$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231302e352e32382e302f32332d3233203d3e203130323132.roa File: 3231302e352e32382e302f32332d3233203d3e203130323132.roa (raw, json) Hash identifier: Q7qrLl+5tIsK4GsCDVz/+TbkYFul7TcObTnH25MKapQ= Subject key identifier: B0:31:B4:D2:B1:37:71:43:A7:1C:0B:C1:6A:03:69:02:33:02:72:35 Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Certificate serial: 013250E3424D5036556EC457191337710B515971 Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231302e352e32382e302f32332d3233203d3e203130323132.roa Signing time: Tue 28 Apr 2026 07:14:42 +0000 ROA not before: Tue 28 Apr 2026 07:09:42 +0000 ROA not after: Tue 27 Apr 2027 07:14:42 +0000 asID: 10212 IP address blocks: 210.5.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:32:50:e3:42:4d:50:36:55:6e:c4:57:19:13:37:71:0b:51:59:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Validity Not Before: Apr 28 07:09:42 2026 GMT Not After : Apr 27 07:14:42 2027 GMT Subject: CN=B031B4D2B1377143A71C0BC16A03690233027235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e9:23:b0:32:44:73:78:91:c3:42:5e:db:d6: ae:df:b3:57:8d:15:08:66:0a:67:76:7b:e1:91:41: dc:94:68:d1:0b:34:ca:99:21:10:38:a4:0f:9f:10: 29:bb:23:0d:4e:ad:d5:fb:19:7f:c4:4b:d0:99:34: c5:96:f3:fc:6f:f9:4f:14:a3:22:16:10:c4:df:18: 7b:27:9d:e7:66:18:a0:ad:97:bc:49:3a:c6:76:cf: 72:2c:d4:ad:59:60:e6:a3:06:38:ba:02:43:79:b7: 85:5d:3c:59:f6:c9:7e:94:73:1a:49:87:34:00:3f: 45:01:dd:a7:a5:7a:7e:a9:cb:1d:2d:e4:75:4f:54: e3:d7:c9:76:e2:43:f4:c1:a3:f2:6a:ce:55:ad:d4: ba:5f:27:23:54:ad:88:b4:eb:e2:04:a9:b2:1a:0a: 50:81:4e:04:9c:62:26:fb:32:8e:e7:92:f4:fd:75: 4a:64:79:03:e0:1f:11:01:9a:19:ce:d1:35:2c:f4: bb:1a:cd:d8:4a:43:a9:69:06:ed:16:4d:8a:ee:25: d0:94:69:65:e0:1c:13:71:ab:2c:a0:de:4d:10:fe: 90:84:6f:62:42:37:5f:68:c5:13:cb:db:46:df:06: 7b:4b:25:93:af:8e:3f:a3:cc:a3:d5:df:f3:8e:87: 53:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:31:B4:D2:B1:37:71:43:A7:1C:0B:C1:6A:03:69:02:33:02:72:35 X509v3 Authority Key Identifier: keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231302e352e32382e302f32332d3233203d3e203130323132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.5.28.0/23 Signature Algorithm: sha256WithRSAEncryption c2:ae:29:9b:49:22:1a:b5:f3:62:da:d0:cc:a6:ce:2b:7f:76: 0e:41:ed:35:74:3d:c9:0d:3c:05:f7:e2:ff:da:2e:e6:b1:24: c5:5d:f6:1b:50:a0:96:29:79:21:b3:28:be:63:6c:b9:7f:db: 65:5e:2a:b3:a1:b3:e5:3a:f8:e2:60:ab:33:44:54:35:9d:3e: 4f:b8:3a:56:46:4b:10:ba:f1:4b:2e:1a:f8:4f:fe:96:d8:78: fe:67:f6:15:e2:06:41:37:0d:24:b4:29:0a:92:c0:f6:e1:dc: 81:c1:1d:bf:ef:27:b7:20:4a:c7:20:0d:28:67:c1:56:98:3d: a5:18:05:42:fa:a4:a8:3f:35:38:15:b1:b2:a6:78:b1:22:40: b7:da:2e:7e:be:3b:72:ee:48:cc:6a:42:58:2a:3f:57:9b:ec: d9:58:fe:b8:09:d9:eb:b7:08:ab:21:6c:c6:96:fc:ab:6a:ba: 34:80:4e:52:e1:c6:f8:b7:f0:0c:99:ac:1e:64:33:93:31:70: 94:96:e4:ac:95:e7:8c:56:17:8a:8c:06:b3:7d:cc:2c:75:c5: cb:fa:2b:2a:0a:d4:6a:89:a4:cf:c2:b3:4b:ce:a4:ae:13:e3: 05:cd:28:6e:1b:43:37:f0:9a:82:e4:56:c8:a8:4e:0d:2b:17: bd:b6:fc:19 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUATJQ40JNUDZVbsRXGRM3cQtRWXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUx NkYzQTdFRjAeFw0yNjA0MjgwNzA5NDJaFw0yNzA0MjcwNzE0NDJaMDMxMTAvBgNV BAMTKEIwMzFCNEQyQjEzNzcxNDNBNzFDMEJDMTZBMDM2OTAyMzMwMjcyMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC96SOwMkRzeJHDQl7b1q7fs1eN FQhmCmd2e+GRQdyUaNELNMqZIRA4pA+fECm7Iw1OrdX7GX/ES9CZNMWW8/xv+U8U oyIWEMTfGHsnnedmGKCtl7xJOsZ2z3Is1K1ZYOajBji6AkN5t4VdPFn2yX6UcxpJ hzQAP0UB3aelen6pyx0t5HVPVOPXyXbiQ/TBo/JqzlWt1LpfJyNUrYi06+IEqbIa ClCBTgScYib7Mo7nkvT9dUpkeQPgHxEBmhnO0TUs9LsazdhKQ6lpBu0WTYruJdCU aWXgHBNxqyyg3k0Q/pCEb2JCN19oxRPL20bfBntLJZOvjj+jzKPV3/OOh1OPAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUsDG00rE3cUOnHAvBagNpAjMCcjUwHwYDVR0j BBgwFoAUkxNmUCC9+V36SqwOHkqajhbzp+8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk2ODc1ODUwOTMwNTg1OC8wLzkzMTM2NjUwMjBCREY5NURGQTRBQUMwRTFFNEE5 QThFMTZGM0E3RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUxNkYzQTdFRi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTAwOTY4NzU4NTA5MzA1ODU4LzAvMzIzMTMwMmUzNTJl MzIzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzAzMjMxMzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAHSBRwwDQYJKoZIhvcNAQELBQADggEBAMKuKZtJIhq182La0Mymzit/dg5B7TV0 PckNPAX34v/aLuaxJMVd9htQoJYpeSGzKL5jbLl/22VeKrOhs+U6+OJgqzNEVDWd Pk+4OlZGSxC68UsuGvhP/pbYeP5n9hXiBkE3DSS0KQqSwPbh3IHBHb/vJ7cgSscg DShnwVaYPaUYBUL6pKg/NTgVsbKmeLEiQLfaLn6+O3LuSMxqQlgqP1eb7NlY/rgJ 2eu3CKshbMaW/KtqujSATlLhxvi38AyZrB5kM5MxcJSW5KyV54xWF4qMBrN9zCx1 xcv6KyoK1GqJpM/Cs0vOpK4T4wXNKG4bQzfwmoLkVsioTg0rF722/Bk= -----END CERTIFICATE-----Generated at Wed May 13 19:36:25 2026 by rpki-client