$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3230332e3136362e3136302e302f32342d3234203d3e20313338343231.roa File: 3230332e3136362e3136302e302f32342d3234203d3e20313338343231.roa (raw, json) Hash identifier: FEGw9yMwr+6w2PhZIJYmgIseeocSjdFwLqJvwVhMBL8= Subject key identifier: E5:11:4A:12:49:56:BC:F9:07:19:DD:AD:42:4B:C3:73:76:9B:38:A8 Certificate issuer: /CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Certificate serial: 0FE86FED2F04758830380E6B622D2E6187DE6A6F Authority key identifier: 9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3230332e3136362e3136302e302f32342d3234203d3e20313338343231.roa Signing time: Thu 23 Apr 2026 03:04:14 +0000 ROA not before: Thu 23 Apr 2026 02:59:14 +0000 ROA not after: Thu 22 Apr 2027 03:04:14 +0000 asID: 138421 IP address blocks: 203.166.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 04:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e8:6f:ed:2f:04:75:88:30:38:0e:6b:62:2d:2e:61:87:de:6a:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Validity Not Before: Apr 23 02:59:14 2026 GMT Not After : Apr 22 03:04:14 2027 GMT Subject: CN=E5114A124956BCF90719DDAD424BC373769B38A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a7:eb:79:0d:8c:32:a2:56:41:9a:54:fa:3d: f5:8a:3e:09:21:d3:36:5b:be:d5:08:54:ce:71:75: de:06:f4:4c:93:00:77:b5:02:97:39:e4:6b:78:2b: 79:bb:04:ea:ff:73:6b:da:0c:fa:08:96:44:fc:83: 03:aa:af:eb:2f:38:82:ec:b7:26:9e:d0:c0:0b:19: 64:c9:3d:e0:a3:09:ad:e8:46:87:40:09:23:c2:b0: b0:c5:a0:82:27:f7:d5:02:63:f5:35:3f:08:c7:99: 04:21:07:76:ba:1a:17:62:7c:b3:6e:63:a4:57:07: a0:38:c8:9f:2b:76:96:39:af:dd:0b:c7:21:dd:6e: 8a:06:ac:b1:73:e6:dd:42:95:6e:b5:17:25:f5:c4: 9a:ce:c3:d6:1b:2e:b1:26:d2:e8:3b:d5:7e:31:de: 56:0e:7b:23:ea:42:11:c4:de:11:91:ca:25:2f:54: df:f0:0e:49:78:1f:68:ac:ca:5b:bf:6d:c3:d4:5a: cc:dd:34:7c:44:52:27:91:67:47:f5:8a:97:f4:ab: ea:00:c1:ab:bc:a4:05:75:cd:c2:91:fa:43:58:1e: 68:67:6f:c2:77:30:62:f0:87:5e:e8:8e:26:46:90: ab:21:ee:20:41:bd:63:72:8e:84:cc:56:31:1a:fa: db:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:11:4A:12:49:56:BC:F9:07:19:DD:AD:42:4B:C3:73:76:9B:38:A8 X509v3 Authority Key Identifier: keyid:9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3230332e3136362e3136302e302f32342d3234203d3e20313338343231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.166.160.0/24 Signature Algorithm: sha256WithRSAEncryption 42:ee:51:30:c4:bd:17:70:04:27:1b:80:7a:88:96:11:d8:55: ed:c3:16:34:af:4e:10:50:4e:a1:66:86:6b:14:ab:c8:93:8e: 01:95:5c:4e:5a:9d:8b:ca:3f:4c:29:a3:d9:8d:8a:e5:0c:fb: 7f:92:b4:06:b5:2a:e2:4e:ab:23:f4:dc:87:6d:a7:ed:ce:e4: 2f:ec:ba:f3:07:d7:d7:80:e5:5f:84:b6:97:2a:c0:f8:25:96: 8b:27:a6:57:55:fe:b0:75:3e:32:f8:c2:35:99:f2:40:1e:3a: 32:cb:e6:78:84:8e:08:b0:0e:1e:77:c0:4a:97:16:1a:ec:fe: 2f:bf:a7:ad:50:2d:cb:f7:4f:10:f9:fd:09:fa:05:a3:c7:43: 04:3e:bd:bf:e0:cc:89:e9:a1:ea:1d:a6:32:6d:0e:ea:7e:78: fa:3f:08:12:1b:69:0f:39:72:e5:73:d9:b0:c6:d7:d4:03:3a: c0:44:bd:98:ac:b2:0e:a5:76:f3:f4:17:dc:18:d2:78:e8:d6: be:20:80:1e:0a:79:ff:b0:fa:97:8a:fc:38:d1:df:9b:7c:64: db:38:f2:a5:45:95:00:77:6b:0f:ce:e3:59:55:b4:ac:30:4c: b7:7b:47:ed:8a:cf:40:52:86:63:5d:97:1a:ea:89:3f:db:9e: 7e:56:90:e4 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUD+hv7S8EdYgwOA5rYi0uYYfeam8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1 RjNFNDI0RTAeFw0yNjA0MjMwMjU5MTRaFw0yNzA0MjIwMzA0MTRaMDMxMTAvBgNV BAMTKEU1MTE0QTEyNDk1NkJDRjkwNzE5RERBRDQyNEJDMzczNzY5QjM4QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0p+t5DYwyolZBmlT6PfWKPgkh 0zZbvtUIVM5xdd4G9EyTAHe1Apc55Gt4K3m7BOr/c2vaDPoIlkT8gwOqr+svOILs tyae0MALGWTJPeCjCa3oRodACSPCsLDFoIIn99UCY/U1PwjHmQQhB3a6GhdifLNu Y6RXB6A4yJ8rdpY5r90LxyHdbooGrLFz5t1ClW61FyX1xJrOw9YbLrEm0ug71X4x 3lYOeyPqQhHE3hGRyiUvVN/wDkl4H2isylu/bcPUWszdNHxEUieRZ0f1ipf0q+oA wau8pAV1zcKR+kNYHmhnb8J3MGLwh17ojiZGkKsh7iBBvWNyjoTMVjEa+ttbAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQU5RFKEklWvPkHGd2tQkvDc3abOKgwHwYDVR0j BBgwFoAUmor6fwM5VuBCXxWxBwpgb18+Qk4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM4NzM5ODQ2MDg2NjU2MS8wLzlBOEFGQTdGMDMzOTU2RTA0MjVGMTVCMTA3MEE2 MDZGNUYzRTQyNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1RjNFNDI0RS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk3Mzg3Mzk4NDYwODY2NTYxLzAvMzIzMDMzMmUz MTM2MzYyZTMxMzYzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzODM0MzIz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMumoDANBgkqhkiG9w0BAQsFAAOCAQEAQu5RMMS9F3AEJxuA eoiWEdhV7cMWNK9OEFBOoWaGaxSryJOOAZVcTlqdi8o/TCmj2Y2K5Qz7f5K0BrUq 4k6rI/Tch22n7c7kL+y68wfX14DlX4S2lyrA+CWWiyemV1X+sHU+MvjCNZnyQB46 MsvmeISOCLAOHnfASpcWGuz+L7+nrVAty/dPEPn9CfoFo8dDBD69v+DMiemh6h2m Mm0O6n54+j8IEhtpDzly5XPZsMbX1AM6wES9mKyyDqV28/QX3BjSeOjWviCAHgp5 /7D6l4r8ONHfm3xk2zjypUWVAHdrD87jWVW0rDBMt3tH7YrPQFKGY12XGuqJP9ue flaQ5A== -----END CERTIFICATE-----Generated at Mon Apr 27 11:01:03 2026 by rpki-client