$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39372e31362e302f32342d3234203d3e203130323132.roa File: 3231382e39372e31362e302f32342d3234203d3e203130323132.roa (raw, json) Hash identifier: RbfQVi3B/HCM/BlGAsHAgExVs491YFjF/wnfi4yKmtE= Subject key identifier: 31:A4:82:73:B9:EC:1C:7B:F0:6D:A5:29:83:3A:9B:07:A2:C2:2D:48 Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Certificate serial: 7C9A2135E543F93C257CE06C3509ED4ACC17F7C0 Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39372e31362e302f32342d3234203d3e203130323132.roa Signing time: Tue 28 Apr 2026 01:15:38 +0000 ROA not before: Tue 28 Apr 2026 01:10:38 +0000 ROA not after: Tue 27 Apr 2027 01:15:38 +0000 asID: 10212 IP address blocks: 218.97.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:9a:21:35:e5:43:f9:3c:25:7c:e0:6c:35:09:ed:4a:cc:17:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Validity Not Before: Apr 28 01:10:38 2026 GMT Not After : Apr 27 01:15:38 2027 GMT Subject: CN=31A48273B9EC1C7BF06DA529833A9B07A2C22D48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a2:f6:0f:ac:f9:9c:01:a7:75:89:cd:26:f4: ef:4e:0d:cf:42:1b:88:01:fe:7d:a4:e1:2b:b4:d0: c0:fa:f0:c6:1a:82:4b:3f:3e:f6:6d:1a:09:80:e4: c1:30:b0:9f:e1:78:33:e9:22:93:59:03:f5:83:0d: 61:d4:d7:ed:54:7d:39:d6:2b:42:cd:25:f3:83:83: 9d:62:ab:53:f2:61:ab:d6:f1:3e:55:fd:20:d9:c0: 46:eb:b9:31:3a:c1:1c:cc:ae:a4:86:6b:8b:3f:aa: 26:16:1c:53:e4:58:b2:db:4e:23:24:83:60:6b:26: 8f:0d:70:85:09:d3:d2:b4:5e:cd:66:d1:34:fc:0b: dc:e0:34:a0:a6:dc:20:28:bf:6f:52:b8:2b:32:08: 41:3c:9c:c9:41:c3:d0:95:94:60:7d:e1:01:b3:3f: 2c:e0:e0:b7:5d:7d:b5:1a:8a:42:8c:d0:a4:7d:2e: 28:53:a2:95:d6:90:04:33:bc:83:ee:c4:4f:c3:cd: 5e:2e:7c:2f:f0:84:92:72:d7:fe:d6:3d:f4:2f:3f: 37:76:8a:3c:54:f3:10:f9:0d:44:27:7f:43:5d:39: 1d:bb:bf:95:9b:40:40:1f:47:14:43:e2:3d:b3:09: a5:ac:29:99:7d:9c:e6:f2:b5:2e:90:58:36:41:65: 93:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A4:82:73:B9:EC:1C:7B:F0:6D:A5:29:83:3A:9B:07:A2:C2:2D:48 X509v3 Authority Key Identifier: keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39372e31362e302f32342d3234203d3e203130323132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.97.16.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:49:12:5c:fd:e1:1e:85:2d:6e:37:fd:40:8c:d0:b4:5c:e6: 8b:39:a3:5c:b6:05:eb:2a:56:49:51:1d:d5:8c:db:7d:ee:cc: b5:e9:94:c6:c8:a5:cf:30:8b:7c:3e:41:5b:b6:fd:6c:2d:d9: 41:80:25:0d:f5:05:22:46:8d:81:02:e5:ab:17:aa:31:d6:c1: 35:64:49:70:84:02:fa:b2:62:3d:67:05:d8:dc:ba:27:8d:ac: 13:fb:b2:66:8e:9e:71:a9:da:d9:be:51:8f:c2:c6:78:c8:73: be:92:d5:f1:ce:c4:6e:49:f0:f6:3c:49:cf:d0:1e:c5:5b:de: c4:8b:a3:7e:46:a5:24:86:96:e1:00:64:4b:54:ad:99:53:a9: 0c:8f:7e:dd:0a:95:eb:a0:e5:9d:ad:db:7f:f2:d9:8f:4a:ca: 26:f5:1d:a8:d4:6b:c6:a6:22:32:73:da:2c:d4:3a:22:15:db: e9:84:52:ea:1f:92:76:36:72:91:3b:39:d9:26:ef:b8:9f:bf: bd:8f:f3:82:9f:9a:9c:dc:ba:61:59:81:51:31:4a:83:dd:41: ad:18:b4:e8:80:16:f7:71:5b:bf:73:32:d4:bf:66:ad:99:e2: 9b:79:30:51:7f:2e:8c:a9:4f:3e:74:c8:21:21:45:f4:50:6b: 93:82:78:3b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUfJohNeVD+TwlfOBsNQntSswX98AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUx NkYzQTdFRjAeFw0yNjA0MjgwMTEwMzhaFw0yNzA0MjcwMTE1MzhaMDMxMTAvBgNV BAMTKDMxQTQ4MjczQjlFQzFDN0JGMDZEQTUyOTgzM0E5QjA3QTJDMjJENDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAovYPrPmcAad1ic0m9O9ODc9C G4gB/n2k4Su00MD68MYagks/PvZtGgmA5MEwsJ/heDPpIpNZA/WDDWHU1+1UfTnW K0LNJfODg51iq1PyYavW8T5V/SDZwEbruTE6wRzMrqSGa4s/qiYWHFPkWLLbTiMk g2BrJo8NcIUJ09K0Xs1m0TT8C9zgNKCm3CAov29SuCsyCEE8nMlBw9CVlGB94QGz Pyzg4LddfbUaikKM0KR9LihTopXWkAQzvIPuxE/DzV4ufC/whJJy1/7WPfQvPzd2 ijxU8xD5DUQnf0NdOR27v5WbQEAfRxRD4j2zCaWsKZl9nObytS6QWDZBZZOtAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUMaSCc7nsHHvwbaUpgzqbB6LCLUgwHwYDVR0j BBgwFoAUkxNmUCC9+V36SqwOHkqajhbzp+8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk2ODc1ODUwOTMwNTg1OC8wLzkzMTM2NjUwMjBCREY5NURGQTRBQUMwRTFFNEE5 QThFMTZGM0E3RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUxNkYzQTdFRi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTAwOTY4NzU4NTA5MzA1ODU4LzAvMzIzMTM4MmUzOTM3 MmUzMTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMDMyMzEzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANphEDANBgkqhkiG9w0BAQsFAAOCAQEAfUkSXP3hHoUtbjf9QIzQtFzmizmj XLYF6ypWSVEd1Yzbfe7MtemUxsilzzCLfD5BW7b9bC3ZQYAlDfUFIkaNgQLlqxeq MdbBNWRJcIQC+rJiPWcF2Ny6J42sE/uyZo6ecana2b5Rj8LGeMhzvpLV8c7Ebknw 9jxJz9AexVvexIujfkalJIaW4QBkS1StmVOpDI9+3QqV66Dlna3bf/LZj0rKJvUd qNRrxqYiMnPaLNQ6IhXb6YRS6h+SdjZykTs52SbvuJ+/vY/zgp+anNy6YVmBUTFK g91BrRi06IAW93Fbv3My1L9mrZnim3kwUX8ujKlPPnTIISFF9FBrk4J4Ow== -----END CERTIFICATE-----Generated at Wed May 13 19:36:08 2026 by rpki-client