$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3138322e35302e3131322e302f32312d3231203d3e2034383437.roa File: 3138322e35302e3131322e302f32312d3231203d3e2034383437.roa (raw, json) Hash identifier: ipXuV7/MXvbmJ22cuJLcTuuJvj+zhSZmvARnFPqx5Zw= Subject key identifier: E7:58:25:10:39:E3:E1:B5:71:9B:C1:08:9C:78:31:0B:0A:12:93:C7 Certificate issuer: /CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6 Certificate serial: 3C15814B58AC9649A1196BE4FF21A158D6F8C54C Authority key identifier: C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3138322e35302e3131322e302f32312d3231203d3e2034383437.roa Signing time: Mon 13 Apr 2026 06:59:35 +0000 ROA not before: Mon 13 Apr 2026 06:54:35 +0000 ROA not after: Mon 12 Apr 2027 06:59:35 +0000 asID: 4847 IP address blocks: 182.50.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:15:81:4b:58:ac:96:49:a1:19:6b:e4:ff:21:a1:58:d6:f8:c5:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6 Validity Not Before: Apr 13 06:54:35 2026 GMT Not After : Apr 12 06:59:35 2027 GMT Subject: CN=E758251039E3E1B5719BC1089C78310B0A1293C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:23:a6:07:77:d2:13:b9:15:c8:cd:c7:66:91: 55:66:79:75:3b:02:27:58:ff:b5:da:c2:b5:d2:ee: c5:d8:bf:94:5b:37:c2:16:3d:71:67:c9:65:19:6e: 37:ad:d4:9c:46:f9:de:63:78:5e:4a:10:af:76:50: c9:6c:04:6c:93:32:e8:07:47:4e:d7:1e:37:b6:9a: 8b:d3:3d:dc:9e:84:74:8a:c0:28:08:2f:fb:64:c7: f5:3d:16:fb:ef:76:d0:a2:bd:5f:dc:de:7d:fd:19: df:0d:63:21:e9:84:41:bf:11:0a:ca:3d:bf:c1:07: ed:03:c5:5e:3c:02:90:04:51:6a:42:53:c9:37:2e: 40:b9:91:d9:47:b7:e7:33:97:96:9e:aa:1e:b6:f6: a9:ff:bb:f6:c7:65:2d:6d:2f:ff:d9:4a:a7:b3:65: 89:45:66:39:cc:38:cc:aa:da:5c:67:d6:d6:ea:76: 7d:4c:5c:3f:82:c6:9d:fa:3b:75:15:cc:1e:a8:b6: 9a:af:0a:38:64:39:eb:02:2e:75:63:8a:7b:47:da: 46:22:af:45:fa:cf:1f:67:35:1d:4c:62:ba:bb:55: 7e:1d:d1:17:d3:94:49:89:41:ba:b1:a6:cd:2e:fc: d5:cd:54:17:4b:67:de:cc:7f:52:ca:2f:e9:50:b0: f0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:58:25:10:39:E3:E1:B5:71:9B:C1:08:9C:78:31:0B:0A:12:93:C7 X509v3 Authority Key Identifier: keyid:C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3138322e35302e3131322e302f32312d3231203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 182.50.112.0/21 Signature Algorithm: sha256WithRSAEncryption a2:0a:da:7a:ff:fd:8e:7a:9c:84:88:19:97:07:56:3f:1b:ca: 0a:1c:22:30:3f:96:94:6e:cf:47:05:f2:5d:51:c0:52:bf:cc: