$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39372e302e302f32302d3230203d3e203130323132.roa File: 3231382e39372e302e302f32302d3230203d3e203130323132.roa (raw, json) Hash identifier: xntaKekWBvrN/moqSUtXGPbVEO5EktRLg30PkbAQw/U= Subject key identifier: EC:65:0B:C8:89:F9:EC:5C:AD:47:56:67:16:17:DC:7C:43:1A:3B:E0 Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Certificate serial: 593BE18B730A16F4B5096C94F660E2A3F4708333 Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39372e302e302f32302d3230203d3e203130323132.roa Signing time: Tue 28 Apr 2026 07:28:27 +0000 ROA not before: Tue 28 Apr 2026 07:23:27 +0000 ROA not after: Tue 27 Apr 2027 07:28:27 +0000 asID: 10212 IP address blocks: 218.97.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:3b:e1:8b:73:0a:16:f4:b5:09:6c:94:f6:60:e2:a3:f4:70:83:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Validity Not Before: Apr 28 07:23:27 2026 GMT Not After : Apr 27 07:28:27 2027 GMT Subject: CN=EC650BC889F9EC5CAD4756671617DC7C431A3BE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f4:df:54:9d:69:27:56:b2:97:0d:7e:50:3e: 90:d2:c9:27:8c:c6:9e:e1:ef:18:25:40:af:d2:5e: 58:ef:46:f1:2e:d8:ff:0b:e8:e2:a0:3c:b0:0f:53: 39:ea:5e:5c:a9:58:5b:b3:be:50:de:2e:d0:95:0e: 63:80:99:74:dd:94:9c:5f:2f:3f:58:4a:09:7e:d3: 47:30:b1:bd:c3:13:7f:10:29:ff:40:cf:bb:e7:c0: b5:4e:01:15:d6:8b:3a:75:a8:67:a2:54:44:c4:59: 87:71:79:5f:ec:ab:be:7a:e3:d9:90:cc:ae:c9:77: 70:87:d1:1b:e3:c2:c6:86:d7:e3:ed:31:8d:2a:16: 74:c2:fa:5c:3d:54:15:82:9b:15:d6:75:e5:6e:0c: 16:d5:9a:a2:3b:36:5e:3e:92:b4:0c:89:94:c2:a1: e3:73:67:27:bb:ae:e6:19:b6:8d:89:4f:5f:97:b8: 50:23:0c:ca:90:6b:4e:7c:0f:8b:58:31:91:07:25: 4c:11:79:82:d5:07:e4:44:c0:19:be:a9:f9:5c:38: 5d:69:b4:44:c0:42:60:67:57:a6:63:ff:c8:cc:0b: 73:42:a9:29:f0:24:42:d2:04:34:29:30:8c:5c:33: bc:67:cf:53:35:9d:6b:1e:07:bb:68:78:2e:1e:48: fb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:65:0B:C8:89:F9:EC:5C:AD:47:56:67:16:17:DC:7C:43:1A:3B:E0 X509v3 Authority Key Identifier: keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39372e302e302f32302d3230203d3e203130323132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.97.0.0/20 Signature Algorithm: sha256WithRSAEncryption 05:c2:a6:14:32:bf:47:c7:51:17:c4:7f:2e:1b:8c:e8:20:47: e7:79:d1:77:ae:f1:41:d8:56:70:e5:ac:07:71:d7:0a:d8:b6: 90:92:bb:8e:35:84:90:5f:41:c1:2d:3b:f5:d3:6b:d1:97:48: f4:d3:0a:c2:a7:0c:3b:03:86:88:b7:24:81:74:6e:c6:bd:32: 67:e8:3e:cc:43:09:b2:3e:5f:34:00:ff:96:61:93:8b:56:f0: 8e:d7:f9:3b:17:bb:29:13:b4:eb:fc:65:97:07:ff:10:d3:74: 1d:a3:9e:78:d5:ee:f4:a2:c2:6c:76:fc:23:fe:6c:65:82:bd: f1:18:6a:00:5e:f5:3e:02:1c:4f:1c:d0:93:b5:1f:1a:ea:c8: f8:84:49:6a:40:f9:07:68:69:3a:ab:b2:51:f6:78:6b:29:aa: eb:db:c4:9c:e3:8d:9b:b2:33:aa:98:c2:17:ba:b2:43:68:93: bd:02:67:7a:50:93:7d:a3:a2:64:b0:3f:da:17:9e:dd:b1:b2: b0:cf:e6:3d:76:f5:22:e4:7e:26:d4:d8:9b:31:d6:d2:e7:00: 4e:51:2d:fb:da:3d:7a:69:28:d9:05:2a:5b:ce:8e:4f:ba:41: 46:87:0f:5b:13:4c:2c:9c:eb:2e:22:ad:4f:17:e3:ff:71:30: 22:a8:b4:1a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUWTvhi3MKFvS1CWyU9mDio/RwgzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUx NkYzQTdFRjAeFw0yNjA0MjgwNzIzMjdaFw0yNzA0MjcwNzI4MjdaMDMxMTAvBgNV BAMTKEVDNjUwQkM4ODlGOUVDNUNBRDQ3NTY2NzE2MTdEQzdDNDMxQTNCRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp9N9UnWknVrKXDX5QPpDSySeM xp7h7xglQK/SXljvRvEu2P8L6OKgPLAPUznqXlypWFuzvlDeLtCVDmOAmXTdlJxf Lz9YSgl+00cwsb3DE38QKf9Az7vnwLVOARXWizp1qGeiVETEWYdxeV/sq75649mQ zK7Jd3CH0RvjwsaG1+PtMY0qFnTC+lw9VBWCmxXWdeVuDBbVmqI7Nl4+krQMiZTC oeNzZye7ruYZto2JT1+XuFAjDMqQa058D4tYMZEHJUwReYLVB+REwBm+qflcOF1p tETAQmBnV6Zj/8jMC3NCqSnwJELSBDQpMIxcM7xnz1M1nWseB7toeC4eSPsBAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQU7GULyIn57FytR1ZnFhfcfEMaO+AwHwYDVR0j BBgwFoAUkxNmUCC9+V36SqwOHkqajhbzp+8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk2ODc1ODUwOTMwNTg1OC8wLzkzMTM2NjUwMjBCREY5NURGQTRBQUMwRTFFNEE5 QThFMTZGM0E3RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUxNkYzQTdFRi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTAwOTY4NzU4NTA5MzA1ODU4LzAvMzIzMTM4MmUzOTM3 MmUzMDJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMxMzAzMjMxMzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BATaYQAwDQYJKoZIhvcNAQELBQADggEBAAXCphQyv0fHURfEfy4bjOggR+d50Xeu 8UHYVnDlrAdx1wrYtpCSu441hJBfQcEtO/XTa9GXSPTTCsKnDDsDhoi3JIF0bsa9 MmfoPsxDCbI+XzQA/5Zhk4tW8I7X+TsXuykTtOv8ZZcH/xDTdB2jnnjV7vSiwmx2 /CP+bGWCvfEYagBe9T4CHE8c0JO1HxrqyPiESWpA+QdoaTqrslH2eGspquvbxJzj jZuyM6qYwhe6skNok70CZ3pQk32jomSwP9oXnt2xsrDP5j129SLkfibU2Jsx1tLn AE5RLfvaPXppKNkFKlvOjk+6QUaHD1sTTCyc6y4irU8X4/9xMCKotBo= -----END CERTIFICATE-----Generated at Wed May 13 19:36:25 2026 by rpki-client