$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3231312e3130332e3135322e302f32312d3231203d3e2034383437.roa File: 3231312e3130332e3135322e302f32312d3231203d3e2034383437.roa (raw, json) Hash identifier: ZOCDqjGkVJBpnqPVFtIRfWaqdf1dzg2chU6/eSosfqM= Subject key identifier: 9B:2E:86:FA:30:09:32:B1:4B:FC:C8:D4:67:CF:55:EA:62:C8:DB:B3 Certificate issuer: /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F Certificate serial: 3DAA5678F6EC2EB64883E3C7A38A68A0C3DD5784 Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3231312e3130332e3135322e302f32312d3231203d3e2034383437.roa Signing time: Wed 15 Apr 2026 04:05:03 +0000 ROA not before: Wed 15 Apr 2026 04:00:03 +0000 ROA not after: Wed 14 Apr 2027 04:05:03 +0000 asID: 4847 IP address blocks: 211.103.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 12:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:aa:56:78:f6:ec:2e:b6:48:83:e3:c7:a3:8a:68:a0:c3:dd:57:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F Validity Not Before: Apr 15 04:00:03 2026 GMT Not After : Apr 14 04:05:03 2027 GMT Subject: CN=9B2E86FA300932B14BFCC8D467CF55EA62C8DBB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0d:ed:32:93:4f:b8:bb:16:db:f5:8f:df:93: b8:11:02:2b:ee:c6:56:13:ba:54:e3:3f:d3:17:d9: 10:d9:61:3a:ac:d4:8d:ac:56:7b:7c:64:0a:cd:cd: dd:16:2d:a0:00:c1:75:96:dc:3a:50:1a:fd:e7:d9: 22:16:ff:2a:71:6b:6e:37:c2:5f:79:d2:b6:66:36: b0:f6:d7:e2:6a:ce:3b:fb:e4:ce:ba:66:d6:0b:3f: fd:36:a0:66:a4:5f:86:71:bb:a6:33:99:a0:05:61: 5c:8e:cb:46:1b:b6:71:04:19:d2:ae:85:75:aa:54: 76:60:94:a5:ae:2a:e4:bc:e4:fe:a1:bc:9e:fc:c1: bf:5b:d2:00:10:39:5e:4b:53:3b:71:9b:c1:ff:d8: e0:e0:19:92:eb:75:f7:73:13:54:2c:7b:8e:b0:e0: 7c:72:39:a9:f1:ed:12:2c:28:9d:d5:ee:a3:f5:75: 4c:23:d2:0d:b5:f6:54:ba:a9:91:b8:29:7c:7f:c3: 8c:a5:1b:ed:3b:55:9b:c7:23:e2:d2:10:b7:a3:b0: e4:dd:e4:47:7f:d7:45:44:a0:75:fe:28:29:f3:08: 8d:31:1c:1b:b8:7c:ae:83:02:09:be:67:aa:3b:73: 88:4b:1d:a2:38:cc:72:d2:bb:50:4c:22:55:b5:de: d7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2E:86:FA:30:09:32:B1:4B:FC:C8:D4:67:CF:55:EA:62:C8:DB:B3 X509v3 Authority Key Identifier: keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3231312e3130332e3135322e302f32312d3231203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.103.152.0/21 Signature Algorithm: sha256WithRSAEncryption 19:39:5e:f3:0d:48:f0:8e:53:bd:ed:96:1e:4a:5a:bb:a9:48: