$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3230332e3136362e3138392e302f32342d3234203d3e20313338343231.roa File: 3230332e3136362e3138392e302f32342d3234203d3e20313338343231.roa (raw, json) Hash identifier: KvQfn16sftUzgQmvGnXDVHKsPwePAgPTFvIQD3ntc40= Subject key identifier: 69:DE:79:70:78:4F:FC:15:E1:C5:A2:7C:50:E4:CF:21:6C:6B:46:5C Certificate issuer: /CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Certificate serial: 5A9DF3F45CEE0BB2090470B791FCD5D8B642765B Authority key identifier: 9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3230332e3136362e3138392e302f32342d3234203d3e20313338343231.roa Signing time: Thu 23 Apr 2026 03:04:15 +0000 ROA not before: Thu 23 Apr 2026 02:59:15 +0000 ROA not after: Thu 22 Apr 2027 03:04:15 +0000 asID: 138421 IP address blocks: 203.166.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 04:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:9d:f3:f4:5c:ee:0b:b2:09:04:70:b7:91:fc:d5:d8:b6:42:76:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Validity Not Before: Apr 23 02:59:15 2026 GMT Not After : Apr 22 03:04:15 2027 GMT Subject: CN=69DE7970784FFC15E1C5A27C50E4CF216C6B465C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:41:4b:90:28:c2:be:97:db:43:3a:e9:a5:66: 33:8e:ab:75:2d:c1:c5:3e:28:50:0b:d1:cc:30:03: c1:ab:d4:c0:ad:c0:ce:af:2c:79:6d:a4:60:1b:7d: 19:fa:0e:47:e3:d7:45:7f:2b:cf:1d:5b:6b:ad:20: 7f:c5:46:f8:f8:69:bc:c1:46:0b:95:90:d2:2d:c5: b0:f6:12:a5:7d:9e:f3:0e:aa:2e:8a:02:c5:3b:f3: 82:b9:5a:75:9b:41:40:e8:c9:9a:e1:2c:0a:ca:e8: 1c:16:c9:f8:77:ce:2d:a4:b7:6c:f6:0a:de:6f:eb: 66:45:0e:a9:2d:db:ce:ce:4b:54:36:ce:9e:66:8e: 46:2d:21:ee:ac:52:d3:7d:30:c1:21:7d:e7:26:a6: d1:de:8d:71:ac:8d:e8:ce:78:0d:2b:86:29:62:4b: 7f:24:2a:92:c8:bb:ac:1d:54:7f:bf:b5:76:c4:24: 68:08:d3:b5:51:dc:3b:1c:b8:ca:71:b4:bc:c6:41: 61:2d:cb:16:67:25:0f:b1:86:66:07:1c:86:c0:9a: 2b:b7:cc:64:59:5d:b8:59:59:7e:6c:32:07:03:b8: 5f:1f:1a:a1:9d:cc:fc:7b:e2:69:0a:bb:bc:41:68: 6a:b5:26:85:f9:52:9e:b6:74:49:82:a8:31:a4:01: 6f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DE:79:70:78:4F:FC:15:E1:C5:A2:7C:50:E4:CF:21:6C:6B:46:5C X509v3 Authority Key Identifier: keyid:9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3230332e3136362e3138392e302f32342d3234203d3e20313338343231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.166.189.0/24 Signature Algorithm: sha256WithRSAEncryption 09:3b:b1:3a:c6:a5:f6:31:b6:41:6d:d7:fe:1e:31:5a:14:56: 