$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e3234362e302f32342d3234203d3e20313335333737.roa File: 3130312e3233372e3234362e302f32342d3234203d3e20313335333737.roa (raw, json) Hash identifier: 9J+uO+oDRjggqgoDkEjb261gLagtUJrsfbZG3dSssos= Subject key identifier: 81:39:46:25:BA:6F:6F:86:8B:06:B6:69:DE:5F:DE:6C:6B:7D:03:BF Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 3576701E3B7C22268FCDACBB54B6D2B3590B7736 Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e3234362e302f32342d3234203d3e20313335333737.roa Signing time: Mon 16 Mar 2026 10:29:43 +0000 ROA not before: Mon 16 Mar 2026 10:24:43 +0000 ROA not after: Mon 15 Mar 2027 10:29:43 +0000 asID: 135377 IP address blocks: 101.237.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:76:70:1e:3b:7c:22:26:8f:cd:ac:bb:54:b6:d2:b3:59:0b:77:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Mar 16 10:24:43 2026 GMT Not After : Mar 15 10:29:43 2027 GMT Subject: CN=81394625BA6F6F868B06B669DE5FDE6C6B7D03BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ba:7e:d7:27:20:88:0f:47:91:36:7b:be:2f: e5:5b:e6:38:10:f7:18:53:21:fb:3b:c9:80:e2:95: e2:31:0a:62:f3:7b:82:37:5d:6d:07:ad:55:55:9d: 70:75:ea:4c:b7:41:74:09:00:be:37:77:55:fa:f1: 64:6b:78:80:93:36:d7:78:51:62:5e:f0:9b:69:ca: 16:f0:48:b2:1a:14:17:1f:33:81:58:f9:e5:b2:48: 6b:e3:20:39:17:65:8b:7c:bd:e7:16:74:86:59:e2: 89:77:b0:ce:76:40:5c:b2:b9:c3:27:fc:57:44:41: ce:48:a3:b3:09:6c:a2:a1:d4:ef:7e:b3:8c:83:41: a3:4d:6c:17:f3:8f:9a:83:8c:29:15:b7:e2:98:38: 2a:69:eb:12:e4:29:8c:10:cf:b4:53:84:23:99:a7: 26:b9:58:91:cb:2a:49:3a:33:48:09:91:b7:4a:ce: e1:bf:50:5d:c8:9c:09:42:a7:78:fd:a9:5d:9c:88: 83:45:69:c0:0e:3d:4e:2a:40:80:52:89:a5:f1:fc: 6b:9e:45:6e:70:a5:ec:2a:50:82:32:e0:27:52:c9: 16:d4:36:41:e9:42:44:8e:a3:b8:08:bb:a3:b8:77: 2f:7d:56:0c:f7:66:b9:bb:db:87:14:07:b2:c5:be: 31:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:39:46:25:BA:6F:6F:86:8B:06:B6:69:DE:5F:DE:6C:6B:7D:03:BF X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e3234362e302f32342d3234203d3e20313335333737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.237.246.0/24 Signature Algorithm: sha256WithRSAEncryption aa:93:a7:29:71:6c:57:5c:54:0d:70:17:70:f3:bb:c2:2e:2a: 60:00:af:5c:ff:77:9f:53:da:23:84:03:3e:19:88:d2:cb:88: 5e:47:5c:b5:37:4d:ec:20:1c:aa:e7:d8:4b:37:cf:ae:32:ba: d8:07:6a:2e:11:61:d8:eb:23:30:6b:f0:95:72:fd:dc:30:69: 42:0c:51:b9:5a:e6:f6:d1:a4:42:34:29:f6:13:06:e0:ad:1c: c6:62:05:fc:57:67:b0:1d:2b:d1:4c:fe:04:3a:d0:d7:3c:d5: cb:a7:4f:12:fd:f4:de:5b:6d:aa:80:9a:ed:7a:18:41:f9:e4: 20:b4:f2:20:93:17:72:15:64:23:6d:94:d5:09:61:55:4c:98: 63:9f:08:62:4a:d0:6e:4f:71:c6:f5:58:d5:c4:88:c9:28:95: ce:b1:54:b2:81:f7:cd:aa:dc:97:f1:dc:24:bd:a0:82:23:74: 33:e1:d1:f8:32:e4:fa:66:e9:0e:d1:17:f5:9d:45:8e:07:3f: 12:6e:e6:38:e5:1d:e8:59:03:83:62:29:e0:68:65:5c:ad:9d: 1b:c6:94:43:36:20:21:9e:f7:08:a9:77:e1:ab:08:86:ff:69: 6b:3e:90:08:c0:ac:ac:77:c4:98:c2:a2:d9:5e:ea:3b:d0:76: 43:9f:4d:22 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUNXZwHjt8IiaPzay7VLbSs1kLdzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAzMTYxMDI0NDNaFw0yNzAzMTUxMDI5NDNaMDMxMTAvBgNV BAMTKDgxMzk0NjI1QkE2RjZGODY4QjA2QjY2OURFNUZERTZDNkI3RDAzQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxun7XJyCID0eRNnu+L+Vb5jgQ 9xhTIfs7yYDileIxCmLze4I3XW0HrVVVnXB16ky3QXQJAL43d1X68WRreICTNtd4 UWJe8JtpyhbwSLIaFBcfM4FY+eWySGvjIDkXZYt8vecWdIZZ4ol3sM52QFyyucMn /FdEQc5Io7MJbKKh1O9+s4yDQaNNbBfzj5qDjCkVt+KYOCpp6xLkKYwQz7RThCOZ pya5WJHLKkk6M0gJkbdKzuG/UF3InAlCp3j9qV2ciINFacAOPU4qQIBSiaXx/Gue RW5wpewqUIIy4CdSyRbUNkHpQkSOo7gIu6O4dy99Vgz3Zrm724cUB7LFvjE7AgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUgTlGJbpvb4aLBrZp3l/ebGt9A78wHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTg5MTg3LzAvMzEzMDMxMmUz MjMzMzcyZTMyMzQzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNTMzMzcz Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGXt9jANBgkqhkiG9w0BAQsFAAOCAQEAqpOnKXFsV1xUDXAX cPO7wi4qYACvXP93n1PaI4QDPhmI0suIXkdctTdN7CAcqufYSzfPrjK62AdqLhFh 2OsjMGvwlXL93DBpQgxRuVrm9tGkQjQp9hMG4K0cxmIF/FdnsB0r0Uz+BDrQ1zzV y6dPEv303lttqoCa7XoYQfnkILTyIJMXchVkI22U1QlhVUyYY58IYkrQbk9xxvVY 1cSIySiVzrFUsoH3zarcl/HcJL2ggiN0M+HR+DLk+mbpDtEX9Z1Fjgc/Em7mOOUd 6FkDg2Ip4GhlXK2dG8aUQzYgIZ73CKl34asIhv9paz6QCMCsrHfEmMKi2V7qO9B2 Q59NIg== -----END CERTIFICATE-----Generated at Fri Mar 27 03:54:08 2026 by rpki-client