$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100981473361526785/0/33362e3235352e3136342e302f32342d3234203d3e203633353731.roa File: 33362e3235352e3136342e302f32342d3234203d3e203633353731.roa (raw, json) Hash identifier: 2qLuGhIatEDj10/f1gmTiMAq/S+SlYPjS3C1JK5kbkU= Subject key identifier: 09:DC:0C:5A:1E:86:64:DF:48:6D:6F:7A:6D:43:B5:AF:A7:F9:4D:55 Certificate issuer: /CN=946192DB6B63164D7FB6B57EE9C4429CE0D5088D Certificate serial: 161845E60154EBB52AC15E9ED51BCE5C7A0638E2 Authority key identifier: 94:61:92:DB:6B:63:16:4D:7F:B6:B5:7E:E9:C4:42:9C:E0:D5:08:8D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/33362e3235352e3136342e302f32342d3234203d3e203633353731.roa Signing time: Mon 27 Apr 2026 03:10:28 +0000 ROA not before: Mon 27 Apr 2026 03:05:28 +0000 ROA not after: Mon 26 Apr 2027 03:10:28 +0000 asID: 63571 IP address blocks: 36.255.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.crl rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:18:45:e6:01:54:eb:b5:2a:c1:5e:9e:d5:1b:ce:5c:7a:06:38:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=946192DB6B63164D7FB6B57EE9C4429CE0D5088D Validity Not Before: Apr 27 03:05:28 2026 GMT Not After : Apr 26 03:10:28 2027 GMT Subject: CN=09DC0C5A1E8664DF486D6F7A6D43B5AFA7F94D55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:74:1f:cb:95:41:31:d1:af:b2:30:21:a0:af: 46:58:d5:d6:98:ef:7f:57:a2:45:de:b6:b2:fa:1e: c6:21:6e:6d:96:db:29:2b:ae:cf:c7:88:b0:42:88: ba:29:2a:27:28:23:54:72:58:bd:c7:24:8a:8f:a2: 20:34:6e:8e:6a:a0:13:3e:ba:39:41:d0:c3:23:65: cd:b5:c6:5c:5b:76:7d:18:13:62:52:67:7a:be:d2: 19:fb:0d:1a:76:fb:5f:8d:c7:76:8d:eb:9a:93:95: 82:dd:21:c3:6c:3e:93:fa:47:44:ce:1d:66:03:a8: 95:8d:65:f0:71:53:2a:10:b2:df:b6:e7:5a:61:61: 97:56:47:9f:b6:f4:ff:56:a1:30:e4:c2:4b:3f:73: 47:55:23:6f:77:db:c8:fc:5e:0e:0f:74:49:f7:2e: 3b:d1:9c:99:e7:33:05:ed:ff:79:09:0e:ae:b2:e8: ec:11:3b:79:bc:de:15:73:a5:b1:19:e3:94:9a:42: 8f:9f:27:eb:6b:34:74:a6:c1:2e:0e:bd:04:bb:a3: cf:67:8c:77:98:74:71:8c:bb:d3:34:33:78:8a:45: ab:de:14:03:92:52:9d:6b:f7:d5:c4:8c:15:7d:95: e0:a5:d1:62:ea:a5:e3:e9:45:1a:50:39:dd:8f:eb: b8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DC:0C:5A:1E:86:64:DF:48:6D:6F:7A:6D:43:B5:AF:A7:F9:4D:55 X509v3 Authority Key Identifier: keyid:94:61:92:DB:6B:63:16:4D:7F:B6:B5:7E:E9:C4:42:9C:E0:D5:08:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/33362e3235352e3136342e302f32342d3234203d3e203633353731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.255.164.0/24 Signature Algorithm: sha256WithRSAEncryption 