$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3230332e3136362e3138362e302f32342d3234203d3e20313338343231.roa File: 3230332e3136362e3138362e302f32342d3234203d3e20313338343231.roa (raw, json) Hash identifier: IwmAVy8Ba4oKVX/joKcQpu2RvQXK5f68+cBTzT+8WvU= Subject key identifier: AE:6C:AF:4E:13:A4:17:81:3B:F8:69:4F:C8:53:08:BD:AA:6C:B0:60 Certificate issuer: /CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Certificate serial: 24411330E9729FFAC8011731C4156D526CE3F400 Authority key identifier: 9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3230332e3136362e3138362e302f32342d3234203d3e20313338343231.roa Signing time: Thu 23 Apr 2026 03:04:14 +0000 ROA not before: Thu 23 Apr 2026 02:59:14 +0000 ROA not after: Thu 22 Apr 2027 03:04:14 +0000 asID: 138421 IP address blocks: 203.166.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 04:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:41:13:30:e9:72:9f:fa:c8:01:17:31:c4:15:6d:52:6c:e3:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Validity Not Before: Apr 23 02:59:14 2026 GMT Not After : Apr 22 03:04:14 2027 GMT Subject: CN=AE6CAF4E13A417813BF8694FC85308BDAA6CB060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9f:bd:5b:f9:5b:cd:04:90:d5:72:17:a6:0f: bf:55:0c:1e:92:67:d9:7c:18:b5:ab:63:da:eb:6f: 64:e3:68:bd:2a:c7:5a:d5:87:06:26:05:ea:5d:f1: d5:4b:1d:6c:48:41:ac:4f:2c:87:b4:35:79:ef:63: 84:d1:fb:c7:aa:77:46:b2:06:4f:e9:42:cc:62:01: a2:db:45:7c:38:5a:c1:85:08:0b:30:62:69:e7:a0: 64:35:48:ce:5a:b8:91:18:44:0b:cd:ca:de:83:25: 3a:94:2b:33:5c:36:01:93:c0:b5:8e:de:d6:44:fc: 9c:ee:c2:75:1c:84:61:4b:db:e0:b5:a0:51:a7:c5: 94:73:d9:3b:e5:4a:63:ac:bf:2f:c4:80:e2:2d:99: c8:e1:8b:c7:82:90:9c:60:1f:fa:60:26:21:83:61: 86:2f:2b:2e:8b:a1:6d:40:26:51:b8:a9:9b:29:a4: 2e:5d:90:86:4b:08:50:f3:3e:79:67:6a:d0:1f:b7: 17:b9:d9:bb:87:20:1a:79:fa:08:a3:79:98:c8:5a: 7d:1e:60:4e:c9:56:4d:21:84:80:22:f5:53:7e:ec: 35:88:b2:0d:40:dd:40:8d:92:27:6e:c9:14:ee:08: 25:2c:85:13:2b:f4:da:b3:1b:bd:dd:23:b8:ec:a4: ce:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:6C:AF:4E:13:A4:17:81:3B:F8:69:4F:C8:53:08:BD:AA:6C:B0:60 X509v3 Authority Key Identifier: keyid:9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3230332e3136362e3138362e302f32342d3234203d3e20313338343231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.166.186.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:28:b4:ee:d2:f7:61:2d:10:42:a8:cb:d9:34:96:89:b2:bf: de:c2:47:7f:c1:b0:41:33:34:c1:ce:ab:e4:56:cc:67:28:a9: f7:34:68:6d:94:d7:42:12:46:e9:8d:7d:a7:61:c0:b4:2b:75: 13:4c:4a:04:dd:fa:87:87:ef:bb:e0:2e:ca:95:a6:b3:ac:0b: 4b:f3:e8:09:aa:a1:0f:66:9d:04:56:f0:74:60:de:1f:25:cd: 08:bd:7f:72:e2:2a:f2:0a:e6:39:e6:f7:73:62:b5:50:c0:62: 52:ba:f5:78:f6:17:47:63:68:5f:62:09:df:e4:39:e2:2f:84: c3:fb:fc:4d:80:97:ba:97:f2:1d:80:03:b1:c7:9f:74:78:5b: f4:0d:81:1d:2b:c0:7b:88:27:28:3d:84:94:8a:3f:ff:d4:f5: 6c:b9:6b:85:8b:a4:7d:84:f5:71:23:3e:87:d9:cf:e7:90:19: 3e:0c:58:72:5d:4e:ba:2b:61:4b:f8:e5:55:96:f0:14:a1:f1: 38:ec:25:f8:32:6a:d5:67:e4:33:0c:c1:cd:a6:c2:13:a4:9b: 76:0e:c7:da:1c:6b:70:db:5f:2e:32:6e:67:e7:15:5a:ef:ce: a4:54:20:14:7d:32:19:3c:dc:36:35:94:5f:55:c2:cc:04:7d: 5e:6b:06:8b -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUJEETMOlyn/rIARcxxBVtUmzj9AAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1 RjNFNDI0RTAeFw0yNjA0MjMwMjU5MTRaFw0yNzA0MjIwMzA0MTRaMDMxMTAvBgNV BAMTKEFFNkNBRjRFMTNBNDE3ODEzQkY4Njk0RkM4NTMwOEJEQUE2Q0IwNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3n71b+VvNBJDVchemD79VDB6S Z9l8GLWrY9rrb2TjaL0qx1rVhwYmBepd8dVLHWxIQaxPLIe0NXnvY4TR+8eqd0ay Bk/pQsxiAaLbRXw4WsGFCAswYmnnoGQ1SM5auJEYRAvNyt6DJTqUKzNcNgGTwLWO 3tZE/JzuwnUchGFL2+C1oFGnxZRz2TvlSmOsvy/EgOItmcjhi8eCkJxgH/pgJiGD YYYvKy6LoW1AJlG4qZsppC5dkIZLCFDzPnlnatAftxe52buHIBp5+gijeZjIWn0e YE7JVk0hhIAi9VN+7DWIsg1A3UCNkiduyRTuCCUshRMr9NqzG73dI7jspM7pAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUrmyvThOkF4E7+GlPyFMIvapssGAwHwYDVR0j BBgwFoAUmor6fwM5VuBCXxWxBwpgb18+Qk4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM4NzM5ODQ2MDg2NjU2MS8wLzlBOEFGQTdGMDMzOTU2RTA0MjVGMTVCMTA3MEE2 MDZGNUYzRTQyNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1RjNFNDI0RS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk3Mzg3Mzk4NDYwODY2NTYxLzAvMzIzMDMzMmUz MTM2MzYyZTMxMzgzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzODM0MzIz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMumujANBgkqhkiG9w0BAQsFAAOCAQEAXyi07tL3YS0QQqjL 2TSWibK/3sJHf8GwQTM0wc6r5FbMZyip9zRobZTXQhJG6Y19p2HAtCt1E0xKBN36 h4fvu+AuypWms6wLS/PoCaqhD2adBFbwdGDeHyXNCL1/cuIq8grmOeb3c2K1UMBi Urr1ePYXR2NoX2IJ3+Q54i+Ew/v8TYCXupfyHYADscefdHhb9A2BHSvAe4gnKD2E lIo//9T1bLlrhYukfYT1cSM+h9nP55AZPgxYcl1OuithS/jlVZbwFKHxOOwl+DJq 1WfkMwzBzabCE6Sbdg7H2hxrcNtfLjJuZ+cVWu/OpFQgFH0yGTzcNjWUX1XCzAR9 XmsGiw== -----END CERTIFICATE-----Generated at Mon Apr 27 11:02:05 2026 by rpki-client