$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3230332e3136362e3136322e302f32342d3234203d3e20313338343231.roa File: 3230332e3136362e3136322e302f32342d3234203d3e20313338343231.roa (raw, json) Hash identifier: 4qemjDQmhVrxURla+wArsAMUjg/AY0LtHQLmgzMEz+E= Subject key identifier: 36:C3:F0:98:21:DB:82:89:BB:66:18:83:E6:24:F2:17:42:A0:11:2B Certificate issuer: /CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Certificate serial: 7151955E60D7AF14C31107F092979B75750E0493 Authority key identifier: 9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3230332e3136362e3136322e302f32342d3234203d3e20313338343231.roa Signing time: Thu 23 Apr 2026 03:04:15 +0000 ROA not before: Thu 23 Apr 2026 02:59:15 +0000 ROA not after: Thu 22 Apr 2027 03:04:15 +0000 asID: 138421 IP address blocks: 203.166.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 04:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:51:95:5e:60:d7:af:14:c3:11:07:f0:92:97:9b:75:75:0e:04:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Validity Not Before: Apr 23 02:59:15 2026 GMT Not After : Apr 22 03:04:15 2027 GMT Subject: CN=36C3F09821DB8289BB661883E624F21742A0112B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:34:7a:df:bb:6c:bf:90:38:0e:e6:6f:a7:15: fe:17:6b:d7:b2:f6:4d:77:11:6c:bd:90:fd:0e:f9: 16:45:47:92:d2:05:f6:9e:1b:04:03:ee:4e:45:66: 7e:fe:84:ae:13:aa:fb:82:ae:3b:1f:86:40:f7:03: 1a:4a:92:02:1d:c7:83:88:a2:3c:a0:67:cb:d6:50: a0:53:2a:ae:3f:78:a7:f2:d9:ae:7c:da:ff:15:6b: 60:33:2d:0e:dd:ec:a2:fd:57:2d:12:9e:7a:8a:11: 4e:85:86:29:b3:b9:1f:21:69:18:2d:2c:fb:d4:d2: 48:79:2a:6f:ff:6e:67:d6:23:b1:8d:5d:60:60:4c: 1e:6d:82:bd:3f:82:52:c2:f1:d5:2f:f3:8f:9d:ac: 7c:5e:95:4f:3b:5a:a8:eb:b2:b0:78:1f:3b:59:9e: be:f0:d4:40:c1:08:a3:8f:43:01:96:b2:b4:4c:2a: 1e:2f:73:84:b7:ba:3e:45:bd:04:da:2c:11:74:a4: d6:be:9b:9d:0d:c0:c6:58:0b:76:33:cc:56:85:d1: a2:d7:f7:d7:33:7b:d7:c0:89:a2:4b:fb:45:e2:09: 1b:b8:c6:09:b7:43:d7:fd:64:db:53:48:b2:34:84: 5b:19:0e:ac:8b:b0:42:c3:7f:d7:bc:62:87:86:57: 74:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C3:F0:98:21:DB:82:89:BB:66:18:83:E6:24:F2:17:42:A0:11:2B X509v3 Authority Key Identifier: keyid:9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3230332e3136362e3136322e302f32342d3234203d3e20313338343231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.166.162.0/24 Signature Algorithm: sha256WithRSAEncryption 79:00:7e:1d:a0:21:be:d0:2f:4c:f7:01:bb:84:07:53:7b:70: 