67:37:2b:d1:de:f2:3d:7d:44:d8:5b:d2:fd:7a:8e:6a:c3:db: c4:63:49:a0:4f:21:23:ae:cd:8e:21:6b:57:27:10:af:1c:a1: f0:64:1d:f7:c8:a0:1b:85:a0:53:5e:a0:d4:4d:54:1c:98:af: 1d:31:1e:9c:15:64:7f:2c:f7:78:be:f3:a5:91:e7:b2:80:39: 33:fd:fc:d3:2f:1a:ae:b3:19:c9:31:ea:58:88:bd:c5:b6:c8: a3:49:cf:4b:dd:32:f5:6d:87:b9:ee:a3:df:9d:4a:9e:7e:b0: 37:71:26:26:d4:62:03:83:48:05:ef:b8:11:6a:29:3a:65:f6: 6e:ae:f8:43:1b:42:68:8d:3f:de:d3:32:0c:95:34:b2:f6:21: 53:b4:83:24:7f:69:2b:08:e1:2b:31:68:86:bf:9e:4b:34:df: d6:52:2b:6b:b6:f5:fb:29:03:4d:a9:93:5b:6e:b2:f4:fd:74: bb:0e:2a:60:81:e8:16:85:9f:1b:15:ee:6f:cd:5a:20:b7:47: f7:bb:e1:71:c9:ae:79:bc:22:cb:14:50:f2:ac:db:d5:e2:5e: 13:93:c5:8d:a3:88:81:42:56:f2:5e:fe:37:43:da:3e:c1:f0: 64:c1:54:af:59:d6:61:d8:86:a9:64:92:76:26:1a:2b:b5:3a: c5:c2:de:a8 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUFhhF5gFU67UqwV6e1RvOXHoGOOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ2MTkyREI2QjYzMTY0RDdGQjZCNTdFRTlDNDQyOUNF MEQ1MDg4RDAeFw0yNjA0MjcwMzA1MjhaFw0yNzA0MjYwMzEwMjhaMDMxMTAvBgNV BAMTKDA5REMwQzVBMUU4NjY0REY0ODZENkY3QTZENDNCNUFGQTdGOTRENTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQdB/LlUEx0a+yMCGgr0ZY1daY 739XokXetrL6HsYhbm2W2ykrrs/HiLBCiLopKicoI1RyWL3HJIqPoiA0bo5qoBM+ ujlB0MMjZc21xlxbdn0YE2JSZ3q+0hn7DRp2+1+Nx3aN65qTlYLdIcNsPpP6R0TO HWYDqJWNZfBxUyoQst+251phYZdWR5+29P9WoTDkwks/c0dVI29328j8Xg4PdEn3 LjvRnJnnMwXt/3kJDq6y6OwRO3m83hVzpbEZ45SaQo+fJ+trNHSmwS4OvQS7o89n jHeYdHGMu9M0M3iKRaveFAOSUp1r99XEjBV9leCl0WLqpePpRRpQOd2P67hdAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUCdwMWh6GZN9IbW96bUO1r6f5TVUwHwYDVR0j BBgwFoAUlGGS22tjFk1/trV+6cRCnODVCI0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk4MTQ3MzM2MTUyNjc4NS8wLzk0NjE5MkRCNkI2MzE2NEQ3RkI2QjU3RUU5QzQ0 MjlDRTBENTA4OEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTQ2MTkyREI2QjYzMTY0RDdGQjZCNTdFRTlDNDQyOUNFMEQ1MDg4RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEwMDk4MTQ3MzM2MTUyNjc4NS8wLzMzMzYyZTMyMzUz NTJlMzEzNjM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM1MzczMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEACT/pDANBgkqhkiG9w0BAQsFAAOCAQEAZzcr0d7yPX1E2FvS/XqOasPb xGNJoE8hI67NjiFrVycQrxyh8GQd98igG4WgU16g1E1UHJivHTEenBVkfyz3eL7z pZHnsoA5M/380y8arrMZyTHqWIi9xbbIo0nPS90y9W2Hue6j351Knn6wN3EmJtRi A4NIBe+4EWopOmX2bq74QxtCaI0/3tMyDJU0svYhU7SDJH9pKwjhKzFohr+eSzTf 1lIra7b1+ykDTamTW26y9P10uw4qYIHoFoWfGxXub81aILdH97vhccmuebwiyxRQ 8qzb1eJeE5PFjaOIgUJW8l7+N0PaPsHwZMFUr1nWYdiGqWSSdiYaK7U6xcLeqA== -----END CERTIFICATE-----Generated at Wed May 13 21:34:47 2026 by rpki-client