$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e3132362e302f32342d3234203d3e2034383132.roa File: 3231382e39362e3132362e302f32342d3234203d3e2034383132.roa (raw, json) Hash identifier: j/PpWy91yP4dTFzseEW3YNsdBUgqNcTd+7gO8E5mhmU= Subject key identifier: 52:00:8C:C1:B7:5D:52:04:F6:67:B6:5E:25:D3:A5:6B:A4:4A:32:DF Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Certificate serial: 5A23B2F25695E2B4E6795BB45852B18B0F4E57DA Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e3132362e302f32342d3234203d3e2034383132.roa Signing time: Mon 27 Apr 2026 02:22:23 +0000 ROA not before: Mon 27 Apr 2026 02:17:23 +0000 ROA not after: Mon 26 Apr 2027 02:22:23 +0000 asID: 4812 IP address blocks: 218.96.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 06:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:23:b2:f2:56:95:e2:b4:e6:79:5b:b4:58:52:b1:8b:0f:4e:57:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Validity Not Before: Apr 27 02:17:23 2026 GMT Not After : Apr 26 02:22:23 2027 GMT Subject: CN=52008CC1B75D5204F667B65E25D3A56BA44A32DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:24:46:9e:17:c1:58:6f:41:9c:77:a6:f1:63: 5c:5a:21:16:fe:22:96:88:26:25:85:38:cc:18:9c: 1a:b4:8c:f1:85:df:0a:18:7f:30:ba:a5:94:dc:c8: db:0b:5c:31:fe:28:06:f3:a4:5c:3c:0a:52:c0:ad: d6:93:b9:f0:12:88:c5:ba:e2:45:97:59:01:cf:5a: f6:ad:e2:36:e7:ee:96:a3:7e:5f:25:f2:8c:7c:41: c1:d4:2d:ea:96:8a:d4:b9:49:2e:e2:9e:c4:df:55: 69:1c:95:6b:17:fc:47:69:f1:9b:ca:fd:05:60:63: 8a:3d:bf:49:bb:98:e8:ed:81:3f:a0:0c:c9:bd:7a: f2:b4:2c:b8:18:03:46:dc:73:ff:8d:7d:65:2b:89: 47:8b:7a:dd:42:19:86:e8:55:e6:eb:9a:52:6f:45: f5:40:eb:a2:df:21:13:16:6c:ce:50:d9:ad:08:32: e9:30:fb:5b:2e:50:75:f6:a6:0f:8f:87:75:c5:c0: e6:e7:51:b8:71:ba:8a:45:31:bd:77:b6:ed:20:22: c7:0d:d4:f7:41:7a:f4:42:99:d3:1f:48:f9:8a:cf: f5:bd:67:2a:c5:b6:82:52:f0:f1:69:c9:6d:a6:24: db:39:66:96:84:e0:13:f1:1d:d7:f7:5e:b7:ad:68: 45:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:00:8C:C1:B7:5D:52:04:F6:67:B6:5E:25:D3:A5:6B:A4:4A:32:DF X509v3 Authority Key Identifier: keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e3132362e302f32342d3234203d3e2034383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.96.126.0/24 Signature Algorithm: sha256WithRSAEncryption ac:fc:fb:b5:d3:70:24:f9:ef:c7:d6:40:ec:36:99:f0:58:c6: b8:15:a4:2f:3b:a1:72:12:8e:e1:4d:01:16:86:8e:e5:28:5f: ac:a2:98:58:90:a4:34:aa:e2:12:6a:49:96:3a:1a:41:15:a6: 00:48:e5:a3:f1:58:95:52:18:1b:d8:b4:a1:08:69:aa:73:4b: ed:0f:47:b3:65:13:54:3c:da:8c:ed:7d:7e:56:ca:f4:f7:f7: 9f:b2:86:01:34:6a:f8:1c:11:0b:c1:52:99:aa:06:1c:6e:26: 1e:8c:9c:ca:f8:58:13:84:f8:94:f7:cf:d5:35:9d:93:ca:51: 0f:69:9d:66:07:76:fe:dd:c2:4e:c6:df:b7:02:cc:dc:47:99: c8:c4:60:a8:26:bd:ac:bd:44:46:f0:dc:66:f3:a5:67:a9:f2: b5:b3:c9:b1:b3:f6:65:71:6b:bd:9d:72:a1:0e:f1:45:3c:e3: 89:2e:66:8f:4a:9a:5e:ad:31:c1:ac:24:02:05:d5:01:4c:f3: 5c:51:4d:3f:94:76:36:12:08:03:d3:8d:8e:a1:8d:09:6b:8a: 04:ab:fa:69:77:d9:c7:f6:cc:fc:87:8b:63:27:2d:df:35:a2: 0b:0a:6f:1e:74:f9:e5:49:19:c3:be:43:24:17:4d:39:85:d1: 40:36:c1:cd -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUWiOy8laV4rTmeVu0WFKxiw9OV9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUx NkYzQTdFRjAeFw0yNjA0MjcwMjE3MjNaFw0yNzA0MjYwMjIyMjNaMDMxMTAvBgNV BAMTKDUyMDA4Q0MxQjc1RDUyMDRGNjY3QjY1RTI1RDNBNTZCQTQ0QTMyREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpJEaeF8FYb0Gcd6bxY1xaIRb+ IpaIJiWFOMwYnBq0jPGF3woYfzC6pZTcyNsLXDH+KAbzpFw8ClLArdaTufASiMW6 4kWXWQHPWvat4jbn7pajfl8l8ox8QcHULeqWitS5SS7insTfVWkclWsX/Edp8ZvK /QVgY4o9v0m7mOjtgT+gDMm9evK0LLgYA0bcc/+NfWUriUeLet1CGYboVebrmlJv RfVA66LfIRMWbM5Q2a0IMukw+1suUHX2pg+Ph3XFwObnUbhxuopFMb13tu0gIscN 1PdBevRCmdMfSPmKz/W9ZyrFtoJS8PFpyW2mJNs5ZpaE4BPxHdf3XretaEUbAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUUgCMwbddUgT2Z7ZeJdOla6RKMt8wHwYDVR0j BBgwFoAUkxNmUCC9+V36SqwOHkqajhbzp+8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk2ODc1ODUwOTMwNTg1OC8wLzkzMTM2NjUwMjBCREY5NURGQTRBQUMwRTFFNEE5 QThFMTZGM0E3RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUxNkYzQTdFRi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTAwOTY4NzU4NTA5MzA1ODU4LzAvMzIzMTM4MmUzOTM2 MmUzMTMyMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzEzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANpgfjANBgkqhkiG9w0BAQsFAAOCAQEArPz7tdNwJPnvx9ZA7DaZ8FjGuBWk LzuhchKO4U0BFoaO5ShfrKKYWJCkNKriEmpJljoaQRWmAEjlo/FYlVIYG9i0oQhp qnNL7Q9Hs2UTVDzajO19flbK9Pf3n7KGATRq+BwRC8FSmaoGHG4mHoycyvhYE4T4 lPfP1TWdk8pRD2mdZgd2/t3CTsbftwLM3EeZyMRgqCa9rL1ERvDcZvOlZ6nytbPJ sbP2ZXFrvZ1yoQ7xRTzjiS5mj0qaXq0xwawkAgXVAUzzXFFNP5R2NhIIA9ONjqGN CWuKBKv6aXfZx/bM/IeLYyct3zWiCwpvHnT55UkZw75DJBdNOYXRQDbBzQ== -----END CERTIFICATE-----Generated at Mon Apr 27 08:25:07 2026 by rpki-client