0f:2b:d7:d6:6b:e2:ff:df:bb:61:25:6e:3b:bf:48:06:a7:a8: 1b:fb:73:0e:a1:c2:93:f0:5f:15:a2:5a:1d:cc:32:98:31:71: ee:f3:fc:f6:13:9d:4b:e9:5a:93:33:f3:a9:7d:75:15:61:52: fb:b9:df:50:e5:f5:96:e4:cc:8b:9e:55:6d:72:38:82:be:ed: ed:00:e6:c8:1e:b0:b5:9a:c3:f2:a2:4d:40:13:ba:ff:8b:ea: ad:1a:e4:c6:4b:81:ed:26:c5:19:f4:ae:07:fb:ad:42:80:3a: 34:17:4d:1e:36:c9:97:eb:84:08:97:b6:4a:75:34:23:8b:8a: 06:e8:0a:63:bd:3a:8d:61:c0:32:a7:32:7e:4d:49:60:82:13: a5:21:aa:ac:aa:75:1c:0c:d2:06:22:2e:1e:2f:ec:b3:95:8c: b2:96:cc:4c:96:0c:ea:b3:42:e1:69:f0:25:d0:09:ad:a6:3f: 3f:bc:b0:23:bb:7b:0d:46:e7:9a:6f:a6:6a:ba:91:83:0b:9c: cf:d6:6f:a1:7c:62:1d:99:16:f0:21:e9:dc:18:fd:1c:ad:32: a9:38:ed:9b:6c:0a:32:84:f9:cd:5e:fe:fb:97:ef:32:a1:fd: cb:9a:b2:a2 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUcVGVXmDXrxTDEQfwkpebdXUOBJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1 RjNFNDI0RTAeFw0yNjA0MjMwMjU5MTVaFw0yNzA0MjIwMzA0MTVaMDMxMTAvBgNV BAMTKDM2QzNGMDk4MjFEQjgyODlCQjY2MTg4M0U2MjRGMjE3NDJBMDExMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDINHrfu2y/kDgO5m+nFf4Xa9ey 9k13EWy9kP0O+RZFR5LSBfaeGwQD7k5FZn7+hK4TqvuCrjsfhkD3AxpKkgIdx4OI ojygZ8vWUKBTKq4/eKfy2a582v8Va2AzLQ7d7KL9Vy0SnnqKEU6FhimzuR8haRgt LPvU0kh5Km//bmfWI7GNXWBgTB5tgr0/glLC8dUv84+drHxelU87WqjrsrB4HztZ nr7w1EDBCKOPQwGWsrRMKh4vc4S3uj5FvQTaLBF0pNa+m50NwMZYC3YzzFaF0aLX 99cze9fAiaJL+0XiCRu4xgm3Q9f9ZNtTSLI0hFsZDqyLsELDf9e8YoeGV3RTAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUNsPwmCHbgom7ZhiD5iTyF0KgESswHwYDVR0j BBgwFoAUmor6fwM5VuBCXxWxBwpgb18+Qk4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM4NzM5ODQ2MDg2NjU2MS8wLzlBOEFGQTdGMDMzOTU2RTA0MjVGMTVCMTA3MEE2 MDZGNUYzRTQyNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1RjNFNDI0RS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk3Mzg3Mzk4NDYwODY2NTYxLzAvMzIzMDMzMmUz MTM2MzYyZTMxMzYzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzODM0MzIz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMumojANBgkqhkiG9w0BAQsFAAOCAQEAeQB+HaAhvtAvTPcB u4QHU3twDyvX1mvi/9+7YSVuO79IBqeoG/tzDqHCk/BfFaJaHcwymDFx7vP89hOd S+lakzPzqX11FWFS+7nfUOX1luTMi55VbXI4gr7t7QDmyB6wtZrD8qJNQBO6/4vq rRrkxkuB7SbFGfSuB/utQoA6NBdNHjbJl+uECJe2SnU0I4uKBugKY706jWHAMqcy fk1JYIITpSGqrKp1HAzSBiIuHi/ss5WMspbMTJYM6rNC4WnwJdAJraY/P7ywI7t7 DUbnmm+marqRgwucz9ZvoXxiHZkW8CHp3Bj9HK0yqTjtm2wKMoT5zV7++5fvMqH9 y5qyog== -----END CERTIFICATE-----Generated at Mon Apr 27 11:01:03 2026 by rpki-client