$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099963811500130307/0/3230332e39342e302e302f31392d3139203d3e2034383132.roa File: 3230332e39342e302e302f31392d3139203d3e2034383132.roa (raw, json) Hash identifier: MX+Z2eKv6zZsuTu/XMVsYTMYIX19UvhWGwXM6wwzLmw= Subject key identifier: BF:D1:C9:1B:86:82:BF:C0:E3:5F:F2:4C:4E:BE:BC:40:9E:D5:03:28 Certificate issuer: /CN=A91EFAA20000/serialNumber=6A38799E7FD21985ED882E88FFC0DAFEFF87F54C Certificate serial: 24D400E7F7A1269A9945F19E07015C6CE231CBAB Authority key identifier: 6A:38:79:9E:7F:D2:19:85:ED:88:2E:88:FF:C0:DA:FE:FF:87:F5:4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/3230332e39342e302e302f31392d3139203d3e2034383132.roa Signing time: Fri 24 Apr 2026 09:51:24 +0000 ROA not before: Fri 24 Apr 2026 09:46:24 +0000 ROA not after: Fri 23 Apr 2027 09:51:24 +0000 asID: 4812 IP address blocks: 203.94.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 18:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:d4:00:e7:f7:a1:26:9a:99:45:f1:9e:07:01:5c:6c:e2:31:cb:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFAA20000, serialNumber=6A38799E7FD21985ED882E88FFC0DAFEFF87F54C Validity Not Before: Apr 24 09:46:24 2026 GMT Not After : Apr 23 09:51:24 2027 GMT Subject: CN=BFD1C91B8682BFC0E35FF24C4EBEBC409ED50328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:75:53:2c:f7:66:c7:54:e1:d1:f8:51:48:40: cd:07:77:df:7a:f8:a0:13:cb:f1:25:04:fe:bb:ae: bc:79:f5:fe:47:3b:58:90:2d:cf:42:c1:f9:b5:6c: 36:6a:b9:b3:93:76:63:91:62:36:a7:93:f4:39:9d: 23:92:e2:39:b7:93:90:82:96:17:6f:3e:ac:b5:b8: bd:b9:54:b9:0a:b5:4e:25:17:49:6d:3f:dd:01:9a: 21:3c:77:9f:d3:67:04:41:d8:61:89:1f:38:ea:0e: 54:1e:f4:38:87:19:85:4b:09:bb:5a:c2:63:02:0f: 9d:22:d0:72:03:40:9d:8f:91:04:74:eb:84:6d:ca: 0e:3c:16:75:50:2e:b3:8d:a1:cb:4b:56:4f:89:bf: c1:d0:c4:37:35:c9:36:cb:d4:60:d7:27:04:fd:ed: a4:ff:3d:c4:0d:73:39:5b:b7:28:78:de:ca:db:06: c4:f7:2e:94:9d:06:50:9e:ca:b6:56:38:2f:b7:b6: 3d:f0:67:f2:9e:60:44:ba:74:b3:e4:21:3e:f2:16: 5e:5f:07:fb:46:d1:89:6a:fa:03:32:64:b5:f9:52: 8d:f1:12:ef:dd:1f:c5:ad:05:88:bc:38:71:c8:af: b6:bf:2d:e8:38:01:6e:31:19:48:2a:e7:2b:26:ee: ba:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D1:C9:1B:86:82:BF:C0:E3:5F:F2:4C:4E:BE:BC:40:9E:D5:03:28 X509v3 Authority Key Identifier: keyid:6A:38:79:9E:7F:D2:19:85:ED:88:2E:88:FF:C0:DA:FE:FF:87:F5:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/3230332e39342e302e302f31392d3139203d3e2034383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.94.0.0/19 Signature Algorithm: sha256WithRSAEncryption 