$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3232312e3133332e3234342e302f32342d3234203d3e2034383132.roa File: 3232312e3133332e3234342e302f32342d3234203d3e2034383132.roa (raw, json) Hash identifier: /xsrM0t7gazGxT8vu8S20afPJ+/R7tTwrJw9ipbCbuY= Subject key identifier: 5B:03:BB:F5:45:EA:AA:AB:9B:BA:33:EF:5B:BC:75:C1:80:1E:F7:E1 Certificate issuer: /CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A Certificate serial: 4EE2E3F9986B62AB0724322973D13AC7BED189E3 Authority key identifier: AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3232312e3133332e3234342e302f32342d3234203d3e2034383132.roa Signing time: Wed 22 Apr 2026 07:51:41 +0000 ROA not before: Wed 22 Apr 2026 07:46:41 +0000 ROA not after: Wed 21 Apr 2027 07:51:41 +0000 asID: 4812 IP address blocks: 221.133.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 23:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e2:e3:f9:98:6b:62:ab:07:24:32:29:73:d1:3a:c7:be:d1:89:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A Validity Not Before: Apr 22 07:46:41 2026 GMT Not After : Apr 21 07:51:41 2027 GMT Subject: CN=5B03BBF545EAAAAB9BBA33EF5BBC75C1801EF7E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b6:60:4a:0a:38:19:c2:01:f1:80:b1:2c:c5: 68:24:e9:20:be:57:68:47:05:84:99:f4:55:a3:6f: 53:94:84:c9:33:41:97:71:dd:b2:6d:91:08:c6:79: 80:c6:14:12:79:58:ac:fc:e9:0c:d8:19:2f:43:87: 64:36:70:f7:fa:97:d5:d1:b3:6f:94:e2:dd:ba:57: a9:ab:fc:51:3f:18:79:5c:12:13:94:aa:dd:20:a2: e0:94:cd:80:72:82:04:e8:57:ef:7c:32:02:a0:d8: a9:14:0b:90:e0:ce:35:ee:0a:ef:0f:3c:c3:7f:e9: 57:70:20:87:9f:38:31:08:34:31:d4:5b:51:4a:c3: e3:3d:a4:37:22:6c:38:ec:d7:32:90:55:18:69:59: 2e:24:ae:0a:89:1d:69:43:24:0e:97:4a:1c:d1:5b: 9b:34:e2:ad:26:b6:72:51:21:15:14:a8:75:15:81: 56:7b:b5:94:46:da:55:d7:5d:53:cd:2e:0e:d1:4c: 5e:1d:54:72:b9:f2:cb:18:0d:83:33:35:6a:a0:38: 30:f5:aa:78:2e:6d:b7:75:4e:82:c8:e9:a9:11:91: 03:60:76:dc:f8:d5:47:dd:36:21:9b:4a:25:ec:01: 78:8c:5e:1f:96:07:a2:41:b8:80:96:c5:41:6b:e0: ae:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:03:BB:F5:45:EA:AA:AB:9B:BA:33:EF:5B:BC:75:C1:80:1E:F7:E1 X509v3 Authority Key Identifier: keyid:AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3232312e3133332e3234342e302f32342d3234203d3e2034383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 221.133.244.0/24 Signature Algorithm: sha256WithRSAEncryption ce:c9:25:6b:02:c3:15:f7:ad:93:9f:62:98:e5:07:de:6e:55: b6:d4:b9:96:74:e8:1a:8a:35:d8:65:ee:4a:e1:59:a1:0f:c9: 