$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e3130372e302f32342d3234203d3e203130323132.roa File: 3231382e39362e3130372e302f32342d3234203d3e203130323132.roa (raw, json) Hash identifier: oNTE8NgwdOK5HmfRaXy4GteZxB9E2mhHHJeWupBl5uc= Subject key identifier: 96:5B:3B:DF:7A:5A:73:6A:B2:84:B7:23:09:B3:66:0A:49:5F:3E:30 Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Certificate serial: 664334ED22A70F0E566D6D5511F755734FC74605 Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e3130372e302f32342d3234203d3e203130323132.roa Signing time: Tue 28 Apr 2026 01:15:38 +0000 ROA not before: Tue 28 Apr 2026 01:10:38 +0000 ROA not after: Tue 27 Apr 2027 01:15:38 +0000 asID: 10212 IP address blocks: 218.96.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:43:34:ed:22:a7:0f:0e:56:6d:6d:55:11:f7:55:73:4f:c7:46:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Validity Not Before: Apr 28 01:10:38 2026 GMT Not After : Apr 27 01:15:38 2027 GMT Subject: CN=965B3BDF7A5A736AB284B72309B3660A495F3E30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c5:28:f6:64:f4:e0:8e:1c:63:72:78:3c:26: 84:af:d5:8d:70:6c:9e:cf:a3:40:3e:59:84:96:85: a1:47:56:74:96:e2:de:0f:4b:46:77:26:a3:97:aa: 5f:c2:e8:fe:64:32:d2:1f:d2:63:07:f1:1b:44:68: 84:69:57:7f:cb:57:7f:02:7f:ce:15:92:07:dd:1a: e0:76:25:da:dd:8b:58:95:a9:d3:2f:52:05:e0:5b: 37:27:2e:b3:b5:ab:89:b9:a6:97:c9:38:e3:d2:79: ba:fd:88:f0:40:18:f3:61:6f:78:80:ec:ea:23:93: 20:73:e4:7b:e9:ac:be:cb:bc:12:7c:6a:83:ec:97: 21:e1:f4:bb:71:8a:0e:e0:1c:56:39:4a:12:19:9d: 1b:dd:89:dc:53:6e:39:5d:5e:d2:e7:d2:a7:b3:c5: 8f:47:22:ef:16:04:ed:f0:0f:f3:11:33:8e:00:8d: e6:d8:f3:ee:30:f1:d8:a9:2f:2e:5e:e7:5f:da:1e: 3e:b1:99:e2:76:12:e4:c0:8d:9d:0b:86:8d:c7:05: cf:40:9e:eb:ed:01:44:2d:53:b0:70:b5:9a:b3:cc: 7a:16:74:94:86:14:3f:9f:09:91:f2:4d:2b:2b:0d: f0:5d:14:4e:0c:26:3f:c5:31:c3:4c:2a:2a:a1:74: 52:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5B:3B:DF:7A:5A:73:6A:B2:84:B7:23:09:B3:66:0A:49:5F:3E:30 X509v3 Authority Key Identifier: keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e3130372e302f32342d3234203d3e203130323132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.96.107.0/24 Signature Algorithm: sha256WithRSAEncryption b6:fb:9d:c8:c1:ce:27:1d:4e:bf:7b:ab:ab:0a:5c:31:91:f9: 1d:e1:ee:fe:6b:6d:6b:94:a9:8b:04:50:71:74:f6:19:fa:be: 4a:70:02:2a:d7:32:ba:88:a8:a5:05:d6:81:a9:fb:d0:27:24: 1e:9e:bd:11:81:37:bc:1f:fd:fb:d7:d1:f5:f1:ca:7d:a5:25: e6:0b:57:a2:7f:73:a2:4f:32:e6:d8:07:c9:41:ba:75:d1:65: e0:ed:21:85:26:1d:ec:b2:75:83:79:a2:a8:62:2a:0e:e9:9a: cf:0a:b9:6a:30:71:b7:46:4f:06:7c:64:08:f4:c1:43:1b:d7: 86:c6:01:05:b8:35:6c:d5:f7:7c:23:cf:52:fa:a5:61:6c:ea: 1b:a5:03:ae:ec:a0:5c:58:d7:89:93:c6:be:a8:67:79:65:46: 9d:64:d4:56:d4:a1:b5:4e:c1:27:3f:21:af:fb:5f:6d:77:88: 50:e0:85:29:71:5e:ec:98:df:25:4f:0a:5e:ab:64:9b:c6:47: 44:41:85:ba:9b:f2:09:12:36:ec:06:86:c6:51:ab:f7:95:3d: 05:20:9f:c5:e1:c7:cf:47:fb:d7:72:93:87:f9:2b:ab:4f:97: c1:14:07:1d:d3:18:31:52:ee:42:27:f3:81:08:c9:57:75:49: d3:4a:57:40 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUZkM07SKnDw5WbW1VEfdVc0/HRgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUx NkYzQTdFRjAeFw0yNjA0MjgwMTEwMzhaFw0yNzA0MjcwMTE1MzhaMDMxMTAvBgNV BAMTKDk2NUIzQkRGN0E1QTczNkFCMjg0QjcyMzA5QjM2NjBBNDk1RjNFMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLxSj2ZPTgjhxjcng8JoSv1Y1w bJ7Po0A+WYSWhaFHVnSW4t4PS0Z3JqOXql/C6P5kMtIf0mMH8RtEaIRpV3/LV38C f84VkgfdGuB2Jdrdi1iVqdMvUgXgWzcnLrO1q4m5ppfJOOPSebr9iPBAGPNhb3iA 7OojkyBz5HvprL7LvBJ8aoPslyHh9Ltxig7gHFY5ShIZnRvdidxTbjldXtLn0qez xY9HIu8WBO3wD/MRM44AjebY8+4w8dipLy5e51/aHj6xmeJ2EuTAjZ0Lho3HBc9A nuvtAUQtU7BwtZqzzHoWdJSGFD+fCZHyTSsrDfBdFE4MJj/FMcNMKiqhdFK1AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUlls733pac2qyhLcjCbNmCklfPjAwHwYDVR0j BBgwFoAUkxNmUCC9+V36SqwOHkqajhbzp+8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk2ODc1ODUwOTMwNTg1OC8wLzkzMTM2NjUwMjBCREY5NURGQTRBQUMwRTFFNEE5 QThFMTZGM0E3RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUxNkYzQTdFRi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEwMDk2ODc1ODUwOTMwNTg1OC8wLzMyMzEzODJlMzkz NjJlMzEzMDM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMDMyMzEzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEANpgazANBgkqhkiG9w0BAQsFAAOCAQEAtvudyMHOJx1Ov3urqwpcMZH5 HeHu/mtta5SpiwRQcXT2Gfq+SnACKtcyuoiopQXWgan70CckHp69EYE3vB/9+9fR 9fHKfaUl5gtXon9zok8y5tgHyUG6ddFl4O0hhSYd7LJ1g3miqGIqDumazwq5ajBx t0ZPBnxkCPTBQxvXhsYBBbg1bNX3fCPPUvqlYWzqG6UDruygXFjXiZPGvqhneWVG nWTUVtShtU7BJz8hr/tfbXeIUOCFKXFe7JjfJU8KXqtkm8ZHREGFupvyCRI27AaG xlGr95U9BSCfxeHHz0f713KTh/krq0+XwRQHHdMYMVLuQifzgQjJV3VJ00pXQA== -----END CERTIFICATE-----Generated at Wed May 13 19:36:07 2026 by rpki-client