$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39372e33392e302f32342d3234203d3e203130323132.roa File: 3231382e39372e33392e302f32342d3234203d3e203130323132.roa (raw, json) Hash identifier: NQWBx5tnytkmJTwMFXsLHXj+neVEWQqZ5c74QA06iuQ= Subject key identifier: 7C:33:FE:11:3D:D2:15:37:89:8C:A0:E1:F3:B6:47:C3:B2:E4:98:65 Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Certificate serial: 680008CD3BB0999888B58639259A95817526A2DF Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39372e33392e302f32342d3234203d3e203130323132.roa Signing time: Tue 28 Apr 2026 01:15:38 +0000 ROA not before: Tue 28 Apr 2026 01:10:38 +0000 ROA not after: Tue 27 Apr 2027 01:15:38 +0000 asID: 10212 IP address blocks: 218.97.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:00:08:cd:3b:b0:99:98:88:b5:86:39:25:9a:95:81:75:26:a2:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Validity Not Before: Apr 28 01:10:38 2026 GMT Not After : Apr 27 01:15:38 2027 GMT Subject: CN=7C33FE113DD21537898CA0E1F3B647C3B2E49865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ab:82:86:c2:0d:9d:6f:8f:d7:e3:8a:f7:cb: d0:98:2f:30:dd:5d:d2:cd:5a:ca:8e:35:c5:89:57: 9b:9d:08:f0:17:20:ee:a1:9a:cf:75:c7:8b:dc:00: 4f:0d:5d:78:6e:75:e7:5c:9f:5d:d4:77:7a:67:7a: c5:20:bc:02:ae:79:ab:84:1c:11:77:fc:b8:71:1a: 80:1c:ae:04:e0:6e:01:23:2d:d1:67:9c:9c:d2:8d: 84:70:c9:74:a5:81:18:ad:3a:35:91:e5:e8:2d:89: 4a:f6:b8:71:17:0f:d1:ef:e0:9d:d1:85:44:5a:4c: 89:42:4d:87:ef:ac:43:ce:bc:26:21:c4:dd:5a:f1: c4:b7:95:78:7c:c4:c0:04:48:4a:e0:57:60:be:8c: 3e:ef:c9:68:35:c9:c2:3e:ee:72:10:78:82:69:fc: 12:35:2d:bb:0e:7f:99:69:88:e1:8c:15:cd:89:fa: cc:72:c6:0d:a5:18:0e:3c:a1:61:0e:da:d7:ba:be: 75:b8:11:6f:cb:1b:27:b3:ed:8f:8c:50:f6:9c:15: 34:e4:e1:ae:4d:aa:ef:a0:22:cc:4f:5e:57:e4:33: 9d:bc:88:12:53:9b:e6:95:f5:17:a7:d5:85:fe:4d: 23:a2:58:3a:24:b8:b9:e1:d7:6e:10:5e:8f:ac:8b: 5d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:33:FE:11:3D:D2:15:37:89:8C:A0:E1:F3:B6:47:C3:B2:E4:98:65 X509v3 Authority Key Identifier: keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39372e33392e302f32342d3234203d3e203130323132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.97.39.0/24 Signature Algorithm: sha256WithRSAEncryption 57:d7:eb:cb:e0:e4:0d:70:cb:2a:16:41:7f:53:b7:a0:61:f2: 8b:d6:17:61:6b:fe:ac:70:c2:e5:0c:ac:ee:50:b9:df:9d:da: 0f:40:29:8d:a4:8e:24:27:61:d1:bb:e1:98:27:e6:6c:be:7a: 7b:bd:ea:67:e0:96:0d:b2:bf:e6:84:5c:d1:46:6a:47:6e:d5: b8:fc:7a:a2:d0:62:04:ad:a3:22:60:c5:9d:06:6c:af:c0:b3: 83:39:33:80:13:7c:51:a8:4e:6b:9b:0d:80:4a:b4:96:f5:ee: 80:60:c6:53:3f:77:bd:63:e0:90:fb:2d:5f:b8:f4:64:9c:31: ea:7c:85:b4:29:68:c2:d5:0a:c9:b0:26:d2:b0:33:80:b8:df: a9:dd:9d:71:bb:f8:64:ba:cb:4a:60:a6:44:b7:eb:6b:1b:5d: f4:ea:9d:f5:35:e6:64:af:5b:02:8b:61:26:78:ed:32:c6:31: 7c:ec:31:e6:2f:fb:a6:de:89:b9:a6:86:2e:cf:30:e8:a6:df: 16:df:b9:34:72:a1:0d:b7:c0:48:fb:56:17:06:38:f4:6d:b2: 4d:24:33:22:72:60:e8:0c:2d:68:05:67:0e:5b:bb:ea:ac:1c: 27:ea:f4:6b:04:b9:94:6a:1c:8d:a0:69:7c:1f:eb:62:3b:61: 9e:08:e2:e8 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUaAAIzTuwmZiItYY5JZqVgXUmot8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUx NkYzQTdFRjAeFw0yNjA0MjgwMTEwMzhaFw0yNzA0MjcwMTE1MzhaMDMxMTAvBgNV BAMTKDdDMzNGRTExM0REMjE1Mzc4OThDQTBFMUYzQjY0N0MzQjJFNDk4NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpq4KGwg2db4/X44r3y9CYLzDd XdLNWsqONcWJV5udCPAXIO6hms91x4vcAE8NXXhudedcn13Ud3pnesUgvAKueauE HBF3/LhxGoAcrgTgbgEjLdFnnJzSjYRwyXSlgRitOjWR5egtiUr2uHEXD9Hv4J3R hURaTIlCTYfvrEPOvCYhxN1a8cS3lXh8xMAESErgV2C+jD7vyWg1ycI+7nIQeIJp /BI1LbsOf5lpiOGMFc2J+sxyxg2lGA48oWEO2te6vnW4EW/LGyez7Y+MUPacFTTk 4a5Nqu+gIsxPXlfkM528iBJTm+aV9Ren1YX+TSOiWDokuLnh124QXo+si12pAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUfDP+ET3SFTeJjKDh87ZHw7LkmGUwHwYDVR0j BBgwFoAUkxNmUCC9+V36SqwOHkqajhbzp+8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk2ODc1ODUwOTMwNTg1OC8wLzkzMTM2NjUwMjBCREY5NURGQTRBQUMwRTFFNEE5 QThFMTZGM0E3RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUxNkYzQTdFRi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTAwOTY4NzU4NTA5MzA1ODU4LzAvMzIzMTM4MmUzOTM3 MmUzMzM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMDMyMzEzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANphJzANBgkqhkiG9w0BAQsFAAOCAQEAV9fry+DkDXDLKhZBf1O3oGHyi9YX YWv+rHDC5Qys7lC5353aD0ApjaSOJCdh0bvhmCfmbL56e73qZ+CWDbK/5oRc0UZq R27VuPx6otBiBK2jImDFnQZsr8CzgzkzgBN8UahOa5sNgEq0lvXugGDGUz93vWPg kPstX7j0ZJwx6nyFtClowtUKybAm0rAzgLjfqd2dcbv4ZLrLSmCmRLfraxtd9Oqd 9TXmZK9bAothJnjtMsYxfOwx5i/7pt6JuaaGLs8w6KbfFt+5NHKhDbfASPtWFwY4 9G2yTSQzInJg6AwtaAVnDlu76qwcJ+r0awS5lGocjaBpfB/rYjthngji6A== -----END CERTIFICATE-----Generated at Wed May 13 19:36:08 2026 by rpki-client