$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231302e352e32302e302f32342d3234203d3e203130323132.roa File: 3231302e352e32302e302f32342d3234203d3e203130323132.roa (raw, json) Hash identifier: p/6JYgtfy8IDG8daMjU4j/VIE7RGl58HpD/1G0VXBpU= Subject key identifier: 2C:7E:1B:F2:EA:D1:BD:B6:B3:BD:04:F7:9A:0E:CA:DC:FB:A0:5B:63 Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Certificate serial: 552516422A3232AEA09F5BEC4FB040F2DC940FC4 Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231302e352e32302e302f32342d3234203d3e203130323132.roa Signing time: Mon 27 Apr 2026 08:38:04 +0000 ROA not before: Mon 27 Apr 2026 08:33:04 +0000 ROA not after: Mon 26 Apr 2027 08:38:04 +0000 asID: 10212 IP address blocks: 210.5.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 09:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:25:16:42:2a:32:32:ae:a0:9f:5b:ec:4f:b0:40:f2:dc:94:0f:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Validity Not Before: Apr 27 08:33:04 2026 GMT Not After : Apr 26 08:38:04 2027 GMT Subject: CN=2C7E1BF2EAD1BDB6B3BD04F79A0ECADCFBA05B63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ef:f4:12:02:a2:5c:7f:64:56:fe:9c:8e:80: 29:03:fc:ac:31:eb:0e:98:e5:85:9d:c6:36:17:64: b2:e5:35:32:ac:7e:56:54:0e:4d:80:22:49:8b:06: 22:d9:7a:b1:ea:0f:aa:7a:46:fa:82:7c:4b:19:fe: 6e:f9:c8:75:b4:86:ef:df:6c:c2:c9:87:f4:fd:d9: 17:2a:84:96:a2:ea:fe:ac:cd:8d:d8:db:c4:0d:6c: 55:01:45:eb:a8:ab:4f:91:6f:e6:b6:d0:ef:b9:5e: 8e:79:85:33:2c:af:fa:94:a3:3f:f1:26:06:17:4c: 76:6b:28:22:2a:d1:31:c5:e3:be:c9:e5:9d:66:b7: 16:ee:c5:77:6e:18:67:ef:04:98:57:7a:25:00:51: c9:f1:38:0d:85:9e:c5:1c:e8:ff:0f:f1:8d:54:e2: 2e:af:41:f0:6f:86:7d:ec:ac:ee:c2:7f:7d:46:7e: 86:b0:d8:99:87:ee:0e:90:83:b6:80:f2:6a:0a:21: 83:35:02:f6:0f:94:9d:5e:45:25:06:c2:d6:cf:54: 57:75:46:31:6b:59:15:41:6b:21:72:7e:34:2b:75: 0b:01:f8:fb:92:36:94:fd:58:3c:0c:7f:73:92:f8: e2:1e:f2:ef:06:51:69:a1:7a:d7:e2:2c:14:84:50: 22:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7E:1B:F2:EA:D1:BD:B6:B3:BD:04:F7:9A:0E:CA:DC:FB:A0:5B:63 X509v3 Authority Key Identifier: keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231302e352e32302e302f32342d3234203d3e203130323132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.5.20.0/24 Signature Algorithm: sha256WithRSAEncryption 52:ba:0b:d2:aa:c5:11:78:54:bf:00:0b:e7:47:79:64:8c:58: 9f:81:4e:e1:18:a0:42:d7:5b:89:7b:dc:90:c6:1b:96:c4:b0: bc:1b:71:38:16:c8:48:f8:9e:4a:cf:dd:8e:10:e8:03:9c:4a: 29:d2:ad:88:69:0a:be:f5:d1:6c:c7:27:8a:99:ad:07:e9:d1: b1:d0:33:c2:1b:c5:72:6c:38:b2:f0:37:fa:a6:0b:a8:f8:00: e7:35:0a:bf:da:4e:54:2c:72:51:bc:08:e1:3c:db:21:4c:3b: b1:34:c2:29:1a:52:fd:db:6d:d0:ee:5c:04:4e:91:83:a9:c5: 07:cb:f5:07:dd:4d:e9:35:29:3d:74:13:49:1d:6d:f3:1a:7c: 94:54:fc:5d:27:c9:45:64:25:a7:17:16:62:37:bf:08:fd:a6: 02:f4:0d:8f:5d:64:ab:29:ac:5b:18:e4:55:b6:17:d1:6f:d0: 05:89:90:8f:7b:4a:12:66:c8:0a:ff:9d:c4:45:cb:a6:7f:08: 2a:b0:90:bd:b7:8a:19:ff:92:79:36:09:89:f9:10:1e:5c:bc: a8:53:62:61:b0:89:5a:f4:dc:55:f4:11:a6:e8:b3:09:1f:8b: ea:7d:da:57:48:da:4c:06:0b:3b:30:02:31:5b:cc:e9:96:c6: bf:c2:ab:e5 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUVSUWQioyMq6gn1vsT7BA8tyUD8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUx NkYzQTdFRjAeFw0yNjA0MjcwODMzMDRaFw0yNzA0MjYwODM4MDRaMDMxMTAvBgNV BAMTKDJDN0UxQkYyRUFEMUJEQjZCM0JEMDRGNzlBMEVDQURDRkJBMDVCNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs7/QSAqJcf2RW/pyOgCkD/Kwx 6w6Y5YWdxjYXZLLlNTKsflZUDk2AIkmLBiLZerHqD6p6RvqCfEsZ/m75yHW0hu/f bMLJh/T92RcqhJai6v6szY3Y28QNbFUBReuoq0+Rb+a20O+5Xo55hTMsr/qUoz/x JgYXTHZrKCIq0THF477J5Z1mtxbuxXduGGfvBJhXeiUAUcnxOA2FnsUc6P8P8Y1U 4i6vQfBvhn3srO7Cf31Gfoaw2JmH7g6Qg7aA8moKIYM1AvYPlJ1eRSUGwtbPVFd1 RjFrWRVBayFyfjQrdQsB+PuSNpT9WDwMf3OS+OIe8u8GUWmhetfiLBSEUCLtAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQULH4b8urRvbazvQT3mg7K3PugW2MwHwYDVR0j BBgwFoAUkxNmUCC9+V36SqwOHkqajhbzp+8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk2ODc1ODUwOTMwNTg1OC8wLzkzMTM2NjUwMjBCREY5NURGQTRBQUMwRTFFNEE5 QThFMTZGM0E3RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUxNkYzQTdFRi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTAwOTY4NzU4NTA5MzA1ODU4LzAvMzIzMTMwMmUzNTJl MzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzAzMjMxMzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADSBRQwDQYJKoZIhvcNAQELBQADggEBAFK6C9KqxRF4VL8AC+dHeWSMWJ+BTuEY oELXW4l73JDGG5bEsLwbcTgWyEj4nkrP3Y4Q6AOcSinSrYhpCr710WzHJ4qZrQfp 0bHQM8IbxXJsOLLwN/qmC6j4AOc1Cr/aTlQsclG8COE82yFMO7E0wikaUv3bbdDu XAROkYOpxQfL9QfdTek1KT10E0kdbfMafJRU/F0nyUVkJacXFmI3vwj9pgL0DY9d ZKsprFsY5FW2F9Fv0AWJkI97ShJmyAr/ncRFy6Z/CCqwkL23ihn/knk2CYn5EB5c vKhTYmGwiVr03FX0Eaboswkfi+p92ldI2kwGCzswAjFbzOmWxr/Cq+U= -----END CERTIFICATE-----Generated at Mon Apr 27 13:23:10 2026 by rpki-client