e2:f2:b2:cd:7f:2e:70:57:15:8b:ad:ad:76:b1:5d:7f:23:e1: 57:40:ae:37:71:ec:78:0c:b7:30:2e:db:ae:67:bc:a6:ab:6b: 03:72:03:f1:c3:2d:8a:04:87:ba:32:a9:4d:b6:7b:6c:fc:c6: 0c:d7:24:a3:6d:c7:60:45:b6:90:09:10:cb:c7:d1:6f:33:5f: f2:8b:2b:96:31:ee:d9:87:3d:b6:49:c8:68:56:80:c1:80:4b: 6f:e6:fa:f7:a9:be:2d:e6:40:33:9b:d8:e0:9f:14:b8:0f:99: 5b:4f:25:11:20:67:09:10:8a:0d:9a:5b:8a:ae:dc:f2:48:b9: 81:8f:a8:47:6a:e3:02:41:dd:f7:8c:7a:3f:8b:9a:9b:1b:76: 8d:82:82:9a:2d:40:3b:41:4f:df:ac:7b:84:1a:5d:3c:68:90: 7d:f6:ac:5b:b1:ab:10:e9:9d:11:1f:03:6c:c1:d0:c7:01:2f: 23:cc:79:db:4d:b2:03:0d:ac:77:b1:24:ad:37:24:18:0d:62: be:7d:23:35:0b:3b:be:e6:f7:74:2a:f9:90:a6:38:54:e8:ac: 14:9e:72:60:63:e5:9a:96:8d:e6:45:7b:2b:4b:6f:be:ba:d9: 6f:5e:b1:16 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUPapWePbsLrZIg+PHo4pooMPdV4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDky MjJFOEY5RjAeFw0yNjA0MTUwNDAwMDNaFw0yNzA0MTQwNDA1MDNaMDMxMTAvBgNV BAMTKDlCMkU4NkZBMzAwOTMyQjE0QkZDQzhENDY3Q0Y1NUVBNjJDOERCQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkDe0yk0+4uxbb9Y/fk7gRAivu xlYTulTjP9MX2RDZYTqs1I2sVnt8ZArNzd0WLaAAwXWW3DpQGv3n2SIW/ypxa243 wl950rZmNrD21+Jqzjv75M66ZtYLP/02oGakX4Zxu6YzmaAFYVyOy0YbtnEEGdKu hXWqVHZglKWuKuS85P6hvJ78wb9b0gAQOV5LUztxm8H/2ODgGZLrdfdzE1Qse46w 4HxyOanx7RIsKJ3V7qP1dUwj0g219lS6qZG4KXx/w4ylG+07VZvHI+LSELejsOTd 5Ed/10VEoHX+KCnzCI0xHBu4fK6DAgm+Z6o7c4hLHaI4zHLSu1BMIlW13teDAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUmy6G+jAJMrFL/MjUZ89V6mLI27MwHwYDVR0j BBgwFoAUGyfCb49+zlOXLYCTP1A8CSIuj58wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 MDk1NTkyNDA3MzU0NTczMS8wLzFCMjdDMjZGOEY3RUNFNTM5NzJEODA5MzNGNTAz QzA5MjIyRThGOUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDkyMjJFOEY5Ri5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA3MDk1NTkyNDA3MzU0NTczMS8wLzMyMzEzMTJlMzEz MDMzMmUzMTM1MzIyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDM4MzQzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA9NnmDANBgkqhkiG9w0BAQsFAAOCAQEAGTle8w1I8I5Tve2WHkpau6lI 4vKyzX8ucFcVi62tdrFdfyPhV0CuN3HseAy3MC7brme8pqtrA3ID8cMtigSHujKp TbZ7bPzGDNcko23HYEW2kAkQy8fRbzNf8osrljHu2Yc9tknIaFaAwYBLb+b696m+ LeZAM5vY4J8UuA+ZW08lESBnCRCKDZpbiq7c8ki5gY+oR2rjAkHd94x6P4uamxt2 jYKCmi1AO0FP36x7hBpdPGiQffasW7GrEOmdER8DbMHQxwEvI8x5202yAw2sd7Ek rTckGA1ivn0jNQs7vub3dCr5kKY4VOisFJ5yYGPlmpaN5kV7K0tvvrrZb16xFg== -----END CERTIFICATE-----Generated at Fri Apr 17 20:23:22 2026 by rpki-client