$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39372e33322e302f31392d3139203d3e203130323132.roa File: 3231382e39372e33322e302f31392d3139203d3e203130323132.roa (raw, json) Hash identifier: H3js+qBThpBIJWKD/HU/EsaR/jJLqgT+gJYnqPQx0zE= Subject key identifier: 2B:3F:FD:18:D1:DF:87:D0:50:2B:5E:AE:0F:5D:73:20:90:66:76:E7 Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Certificate serial: 0554AEA058973FC764454EDC63B70BFEDB813121 Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39372e33322e302f31392d3139203d3e203130323132.roa Signing time: Tue 28 Apr 2026 07:38:12 +0000 ROA not before: Tue 28 Apr 2026 07:33:12 +0000 ROA not after: Tue 27 Apr 2027 07:38:12 +0000 asID: 10212 IP address blocks: 218.97.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:54:ae:a0:58:97:3f:c7:64:45:4e:dc:63:b7:0b:fe:db:81:31:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Validity Not Before: Apr 28 07:33:12 2026 GMT Not After : Apr 27 07:38:12 2027 GMT Subject: CN=2B3FFD18D1DF87D0502B5EAE0F5D7320906676E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:56:c4:b1:45:74:c2:c1:e6:b2:dd:ba:7d:5d: ba:60:92:d2:69:54:14:4b:e1:5c:f6:a4:89:45:61: d2:75:14:94:cc:b3:72:b5:9e:d9:a7:50:54:3f:da: 1f:36:7a:ef:94:8f:f5:c3:e8:69:bc:59:ef:19:2f: 5c:ef:34:21:65:94:81:c0:bd:ea:0a:25:19:48:29: a1:e4:ba:b4:93:4a:88:f3:3e:4f:61:aa:6c:2f:97: 00:90:21:31:7f:95:11:8d:07:f8:30:66:5f:f0:3d: b8:1b:0c:3d:08:cf:61:c7:b6:9b:84:95:06:a9:40: 74:ac:17:73:bb:94:64:b2:cc:55:4d:1a:7c:04:67: 74:1e:87:3a:3d:a1:12:cf:7c:fb:28:68:cb:8d:17: 57:fa:59:0f:66:21:10:4b:34:f1:2e:9c:79:50:55: dc:f8:9d:20:91:c4:7a:85:e2:d6:bf:34:05:87:a3: 02:ee:35:9d:18:0b:c5:64:4e:9f:a7:9b:29:c7:55: 75:30:f3:6b:15:2f:1c:9c:ad:1c:34:13:4f:6f:04: 8d:2f:78:ba:2d:16:bb:47:33:38:65:25:61:5c:97: 69:82:f1:f3:3a:38:ca:e3:b5:64:09:e2:92:ed:17: 32:eb:4e:7b:9b:24:ff:b1:bc:c0:12:6a:9d:04:15: ba:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3F:FD:18:D1:DF:87:D0:50:2B:5E:AE:0F:5D:73:20:90:66:76:E7 X509v3 Authority Key Identifier: keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39372e33322e302f31392d3139203d3e203130323132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.97.32.0/19 Signature Algorithm: sha256WithRSAEncryption 4b:2a:87:ab:dc:55:ac:20:34:aa:d8:b6:3f:1a:b4:ea:a1:46: fb:10:57:8b:4a:0f:49:7b:7a:b3:f8:49:41:eb:dc:d3:56:bc: 74:e0:6d:f0:e8:85:6a:bc:f2:c6:90:d9:73:f2:0c:fa:ab:ae: d8:98:89:75:da:cc:fc:41:ad:62:f7:c3:f8:18:0b:37:9e:70: 51:a9:fc:76:47:c9:2c:15:27:a3:5c:09:5a:b4:98:36:43:a0: 76:d4:20:cf:65:2c:64:ca:3a:64:f0:4e:37:08:c3:e3:3d:bf: 5f:be:7d:d9:f5:27:05:68:6f:00:e7:29:f3:de:33:50:ae:f7: 51:a8:d4:d7:66:29:78:34:16:90:51:a9:b8:d3:81:27:31:29: 4f:0d:98:e6:ef:3f:a1:b6:fd:71:26:09:b6:aa:00:9a:dc:5d: a7:97:23:8e:87:94:a8:da:9a:d0:02:34:5d:24:b5:4f:92:a1: eb:1c:80:61:45:5c:36:12:e0:75:b6:2a:94:89:32:d6:1e:a6: 95:ea:94:0a:fe:a9:5d:20:77:a4:f6:3c:2c:fc:b7:58:2f:6f: 2a:79:50:a0:1c:88:3f:89:cb:3e:e0:d6:c0:82:50:43:f4:f2: 81:a2:72:13:e5:9e:44:45:38:66:24:9e:d6:60:f7:13:47:f5: 6e:96:86:0b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUBVSuoFiXP8dkRU7cY7cL/tuBMSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUx NkYzQTdFRjAeFw0yNjA0MjgwNzMzMTJaFw0yNzA0MjcwNzM4MTJaMDMxMTAvBgNV BAMTKDJCM0ZGRDE4RDFERjg3RDA1MDJCNUVBRTBGNUQ3MzIwOTA2Njc2RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeVsSxRXTCweay3bp9XbpgktJp VBRL4Vz2pIlFYdJ1FJTMs3K1ntmnUFQ/2h82eu+Uj/XD6Gm8We8ZL1zvNCFllIHA veoKJRlIKaHkurSTSojzPk9hqmwvlwCQITF/lRGNB/gwZl/wPbgbDD0Iz2HHtpuE lQapQHSsF3O7lGSyzFVNGnwEZ3Qehzo9oRLPfPsoaMuNF1f6WQ9mIRBLNPEunHlQ Vdz4nSCRxHqF4ta/NAWHowLuNZ0YC8VkTp+nmynHVXUw82sVLxycrRw0E09vBI0v eLotFrtHMzhlJWFcl2mC8fM6OMrjtWQJ4pLtFzLrTnubJP+xvMASap0EFbqhAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUKz/9GNHfh9BQK16uD11zIJBmducwHwYDVR0j BBgwFoAUkxNmUCC9+V36SqwOHkqajhbzp+8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk2ODc1ODUwOTMwNTg1OC8wLzkzMTM2NjUwMjBCREY5NURGQTRBQUMwRTFFNEE5 QThFMTZGM0E3RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUxNkYzQTdFRi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTAwOTY4NzU4NTA5MzA1ODU4LzAvMzIzMTM4MmUzOTM3 MmUzMzMyMmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzEzMDMyMzEzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBdphIDANBgkqhkiG9w0BAQsFAAOCAQEASyqHq9xVrCA0qti2Pxq06qFG+xBX i0oPSXt6s/hJQevc01a8dOBt8OiFarzyxpDZc/IM+quu2JiJddrM/EGtYvfD+BgL N55wUan8dkfJLBUno1wJWrSYNkOgdtQgz2UsZMo6ZPBONwjD4z2/X7592fUnBWhv AOcp894zUK73UajU12YpeDQWkFGpuNOBJzEpTw2Y5u8/obb9cSYJtqoAmtxdp5cj joeUqNqa0AI0XSS1T5Kh6xyAYUVcNhLgdbYqlIky1h6mleqUCv6pXSB3pPY8LPy3 WC9vKnlQoByIP4nLPuDWwIJQQ/TygaJyE+WeREU4ZiSe1mD3E0f1bpaGCw== -----END CERTIFICATE-----Generated at Wed May 13 19:36:07 2026 by rpki-client