7a:15:fc:6e:8f:d9:31:a5:cc:17:da:0e:42:11:d7:3b:60:00: 63:f1:a4:65:0a:99:5f:6f:5b:9a:5d:6a:85:46:e4:cb:61:d8: ba:1a:17:87:de:80:ef:04:83:62:5b:75:55:eb:76:e3:ea:09: 9d:01:ac:4b:04:7d:5a:a9:91:80:51:f8:df:94:d7:dc:59:8d: 1b:4f:63:44:10:e4:f6:d0:af:99:cd:9f:4f:de:22:53:6b:b2: 2d:2e:f4:b1:e5:c6:4b:9a:ff:6d:7a:d9:78:52:de:c0:47:f1: 95:4d:c0:bd:d1:c6:c7:9d:d0:27:a1:28:f9:03:e1:99:cc:c3: fc:31:53:f4:32:1c:08:14:5c:73:ee:39:d4:73:7a:f9:45:08: b3:45:1b:e9:bd:5c:f0:95:6a:3a:3f:da:1b:3d:c7:00:c1:4d: 8b:50:37:82:b3:dd:bc:b8:6d:c5:13:11:ae:da:56:40:e7:fd: e5:56:2b:c2:73:0c:45:c2:b2:a6:91:99:eb:3f:bd:b8:40:37: f3:e8:55:45:76:f3:42:17:47:86:67:16:52:ff:2b:eb:97:d6: 75:b1:54:dc:f7:1f:7a:91:79:5a:4e:00:f7:f3:35:a4:98:2e: 3c:2d:31:d5:4f:1a:f5:92:c8:a3:c8:47:25:3c:9e:c2:86:a9: 7f:d0:42:8d -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgIUJNQA5/ehJpqZRfGeBwFcbOIxy6swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRUZBQTIwMDAwMTEwLwYDVQQFEyg2QTM4Nzk5RTdG RDIxOTg1RUQ4ODJFODhGRkMwREFGRUZGODdGNTRDMB4XDTI2MDQyNDA5NDYyNFoX DTI3MDQyMzA5NTEyNFowMzExMC8GA1UEAxMoQkZEMUM5MUI4NjgyQkZDMEUzNUZG MjRDNEVCRUJDNDA5RUQ1MDMyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJR1Uyz3ZsdU4dH4UUhAzQd333r4oBPL8SUE/ruuvHn1/kc7WJAtz0LB+bVs Nmq5s5N2Y5FiNqeT9DmdI5LiObeTkIKWF28+rLW4vblUuQq1TiUXSW0/3QGaITx3 n9NnBEHYYYkfOOoOVB70OIcZhUsJu1rCYwIPnSLQcgNAnY+RBHTrhG3KDjwWdVAu s42hy0tWT4m/wdDENzXJNsvUYNcnBP3tpP89xA1zOVu3KHjeytsGxPculJ0GUJ7K tlY4L7e2PfBn8p5gRLp0s+QhPvIWXl8H+0bRiWr6AzJktflSjfES790fxa0FiLw4 ccivtr8t6DgBbjEZSCrnKybuuq0CAwEAAaOCAg0wggIJMB0GA1UdDgQWBBS/0ckb hoK/wONf8kxOvrxAntUDKDAfBgNVHSMEGDAWgBRqOHmef9IZhe2ILoj/wNr+/4f1 TDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk5OTYzODExNTAwMTMwMzA3LzAvNkEzODc5 OUU3RkQyMTk4NUVEODgyRTg4RkZDMERBRkVGRjg3RjU0Qy5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvYWpoNW5uX1NH WVh0aUM2SV84RGFfdi1IOVV3LmNlcjCBhgYIKwYBBQUHAQsEejB4MHYGCCsGAQUF BzALhmpyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwOTk5NjM4MTE1 MDAxMzAzMDcvMC8zMjMwMzMyZTM5MzQyZTMwMmUzMDJmMzEzOTJkMzEzOTIwM2Qz ZTIwMzQzODMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB BQUHAQcBAf8EEDAOMAwEAgABMAYDBAXLXgAwDQYJKoZIhvcNAQELBQADggEBAHoV /G6P2TGlzBfaDkIR1ztgAGPxpGUKmV9vW5pdaoVG5Mth2LoaF4fegO8Eg2JbdVXr duPqCZ0BrEsEfVqpkYBR+N+U19xZjRtPY0QQ5PbQr5nNn0/eIlNrsi0u9LHlxkua /2162XhS3sBH8ZVNwL3Rxsed0CehKPkD4ZnMw/wxU/QyHAgUXHPuOdRzevlFCLNF G+m9XPCVajo/2hs9xwDBTYtQN4Kz3by4bcUTEa7aVkDn/eVWK8JzDEXCsqaRmes/ vbhAN/PoVUV280IXR4ZnFlL/K+uX1nWxVNz3H3qReVpOAPfzNaSYLjwtMdVPGvWS yKPIRyU8nsKGqX/QQo0= -----END CERTIFICATE-----Generated at Mon Apr 27 08:24:36 2026 by rpki-client