$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3230332e3136362e3136362e302f32342d3234203d3e20313338343231.roa File: 3230332e3136362e3136362e302f32342d3234203d3e20313338343231.roa (raw, json) Hash identifier: rN1dqRrSY6c7aJrffGFT0pXjVt3Ln470hNY97cPtyD8= Subject key identifier: D6:91:A3:77:FC:C9:3D:FB:BB:08:0F:FF:67:96:53:19:F9:6A:3C:6C Certificate issuer: /CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Certificate serial: 200E55735DF6259AAAEAF0A28E88B31C5D955CEC Authority key identifier: 9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3230332e3136362e3136362e302f32342d3234203d3e20313338343231.roa Signing time: Thu 23 Apr 2026 03:04:15 +0000 ROA not before: Thu 23 Apr 2026 02:59:15 +0000 ROA not after: Thu 22 Apr 2027 03:04:15 +0000 asID: 138421 IP address blocks: 203.166.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 04:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:0e:55:73:5d:f6:25:9a:aa:ea:f0:a2:8e:88:b3:1c:5d:95:5c:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Validity Not Before: Apr 23 02:59:15 2026 GMT Not After : Apr 22 03:04:15 2027 GMT Subject: CN=D691A377FCC93DFBBB080FFF67965319F96A3C6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a9:8a:35:95:3c:27:e1:6e:60:35:55:06:d1: d4:85:3b:ee:6c:bc:6e:06:10:a9:e4:2b:8a:86:a2: ce:40:50:a2:5d:a9:43:f7:4f:ed:7e:69:a0:71:a4: 6a:97:a8:de:9e:53:bc:2a:d4:d7:70:fb:d2:52:b7: f0:bb:74:ef:8f:11:68:8c:97:bf:49:40:d9:02:c8: af:20:7c:1b:a2:f4:b0:46:a0:e3:d7:2d:2a:24:04: 62:9f:ae:92:81:9c:1c:ee:51:70:97:78:8d:2e:21: 03:c7:eb:b6:16:11:f1:4e:db:ea:ab:d4:ff:14:51: e1:d7:c4:aa:a3:95:d1:81:ff:b2:10:ab:71:08:5f: a2:25:5e:d7:b2:5d:73:ac:88:e1:94:f2:ac:8d:55: 02:5c:6a:d1:38:de:14:7c:55:34:24:9c:1f:6c:be: 1a:69:b4:8c:2c:2b:7c:89:5b:57:b2:2b:da:3f:4a: 09:d2:97:e2:bc:07:04:49:31:f2:64:c0:51:a2:4e: 66:a8:16:a7:84:68:cc:50:ba:c2:5c:cf:0d:9a:d5: ce:92:6c:25:d4:9e:5d:1a:fc:3d:1a:51:87:91:0f: 28:10:7c:2f:53:1a:ec:23:ac:3b:20:ad:70:63:ff: 17:63:d2:6b:ca:02:71:f5:c9:a9:54:6e:b7:3f:b3: 67:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:91:A3:77:FC:C9:3D:FB:BB:08:0F:FF:67:96:53:19:F9:6A:3C:6C X509v3 Authority Key Identifier: keyid:9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3230332e3136362e3136362e302f32342d3234203d3e20313338343231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.166.166.0/24 Signature Algorithm: sha256WithRSAEncryption 13:4e:64:0d:23:0a:fc:06:a9:aa:14:1b:5f:a8:d4:f8:b3:3a: 