$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3231392e3233382e3233322e302f32312d3231203d3e2034383437.roa File: 3231392e3233382e3233322e302f32312d3231203d3e2034383437.roa (raw, json) Hash identifier: ZOdb/uoY/3CybccvWBSbTte/QskdZbtkvNdmBpNfelc= Subject key identifier: 5A:B5:F5:05:CB:EA:0C:CD:B6:6C:60:9A:2A:99:43:05:7E:78:4D:09 Certificate issuer: /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F Certificate serial: 010C7CB0E123713CA3BA1C2B49EB1F1F5DEB30FD Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3231392e3233382e3233322e302f32312d3231203d3e2034383437.roa Signing time: Wed 15 Apr 2026 04:05:03 +0000 ROA not before: Wed 15 Apr 2026 04:00:03 +0000 ROA not after: Wed 14 Apr 2027 04:05:03 +0000 asID: 4847 IP address blocks: 219.238.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 12:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0c:7c:b0:e1:23:71:3c:a3:ba:1c:2b:49:eb:1f:1f:5d:eb:30:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F Validity Not Before: Apr 15 04:00:03 2026 GMT Not After : Apr 14 04:05:03 2027 GMT Subject: CN=5AB5F505CBEA0CCDB66C609A2A9943057E784D09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:01:c1:04:2d:77:bc:d4:a9:0c:f8:9c:05:5c: 72:d5:a7:3e:c0:f8:af:03:f6:9b:d6:22:68:f8:7a: 53:81:63:52:67:b9:0a:50:4d:52:b9:13:ac:7b:87: a9:06:7a:72:e7:72:9b:43:37:83:1f:a6:4a:0a:a9: 65:36:26:fc:c9:22:ce:91:25:54:7f:63:30:7e:f9: c9:5e:c4:da:e9:31:60:ff:6a:71:70:07:61:0b:3e: 19:46:4f:81:3f:cf:04:34:0f:84:bc:58:fe:c6:53: d2:bc:a4:63:d7:7b:84:39:34:d5:85:60:d6:b7:e5: 4e:2b:74:36:cf:7d:fc:d9:28:15:80:3b:58:62:69: c4:7a:82:27:96:fc:fc:0a:9a:93:d1:54:35:57:25: af:d0:1a:c0:ad:aa:e1:fe:a8:76:f7:c0:24:1c:0f: e1:15:3e:8d:5d:11:81:43:84:06:50:27:ba:0b:79: 1e:fc:ff:5a:07:72:95:aa:ee:f5:78:06:9f:d3:b3: 93:81:77:b1:3c:c4:88:a8:75:54:23:50:38:3d:32: 89:57:0a:77:33:25:71:d5:fd:be:73:8a:74:75:85: ef:b0:3c:1c:b6:8f:66:43:0b:68:98:35:71:68:cd: 8a:8f:7c:20:eb:7b:bb:24:82:56:97:26:bb:ea:a5: 7f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B5:F5:05:CB:EA:0C:CD:B6:6C:60:9A:2A:99:43:05:7E:78:4D:09 X509v3 Authority Key Identifier: keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3231392e3233382e3233322e302f32312d3231203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.238.232.0/21 Signature Algorithm: sha256WithRSAEncryption 9a:56:24:a2:a7:0d:c1:fa:f5:9c:32:7b:54:52:ce:f3:0b:af: ef:7a:18:df:ca:b1:43:78:6c:4a:17:24:a1:92:fb:ea:c7:c9: 95:88:77:d3:2d:e1:a6:2b:a3:b4:e1:70:5c:b4:1b:f0:df:6f: eb:f8:e9:c7:b1:0d:1a:ac:87:51:6a:08:3b:ea:79:6c:d4:50: 59:37:83:1e:a3:08:d9:1d:10:93:50:f3:ae:c1:fc:67:b9:79: 94:12:3d:fe:b2:8e:98:64:ae:4a:e9:88:07:01:87:b7:df:d8: 98:81:5d:51:1f:bc:42:10:84:8b:b1:b9:64:f9:f5:35:8b:33: 2f:2c:7d:78:a8:1a:32:9c:f6:da:2a:f1:0c:d9:96:b8:3c:99: 7c:25:4a:de:b8:c8:c6:c2:da:80:d1:05:93:42:14:4a:14:ca: 35:35:54:d7:40:d0:79:2a:bf:51:19:48:ed:62:11:f9:bf:cc: 11:b0:08:40:cc:5e:1d:fd:f6:e9:c2:e4:71:cf:90:a9:d7:6c: 36:ad:a6:21:32:87:3c:02:87:13:13:c5:f7:e9:4f:d5:38:b3: 38:4a:0f:40:b8:01:9f:64:64:f1:5f:8d:26:60:e2:60:09:dd: dc:4c:d7:f7:fa:38:57:1c:1e:8a:ca:39:1d:c7:cf:26:44:ba: 96:2d:74:c8 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUAQx8sOEjcTyjuhwrSesfH13rMP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDky MjJFOEY5RjAeFw0yNjA0MTUwNDAwMDNaFw0yNzA0MTQwNDA1MDNaMDMxMTAvBgNV BAMTKDVBQjVGNTA1Q0JFQTBDQ0RCNjZDNjA5QTJBOTk0MzA1N0U3ODREMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/AcEELXe81KkM+JwFXHLVpz7A +K8D9pvWImj4elOBY1JnuQpQTVK5E6x7h6kGenLncptDN4MfpkoKqWU2JvzJIs6R JVR/YzB++clexNrpMWD/anFwB2ELPhlGT4E/zwQ0D4S8WP7GU9K8pGPXe4Q5NNWF YNa35U4rdDbPffzZKBWAO1hiacR6gieW/PwKmpPRVDVXJa/QGsCtquH+qHb3wCQc D+EVPo1dEYFDhAZQJ7oLeR78/1oHcpWq7vV4Bp/Ts5OBd7E8xIiodVQjUDg9MolX CnczJXHV/b5zinR1he+wPBy2j2ZDC2iYNXFozYqPfCDre7skglaXJrvqpX9dAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUWrX1BcvqDM22bGCaKplDBX54TQkwHwYDVR0j BBgwFoAUGyfCb49+zlOXLYCTP1A8CSIuj58wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 MDk1NTkyNDA3MzU0NTczMS8wLzFCMjdDMjZGOEY3RUNFNTM5NzJEODA5MzNGNTAz QzA5MjIyRThGOUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDkyMjJFOEY5Ri5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA3MDk1NTkyNDA3MzU0NTczMS8wLzMyMzEzOTJlMzIz MzM4MmUzMjMzMzIyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDM4MzQzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA9vu6DANBgkqhkiG9w0BAQsFAAOCAQEAmlYkoqcNwfr1nDJ7VFLO8wuv 73oY38qxQ3hsShckoZL76sfJlYh30y3hpiujtOFwXLQb8N9v6/jpx7ENGqyHUWoI O+p5bNRQWTeDHqMI2R0Qk1DzrsH8Z7l5lBI9/rKOmGSuSumIBwGHt9/YmIFdUR+8 QhCEi7G5ZPn1NYszLyx9eKgaMpz22irxDNmWuDyZfCVK3rjIxsLagNEFk0IUShTK NTVU10DQeSq/URlI7WIR+b/MEbAIQMxeHf326cLkcc+QqddsNq2mITKHPAKHExPF 9+lP1TizOEoPQLgBn2Rk8V+NJmDiYAnd3EzX9/o4Vxweiso5HcfPJkS6li10yA== -----END CERTIFICATE-----Generated at Fri Apr 17 17:52:17 2026 by rpki-client