$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1102157690253082631/0/3231302e37332e39362e302f32302d3230203d3e2037363430.roa File: 3231302e37332e39362e302f32302d3230203d3e2037363430.roa (raw, json) Hash identifier: EtkpsC4Mngg6Z7xDQx0zDkvqampHk4U0fmU7Xuo/Gy8= Subject key identifier: 72:81:82:33:69:9B:16:25:BD:40:57:DD:BE:07:56:C4:8F:CB:D2:3D Certificate issuer: /CN=A4CF7F709E062849E6BF84E14474A0320EAB780E Certificate serial: 429535DF88E12010C5F3F739BE181115AA028D3F Authority key identifier: A4:CF:7F:70:9E:06:28:49:E6:BF:84:E1:44:74:A0:32:0E:AB:78:0E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A4CF7F709E062849E6BF84E14474A0320EAB780E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/3231302e37332e39362e302f32302d3230203d3e2037363430.roa Signing time: Mon 25 May 2026 03:06:41 +0000 ROA not before: Mon 25 May 2026 03:01:41 +0000 ROA not after: Mon 24 May 2027 03:06:41 +0000 asID: 7640 IP address blocks: 210.73.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.crl rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A4CF7F709E062849E6BF84E14474A0320EAB780E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 12:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:95:35:df:88:e1:20:10:c5:f3:f7:39:be:18:11:15:aa:02:8d:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4CF7F709E062849E6BF84E14474A0320EAB780E Validity Not Before: May 25 03:01:41 2026 GMT Not After : May 24 03:06:41 2027 GMT Subject: CN=72818233699B1625BD4057DDBE0756C48FCBD23D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:de:28:17:f7:e0:52:c0:af:a4:4d:6d:01:6b: eb:5e:f5:8e:d8:9f:b4:e6:33:77:8a:1f:68:26:c9: 9a:d9:cf:e3:5a:36:cb:28:24:cb:aa:f6:fd:34:44: f1:40:cc:c3:ee:87:73:99:2c:11:49:94:03:02:a5: 7b:c6:67:57:68:2b:ad:e8:90:5b:28:2c:2b:b4:e0: 49:3a:52:fa:35:20:57:8b:d9:0a:51:71:90:40:83: f6:00:27:e7:f1:50:e2:85:8f:a3:1c:b8:db:0d:1d: 72:95:89:dd:2a:16:cc:29:ae:37:fe:ae:57:aa:4f: 4f:af:29:73:59:b5:b4:f9:ae:94:88:ef:b9:1f:9d: 8a:05:b9:7d:7f:5d:8b:f4:5b:95:bf:fb:82:52:dc: 76:85:b6:59:90:b7:0f:63:21:b7:18:a6:6d:23:6a: 1d:63:3f:cd:61:67:2e:f3:43:2f:58:11:98:3d:55: 9f:6e:b2:df:5d:69:1c:cc:ac:a3:fc:74:76:ad:0e: 5c:de:4c:81:29:3c:2c:d3:35:0f:58:da:73:ce:d0: bb:9e:5a:77:d9:ae:58:c0:60:2d:44:dc:50:12:fb: fc:6b:01:81:a8:85:2e:52:c7:1d:4d:20:fc:68:c7: 69:33:a4:53:4e:74:92:fa:d9:88:8a:f9:df:d2:95: 95:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:81:82:33:69:9B:16:25:BD:40:57:DD:BE:07:56:C4:8F:CB:D2:3D X509v3 Authority Key Identifier: keyid:A4:CF:7F:70:9E:06:28:49:E6:BF:84:E1:44:74:A0:32:0E:AB:78:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A4CF7F709E062849E6BF84E14474A0320EAB780E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/3231302e37332e39362e302f32302d3230203d3e2037363430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.73.96.0/20 