32:e1:f1:69:cb:24:43:36:8b:1e:d5:88:05:dd:6c:6d:c1:14: ed:f5:c8:60:4c:87:71:5d:9a:84:a7:02:80:d3:9e:4e:9d:b7: 89:cd:86:ba:8a:7a:4f:c8:5d:fa:61:cc:b8:bb:c8:4f:dd:7e: 75:0d:92:b4:c8:ad:2c:78:9f:20:b6:cc:09:7f:2c:82:b5:c3: b3:9f:b1:01:a0:b5:2b:de:06:e1:c5:6f:c2:a3:fe:59:e7:b1: cb:2d:f9:93:3e:3b:14:1c:8f:63:24:fa:43:bd:71:db:be:6d: a6:7d:3f:52:cb:22:81:3a:38:06:aa:fb:d0:39:24:35:3e:23: 72:ff:b3:87:c9:a5:7f:b5:d4:a9:6f:b4:58:71:92:db:a3:0f: 84:a3:1b:72:f8:38:ba:0c:17:3b:56:96:58:8e:54:22:97:32: db:e6:2e:e6:9f:93:bb:3e:00:9e:07:bf:b2:cd:2d:b5:3b:ca: c1:33:a6:00:22:c9:70:bd:15:42:3d:76:4c:d8:d8:36:36:1d: 96:72:3d:fd:a9:2a:b7:d1:41:15:c4:12:58:25:16:fa:62:aa: 25:5d:00:e2:41:33:22:36:e4:0f:b6:29:e3:c3:b8:c6:fc:5d: b9:e3:bf:e7 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUIA5Vc132JZqq6vCijoizHF2VXOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1 RjNFNDI0RTAeFw0yNjA0MjMwMjU5MTVaFw0yNzA0MjIwMzA0MTVaMDMxMTAvBgNV BAMTKEQ2OTFBMzc3RkNDOTNERkJCQjA4MEZGRjY3OTY1MzE5Rjk2QTNDNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+qYo1lTwn4W5gNVUG0dSFO+5s vG4GEKnkK4qGos5AUKJdqUP3T+1+aaBxpGqXqN6eU7wq1Ndw+9JSt/C7dO+PEWiM l79JQNkCyK8gfBui9LBGoOPXLSokBGKfrpKBnBzuUXCXeI0uIQPH67YWEfFO2+qr 1P8UUeHXxKqjldGB/7IQq3EIX6IlXteyXXOsiOGU8qyNVQJcatE43hR8VTQknB9s vhpptIwsK3yJW1eyK9o/SgnSl+K8BwRJMfJkwFGiTmaoFqeEaMxQusJczw2a1c6S bCXUnl0a/D0aUYeRDygQfC9TGuwjrDsgrXBj/xdj0mvKAnH1yalUbrc/s2f7AgMB AAGjggIaMIICFjAdBgNVHQ4EFgQU1pGjd/zJPfu7CA//Z5ZTGflqPGwwHwYDVR0j BBgwFoAUmor6fwM5VuBCXxWxBwpgb18+Qk4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM4NzM5ODQ2MDg2NjU2MS8wLzlBOEFGQTdGMDMzOTU2RTA0MjVGMTVCMTA3MEE2 MDZGNUYzRTQyNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1RjNFNDI0RS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk3Mzg3Mzk4NDYwODY2NTYxLzAvMzIzMDMzMmUz MTM2MzYyZTMxMzYzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzODM0MzIz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMumpjANBgkqhkiG9w0BAQsFAAOCAQEAE05kDSMK/AapqhQb X6jU+LM6MuHxacskQzaLHtWIBd1sbcEU7fXIYEyHcV2ahKcCgNOeTp23ic2Guop6 T8hd+mHMuLvIT91+dQ2StMitLHifILbMCX8sgrXDs5+xAaC1K94G4cVvwqP+Weex yy35kz47FByPYyT6Q71x275tpn0/UssigTo4Bqr70DkkNT4jcv+zh8mlf7XUqW+0 WHGS26MPhKMbcvg4ugwXO1aWWI5UIpcy2+Yu5p+Tuz4Ange/ss0ttTvKwTOmACLJ cL0VQj12TNjYNjYdlnI9/akqt9FBFcQSWCUW+mKqJV0A4kEzIjbkD7Yp48O4xvxd ueO/5w== -----END CERTIFICATE-----Generated at Mon Apr 27 11:02:05 2026 by rpki-client