$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231302e352e32322e302f32342d3234203d3e203130323132.roa File: 3231302e352e32322e302f32342d3234203d3e203130323132.roa (raw, json) Hash identifier: cqMuU4496+QICJ4SL0hurQNo+opj9HrkFb1tBv/wij8= Subject key identifier: B2:BB:03:64:69:0C:5C:49:D7:B4:6E:2C:D8:B7:D9:85:2E:6C:38:B1 Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Certificate serial: 2C19D56402B3688592DF83B26D63C5CA25E449D0 Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231302e352e32322e302f32342d3234203d3e203130323132.roa Signing time: Mon 27 Apr 2026 08:38:04 +0000 ROA not before: Mon 27 Apr 2026 08:33:04 +0000 ROA not after: Mon 26 Apr 2027 08:38:04 +0000 asID: 10212 IP address blocks: 210.5.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 09:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:19:d5:64:02:b3:68:85:92:df:83:b2:6d:63:c5:ca:25:e4:49:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Validity Not Before: Apr 27 08:33:04 2026 GMT Not After : Apr 26 08:38:04 2027 GMT Subject: CN=B2BB0364690C5C49D7B46E2CD8B7D9852E6C38B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:76:44:7a:4d:ba:6a:69:20:65:18:a2:ef:7b: d5:47:3e:5b:63:a2:ca:42:d0:79:e4:06:b7:23:4a: 74:c7:91:3e:27:19:ad:99:5c:93:cb:2b:74:55:77: c5:d9:01:a9:2c:7d:d5:ec:58:93:f8:ab:10:0d:7d: 0e:34:cb:a0:dd:84:e8:bd:50:89:7f:22:fc:74:35: db:59:15:b7:90:8b:06:04:74:fc:eb:f2:a6:4b:09: 22:d3:ff:3e:cf:3b:45:28:b6:96:bc:4d:26:ab:9f: 8a:6d:f3:64:5a:c9:f8:61:76:19:b3:55:7c:07:df: b8:a9:e2:00:5a:6e:58:7b:8f:54:e8:1d:9f:be:c3: 96:6c:e2:8e:1b:b7:06:8b:04:13:a3:fe:89:08:97: 55:68:d9:b2:81:a6:f9:b9:9e:d6:cb:f9:ef:34:3c: 0f:eb:3f:0d:7a:56:ff:1c:59:21:0b:77:18:dd:d6: 79:c5:2f:9b:bb:f8:2c:b3:ad:a9:ba:a2:17:4b:41: d5:38:74:f9:cc:d7:30:94:f1:63:17:e4:da:e0:5c: fc:2d:90:90:be:be:10:26:26:d2:a7:c5:a3:a8:c0: f8:89:36:4c:f5:c5:f0:d2:ff:7f:ca:15:eb:d6:a0: a1:fa:a8:77:87:c9:8d:11:f7:d8:a5:57:af:74:de: fc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:BB:03:64:69:0C:5C:49:D7:B4:6E:2C:D8:B7:D9:85:2E:6C:38:B1 X509v3 Authority Key Identifier: keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231302e352e32322e302f32342d3234203d3e203130323132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.5.22.0/24 Signature Algorithm: sha256WithRSAEncryption c9:1f:34:e9:4f:ca:54:15:bf:83:a6:6e:ec:64:cd:c1:41:9c: 7a:11:ef:b5:31:f9:db:ae:92:9b:cd:9f:04:a4:8e:09:94:d1: 79:75:5b:ed:c8:e8:a3:28:b2:47:d4:09:27:83:7b:c5:c5:d9: 45:08:22:50:f1:c6:10:c1:c9:52:93:39:ce:ed:7d:a3:aa:06: 57:df:3f:c3:a2:02:6d:e6:e1:c2:01:be:07:b6:dd:1b:7e:50: 2a:24:9c:e9:44:40:b7:58:42:9c:3b:f0:22:52:50:cd:96:e8: 5a:47:1b:0e:0d:ed:a9:4f:d9:b9:e4:40:52:c6:e4:80:b5:3a: 27:a9:fc:78:b1:b8:3d:09:e3:e1:c4:3e:8d:38:66:ea:32:61: 0e:1c:00:3d:c6:5b:c0:7c:4e:67:ad:5b:d2:c2:4f:bf:49:5b: fc:a3:79:7e:22:3a:e6:38:71:49:55:dc:c0:a1:ed:1f:34:0f: cb:1b:8b:80:6e:3a:af:f3:98:65:ff:1b:c7:b3:db:9a:54:40: 84:00:8e:9f:d8:21:07:b1:6d:17:6e:ce:51:4a:6d:05:1f:6a: dd:f7:0f:a6:51:c3:00:1e:68:d8:28:a6:9b:bc:71:8b:18:2f: 82:ca:9a:eb:45:47:9b:22:a7:93:75:2a:c6:57:24:9b:1c:a6: 11:b1:f9:39 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIULBnVZAKzaIWS34OybWPFyiXkSdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUx NkYzQTdFRjAeFw0yNjA0MjcwODMzMDRaFw0yNzA0MjYwODM4MDRaMDMxMTAvBgNV BAMTKEIyQkIwMzY0NjkwQzVDNDlEN0I0NkUyQ0Q4QjdEOTg1MkU2QzM4QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCudkR6TbpqaSBlGKLve9VHPltj ospC0HnkBrcjSnTHkT4nGa2ZXJPLK3RVd8XZAaksfdXsWJP4qxANfQ40y6DdhOi9 UIl/Ivx0NdtZFbeQiwYEdPzr8qZLCSLT/z7PO0Uotpa8TSarn4pt82Rayfhhdhmz VXwH37ip4gBablh7j1ToHZ++w5Zs4o4btwaLBBOj/okIl1Vo2bKBpvm5ntbL+e80 PA/rPw16Vv8cWSELdxjd1nnFL5u7+Cyzram6ohdLQdU4dPnM1zCU8WMX5NrgXPwt kJC+vhAmJtKnxaOowPiJNkz1xfDS/3/KFevWoKH6qHeHyY0R99ilV6903vxZAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUsrsDZGkMXEnXtG4s2LfZhS5sOLEwHwYDVR0j BBgwFoAUkxNmUCC9+V36SqwOHkqajhbzp+8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk2ODc1ODUwOTMwNTg1OC8wLzkzMTM2NjUwMjBCREY5NURGQTRBQUMwRTFFNEE5 QThFMTZGM0E3RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUxNkYzQTdFRi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTAwOTY4NzU4NTA5MzA1ODU4LzAvMzIzMTMwMmUzNTJl MzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzAzMjMxMzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADSBRYwDQYJKoZIhvcNAQELBQADggEBAMkfNOlPylQVv4OmbuxkzcFBnHoR77Ux +duukpvNnwSkjgmU0Xl1W+3I6KMoskfUCSeDe8XF2UUIIlDxxhDByVKTOc7tfaOq BlffP8OiAm3m4cIBvge23Rt+UCoknOlEQLdYQpw78CJSUM2W6FpHGw4N7alP2bnk QFLG5IC1Oiep/HixuD0J4+HEPo04ZuoyYQ4cAD3GW8B8TmetW9LCT79JW/yjeX4i OuY4cUlV3MCh7R80D8sbi4BuOq/zmGX/G8ez25pUQIQAjp/YIQexbRduzlFKbQUf at33D6ZRwwAeaNgoppu8cYsYL4LKmutFR5sip5N1KsZXJJscphGx+Tk= -----END CERTIFICATE-----Generated at Mon Apr 27 13:23:09 2026 by rpki-client