$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099892075173773315/0/3232332e32372e3138352e302f32342d3332203d3e203137363232.roa File: 3232332e32372e3138352e302f32342d3332203d3e203137363232.roa (raw, json) Hash identifier: u5UXUe1gd5zL4uM/f36b5yYRCmNkN8QDkMKwvtQ/odg= Subject key identifier: 9E:AB:7D:12:1A:75:9C:DB:AF:90:19:BB:D8:06:79:5A:31:A9:C4:FF Certificate issuer: /CN=44094948C6E3D32A1A59BE6795CD8A2A3A528098 Certificate serial: 4A6E60EC792A63A7394E2021F325D1F590428406 Authority key identifier: 44:09:49:48:C6:E3:D3:2A:1A:59:BE:67:95:CD:8A:2A:3A:52:80:98 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/3232332e32372e3138352e302f32342d3332203d3e203137363232.roa Signing time: Mon 27 Apr 2026 09:06:01 +0000 ROA not before: Mon 27 Apr 2026 09:01:01 +0000 ROA not after: Mon 26 Apr 2027 09:06:01 +0000 asID: 17622 IP address blocks: 223.27.185.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 09:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:6e:60:ec:79:2a:63:a7:39:4e:20:21:f3:25:d1:f5:90:42:84:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44094948C6E3D32A1A59BE6795CD8A2A3A528098 Validity Not Before: Apr 27 09:01:01 2026 GMT Not After : Apr 26 09:06:01 2027 GMT Subject: CN=9EAB7D121A759CDBAF9019BBD806795A31A9C4FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bc:3e:79:2e:b2:c9:21:e5:1e:09:ad:3d:ee: c0:1d:94:d3:70:a6:12:01:4a:e9:d6:eb:b6:a8:2a: 5d:df:69:8a:b6:6a:8e:5d:57:83:71:5e:04:5b:a3: bc:81:ce:da:ca:0f:f9:a7:b7:0d:90:4f:ee:8d:56: d4:6f:60:93:54:36:a3:73:95:ba:2a:42:0a:bd:88: e0:47:1e:89:97:28:55:cb:36:58:d2:0a:71:fd:f0: 40:0a:03:54:14:8e:d2:af:36:d4:5b:dd:24:80:a6: c5:cd:95:bd:16:5b:f4:83:18:de:82:f0:ac:8f:72: 4c:ca:14:11:8b:87:3d:84:33:78:3b:67:0c:92:7f: 8a:4e:3d:da:cd:62:ad:3c:d8:8e:f4:1d:54:0b:05: 8a:69:06:cf:7e:04:bb:91:71:c2:a9:d0:85:6f:0a: a2:3a:48:d2:28:68:b2:ac:32:63:b8:d4:be:26:2d: 6d:5f:98:88:0a:31:e6:e3:02:14:6d:31:88:23:84: 38:c4:79:06:2a:88:9b:c0:70:b0:47:ad:db:bb:87: ff:e7:af:30:d5:a7:26:26:db:fd:6d:27:14:1f:78: e9:22:43:41:e2:c6:dc:ed:50:b2:fd:19:a7:57:f3: 37:c0:53:18:42:4e:e8:13:a5:e7:63:8f:95:2d:76: bd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AB:7D:12:1A:75:9C:DB:AF:90:19:BB:D8:06:79:5A:31:A9:C4:FF X509v3 Authority Key Identifier: keyid:44:09:49:48:C6:E3:D3:2A:1A:59:BE:67:95:CD:8A:2A:3A:52:80:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/3232332e32372e3138352e302f32342d3332203d3e203137363232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.27.185.0/24 Signature Algorithm: sha256WithRSAEncryption 