$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/3232322e37332e37302e302f32332d3233203d3e2034383131.roa File: 3232322e37332e37302e302f32332d3233203d3e2034383131.roa (raw, json) Hash identifier: CQUiGjJqARUXUjD34hZSAqeXF3jvvPExGw88gpCduKQ= Subject key identifier: A7:D2:11:C3:FA:51:7E:2B:37:3C:21:5D:3F:14:00:C5:C9:A1:5B:ED Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 6160DA1548363AE7B41647C5F5521E35DC2131D6 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/3232322e37332e37302e302f32332d3233203d3e2034383131.roa Signing time: Tue 28 Apr 2026 16:05:28 +0000 ROA not before: Tue 28 Apr 2026 16:00:27 +0000 ROA not after: Tue 27 Apr 2027 16:05:27 +0000 asID: 4811 IP address blocks: 222.73.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:60:da:15:48:36:3a:e7:b4:16:47:c5:f5:52:1e:35:dc:21:31:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: Apr 28 16:00:27 2026 GMT Not After : Apr 27 16:05:27 2027 GMT Subject: CN=A7D211C3FA517E2B373C215D3F1400C5C9A15BED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c7:01:45:87:24:19:04:f6:0b:ed:a1:72:b1: 14:ee:fa:4e:d9:27:6c:2e:5d:c2:5e:40:8b:05:d8: ff:b1:a7:d0:a2:02:e2:0e:ff:e6:08:08:cf:6c:de: da:4b:ed:0f:3c:1c:d6:d7:15:67:30:4a:77:4c:31: e3:d2:ad:f7:c5:8e:ce:10:34:5a:8b:87:e5:1f:1d: 36:05:97:fa:fc:6d:0c:29:e3:9b:91:b2:ca:7b:fa: c2:a0:1c:44:1d:97:10:26:af:0d:00:81:a0:f6:de: b9:fc:47:b9:10:4e:eb:32:0e:e8:bb:c3:55:51:46: 24:a8:6a:5f:4e:22:1f:0e:31:b5:be:f5:79:9d:55: 34:75:08:dd:e7:2b:26:cc:98:30:73:d5:55:38:57: f1:3d:e2:4a:37:1c:a9:72:db:87:27:1a:fd:fa:90: fd:a2:76:b7:b8:dc:ab:3a:fb:f2:42:df:01:c7:f7: e5:f6:35:39:5c:bf:cc:59:e0:b8:64:97:ea:ab:01: d7:e9:36:d4:ee:db:5e:ff:67:8f:7f:75:f7:53:4f: 6e:52:0f:00:c6:07:a8:6c:59:64:14:8c:fa:7a:10: ec:9d:d8:06:ab:cc:67:d6:d7:9d:c6:93:52:18:26: 2c:ec:03:be:c9:0b:6b:73:31:1f:91:6a:bf:95:95: 8c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D2:11:C3:FA:51:7E:2B:37:3C:21:5D:3F:14:00:C5:C9:A1:5B:ED X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/3232322e37332e37302e302f32332d3233203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 222.73.70.0/23 Signature Algorithm: sha256WithRSAEncryption 58:83:0e:d7:e8:32:c4:38:5f:54:01:6f:81:0a:ad:ff:76:d8: 8a:26:cc:b3:c3:e9:02:e4:50:27:fb:42:ad:58:c7:cd:8b:b4: 5f:f7:28:d7:a6:72:7a:13:6c:fb:48:08:85:27:aa:a4:cb:de: f9:41:79:fb:3d:5b:9a:9d:e8:3b:40:7a:46:22:20:87:01:39: 31:fe:b9:e6:c3:25:18:2b:1d:6b:82:2b:49:09:87:aa:61:fe: 43:12:48:f7:25:72:95:5b:80:92:69:a8:45:29:35:b6:6d:bd: ae:00:1e:e8:e6:1a:67:cf:13:d9:67:72:95:f2:e4:50:69:ca: 22:95:39:88:b5:0b:7b:3a:56:03:a3:f9:cb:02:ec:6e:80:5c: 2c:e6:fe:e4:33:01:0e:1d:a5:83:9f:ff:9e:0d:94:7d:45:07: 81:39:2d:20:4f:0f:b6:d1:9d:f6:8d:81:95:79:67:af:26:58: 3e:4c:56:a2:1d:ba:11:6e:61:ee:e6:db:07:09:3b:99:4b:93: 6c:55:d8:61:26:97:b8:90:b9:87:19:b5:cf:c9:73:52:d4:51: 05:d3:e8:04:2c:aa:7e:18:d5:e0:95:f5:13:cd:78:45:ba:8c: ae:97:30:8e:2e:01:93:53:c7:3d:64:42:d6:48:f8:72:22:de: a0:5e:78:fa -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUYWDaFUg2Oue0FkfF9VIeNdwhMdYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDQyODE2MDAyN1oX DTI3MDQyNzE2MDUyN1owMzExMC8GA1UEAxMoQTdEMjExQzNGQTUxN0UyQjM3M0My MTVEM0YxNDAwQzVDOUExNUJFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMfHAUWHJBkE9gvtoXKxFO76TtknbC5dwl5AiwXY/7Gn0KIC4g7/5ggIz2ze 2kvtDzwc1tcVZzBKd0wx49Kt98WOzhA0WouH5R8dNgWX+vxtDCnjm5Gyynv6wqAc RB2XECavDQCBoPbeufxHuRBO6zIO6LvDVVFGJKhqX04iHw4xtb71eZ1VNHUI3ecr JsyYMHPVVThX8T3iSjccqXLbhyca/fqQ/aJ2t7jcqzr78kLfAcf35fY1OVy/zFng uGSX6qsB1+k21O7bXv9nj39191NPblIPAMYHqGxZZBSM+noQ7J3YBqvMZ9bXncaT UhgmLOwDvskLa3MxH5Fqv5WVjN0CAwEAAaOCAg8wggILMB0GA1UdDgQWBBSn0hHD +lF+Kzc8IV0/FADFyaFb7TAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjCBiAYIKwYBBQUHAQsEfDB6MHgGCCsGAQUF BzALhmxyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwOTcwOTk0MDI5 MDU5NzY4MzUvMS8zMjMyMzIyZTM3MzMyZTM3MzAyZTMwMmYzMjMzMmQzMjMzMjAz ZDNlMjAzNDM4MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAd5JRjANBgkqhkiG9w0BAQsFAAOCAQEA WIMO1+gyxDhfVAFvgQqt/3bYiibMs8PpAuRQJ/tCrVjHzYu0X/co16ZyehNs+0gI hSeqpMve+UF5+z1bmp3oO0B6RiIghwE5Mf655sMlGCsda4IrSQmHqmH+QxJI9yVy lVuAkmmoRSk1tm29rgAe6OYaZ88T2WdylfLkUGnKIpU5iLULezpWA6P5ywLsboBc LOb+5DMBDh2lg5//ng2UfUUHgTktIE8PttGd9o2BlXlnryZYPkxWoh26EW5h7ubb Bwk7mUuTbFXYYSaXuJC5hxm1z8lzUtRRBdPoBCyqfhjV4JX1E814RbqMrpcwji4B k1PHPWRC1kj4ciLeoF54+g== -----END CERTIFICATE-----Generated at Wed May 13 07:56:09 2026 by rpki-client