$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3231312e3135322e34302e302f32312d3234203d3e2034383131.roa File: 3231312e3135322e34302e302f32312d3234203d3e2034383131.roa (raw, json) Hash identifier: sBofLjz2Dbsz4pd52f4U6vh/oKkVldt74Kd1HootUA8= Subject key identifier: BD:9E:A8:50:97:6B:82:A4:86:46:26:DA:6C:75:67:80:65:8B:D1:7E Certificate issuer: /CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Certificate serial: 1EC798FADF052AF9C81C7D7C222015869C7D154F Authority key identifier: 9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3231312e3135322e34302e302f32312d3234203d3e2034383131.roa Signing time: Thu 23 Apr 2026 03:07:03 +0000 ROA not before: Thu 23 Apr 2026 03:02:03 +0000 ROA not after: Thu 22 Apr 2027 03:07:03 +0000 asID: 4811 IP address blocks: 211.152.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 04:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:c7:98:fa:df:05:2a:f9:c8:1c:7d:7c:22:20:15:86:9c:7d:15:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Validity Not Before: Apr 23 03:02:03 2026 GMT Not After : Apr 22 03:07:03 2027 GMT Subject: CN=BD9EA850976B82A4864626DA6C756780658BD17E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:22:c7:99:76:ef:9d:55:24:c2:3d:02:b0:58: 8c:0e:36:10:41:ae:93:b0:58:70:36:2c:14:e5:8c: ea:af:16:09:16:5a:15:19:ab:2d:1f:6f:88:ac:c3: 23:97:14:8a:38:d2:76:66:cb:a5:27:33:02:5f:23: d0:ef:d6:1f:44:a6:2a:df:7c:59:b4:69:8a:fd:f6: fc:27:2e:68:bb:c4:dd:d6:27:fa:c1:bb:0f:7a:b0: a2:06:db:d1:e0:03:5b:d2:73:b5:23:63:3a:77:1a: 30:f5:f8:9a:d4:93:9f:10:e2:1b:3a:d7:fc:2f:de: 50:72:3c:a6:25:6f:38:49:ad:42:3a:38:6c:8e:3c: 74:c4:22:81:75:e8:cc:66:39:00:4b:56:b4:fd:10: f9:07:8b:cc:d2:c4:fb:f0:dd:e7:3a:f1:cf:f1:85: 23:e2:84:c9:ca:fa:d2:78:e4:94:85:4d:da:21:c8: 7c:ad:d3:c1:3b:b5:35:10:35:21:82:85:23:67:65: 02:5b:e9:1f:05:d2:bd:0c:3b:3c:cc:86:88:38:18: 0b:4d:b0:9d:ed:ec:74:bc:73:03:a7:a1:f8:d0:53: 04:00:43:e8:06:ef:6e:95:30:7a:97:c7:3c:bd:1e: a1:62:47:af:1c:82:27:85:e3:97:20:d5:31:7a:98: c1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:9E:A8:50:97:6B:82:A4:86:46:26:DA:6C:75:67:80:65:8B:D1:7E X509v3 Authority Key Identifier: keyid:9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3231312e3135322e34302e302f32312d3234203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.152.40.0/21 Signature Algorithm: sha256WithRSAEncryption 0d:95:1e:ed:6a:0c:ff:54:11:ae:ef:68:f6:35:a8:68:81:83: 04:b4:a9:4c:2b:8a:80:5c:5f:fc:f5:65:a0:c8:33:49:53:df: cc:fc:be:5b:72:2d:f0:2d:47:34:39:58:17:e4:fc:bf:73:0e: c6:67:70:e1:4e:81:d8:cc:78:e1:2e:1b:20:bc:61:e8:6f:7b: c9:88:93:a8:b2:d9:15:b6:bd:36:cf:62:71:a8:08:ba:c3:3a: 60:8e:c5:72:bb:de:b8:29:b3:c2:74:31:b4:0e:83:b3:bd:90: b2:2d:50:e5:e5:c5:00:a2:b0:5c:74:8a:78:65:87:8d:28:16: 12:8d:65:8c:b4:58:fd:d7:70:0a:36:17:e2:e3:85:cc:24:9b: 64:8a:db:5f:36:ab:f6:a9:1e:bc:25:e8:32:f4:f5:b3:f1:5a: d8:d3:8c:80:35:b8:03:23:84:61:2a:a8:75:29:64:9d:33:99: 1e:fc:b1:f8:99:8c:6b:07:d5:53:6c:31:cd:45:74:af:7f:75: 95:36:5a:86:b9:bf:db:63:b3:4c:e6:3f:5c:17:7b:c3:33:6a: bf:26:c1:a4:81:b1:e8:96:a1:3e:fb:21:8b:53:08:28:7d:54: 23:31:b1:5b:a1:6b:84:ce:4f:44:e6:f9:18:a5:6c:0c:db:1a: 17:4f:45:96 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUHseY+t8FKvnIHH18IiAVhpx9FU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1 RjNFNDI0RTAeFw0yNjA0MjMwMzAyMDNaFw0yNzA0MjIwMzA3MDNaMDMxMTAvBgNV BAMTKEJEOUVBODUwOTc2QjgyQTQ4NjQ2MjZEQTZDNzU2NzgwNjU4QkQxN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdIseZdu+dVSTCPQKwWIwONhBB rpOwWHA2LBTljOqvFgkWWhUZqy0fb4iswyOXFIo40nZmy6UnMwJfI9Dv1h9Epirf fFm0aYr99vwnLmi7xN3WJ/rBuw96sKIG29HgA1vSc7UjYzp3GjD1+JrUk58Q4hs6 1/wv3lByPKYlbzhJrUI6OGyOPHTEIoF16MxmOQBLVrT9EPkHi8zSxPvw3ec68c/x hSPihMnK+tJ45JSFTdohyHyt08E7tTUQNSGChSNnZQJb6R8F0r0MOzzMhog4GAtN sJ3t7HS8cwOnofjQUwQAQ+gG726VMHqXxzy9HqFiR68cgieF45cg1TF6mMEDAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUvZ6oUJdrgqSGRibabHVngGWL0X4wHwYDVR0j BBgwFoAUmor6fwM5VuBCXxWxBwpgb18+Qk4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM4NzM5ODQ2MDg2NjU2MS8wLzlBOEFGQTdGMDMzOTU2RTA0MjVGMTVCMTA3MEE2 MDZGNUYzRTQyNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1RjNFNDI0RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3Mzg3Mzk4NDYwODY2NTYxLzAvMzIzMTMxMmUzMTM1 MzIyZTM0MzAyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNDM4MzEzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA9OYKDANBgkqhkiG9w0BAQsFAAOCAQEADZUe7WoM/1QRru9o9jWoaIGDBLSp TCuKgFxf/PVloMgzSVPfzPy+W3It8C1HNDlYF+T8v3MOxmdw4U6B2Mx44S4bILxh 6G97yYiTqLLZFba9Ns9icagIusM6YI7FcrveuCmzwnQxtA6Ds72Qsi1Q5eXFAKKw XHSKeGWHjSgWEo1ljLRY/ddwCjYX4uOFzCSbZIrbXzar9qkevCXoMvT1s/Fa2NOM gDW4AyOEYSqodSlknTOZHvyx+JmMawfVU2wxzUV0r391lTZahrm/22OzTOY/XBd7 wzNqvybBpIGx6JahPvshi1MIKH1UIzGxW6FrhM5PROb5GKVsDNsaF09Flg== -----END CERTIFICATE-----Generated at Mon Apr 27 11:00:48 2026 by rpki-client