Signature Algorithm: sha256WithRSAEncryption 45:25:01:9f:fb:9c:ce:be:be:37:c7:35:ee:43:17:04:90:1f: 5e:ed:6b:c7:33:0d:04:81:57:e5:b3:6c:fe:df:f9:c4:33:fc: 35:eb:60:7a:85:ec:e4:71:c8:34:fd:ab:66:b7:de:33:bb:ce: a6:89:94:ca:fa:dd:07:3e:9b:41:e2:62:1f:12:9b:29:df:ab: 4d:f3:ec:aa:71:2b:80:04:1e:ad:0f:6d:b7:83:95:f1:8a:ec: 82:ba:9e:ec:29:d2:72:55:27:3b:12:92:59:ad:06:cf:ec:e6: 67:95:d1:e6:c6:67:a7:a0:b5:97:d3:c6:85:1c:17:67:39:40: f0:7f:80:fc:a1:5d:73:ba:0b:56:59:12:45:9c:57:43:de:2f: ea:ed:79:16:9e:e1:b6:16:aa:8e:9b:e9:e6:e4:1a:55:f7:c0: 97:e7:e7:de:31:72:7b:16:ab:c1:5e:f0:10:91:c4:19:80:c2: d7:55:99:73:4d:5c:24:00:5b:01:66:b3:5e:bc:b5:6a:f3:47: 9a:42:be:dd:82:53:7d:84:52:5d:a7:6d:8c:52:d4:6f:e2:35: d3:dc:ea:25:ee:75:8c:ac:8a:8b:44:90:92:a9:95:c3:f4:3f: bf:aa:98:81:98:11:2d:72:3e:05:6b:91:73:12:bb:45:7f:34: 34:1d:e4:28 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUQpU134jhIBDF8/c5vhgRFaoCjT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRDRjdGNzA5RTA2Mjg0OUU2QkY4NEUxNDQ3NEEwMzIw RUFCNzgwRTAeFw0yNjA1MjUwMzAxNDFaFw0yNzA1MjQwMzA2NDFaMDMxMTAvBgNV BAMTKDcyODE4MjMzNjk5QjE2MjVCRDQwNTdEREJFMDc1NkM0OEZDQkQyM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa3igX9+BSwK+kTW0Ba+te9Y7Y n7TmM3eKH2gmyZrZz+NaNssoJMuq9v00RPFAzMPuh3OZLBFJlAMCpXvGZ1doK63o kFsoLCu04Ek6Uvo1IFeL2QpRcZBAg/YAJ+fxUOKFj6McuNsNHXKVid0qFswprjf+ rleqT0+vKXNZtbT5rpSI77kfnYoFuX1/XYv0W5W/+4JS3HaFtlmQtw9jIbcYpm0j ah1jP81hZy7zQy9YEZg9VZ9ust9daRzMrKP8dHatDlzeTIEpPCzTNQ9Y2nPO0Lue WnfZrljAYC1E3FAS+/xrAYGohS5Sxx1NIPxox2kzpFNOdJL62YiK+d/SlZU9AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUcoGCM2mbFiW9QFfdvgdWxI/L0j0wHwYDVR0j BBgwFoAUpM9/cJ4GKEnmv4ThRHSgMg6reA4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MjE1NzY5MDI1MzA4MjYzMS8wL0E0Q0Y3RjcwOUUwNjI4NDlFNkJGODRFMTQ0NzRB MDMyMEVBQjc4MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTRDRjdGNzA5RTA2Mjg0OUU2QkY4NEUxNDQ3NEEwMzIwRUFCNzgwRS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTAyMTU3NjkwMjUzMDgyNjMxLzAvMzIzMTMwMmUzNzMz MmUzOTM2MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzczNjM0MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BATSSWAwDQYJKoZIhvcNAQELBQADggEBAEUlAZ/7nM6+vjfHNe5DFwSQH17ta8cz DQSBV+WzbP7f+cQz/DXrYHqF7ORxyDT9q2a33jO7zqaJlMr63Qc+m0HiYh8Smynf q03z7KpxK4AEHq0PbbeDlfGK7IK6nuwp0nJVJzsSklmtBs/s5meV0ebGZ6egtZfT xoUcF2c5QPB/gPyhXXO6C1ZZEkWcV0PeL+rteRae4bYWqo6b6ebkGlX3wJfn594x cnsWq8Fe8BCRxBmAwtdVmXNNXCQAWwFms168tWrzR5pCvt2CU32EUl2nbYxS1G/i NdPc6iXudYysiotEkJKplcP0P7+qmIGYES1yPgVrkXMSu0V/NDQd5Cg= -----END CERTIFICATE-----Generated at Fri May 29 22:55:54 2026 by rpki-client