54:29:18:37:72:bc:ca:69:84:18:69:87:ae:f3:3e:72:52:9f: 04:98:b6:7c:3d:88:b2:8e:b0:dc:27:fe:04:6d:d1:88:09:15: 15:2d:b1:c4:e5:26:1f:18:71:f9:de:cd:b9:c2:a4:b8:6d:65: 88:9f:90:a5:24:3f:65:37:c6:f3:f1:51:16:5d:d3:61:40:c0: 4e:e2:81:83:db:a5:e1:67:46:0d:9c:57:49:64:4a:66:81:d7: 31:ff:64:57:ca:7c:14:f8:6c:f2:db:ee:b5:4b:ab:6c:a8:ed: 23:03:01:55:5f:7d:ae:10:d2:4e:4a:5e:17:13:be:a7:55:cb: 52:e1:92:b8:28:27:23:4f:fc:ba:e6:03:88:19:3a:1d:ba:67: f8:6e:77:f2:67:8f:2a:1e:ec:70:14:3b:f3:60:45:61:a1:64: e1:71:30:65:0d:7b:58:01:a7:2d:a1:1f:68:e5:6f:d4:85:9e: 6b:9f:70:d9:8c:c7:55:18:86:37:05:0e:81:df:2c:f6:a0:63: 15:61:fb:d4:20:13:a5:7b:00:e0:84:57:d7:93:73:7e:26:31: 39:a0:1e:90:21:6f:91:a7:76:b4:63:26:5e:ad:30:01:ac:eb: 45:a4:bb:0d:a4:45:f9:54:82:d5:a8:6c:b9:fc:36:9d:1c:d2: 81:96:f0:cb -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUSm5g7HkqY6c5TiAh8yXR9ZBChAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQwOTQ5NDhDNkUzRDMyQTFBNTlCRTY3OTVDRDhBMkEz QTUyODA5ODAeFw0yNjA0MjcwOTAxMDFaFw0yNzA0MjYwOTA2MDFaMDMxMTAvBgNV BAMTKDlFQUI3RDEyMUE3NTlDREJBRjkwMTlCQkQ4MDY3OTVBMzFBOUM0RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5vD55LrLJIeUeCa097sAdlNNw phIBSunW67aoKl3faYq2ao5dV4NxXgRbo7yBztrKD/mntw2QT+6NVtRvYJNUNqNz lboqQgq9iOBHHomXKFXLNljSCnH98EAKA1QUjtKvNtRb3SSApsXNlb0WW/SDGN6C 8KyPckzKFBGLhz2EM3g7ZwySf4pOPdrNYq082I70HVQLBYppBs9+BLuRccKp0IVv CqI6SNIoaLKsMmO41L4mLW1fmIgKMebjAhRtMYgjhDjEeQYqiJvAcLBHrdu7h//n rzDVpyYm2/1tJxQfeOkiQ0HixtztULL9GadX8zfAUxhCTugTpedjj5Utdr13AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUnqt9Ehp1nNuvkBm72AZ5WjGpxP8wHwYDVR0j BBgwFoAURAlJSMbj0yoaWb5nlc2KKjpSgJgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg5MjA3NTE3Mzc3MzMxNS8wLzQ0MDk0OTQ4QzZFM0QzMkExQTU5QkU2Nzk1Q0Q4 QTJBM0E1MjgwOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDQwOTQ5NDhDNkUzRDMyQTFBNTlCRTY3OTVDRDhBMkEzQTUyODA5OC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5OTg5MjA3NTE3Mzc3MzMxNS8wLzMyMzIzMzJlMzIz NzJlMzEzODM1MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzEzNzM2MzIzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAN8buTANBgkqhkiG9w0BAQsFAAOCAQEAVCkYN3K8ymmEGGmHrvM+clKf BJi2fD2Iso6w3Cf+BG3RiAkVFS2xxOUmHxhx+d7NucKkuG1liJ+QpSQ/ZTfG8/FR Fl3TYUDATuKBg9ul4WdGDZxXSWRKZoHXMf9kV8p8FPhs8tvutUurbKjtIwMBVV99 rhDSTkpeFxO+p1XLUuGSuCgnI0/8uuYDiBk6Hbpn+G538mePKh7scBQ782BFYaFk 4XEwZQ17WAGnLaEfaOVv1IWea59w2YzHVRiGNwUOgd8s9qBjFWH71CATpXsA4IRX 15NzfiYxOaAekCFvkad2tGMmXq0wAazrRaS7DaRF+VSC1ahsufw2nRzSgZbwyw== -----END CERTIFICATE-----Generated at Mon Apr 27 13:46:36 2026 by rpki-client