49:4c:87:8d:56:3e:00:9a:60:77:76:69:70:34:0f:21:8a:d6: a7:3f:c5:64:ce:60:9a:6b:cb:a3:d7:b1:cf:b9:58:90:91:b5: 61:8f:7d:ae:55:f8:38:ce:10:4e:72:36:db:1a:58:99:25:b0: 81:ee:6e:0c:e4:cc:1b:4d:3d:b0:a6:02:3c:d9:d8:43:54:c1: a3:89:5e:df:3e:68:27:1f:99:fe:3f:5c:e8:83:d5:04:ef:87: 82:6f:ab:a2:6e:ae:52:75:30:39:ed:72:7a:23:71:91:3c:81: 5e:b9:f8:b0:69:48:92:47:84:03:4c:28:dc:9d:31:7d:7e:63: 62:91:e6:00:61:98:ec:57:4a:1a:5e:92:30:a7:9d:7c:da:34: 65:c3:70:ca:3e:4e:33:fa:93:10:e3:98:c2:fc:91:87:5e:b3: e1:3e:28:c7:97:71:a8:86:e9:87:46:c8:cb:48:4e:a1:e3:ff: 99:8d:34:75:5d:08:fa:f3:27:a7:10:03:50:26:cf:94:96:24: 79:43:6e:35:98:9a:67:02:f7:ec:80:e2:8c:46:83:cb:53:be: 8f:8b:a5:29:a8:59:86:41:89:10:9d:36:fc:7e:48:58:f4:25: 07:4a:89:e6 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUWp3z9FzuC7IJBHC3kfzV2LZCdlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1 RjNFNDI0RTAeFw0yNjA0MjMwMjU5MTVaFw0yNzA0MjIwMzA0MTVaMDMxMTAvBgNV BAMTKDY5REU3OTcwNzg0RkZDMTVFMUM1QTI3QzUwRTRDRjIxNkM2QjQ2NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1QUuQKMK+l9tDOumlZjOOq3Ut wcU+KFAL0cwwA8Gr1MCtwM6vLHltpGAbfRn6Dkfj10V/K88dW2utIH/FRvj4abzB RguVkNItxbD2EqV9nvMOqi6KAsU784K5WnWbQUDoyZrhLArK6BwWyfh3zi2kt2z2 Ct5v62ZFDqkt287OS1Q2zp5mjkYtIe6sUtN9MMEhfecmptHejXGsjejOeA0rhili S38kKpLIu6wdVH+/tXbEJGgI07VR3DscuMpxtLzGQWEtyxZnJQ+xhmYHHIbAmiu3 zGRZXbhZWX5sMgcDuF8fGqGdzPx74mkKu7xBaGq1JoX5Up62dEmCqDGkAW8/AgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUad55cHhP/BXhxaJ8UOTPIWxrRlwwHwYDVR0j BBgwFoAUmor6fwM5VuBCXxWxBwpgb18+Qk4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM4NzM5ODQ2MDg2NjU2MS8wLzlBOEFGQTdGMDMzOTU2RTA0MjVGMTVCMTA3MEE2 MDZGNUYzRTQyNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1RjNFNDI0RS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk3Mzg3Mzk4NDYwODY2NTYxLzAvMzIzMDMzMmUz MTM2MzYyZTMxMzgzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzODM0MzIz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMumvTANBgkqhkiG9w0BAQsFAAOCAQEACTuxOsal9jG2QW3X /h4xWhRWSUyHjVY+AJpgd3ZpcDQPIYrWpz/FZM5gmmvLo9exz7lYkJG1YY99rlX4 OM4QTnI22xpYmSWwge5uDOTMG009sKYCPNnYQ1TBo4le3z5oJx+Z/j9c6IPVBO+H gm+rom6uUnUwOe1yeiNxkTyBXrn4sGlIkkeEA0wo3J0xfX5jYpHmAGGY7FdKGl6S MKedfNo0ZcNwyj5OM/qTEOOYwvyRh16z4T4ox5dxqIbph0bIy0hOoeP/mY00dV0I +vMnpxADUCbPlJYkeUNuNZiaZwL37IDijEaDy1O+j4ulKahZhkGJEJ02/H5IWPQl B0qJ5g== -----END CERTIFICATE-----Generated at Mon Apr 27 11:02:05 2026 by rpki-client