$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3230332e3136362e3136332e302f32342d3234203d3e20313338343231.roa File: 3230332e3136362e3136332e302f32342d3234203d3e20313338343231.roa (raw, json) Hash identifier: unIXFGsbFTb+CjVDIRZZaszVseYmCpHaoxIuJvts2gY= Subject key identifier: E6:52:45:6F:A3:24:D2:16:A7:33:43:00:BC:6C:30:34:26:91:6F:A7 Certificate issuer: /CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Certificate serial: 74BB08FB541911BE4C2A91641060C567B7495499 Authority key identifier: 9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3230332e3136362e3136332e302f32342d3234203d3e20313338343231.roa Signing time: Thu 23 Apr 2026 03:04:14 +0000 ROA not before: Thu 23 Apr 2026 02:59:14 +0000 ROA not after: Thu 22 Apr 2027 03:04:14 +0000 asID: 138421 IP address blocks: 203.166.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 04:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:bb:08:fb:54:19:11:be:4c:2a:91:64:10:60:c5:67:b7:49:54:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Validity Not Before: Apr 23 02:59:14 2026 GMT Not After : Apr 22 03:04:14 2027 GMT Subject: CN=E652456FA324D216A7334300BC6C303426916FA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a0:76:66:d8:ed:bf:40:56:80:0a:22:8b:ea: 77:9a:c7:0b:38:8d:26:71:0a:ad:aa:4e:a2:ae:d8: 96:9e:e7:9f:a0:22:98:32:3a:06:f4:cf:e3:6c:a6: 57:18:2f:bd:49:88:3c:94:36:2e:41:d5:e0:b2:7e: f9:ab:f6:50:44:11:d8:52:e7:a2:2d:86:13:9d:6a: 7a:ac:8c:74:ba:54:31:32:0c:1f:25:65:f8:54:4b: 0d:dd:13:34:44:ca:8e:82:28:3e:2d:cb:7c:01:db: 25:d4:60:e5:dc:d5:32:06:a9:4b:3b:39:2b:18:a4: 66:45:ea:82:77:d8:7c:ab:40:73:ad:cd:9f:03:a0: 12:ce:e4:75:ea:05:76:32:8d:a7:3b:81:63:80:23: 39:1e:3e:ee:ef:53:b7:11:cb:cd:7a:d4:5b:33:6a: b4:83:f2:e2:58:55:0b:1e:b0:b9:7d:e4:e3:91:0c: 56:75:70:56:43:38:e5:b0:ed:02:fa:0a:4f:0d:f2: a8:e7:ba:36:06:af:2e:a0:55:49:ba:2b:b0:f9:5c: ed:db:49:3b:1c:7d:b7:c3:1f:f4:e8:6b:a0:b0:7e: d7:44:d5:a6:74:71:01:77:41:37:31:9c:76:77:1a: 7f:af:b8:ad:9c:8a:f9:46:e9:5b:02:a0:ef:c0:70: bd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:52:45:6F:A3:24:D2:16:A7:33:43:00:BC:6C:30:34:26:91:6F:A7 X509v3 Authority Key Identifier: keyid:9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3230332e3136362e3136332e302f32342d3234203d3e20313338343231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.166.163.0/24 Signature Algorithm: sha256WithRSAEncryption 12:18:c5:a5:eb:bb:e5:70:f6:46:f6:56:b0:b1:94:be:34:78: 8e:82:01:e4:98:74:63:81:ad:62:dd:4a:52:eb:87:27:83:66: 1d:71:89:cc:83:0f:48:bb:56:08:a9:97:5a:e3:e7:70:29:b5: fc:8b:df:6d:40:fa:1c:58:a0:2e:92:36:23:7a:b3:d9:d7:3f: a7:0c:2a:eb:2c:12:af:c6:83:a8:c0:e6:b3:a7:93:09:52:4f: b5:60:41:4b:b4:af:55:00:c1:68:62:57:60:42:0c:b1:79:d6: f4:31:d0:2a:0d:15:9b:32:c1:b0:44:70:4f:3b:ba:eb:9f:14: 46:07:0a:93:40:6c:34:22:ce:25:8c:ba:93:33:2b:7a:6e:23: da:4b:e3:90:a7:b2:00:3b:cf:e9:1c:a4:50:0e:11:b6:cd:17: 12:07:db:00:b6:5f:76:fd:0e:6e:dd:d6:e0:33:37:35:25:20: 1f:e4:33:32:6f:51:bb:48:22:73:82:dd:3c:8c:2f:28:24:8a: 00:f9:0d:65:04:87:c9:98:9c:42:12:35:49:e1:57:2d:2e:d3: 29:05:79:f6:c1:c1:32:b5:47:ee:4e:e6:4e:39:d0:00:a8:1e: ea:6d:99:b3:28:1a:9b:86:ac:40:68:39:9e:62:46:48:bb:58: 6a:07:d9:15 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUdLsI+1QZEb5MKpFkEGDFZ7dJVJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1 RjNFNDI0RTAeFw0yNjA0MjMwMjU5MTRaFw0yNzA0MjIwMzA0MTRaMDMxMTAvBgNV BAMTKEU2NTI0NTZGQTMyNEQyMTZBNzMzNDMwMEJDNkMzMDM0MjY5MTZGQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmoHZm2O2/QFaACiKL6neaxws4 jSZxCq2qTqKu2Jae55+gIpgyOgb0z+NsplcYL71JiDyUNi5B1eCyfvmr9lBEEdhS 56IthhOdanqsjHS6VDEyDB8lZfhUSw3dEzREyo6CKD4ty3wB2yXUYOXc1TIGqUs7 OSsYpGZF6oJ32HyrQHOtzZ8DoBLO5HXqBXYyjac7gWOAIzkePu7vU7cRy8161Fsz arSD8uJYVQsesLl95OORDFZ1cFZDOOWw7QL6Ck8N8qjnujYGry6gVUm6K7D5XO3b STscfbfDH/Toa6CwftdE1aZ0cQF3QTcxnHZ3Gn+vuK2civlG6VsCoO/AcL2DAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQU5lJFb6Mk0hanM0MAvGwwNCaRb6cwHwYDVR0j BBgwFoAUmor6fwM5VuBCXxWxBwpgb18+Qk4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM4NzM5ODQ2MDg2NjU2MS8wLzlBOEFGQTdGMDMzOTU2RTA0MjVGMTVCMTA3MEE2 MDZGNUYzRTQyNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1RjNFNDI0RS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk3Mzg3Mzk4NDYwODY2NTYxLzAvMzIzMDMzMmUz MTM2MzYyZTMxMzYzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzODM0MzIz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMumozANBgkqhkiG9w0BAQsFAAOCAQEAEhjFpeu75XD2RvZW sLGUvjR4joIB5Jh0Y4GtYt1KUuuHJ4NmHXGJzIMPSLtWCKmXWuPncCm1/IvfbUD6 HFigLpI2I3qz2dc/pwwq6ywSr8aDqMDms6eTCVJPtWBBS7SvVQDBaGJXYEIMsXnW 9DHQKg0VmzLBsERwTzu6658URgcKk0BsNCLOJYy6kzMrem4j2kvjkKeyADvP6Ryk UA4Rts0XEgfbALZfdv0Obt3W4DM3NSUgH+QzMm9Ru0gic4LdPIwvKCSKAPkNZQSH yZicQhI1SeFXLS7TKQV59sHBMrVH7k7mTjnQAKge6m2Zsygam4asQGg5nmJGSLtY agfZFQ== -----END CERTIFICATE-----Generated at Mon Apr 27 11:02:06 2026 by rpki-client