYDVR0j BBgwFoAUIhAvfqs3yB6Hu16yFWC/piQ1U8wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkyMDAwNjk1NDIyMTU2OS8xLzIyMTAyRjdFQUIzN0M4MUU4N0JCNUVCMjE1NjBC RkE2MjQzNTUzQ0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYyNDM1NTNDQy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1OTIwMDA2OTU0MjIxNTY5LzEvMzIzMTMxMmUzMTM1 MzAyZTM5MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTM4MzAzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANOWYjANBgkqhkiG9w0BAQsFAAOCAQEACq0FbdGurNZA/CzbHBUnFpfVHJkd 9Ai3If8x9e18fJcRbQNjynBs02pusi6JT/R/Ry2flITUa3qtzdyha4fE/ZmzCaJe 9miFnNOnU032HMbUYcHbki1XB+XFtNkYN9nGrdWq0TkHuDOfdmrOuJOirJnUkqd0 CS5PRTTKayIP+zzM4XJ8AM2Hj9DDGzo3jb3xcuVngAL2vO5FXz/76QHcJMbmiwO7 Ks8bzMIyTOJDIOx/Md9E7hkqN4IZgD5j1knODT7v9hZ2lElUmlO6v6HM2sTHEtXQ 1jxpkVQbV9+0OwE6xp0O5dnKrjzjcqhoh7GSTFISm0E+CZsRunN7MPRNKw== -----END CERTIFICATE-----Generated at Mon Apr 13 13:53:28 2026 by rpki-client