4d:6f:ee:ff:dd:29:ac:69:bf:48:0b:c9:7a:c8:34:2d:51:1e: a0:c7:1f:b4:c8:8a:86:38:78:f9:34:5d:00:82:10:82:1d:3c: 52:6d:4e:67:6e:23:a0:10:76:5e:17:66:59:d9:a5:c9:ce:86: 87:cf:ef:c5:eb:68:12:49:ef:25:44:19:a6:41:ed:75:83:c4: fe:42:e2:0c:17:95:08:66:6f:5f:54:2f:51:37:ba:5d:16:43: fb:5c:a2:5d:da:60:27:8d:b7:bf:b8:24:29:fe:3a:ca:98:62: e5:c5:2f:3c:9c:b6:09:95:08:6c:57:96:70:34:69:ef:0d:ec: 40:98:75:97:f4:0a:45:69:df:c4:01:6b:30:08:c7:ec:fb:f6: 70:25:bd:fd:42:44:ff:a8:19:1d:31:bd:8d:d6:10:d4:1d:1c: f1:c0:0d:ce:19:78:9f:cc:a8:eb:47:a8:45:4b:4f:ff:60:11: 87:7d:98:79:b9:8e:ee:fd:6e:1c:1e:7f:16:86:b2:01:28:79: 66:86:65:e3:ce:ed:05:5a:ba:89:99:54:dc:6a:0e:be:50:b0: 3e:e4:0c:76 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUTuLj+ZhrYqsHJDIpc9E6x77RieMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCNjE0QzI0RkZDMkE2QkUwRTJEQjFDN0EzRTBBQUY2 NDFFNkE4QTAeFw0yNjA0MjIwNzQ2NDFaFw0yNzA0MjEwNzUxNDFaMDMxMTAvBgNV BAMTKDVCMDNCQkY1NDVFQUFBQUI5QkJBMzNFRjVCQkM3NUMxODAxRUY3RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDtmBKCjgZwgHxgLEsxWgk6SC+ V2hHBYSZ9FWjb1OUhMkzQZdx3bJtkQjGeYDGFBJ5WKz86QzYGS9Dh2Q2cPf6l9XR s2+U4t26V6mr/FE/GHlcEhOUqt0gouCUzYByggToV+98MgKg2KkUC5DgzjXuCu8P PMN/6VdwIIefODEINDHUW1FKw+M9pDcibDjs1zKQVRhpWS4krgqJHWlDJA6XShzR W5s04q0mtnJRIRUUqHUVgVZ7tZRG2lXXXVPNLg7RTF4dVHK58ssYDYMzNWqgODD1 qngubbd1ToLI6akRkQNgdtz41UfdNiGbSiXsAXiMXh+WB6JBuICWxUFr4K5tAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUWwO79UXqqqubujPvW7x1wYAe9+EwHwYDVR0j BBgwFoAUrrYUwk/8Kmvg4tscej4Kr2QeaoowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTE5MjU1MjM5NDg1MDMwNy8wL0FFQjYxNEMyNEZGQzJBNkJFMEUyREIxQzdBM0Uw QUFGNjQxRTZBOEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUVCNjE0QzI0RkZDMkE2QkUwRTJEQjFDN0EzRTBBQUY2NDFFNkE4QS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5OTE5MjU1MjM5NDg1MDMwNy8wLzMyMzIzMTJlMzEz MzMzMmUzMjM0MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzEzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAN2F9DANBgkqhkiG9w0BAQsFAAOCAQEAzsklawLDFfetk59imOUH3m5V ttS5lnToGoo12GXuSuFZoQ/JTW/u/90prGm/SAvJesg0LVEeoMcftMiKhjh4+TRd AIIQgh08Um1OZ24joBB2XhdmWdmlyc6Gh8/vxetoEknvJUQZpkHtdYPE/kLiDBeV CGZvX1QvUTe6XRZD+1yiXdpgJ423v7gkKf46yphi5cUvPJy2CZUIbFeWcDRp7w3s QJh1l/QKRWnfxAFrMAjH7Pv2cCW9/UJE/6gZHTG9jdYQ1B0c8cANzhl4n8yo60eo RUtP/2ARh32YebmO7v1uHB5/FoayASh5ZoZl487tBVq6iZlU3GoOvlCwPuQMdg== -----END CERTIFICATE-----Generated at Mon Apr 27 08:25:07 2026 by rpki-client