$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3230332e3136362e3137372e302f32342d3234203d3e20313338343231.roa File: 3230332e3136362e3137372e302f32342d3234203d3e20313338343231.roa (raw, json) Hash identifier: MvKUz9fHtv1Ctt7gpanqCG1Rl3sF6Qm5W+uTBJU5AC0= Subject key identifier: 62:82:1D:1F:28:09:62:59:F9:C9:AF:54:BD:05:E2:7B:9D:2A:55:B3 Certificate issuer: /CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Certificate serial: 3E1CC29EFED18E42F61B3003DBD2CA7720A6A125 Authority key identifier: 9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3230332e3136362e3137372e302f32342d3234203d3e20313338343231.roa Signing time: Thu 23 Apr 2026 03:04:15 +0000 ROA not before: Thu 23 Apr 2026 02:59:15 +0000 ROA not after: Thu 22 Apr 2027 03:04:15 +0000 asID: 138421 IP address blocks: 203.166.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 04:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:1c:c2:9e:fe:d1:8e:42:f6:1b:30:03:db:d2:ca:77:20:a6:a1:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Validity Not Before: Apr 23 02:59:15 2026 GMT Not After : Apr 22 03:04:15 2027 GMT Subject: CN=62821D1F28096259F9C9AF54BD05E27B9D2A55B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:82:11:6d:46:df:bc:08:1f:33:12:a9:bb:83: 8e:17:61:d6:f0:c2:17:f9:cb:2e:07:90:3c:be:36: fd:96:a6:9f:10:0a:a8:29:0b:ce:ab:ec:de:b8:74: 7a:cc:bc:5c:25:b1:f7:1a:28:6b:04:37:c5:0c:75: 4c:ad:54:ba:ff:94:24:fc:79:f6:77:f1:70:3c:f6: c6:00:36:24:b1:c8:94:2f:4c:c9:ee:cb:de:82:10: 48:5f:32:c7:b8:e4:68:3d:5d:54:50:a1:17:14:46: f4:41:6d:c8:07:5a:4a:b0:13:13:f1:a9:67:89:79: 89:07:15:ab:52:c4:4d:6d:e2:e5:b4:ab:bf:14:f4: 13:9c:b5:6d:ef:28:3a:41:01:2b:6a:8f:f8:dc:57: e8:93:d9:4e:a2:cd:f6:c6:16:c8:02:a4:75:91:16: c5:a9:18:46:90:63:09:95:34:3c:aa:94:d7:60:f0: c8:5c:4f:7f:73:c8:28:c1:53:ff:4b:3b:8c:46:98: 15:27:e5:66:50:73:6a:60:9b:a5:71:24:b3:a1:68: be:47:1f:aa:fa:be:e2:15:2d:e8:56:2d:e3:78:63: 3c:df:1f:0f:2e:49:1c:65:c3:55:2e:01:53:93:05: d3:a5:70:d0:5c:da:ac:d5:ee:a2:f1:ff:2d:1e:09: ff:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:82:1D:1F:28:09:62:59:F9:C9:AF:54:BD:05:E2:7B:9D:2A:55:B3 X509v3 Authority Key Identifier: keyid:9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3230332e3136362e3137372e302f32342d3234203d3e20313338343231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.166.177.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:28:3d:43:2d:06:c9:47:27:59:ec:51:11:16:1a:7d:8b:14: 0e:af:ff:39:fb:77:f1:41:31:4d:5f:3c:8a:9f:3a:ea:85:36: b4:0d:5d:56:a2:9b:52:59:ae:52:41:0a:89:7b:d1:c9:7c:aa: fd:f8:0d:fe:7c:a5:e4:97:47:d3:10:0c:b9:25:c7:92:9d:88: 45:fd:86:00:76:b4:b8:50:15:15:3b:a1:0b:df:16:31:8f:63: a5:6e:db:fe:25:79:5f:42:6a:05:c9:f2:59:88:03:98:55:e1: a0:6a:6b:a8:4d:e4:98:e8:8b:7d:69:83:6e:a1:00:e1:33:68: 7c:95:5e:21:0c:64:39:65:98:6e:07:09:bf:85:d6:6c:19:a9: cf:f7:5e:5d:37:39:2a:09:94:2f:92:2d:31:6c:43:e4:0a:de: 41:63:73:d0:96:66:8b:fa:84:58:0f:27:7d:c4:62:d1:f6:b7: 4e:76:6c:4c:b0:86:a3:58:28:7d:49:16:d8:bd:f5:d2:03:b5: 83:a5:17:83:25:d6:b5:55:ad:9d:32:ba:ab:34:93:88:69:de: 52:b5:52:71:b1:7d:a9:48:c1:9d:ff:f6:a7:80:13:f2:7c:c4: 90:8c:1c:21:e3:a1:72:db:7e:c2:81:d0:5f:f1:d6:7d:7b:67: 0d:b8:5b:ce -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUPhzCnv7RjkL2GzAD29LKdyCmoSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1 RjNFNDI0RTAeFw0yNjA0MjMwMjU5MTVaFw0yNzA0MjIwMzA0MTVaMDMxMTAvBgNV BAMTKDYyODIxRDFGMjgwOTYyNTlGOUM5QUY1NEJEMDVFMjdCOUQyQTU1QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJghFtRt+8CB8zEqm7g44XYdbw whf5yy4HkDy+Nv2Wpp8QCqgpC86r7N64dHrMvFwlsfcaKGsEN8UMdUytVLr/lCT8 efZ38XA89sYANiSxyJQvTMnuy96CEEhfMse45Gg9XVRQoRcURvRBbcgHWkqwExPx qWeJeYkHFatSxE1t4uW0q78U9BOctW3vKDpBAStqj/jcV+iT2U6izfbGFsgCpHWR FsWpGEaQYwmVNDyqlNdg8MhcT39zyCjBU/9LO4xGmBUn5WZQc2pgm6VxJLOhaL5H H6r6vuIVLehWLeN4YzzfHw8uSRxlw1UuAVOTBdOlcNBc2qzV7qLx/y0eCf/VAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUYoIdHygJYln5ya9UvQXie50qVbMwHwYDVR0j BBgwFoAUmor6fwM5VuBCXxWxBwpgb18+Qk4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM4NzM5ODQ2MDg2NjU2MS8wLzlBOEFGQTdGMDMzOTU2RTA0MjVGMTVCMTA3MEE2 MDZGNUYzRTQyNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1RjNFNDI0RS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk3Mzg3Mzk4NDYwODY2NTYxLzAvMzIzMDMzMmUz MTM2MzYyZTMxMzczNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzODM0MzIz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMumsTANBgkqhkiG9w0BAQsFAAOCAQEAbCg9Qy0GyUcnWexR ERYafYsUDq//Oft38UExTV88ip866oU2tA1dVqKbUlmuUkEKiXvRyXyq/fgN/nyl 5JdH0xAMuSXHkp2IRf2GAHa0uFAVFTuhC98WMY9jpW7b/iV5X0JqBcnyWYgDmFXh oGprqE3kmOiLfWmDbqEA4TNofJVeIQxkOWWYbgcJv4XWbBmpz/deXTc5KgmUL5It MWxD5AreQWNz0JZmi/qEWA8nfcRi0fa3TnZsTLCGo1gofUkW2L310gO1g6UXgyXW tVWtnTK6qzSTiGneUrVScbF9qUjBnf/2p4AT8nzEkIwcIeOhctt+woHQX/HWfXtn Dbhbzg== -----END CERTIFICATE-----Generated at Mon Apr 27 11:02:05 2026 by rpki-client