$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3136332e34372e342e302f32322d3232203d3e2034383132.roa File: 3136332e34372e342e302f32322d3232203d3e2034383132.roa (raw, json) Hash identifier: zvELJzYBuK5WrSDweO8nyM7DD2RtUW8B/UrBG13cLPA= Subject key identifier: 5E:41:C4:A2:F9:B3:42:64:66:84:8A:1A:73:44:8B:18:11:10:31:2D Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Certificate serial: 2A59EA0887F369269D681968BA0EF900E6784361 Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3136332e34372e342e302f32322d3232203d3e2034383132.roa Signing time: Mon 13 Apr 2026 07:27:54 +0000 ROA not before: Mon 13 Apr 2026 07:22:54 +0000 ROA not after: Mon 12 Apr 2027 07:27:54 +0000 asID: 4812 IP address blocks: 163.47.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 04:38:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:59:ea:08:87:f3:69:26:9d:68:19:68:ba:0e:f9:00:e6:78:43:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Validity Not Before: Apr 13 07:22:54 2026 GMT Not After : Apr 12 07:27:54 2027 GMT Subject: CN=5E41C4A2F9B3426466848A1A73448B181110312D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8b:1d:56:fc:74:7d:5c:1c:da:e7:fd:e6:c5: c7:a4:5d:f2:ca:88:ec:34:3f:3b:be:8c:15:74:8a: fb:bc:08:6a:0a:cc:c1:0f:70:b4:60:0f:2a:9d:ba: 5f:15:65:9f:33:cf:9d:17:ca:e6:42:15:de:c3:d2: b9:61:57:34:91:9e:71:06:a1:c4:95:e0:6a:55:6d: 8b:fd:ca:ee:cd:b3:bb:b4:54:dd:3c:ec:3a:ec:d5: 04:51:32:d1:b4:6b:53:69:22:f8:35:31:db:c8:c2: 58:9d:e8:2e:e3:8e:b7:9d:3e:be:6d:f9:21:b3:79: 73:b3:e2:f9:43:ad:1a:fb:74:5a:db:51:2e:86:9e: 43:1e:57:a5:5b:cb:74:27:02:62:b0:2d:db:2c:a4: c7:ab:37:2b:e6:81:f2:6a:47:b7:ef:5b:5b:5a:09: 2c:a2:a8:e0:21:1a:3d:ef:3b:e0:99:64:13:e1:8f: 08:40:0b:2b:7b:96:a8:e5:b9:5e:b4:61:9c:a3:b9: c2:64:93:23:03:8f:06:e2:20:cd:e0:35:11:74:ba: 83:f8:c3:98:67:68:eb:f2:47:8e:b1:03:6b:47:1b: ef:8e:65:35:59:9e:50:61:71:1d:8a:e9:96:ce:0b: 7e:32:52:ac:ad:5e:8a:b8:fc:11:ed:61:91:7f:b0: d2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:41:C4:A2:F9:B3:42:64:66:84:8A:1A:73:44:8B:18:11:10:31:2D X509v3 Authority Key Identifier: keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3136332e34372e342e302f32322d3232203d3e2034383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.47.4.0/22 Signature Algorithm: sha256WithRSAEncryption 53:37:c7:a3:5a:85:5b:7f:fc:a8:27:a6:06:42:a6:01:66:a5: fe:77:07:79:e4:ba:e6:29:d3:af:31:c5:d7:7f:33:aa:43:06: d7:92:54:4e:8b:45:55:4d:78:08:eb:a7:19:63:ab:68:9a:13: 30:7c:7c:7b:4d:0b:8a:dd:ed:bb:a5:a4:a2:c4:b7:d4:51:79: 66:da:46:01:6e:07:50:9a:9a:94:b3:18:12:79:7e:7f:92:2c: 12:fa:9e:8f:a1:60:c4:db:a5:17:88:a9:91:55:47:c5:85:df: 21:9e:a2:3a:c3:11:a6:57:8b:e2:29:9f:e0:78:3e:ad:d1:a7: fd:39:65:42:77:23:b7:d0:3a:bb:af:25:12:ff:50:f8:74:4a: 5a:ed:bc:80:51:83:cb:18:c7:8a:06:22:bb:78:48:56:07:06: 59:75:60:4a:1c:b8:c5:e5:03:3a:d0:29:6d:28:eb:31:15:84: ab:56:2a:f4:c9:c5:a7:98:c2:a5:4f:ec:06:b7:3d:3d:da:08: 2b:96:95:55:f2:f2:3c:d6:b8:c4:1d:37:b0:a3:7d:6e:33:49: 24:35:91:19:28:ae:ca:f5:d4:f7:09:95:46:d9:26:2a:2f:cd: 7a:c5:d9:c3:b7:20:22:c1:9f:98:e5:2d:ee:22:6b:3b:ce:fb: 5c:c8:e3:f8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUKlnqCIfzaSadaBloug75AOZ4Q2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD QUYyQkRFODAeFw0yNjA0MTMwNzIyNTRaFw0yNzA0MTIwNzI3NTRaMDMxMTAvBgNV BAMTKDVFNDFDNEEyRjlCMzQyNjQ2Njg0OEExQTczNDQ4QjE4MTExMDMxMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwix1W/HR9XBza5/3mxcekXfLK iOw0Pzu+jBV0ivu8CGoKzMEPcLRgDyqdul8VZZ8zz50XyuZCFd7D0rlhVzSRnnEG ocSV4GpVbYv9yu7Ns7u0VN087Drs1QRRMtG0a1NpIvg1MdvIwlid6C7jjredPr5t +SGzeXOz4vlDrRr7dFrbUS6GnkMeV6Vby3QnAmKwLdsspMerNyvmgfJqR7fvW1ta CSyiqOAhGj3vO+CZZBPhjwhACyt7lqjluV60YZyjucJkkyMDjwbiIM3gNRF0uoP4 w5hnaOvyR46xA2tHG++OZTVZnlBhcR2K6ZbOC34yUqytXoq4/BHtYZF/sNLPAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUXkHEovmzQmRmhIoac0SLGBEQMS0wHwYDVR0j BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjY4NDgxLzAvMzEzNjMzMmUzNDM3 MmUzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM0MzgzMTMyLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC oy8EMA0GCSqGSIb3DQEBCwUAA4IBAQBTN8ejWoVbf/yoJ6YGQqYBZqX+dwd55Lrm KdOvMcXXfzOqQwbXklROi0VVTXgI66cZY6tomhMwfHx7TQuK3e27paSixLfUUXlm 2kYBbgdQmpqUsxgSeX5/kiwS+p6PoWDE26UXiKmRVUfFhd8hnqI6wxGmV4viKZ/g eD6t0af9OWVCdyO30Dq7ryUS/1D4dEpa7byAUYPLGMeKBiK7eEhWBwZZdWBKHLjF 5QM60CltKOsxFYSrVir0ycWnmMKlT+wGtz092ggrlpVV8vI81rjEHTewo31uM0kk NZEZKK7K9dT3CZVG2SYqL816xdnDtyAiwZ+Y5S3uIms7zvtcyOP4 -----END CERTIFICATE-----Generated at Fri Apr 17 14:52:28 2026 by rpki-client