ba:4b:7e:a3:c2:cf:02:3a:a4:30:80:e5:10:98:fa:53:be:5d: ae:7d:78:bf:78:e6:5f:e5:70:b7:ea:16:e9:ec:60:3b:f5:77: aa:53:b7:7e:b3:ff:a8:d8:84:ab:1a:6f:9f:3f:99:62:8e:8f: 6f:38:5f:cb:0e:50:6a:61:dc:e2:f0:8e:fa:59:87:0d:c2:62: 64:ac:bd:d5:05:3f:18:5b:18:c2:3e:b1:97:54:d4:0d:27:f8: 1e:d3:d6:95:95:54:7a:d9:57:80:6f:53:db:28:4c:79:99:48: 91:57:2c:b2:67:85:24:51:53:33:fa:7d:60:61:97:06:3a:38: 1b:df:8f:73:ce:00:70:b1:d0:c9:9e:01:43:e6:4d:d9:40:b9: a9:63:26:b0:64:5b:0d:ab:dd:4e:20:1c:22:52:2f:6c:83:76: af:50:78:c0:7b:a6:5d:c6:d8:1a:89:b7:91:78:df:73:f4:e1: a8:34:d6:77:f2:5b:df:e7:5b:2b:d5:4b:fc:b7:c6:84:d2:6e: 2f:30:d4:a3:e9:c0:84:31:f8:66:22:0a:ea:47:9f:39:58:a8: 0c:b3:e4:a4 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUPBWBS1islkmhGWvk/yGhWNb4xUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQTEyMDM5QTI4MDcwQjBGQkJFQUZERTdGRkMwNUUx RjhFNkNDNjAeFw0yNjA0MTMwNjU0MzVaFw0yNzA0MTIwNjU5MzVaMDMxMTAvBgNV BAMTKEU3NTgyNTEwMzlFM0UxQjU3MTlCQzEwODlDNzgzMTBCMEExMjkzQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7I6YHd9ITuRXIzcdmkVVmeXU7 AidY/7XawrXS7sXYv5RbN8IWPXFnyWUZbjet1JxG+d5jeF5KEK92UMlsBGyTMugH R07XHje2movTPdyehHSKwCgIL/tkx/U9FvvvdtCivV/c3n39Gd8NYyHphEG/EQrK Pb/BB+0DxV48ApAEUWpCU8k3LkC5kdlHt+czl5aeqh629qn/u/bHZS1tL//ZSqez ZYlFZjnMOMyq2lxn1tbqdn1MXD+Cxp36O3UVzB6otpqvCjhkOesCLnVjintH2kYi r0X6zx9nNR1MYrq7VX4d0RfTlEmJQbqxps0u/NXNVBdLZ97Mf1LKL+lQsPDpAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU51glEDnj4bVxm8EInHgxCwoSk8cwHwYDVR0j BBgwFoAUwsoSA5ooBwsPu+r95//AXh+ObMYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2MzIxNTM3Nzk4OTYzNS8wL0MyQ0ExMjAzOUEyODA3MEIwRkJCRUFGREU3RkZD MDVFMUY4RTZDQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzJDQTEyMDM5QTI4MDcwQjBGQkJFQUZERTdGRkMwNUUxRjhFNkNDNi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1OTYzMjE1Mzc3OTg5NjM1LzAvMzEzODMyMmUzNTMw MmUzMTMxMzIyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7YycDANBgkqhkiG9w0BAQsFAAOCAQEAograev/9jnqchIgZlwdWPxvKChwi MD+WlG7PRwXyXVHAUr/Mukt+o8LPAjqkMIDlEJj6U75drn14v3jmX+Vwt+oW6exg O/V3qlO3frP/qNiEqxpvnz+ZYo6Pbzhfyw5QamHc4vCO+lmHDcJiZKy91QU/GFsY wj6xl1TUDSf4HtPWlZVUetlXgG9T2yhMeZlIkVcssmeFJFFTM/p9YGGXBjo4G9+P c84AcLHQyZ4BQ+ZN2UC5qWMmsGRbDavdTiAcIlIvbIN2r1B4wHumXcbYGom3kXjf c/ThqDTWd/Jb3+dbK9VL/LfGhNJuLzDUo+nAhDH4ZiIK6kefOVioDLPkpA== -----END CERTIFICATE-----Generated at Mon Apr 13 17:47:50 2026 by rpki-client