$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3230332e3136362e3139312e302f32342d3234203d3e20313338343231.roa File: 3230332e3136362e3139312e302f32342d3234203d3e20313338343231.roa (raw, json) Hash identifier: hIvNTf0PtaGxpEH8BeN84l3KlbUgWpxrtJPhKNLXzIE= Subject key identifier: A1:B2:5F:34:55:AE:9A:EB:C6:E2:B0:4E:6B:AC:6D:34:F3:52:79:D2 Certificate issuer: /CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Certificate serial: 69A5D701C270AC3DD0FBEA993EEC8735E519CA73 Authority key identifier: 9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3230332e3136362e3139312e302f32342d3234203d3e20313338343231.roa Signing time: Thu 23 Apr 2026 03:04:15 +0000 ROA not before: Thu 23 Apr 2026 02:59:15 +0000 ROA not after: Thu 22 Apr 2027 03:04:15 +0000 asID: 138421 IP address blocks: 203.166.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 04:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a5:d7:01:c2:70:ac:3d:d0:fb:ea:99:3e:ec:87:35:e5:19:ca:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Validity Not Before: Apr 23 02:59:15 2026 GMT Not After : Apr 22 03:04:15 2027 GMT Subject: CN=A1B25F3455AE9AEBC6E2B04E6BAC6D34F35279D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c1:c2:10:a5:77:e4:70:3c:ad:53:04:f3:27: d5:23:3f:46:ea:2f:66:f6:41:ee:5c:47:84:d0:42: aa:d4:7d:05:27:b1:96:23:d0:60:35:8c:90:95:41: 49:78:aa:6b:6f:c1:40:8a:fc:12:88:c2:79:24:7d: 95:54:d5:c5:fa:dc:07:3c:df:fc:38:30:96:81:08: 42:3d:b9:2f:11:26:78:e4:0e:9a:b5:89:f6:12:d7: 32:b7:46:f9:98:9d:7d:2d:2c:45:c4:ec:83:7c:2a: 92:33:aa:49:dd:c2:dd:c1:d6:61:84:78:1d:b7:39: 77:ac:60:db:cb:06:f0:ce:82:64:56:da:f2:17:04: 06:1f:f6:d5:c4:17:d3:be:f4:2f:59:fd:03:8f:46: 7b:da:3c:fe:e1:55:43:5a:7c:2e:9b:a3:24:1e:65: 0b:60:59:98:cc:16:32:58:81:bf:c9:33:a8:bd:1c: c9:9a:be:c5:9f:57:64:34:f5:0c:99:97:04:84:dd: e7:22:3b:f1:53:bf:f7:a1:cb:43:a7:ee:cc:14:8e: a5:b2:f0:6a:78:21:af:cf:d3:a6:6f:53:4b:db:cb: 51:89:96:b0:8c:c7:4d:7f:15:6f:fb:50:79:ed:c7: dc:16:97:ea:50:5c:04:23:49:3c:c9:36:06:cc:c1: c6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B2:5F:34:55:AE:9A:EB:C6:E2:B0:4E:6B:AC:6D:34:F3:52:79:D2 X509v3 Authority Key Identifier: keyid:9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3230332e3136362e3139312e302f32342d3234203d3e20313338343231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.166.191.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:96:bd:61:33:b3:83:b9:df:e1:99:f6:40:d2:a0:3b:51:5d: 88:fa:f4:21:9b:35:21:93:ba:f2:0e:ca:97:ad:32:ce:fa:ac: d2:6f:ca:68:4b:07:90:5a:8f:95:e4:0e:bb:01:e0:2a:20:85: 45:be:54:94:59:e6:a4:24:23:35:bc:d1:a4:dd:0d:77:53:f5: b7:a3:a1:9a:e6:de:ca:43:4c:a1:64:d7:72:35:75:32:0c:d3: 16:b9:dd:60:73:79:18:17:44:4f:0a:83:e7:72:65:c3:16:2a: 15:6b:98:4b:f2:76:42:07:ff:3d:4d:34:a6:1f:f1:ad:68:7a: 49:7b:bb:7f:88:88:9b:fd:d9:26:fe:0c:39:6d:01:b6:5e:78: ef:48:7d:1c:91:67:5d:bb:f2:45:6c:41:31:5f:ab:20:17:cc: ce:fd:42:ee:bf:88:0c:ad:6e:51:08:a3:ba:f8:18:d7:86:30: ba:27:d3:58:7c:c7:29:45:f9:8d:0c:79:24:aa:8a:77:66:07: ee:f1:ff:6b:ee:19:40:ce:99:8a:d1:74:7e:20:37:ab:50:e6: 04:e6:22:70:1f:51:b8:56:6a:24:9f:57:6a:03:d8:9f:b4:10: ca:66:0c:d4:c6:f5:28:6e:2e:8f:3a:8b:07:80:e8:4e:55:d0: 86:f8:b2:91 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUaaXXAcJwrD3Q++qZPuyHNeUZynMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1 RjNFNDI0RTAeFw0yNjA0MjMwMjU5MTVaFw0yNzA0MjIwMzA0MTVaMDMxMTAvBgNV BAMTKEExQjI1RjM0NTVBRTlBRUJDNkUyQjA0RTZCQUM2RDM0RjM1Mjc5RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCowcIQpXfkcDytUwTzJ9UjP0bq L2b2Qe5cR4TQQqrUfQUnsZYj0GA1jJCVQUl4qmtvwUCK/BKIwnkkfZVU1cX63Ac8 3/w4MJaBCEI9uS8RJnjkDpq1ifYS1zK3RvmYnX0tLEXE7IN8KpIzqkndwt3B1mGE eB23OXesYNvLBvDOgmRW2vIXBAYf9tXEF9O+9C9Z/QOPRnvaPP7hVUNafC6boyQe ZQtgWZjMFjJYgb/JM6i9HMmavsWfV2Q09QyZlwSE3eciO/FTv/ehy0On7swUjqWy 8Gp4Ia/P06ZvU0vby1GJlrCMx01/FW/7UHntx9wWl+pQXAQjSTzJNgbMwcZrAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUobJfNFWumuvG4rBOa6xtNPNSedIwHwYDVR0j BBgwFoAUmor6fwM5VuBCXxWxBwpgb18+Qk4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM4NzM5ODQ2MDg2NjU2MS8wLzlBOEFGQTdGMDMzOTU2RTA0MjVGMTVCMTA3MEE2 MDZGNUYzRTQyNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1RjNFNDI0RS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk3Mzg3Mzk4NDYwODY2NTYxLzAvMzIzMDMzMmUz MTM2MzYyZTMxMzkzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzODM0MzIz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMumvzANBgkqhkiG9w0BAQsFAAOCAQEASpa9YTOzg7nf4Zn2 QNKgO1FdiPr0IZs1IZO68g7Kl60yzvqs0m/KaEsHkFqPleQOuwHgKiCFRb5UlFnm pCQjNbzRpN0Nd1P1t6OhmubeykNMoWTXcjV1MgzTFrndYHN5GBdETwqD53JlwxYq FWuYS/J2Qgf/PU00ph/xrWh6SXu7f4iIm/3ZJv4MOW0Btl5470h9HJFnXbvyRWxB MV+rIBfMzv1C7r+IDK1uUQijuvgY14YwuifTWHzHKUX5jQx5JKqKd2YH7vH/a+4Z QM6ZitF0fiA3q1DmBOYicB9RuFZqJJ9XagPYn7QQymYM1Mb1KG4ujzqLB4DoTlXQ hviykQ== -----END CERTIFICATE-----Generated at Mon Apr 27 11:01:04 2026 by rpki-client