$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231302e352e33302e302f32342d3234203d3e203130323132.roa File: 3231302e352e33302e302f32342d3234203d3e203130323132.roa (raw, json) Hash identifier: pAyrsGEE4eWYfU1vwDqsIwKDaIhG+LBbuKtIBizAw8Y= Subject key identifier: A0:C7:AC:91:BD:3E:0B:66:21:1B:42:83:3F:4D:9B:8E:BA:D5:23:9D Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Certificate serial: 2D07D34CABF9F7A3FAF0B4A2F25955838FB73FF3 Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231302e352e33302e302f32342d3234203d3e203130323132.roa Signing time: Mon 27 Apr 2026 08:38:04 +0000 ROA not before: Mon 27 Apr 2026 08:33:04 +0000 ROA not after: Mon 26 Apr 2027 08:38:04 +0000 asID: 10212 IP address blocks: 210.5.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 09:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:07:d3:4c:ab:f9:f7:a3:fa:f0:b4:a2:f2:59:55:83:8f:b7:3f:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Validity Not Before: Apr 27 08:33:04 2026 GMT Not After : Apr 26 08:38:04 2027 GMT Subject: CN=A0C7AC91BD3E0B66211B42833F4D9B8EBAD5239D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d3:54:d7:63:c9:9c:6e:ec:7a:9c:68:e6:ad: bb:65:0c:4f:9b:a8:6f:69:9c:44:df:c0:49:1c:af: b3:4e:f8:43:fc:d1:0b:43:12:77:cf:70:94:a8:17: 84:4c:1e:f5:a9:d6:4c:88:56:29:a7:17:bc:4d:95: 68:f8:83:e3:c4:03:8a:95:67:97:d0:11:e2:dd:bf: 46:3e:20:fc:e8:12:4d:26:d5:d8:b7:29:be:a9:7a: e2:3f:d1:cc:26:f5:a1:c3:43:e2:6c:2c:dd:7d:68: 63:fa:23:46:2e:0b:da:92:09:6b:9a:87:9f:71:d7: 18:f6:4a:d1:e2:3d:96:f7:7b:6a:a6:96:7f:2d:da: 09:00:17:49:d9:5e:7f:19:6e:e5:2b:f1:f5:b7:da: b3:8d:7a:42:58:31:a2:af:25:a2:24:ef:de:e8:e9: 6a:48:8f:f7:e8:9e:da:b6:e2:f2:cd:7c:75:93:41: 6a:b7:10:2e:13:72:be:f3:b6:61:78:57:c5:4c:c0: 12:ed:d3:fb:d4:70:cb:a1:43:cd:e8:5f:d7:b9:0e: 41:74:e5:1e:71:61:27:eb:d1:f4:8e:4d:60:7d:12: b8:c0:85:b9:3d:6a:48:ee:11:e8:1b:81:6f:53:24: 1e:4e:9b:cb:9c:9e:5e:6a:ca:20:37:6b:ce:06:46: b9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C7:AC:91:BD:3E:0B:66:21:1B:42:83:3F:4D:9B:8E:BA:D5:23:9D X509v3 Authority Key Identifier: keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231302e352e33302e302f32342d3234203d3e203130323132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.5.30.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:62:2e:2c:42:fa:11:b5:52:b7:00:84:04:f0:12:83:46:7d: 2e:05:be:86:05:16:dd:f8:eb:ca:b9:2d:68:df:05:aa:fb:f3: 0d:7b:4e:ac:7a:21:57:cb:f1:6f:25:4f:3f:fb:79:e2:cb:58: 53:ae:35:cb:de:f8:26:da:03:bb:41:47:5d:30:74:a6:05:cc: ea:b1:d6:94:0e:d9:4b:bf:f6:6c:83:91:f8:30:52:3a:11:82: 27:e3:85:a0:4e:96:2c:b0:29:a2:e2:7e:cf:c7:ec:02:81:35: 3e:89:15:c3:b2:b7:41:16:87:4f:88:9e:1d:c4:cb:f2:bd:37: 82:ea:0f:73:05:f2:4b:35:01:ff:9c:38:fd:9f:ff:8d:66:90: b6:6d:cb:f6:a7:98:16:6a:6e:1f:49:49:b4:f5:18:a3:a3:be: 78:34:91:b1:e1:f4:05:f6:34:89:91:02:8b:4b:0f:73:e1:95: 51:b4:c1:77:8a:47:fa:57:60:4c:b3:a0:69:dc:ee:8a:4b:19: c6:f0:6a:d2:78:b8:c5:bb:d9:e3:43:b6:32:fe:86:ad:3f:f0: ca:2e:a9:5c:fc:15:93:0d:c5:51:b6:ba:6e:63:da:34:e1:23: 08:5a:be:c8:c9:65:0c:c7:31:52:99:3d:a5:44:68:ee:3f:67: 1b:cf:34:5b -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIULQfTTKv596P68LSi8llVg4+3P/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUx NkYzQTdFRjAeFw0yNjA0MjcwODMzMDRaFw0yNzA0MjYwODM4MDRaMDMxMTAvBgNV BAMTKEEwQzdBQzkxQkQzRTBCNjYyMTFCNDI4MzNGNEQ5QjhFQkFENTIzOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz01TXY8mcbux6nGjmrbtlDE+b qG9pnETfwEkcr7NO+EP80QtDEnfPcJSoF4RMHvWp1kyIVimnF7xNlWj4g+PEA4qV Z5fQEeLdv0Y+IPzoEk0m1di3Kb6peuI/0cwm9aHDQ+JsLN19aGP6I0YuC9qSCWua h59x1xj2StHiPZb3e2qmln8t2gkAF0nZXn8ZbuUr8fW32rONekJYMaKvJaIk797o 6WpIj/fontq24vLNfHWTQWq3EC4Tcr7ztmF4V8VMwBLt0/vUcMuhQ83oX9e5DkF0 5R5xYSfr0fSOTWB9ErjAhbk9akjuEegbgW9TJB5Om8ucnl5qyiA3a84GRrkXAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUoMeskb0+C2YhG0KDP02bjrrVI50wHwYDVR0j BBgwFoAUkxNmUCC9+V36SqwOHkqajhbzp+8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk2ODc1ODUwOTMwNTg1OC8wLzkzMTM2NjUwMjBCREY5NURGQTRBQUMwRTFFNEE5 QThFMTZGM0E3RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUxNkYzQTdFRi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTAwOTY4NzU4NTA5MzA1ODU4LzAvMzIzMTMwMmUzNTJl MzMzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzAzMjMxMzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADSBR4wDQYJKoZIhvcNAQELBQADggEBADtiLixC+hG1UrcAhATwEoNGfS4FvoYF Ft3468q5LWjfBar78w17Tqx6IVfL8W8lTz/7eeLLWFOuNcve+CbaA7tBR10wdKYF zOqx1pQO2Uu/9myDkfgwUjoRgifjhaBOliywKaLifs/H7AKBNT6JFcOyt0EWh0+I nh3Ey/K9N4LqD3MF8ks1Af+cOP2f/41mkLZty/anmBZqbh9JSbT1GKOjvng0kbHh 9AX2NImRAotLD3PhlVG0wXeKR/pXYEyzoGnc7opLGcbwatJ4uMW72eNDtjL+hq0/ 8MouqVz8FZMNxVG2um5j2jThIwhavsjJZQzHMVKZPaVEaO4/ZxvPNFs= -----END CERTIFICATE-----Generated at Mon Apr 27 13:23:10 2026 by rpki-client