$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100942521481035778/0/3231312e3134382e3132382e302f32302d3230203d3e20313334373732.roa File: 3231312e3134382e3132382e302f32302d3230203d3e20313334373732.roa (raw, json) Hash identifier: 2vIOpbdjwZVbQgeMB3qUO7ipjQkYLYX4C4QQ4DEiP8A= Subject key identifier: 74:62:89:DD:D8:57:29:6E:09:37:6C:83:48:3D:BD:FB:13:58:75:43 Certificate issuer: /CN=363FDE3F30761CEFB41D458915BBBC8D91B434CF Certificate serial: 340AD11C69FF1790DBC5765BBBC28A30B9ADB1FD Authority key identifier: 36:3F:DE:3F:30:76:1C:EF:B4:1D:45:89:15:BB:BC:8D:91:B4:34:CF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/363FDE3F30761CEFB41D458915BBBC8D91B434CF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/3231312e3134382e3132382e302f32302d3230203d3e20313334373732.roa Signing time: Tue 28 Apr 2026 01:05:10 +0000 ROA not before: Tue 28 Apr 2026 01:00:10 +0000 ROA not after: Tue 27 Apr 2027 01:05:10 +0000 asID: 134772 IP address blocks: 211.148.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/363FDE3F30761CEFB41D458915BBBC8D91B434CF.crl rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/363FDE3F30761CEFB41D458915BBBC8D91B434CF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/363FDE3F30761CEFB41D458915BBBC8D91B434CF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:0a:d1:1c:69:ff:17:90:db:c5:76:5b:bb:c2:8a:30:b9:ad:b1:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363FDE3F30761CEFB41D458915BBBC8D91B434CF Validity Not Before: Apr 28 01:00:10 2026 GMT Not After : Apr 27 01:05:10 2027 GMT Subject: CN=746289DDD857296E09376C83483DBDFB13587543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bc:0d:8c:fa:f7:44:8d:46:dc:f1:e4:54:f3: af:8f:97:00:f8:16:df:fa:ae:ad:34:0d:b9:47:58: 03:05:89:1a:b1:94:e3:ec:0c:90:21:c2:13:5f:60: 46:19:b0:32:c3:c0:ba:44:c9:4e:30:bc:67:8e:e5: 83:4c:3b:40:45:f2:6e:1d:07:a1:c8:ea:1e:9d:e7: ba:f5:65:4a:e3:79:7c:5e:89:99:16:0f:93:8e:0e: d7:1b:1c:83:da:20:f2:f6:40:f3:56:bb:5b:f5:3f: 22:3f:8f:28:b5:db:58:0e:b5:35:1b:89:10:12:8d: 9c:95:84:1d:f1:90:e7:fb:04:83:22:bd:af:e1:a5: 81:5c:41:da:a8:8c:83:e7:b5:a1:bd:1b:75:cb:d0: 58:4b:b3:f7:6b:41:be:10:1d:f3:1c:73:c6:e4:68: 82:b5:3a:08:30:24:8b:7e:6a:b1:14:55:48:10:15: e0:bb:e0:f8:8f:8f:95:a5:4d:4a:6e:f4:12:46:fc: f1:74:a0:29:cb:af:19:3f:65:d9:6f:1d:83:40:f8: 5f:75:bd:35:b3:c7:fb:a7:b5:9f:8d:e4:a8:c8:b2: df:3d:7d:4b:35:f4:ae:b5:e9:b1:8e:ea:26:92:83: 68:fb:48:9c:35:a7:da:e2:9c:28:12:d3:5b:60:ac: e4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:62:89:DD:D8:57:29:6E:09:37:6C:83:48:3D:BD:FB:13:58:75:43 X509v3 Authority Key Identifier: keyid:36:3F:DE:3F:30:76:1C:EF:B4:1D:45:89:15:BB:BC:8D:91:B4:34:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/363FDE3F30761CEFB41D458915BBBC8D91B434CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/363FDE3F30761CEFB41D458915BBBC8D91B434CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/3231312e3134382e3132382e302f32302d3230203d3e20313334373732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.148.128.0/20 