$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e3130382e302f32332d3233203d3e203130323132.roa File: 3231382e39362e3130382e302f32332d3233203d3e203130323132.roa (raw, json) Hash identifier: ALbVz4NWN3+jZLy3DBakqNKdSfFxOP/LNsZZ5B6jsmo= Subject key identifier: 3D:76:76:28:6A:98:D6:5E:02:C8:FF:1B:1C:FC:3E:C6:58:BD:93:D3 Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Certificate serial: 5589E0DF46659F14B0FB0E7AF49595B2FA87E3B1 Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e3130382e302f32332d3233203d3e203130323132.roa Signing time: Tue 28 Apr 2026 07:14:42 +0000 ROA not before: Tue 28 Apr 2026 07:09:42 +0000 ROA not after: Tue 27 Apr 2027 07:14:42 +0000 asID: 10212 IP address blocks: 218.96.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:89:e0:df:46:65:9f:14:b0:fb:0e:7a:f4:95:95:b2:fa:87:e3:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Validity Not Before: Apr 28 07:09:42 2026 GMT Not After : Apr 27 07:14:42 2027 GMT Subject: CN=3D7676286A98D65E02C8FF1B1CFC3EC658BD93D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:90:11:a3:06:a3:93:8b:9e:e3:1c:85:6c:18: 14:27:5b:f5:55:64:c6:bf:a9:d4:11:ad:f4:0b:d6: d6:b6:9e:7a:25:51:44:12:55:03:2c:71:a0:39:fe: 37:a4:27:bd:0b:dd:75:2b:d2:48:de:ca:7f:1d:00: 63:24:5f:31:c2:33:a8:5e:51:eb:99:33:8c:d2:32: ed:c3:88:77:13:10:88:5d:47:bd:53:c3:7a:ea:60: 10:b2:78:5e:5b:8b:a3:1d:2b:c2:b0:1b:a2:da:da: cb:94:9e:1e:c0:1e:22:ef:7b:7e:cc:97:43:fe:9d: da:0a:16:27:bb:8e:a7:f1:68:f1:21:cd:ea:22:4b: 74:d6:bb:d5:da:d6:d1:6d:ff:0a:f7:08:2e:c4:ad: e9:c0:2c:00:ab:1f:4a:b2:a8:ca:e7:98:d0:d2:ba: 4d:0c:7d:a7:a6:52:9d:10:9f:0a:c1:01:84:9f:38: e7:99:27:f1:93:84:61:7d:e6:c4:de:d8:8d:ad:44: 12:6a:b2:c1:a2:6d:51:45:0a:8d:af:49:5f:d0:7c: 95:c6:4b:98:7e:7f:a1:03:6a:c5:d4:44:e6:ea:1a: 66:63:7f:e8:bd:2f:03:0b:56:71:7e:e0:83:fd:8a: e1:7f:5b:a6:12:b8:a8:15:2d:3e:98:9f:9c:ca:82: 4b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:76:76:28:6A:98:D6:5E:02:C8:FF:1B:1C:FC:3E:C6:58:BD:93:D3 X509v3 Authority Key Identifier: keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e3130382e302f32332d3233203d3e203130323132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.96.108.0/23 Signature Algorithm: sha256WithRSAEncryption 82:1a:9f:0b:c4:2b:07:69:79:e7:05:cc:f2:1f:72:1d:2e:68: ed:26:25:ff:56:aa:bc:74:e3:3d:84:96:e6:12:a9:84:fc:29: 7a:ec:da:cf:80:a1:59:e4:1c:d1:91:7e:4b:d0:61:00:a3:a5: 2d:5b:95:c5:ea:57:8f:e9:aa:0e:d4:1e:b7:92:eb:94:28:c4: 81:d2:7d:e4:8e:44:2c:77:c3:60:ce:9f:ea:90:04:38:ea:01: 98:f0:df:94:1c:3e:35:d2:7e:42:55:0f:ae:b7:73:4e:a6:eb: 43:b0:5d:10:6b:b0:28:6c:e7:0d:c1:b3:1a:4d:70:b1:cf:fd: 2d:34:8f:d8:31:85:bd:12:49:09:16:fb:cc:47:22:21:cd:9c: 36:3e:29:51:79:f7:36:31:b5:45:62:73:c8:ef:2d:4a:04:cd: df:58:43:7f:05:31:f2:61:ed:80:1a:3d:01:da:fc:51:68:08: 29:06:b9:26:3f:ca:e8:d5:97:a4:ae:e5:d8:58:21:b7:57:48: 2a:b5:37:e2:20:66:2f:b5:6c:ff:1f:06:c8:00:5f:a0:51:01: 5e:7a:56:90:20:e7:7c:75:09:9b:b4:d4:ae:7c:8f:98:91:f8: f1:11:e8:ac:60:66:66:3b:ac:2a:12:24:78:5d:d5:04:31:cd: f2:13:0e:99 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUVYng30ZlnxSw+w569JWVsvqH47EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUx NkYzQTdFRjAeFw0yNjA0MjgwNzA5NDJaFw0yNzA0MjcwNzE0NDJaMDMxMTAvBgNV BAMTKDNENzY3NjI4NkE5OEQ2NUUwMkM4RkYxQjFDRkMzRUM2NThCRDkzRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrkBGjBqOTi57jHIVsGBQnW/VV ZMa/qdQRrfQL1ta2nnolUUQSVQMscaA5/jekJ70L3XUr0kjeyn8dAGMkXzHCM6he UeuZM4zSMu3DiHcTEIhdR71Tw3rqYBCyeF5bi6MdK8KwG6La2suUnh7AHiLve37M l0P+ndoKFie7jqfxaPEhzeoiS3TWu9Xa1tFt/wr3CC7ErenALACrH0qyqMrnmNDS uk0MfaemUp0QnwrBAYSfOOeZJ/GThGF95sTe2I2tRBJqssGibVFFCo2vSV/QfJXG S5h+f6EDasXURObqGmZjf+i9LwMLVnF+4IP9iuF/W6YSuKgVLT6Yn5zKgks3AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUPXZ2KGqY1l4CyP8bHPw+xli9k9MwHwYDVR0j BBgwFoAUkxNmUCC9+V36SqwOHkqajhbzp+8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk2ODc1ODUwOTMwNTg1OC8wLzkzMTM2NjUwMjBCREY5NURGQTRBQUMwRTFFNEE5 QThFMTZGM0E3RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUxNkYzQTdFRi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEwMDk2ODc1ODUwOTMwNTg1OC8wLzMyMzEzODJlMzkz NjJlMzEzMDM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEzMDMyMzEzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAdpgbDANBgkqhkiG9w0BAQsFAAOCAQEAghqfC8QrB2l55wXM8h9yHS5o 7SYl/1aqvHTjPYSW5hKphPwpeuzaz4ChWeQc0ZF+S9BhAKOlLVuVxepXj+mqDtQe t5LrlCjEgdJ95I5ELHfDYM6f6pAEOOoBmPDflBw+NdJ+QlUPrrdzTqbrQ7BdEGuw KGznDcGzGk1wsc/9LTSP2DGFvRJJCRb7zEciIc2cNj4pUXn3NjG1RWJzyO8tSgTN 31hDfwUx8mHtgBo9Adr8UWgIKQa5Jj/K6NWXpK7l2Fght1dIKrU34iBmL7Vs/x8G yABfoFEBXnpWkCDnfHUJm7TUrnyPmJH48RHorGBmZjusKhIkeF3VBDHN8hMOmQ== -----END CERTIFICATE-----Generated at Wed May 13 19:36:10 2026 by rpki-client