$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e3132382e302f32342d3234203d3e203137363231.roa File: 3231382e39362e3132382e302f32342d3234203d3e203137363231.roa (raw, json) Hash identifier: IRYfKxZLltuXV01gHKaRR9NEQRmXXgrqlWONGJXoR2c= Subject key identifier: 42:75:15:32:6D:E9:D9:47:FA:D5:7C:FB:34:07:0E:A6:08:B5:CF:F2 Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Certificate serial: 02DC574B3B38956DCFCDA92F52AA297B631EBD43 Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e3132382e302f32342d3234203d3e203137363231.roa Signing time: Tue 28 Apr 2026 07:14:41 +0000 ROA not before: Tue 28 Apr 2026 07:09:41 +0000 ROA not after: Tue 27 Apr 2027 07:14:41 +0000 asID: 17621 IP address blocks: 218.96.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:54:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:dc:57:4b:3b:38:95:6d:cf:cd:a9:2f:52:aa:29:7b:63:1e:bd:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Validity Not Before: Apr 28 07:09:41 2026 GMT Not After : Apr 27 07:14:41 2027 GMT Subject: CN=427515326DE9D947FAD57CFB34070EA608B5CFF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:af:71:b0:01:81:bc:ce:72:1d:fc:01:9f:05: ba:8c:39:0a:2e:72:46:a6:95:50:ef:73:17:16:97: f9:35:7e:bf:f0:4a:d9:fb:02:b4:d2:e4:76:5e:c3: b1:e0:6a:f4:6c:0e:93:d1:21:31:0a:e4:ad:89:22: 19:5b:ab:fa:73:98:d8:3b:73:29:02:99:ac:e7:6b: b7:09:8e:02:0a:2c:db:05:56:6f:28:ba:3f:15:39: 41:ec:9b:77:89:eb:65:59:0a:b3:bc:1c:6d:8f:a2: dd:84:c7:0d:e6:ba:55:b0:4d:17:c6:67:88:26:d2: c3:82:21:7f:ab:60:84:b8:24:6f:e7:25:35:d7:be: 0d:73:88:73:af:46:53:1e:81:61:06:20:eb:f4:77: e6:df:c2:f9:32:75:e4:33:8c:ed:4b:28:f0:53:3a: 5f:e2:c2:4a:54:ac:b8:7c:a0:d4:c7:68:19:56:bc: cc:5f:90:b7:d2:54:0f:41:ec:c1:42:14:66:f9:5c: f9:75:6f:7b:7d:b9:d4:5b:58:af:9b:2a:93:7c:38: 15:24:34:61:5e:56:a4:4d:dc:79:4a:92:8f:78:4f: a7:d4:f2:72:93:e0:72:c3:4f:08:04:1f:cb:4c:28: ce:3a:56:9d:cf:0d:1b:11:0d:db:4b:20:0e:c3:c2: 26:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:75:15:32:6D:E9:D9:47:FA:D5:7C:FB:34:07:0E:A6:08:B5:CF:F2 X509v3 Authority Key Identifier: keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e3132382e302f32342d3234203d3e203137363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.96.128.0/24 Signature Algorithm: sha256WithRSAEncryption b2:bc:b6:2c:3b:77:e1:b0:04:ef:89:00:ef:ad:95:d2:b1:41: 5d:33:be:ba:2b:26:92:d9:4e:02:ab:cf:f3:fa:0e:83:88:52: ff:f2:d7:1f:43:64:c6:9a:ba:de:58:25:cd:11:42:59:28:2f: c3:9f:44:ea:a4:b5:99:b5:ce:9e:8f:bf:54:a0:34:5a:52:dc: ca:66:34:98:1a:78:68:dc:ce:8b:2b:b7:d9:18:37:4f:ff:94: c5:0c:04:56:b1:3c:72:d5:09:49:77:24:a3:b3:91:73:46:e5: 7b:54:8e:c1:26:5f:0e:f6:73:d8:22:29:12:3d:eb:60:e5:6e: a8:59:4c:c8:25:fc:e1:41:ec:0a:16:3f:8d:85:94:07:86:1f: aa:60:6f:da:03:5f:ae:86:db:19:c5:ef:d6:cc:9b:48:80:84: 03:72:5b:61:6c:5b:da:5a:35:74:fb:a4:fa:42:95:cd:bb:8d: 07:6c:b6:6c:ab:41:19:6f:bd:57:92:37:26:e7:25:0f:bc:b4: 6c:f3:03:fc:d0:1b:29:ab:43:31:ef:dc:8c:28:e9:02:ef:94: 07:59:b2:97:20:44:ca:39:5d:87:1b:71:be:a4:fa:c7:41:31: 32:cb:6f:64:1b:0a:a9:91:5a:91:7c:36:e1:13:5d:e2:0c:eb: eb:99:98:cd -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUAtxXSzs4lW3PzakvUqope2MevUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUx NkYzQTdFRjAeFw0yNjA0MjgwNzA5NDFaFw0yNzA0MjcwNzE0NDFaMDMxMTAvBgNV BAMTKDQyNzUxNTMyNkRFOUQ5NDdGQUQ1N0NGQjM0MDcwRUE2MDhCNUNGRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5r3GwAYG8znId/AGfBbqMOQou ckamlVDvcxcWl/k1fr/wStn7ArTS5HZew7HgavRsDpPRITEK5K2JIhlbq/pzmNg7 cykCmazna7cJjgIKLNsFVm8ouj8VOUHsm3eJ62VZCrO8HG2Pot2Exw3mulWwTRfG Z4gm0sOCIX+rYIS4JG/nJTXXvg1ziHOvRlMegWEGIOv0d+bfwvkydeQzjO1LKPBT Ol/iwkpUrLh8oNTHaBlWvMxfkLfSVA9B7MFCFGb5XPl1b3t9udRbWK+bKpN8OBUk NGFeVqRN3HlKko94T6fU8nKT4HLDTwgEH8tMKM46Vp3PDRsRDdtLIA7DwiaTAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUQnUVMm3p2Uf61Xz7NAcOpgi1z/IwHwYDVR0j BBgwFoAUkxNmUCC9+V36SqwOHkqajhbzp+8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk2ODc1ODUwOTMwNTg1OC8wLzkzMTM2NjUwMjBCREY5NURGQTRBQUMwRTFFNEE5 QThFMTZGM0E3RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUxNkYzQTdFRi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEwMDk2ODc1ODUwOTMwNTg1OC8wLzMyMzEzODJlMzkz NjJlMzEzMjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM2MzIzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEANpggDANBgkqhkiG9w0BAQsFAAOCAQEAsry2LDt34bAE74kA762V0rFB XTO+uismktlOAqvP8/oOg4hS//LXH0Nkxpq63lglzRFCWSgvw59E6qS1mbXOno+/ VKA0WlLcymY0mBp4aNzOiyu32Rg3T/+UxQwEVrE8ctUJSXcko7ORc0ble1SOwSZf DvZz2CIpEj3rYOVuqFlMyCX84UHsChY/jYWUB4YfqmBv2gNfrobbGcXv1sybSICE A3JbYWxb2lo1dPuk+kKVzbuNB2y2bKtBGW+9V5I3JuclD7y0bPMD/NAbKatDMe/c jCjpAu+UB1mylyBEyjldhxtxvqT6x0ExMstvZBsKqZFakXw24RNd4gzr65mYzQ== -----END CERTIFICATE-----Generated at Wed May 13 15:59:12 2026 by rpki-client