Signature Algorithm: sha256WithRSAEncryption a0:9a:af:6a:ca:c8:aa:92:10:11:cd:ea:7a:7c:67:4d:79:81: f6:44:3b:06:ae:e3:ed:ba:4a:96:57:bc:19:67:69:21:2f:e8: 9f:7c:d2:b2:a1:64:bd:8c:69:73:3a:ed:7a:f3:f8:b8:83:1e: 47:fc:c3:ba:fc:25:a9:eb:e3:45:40:0f:d7:cc:c1:c8:47:08: 46:ce:5d:d9:a9:2f:36:9e:b8:0a:6f:61:fe:17:99:b7:d3:57: 2f:09:e2:54:9a:77:b0:ce:e4:0c:56:78:46:d4:cf:96:1c:e9: 44:0f:ba:3b:a2:5a:9f:33:88:0b:1e:b0:e6:61:b8:67:f3:c2: f8:70:03:ad:81:66:9a:0c:9c:5b:9f:18:2e:7f:48:93:fe:c0: 25:6e:d2:5c:8f:7e:e9:2e:4d:dc:d3:79:cd:ec:89:ef:d6:64: 6c:9b:db:33:95:df:31:fb:37:e2:3e:ff:d9:57:91:b3:01:ab: 48:33:c1:7f:86:ea:50:55:09:a6:65:76:16:9c:8d:26:7f:55: 96:69:33:1b:a5:0d:1c:ef:a0:33:64:56:58:8f:14:7b:d9:ba: 68:60:9d:0c:2d:1d:a6:ad:56:e1:e0:7c:54:60:1a:29:68:58: 20:39:74:8e:6e:c1:4c:cb:f7:54:5d:18:36:05:c8:35:ca:36: c2:bf:ef:e3 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUNArRHGn/F5DbxXZbu8KKMLmtsf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYzRkRFM0YzMDc2MUNFRkI0MUQ0NTg5MTVCQkJDOEQ5 MUI0MzRDRjAeFw0yNjA0MjgwMTAwMTBaFw0yNzA0MjcwMTA1MTBaMDMxMTAvBgNV BAMTKDc0NjI4OURERDg1NzI5NkUwOTM3NkM4MzQ4M0RCREZCMTM1ODc1NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRvA2M+vdEjUbc8eRU86+PlwD4 Ft/6rq00DblHWAMFiRqxlOPsDJAhwhNfYEYZsDLDwLpEyU4wvGeO5YNMO0BF8m4d B6HI6h6d57r1ZUrjeXxeiZkWD5OODtcbHIPaIPL2QPNWu1v1PyI/jyi121gOtTUb iRASjZyVhB3xkOf7BIMiva/hpYFcQdqojIPntaG9G3XL0FhLs/drQb4QHfMcc8bk aIK1OggwJIt+arEUVUgQFeC74PiPj5WlTUpu9BJG/PF0oCnLrxk/ZdlvHYNA+F91 vTWzx/untZ+N5KjIst89fUs19K616bGO6iaSg2j7SJw1p9rinCgS01tgrORTAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUdGKJ3dhXKW4JN2yDSD29+xNYdUMwHwYDVR0j BBgwFoAUNj/ePzB2HO+0HUWJFbu8jZG0NM8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk0MjUyMTQ4MTAzNTc3OC8wLzM2M0ZERTNGMzA3NjFDRUZCNDFENDU4OTE1QkJC QzhEOTFCNDM0Q0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzYzRkRFM0YzMDc2MUNFRkI0MUQ0NTg5MTVCQkJDOEQ5MUI0MzRDRi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTAwOTQyNTIxNDgxMDM1Nzc4LzAvMzIzMTMxMmUz MTM0MzgyZTMxMzIzODJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMxMzMzNDM3Mzcz Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEBNOUgDANBgkqhkiG9w0BAQsFAAOCAQEAoJqvasrIqpIQEc3q enxnTXmB9kQ7Bq7j7bpKlle8GWdpIS/on3zSsqFkvYxpczrtevP4uIMeR/zDuvwl qevjRUAP18zByEcIRs5d2akvNp64Cm9h/heZt9NXLwniVJp3sM7kDFZ4RtTPlhzp RA+6O6JanzOICx6w5mG4Z/PC+HADrYFmmgycW58YLn9Ik/7AJW7SXI9+6S5N3NN5 zeyJ79ZkbJvbM5XfMfs34j7/2VeRswGrSDPBf4bqUFUJpmV2FpyNJn9VlmkzG6UN HO+gM2RWWI8Ue9m6aGCdDC0dpq1W4eB8VGAaKWhYIDl0jm7BTMv3VF0YNgXINco2 wr/v4w== -----END CERTIFICATE-----Generated at Wed May 13 13:46:25 2026 by rpki-client