$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3231392e3233392e38382e302f32312d3231203d3e2034383437.roa File: 3231392e3233392e38382e302f32312d3231203d3e2034383437.roa (raw, json) Hash identifier: EwmeHCOrepYHIBGX+63uzAgJJwoVFqXsAJ2DqvK5Cj4= Subject key identifier: 8A:26:23:1A:61:AC:99:FF:FD:B8:12:97:19:EF:53:DF:24:88:77:2B Certificate issuer: /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F Certificate serial: 4D38C6A79F7176EC24A4775B2E3735CEED474F5A Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3231392e3233392e38382e302f32312d3231203d3e2034383437.roa Signing time: Wed 15 Apr 2026 04:05:03 +0000 ROA not before: Wed 15 Apr 2026 04:00:03 +0000 ROA not after: Wed 14 Apr 2027 04:05:03 +0000 asID: 4847 IP address blocks: 219.239.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 12:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:38:c6:a7:9f:71:76:ec:24:a4:77:5b:2e:37:35:ce:ed:47:4f:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F Validity Not Before: Apr 15 04:00:03 2026 GMT Not After : Apr 14 04:05:03 2027 GMT Subject: CN=8A26231A61AC99FFFDB8129719EF53DF2488772B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c5:db:00:fa:c7:31:a3:02:9c:ae:bc:dc:45: 45:c9:cf:f7:38:3d:ff:6f:42:14:e3:42:61:f9:b0: d9:33:36:6e:8c:41:9b:db:8f:5d:c2:88:1b:d1:21: ab:04:67:80:32:b4:4e:d9:73:eb:89:a1:0a:14:80: 69:d2:df:2e:91:0b:2a:05:b2:39:54:72:ff:1f:b0: 55:cd:4b:18:e0:8f:cb:12:84:92:25:ce:af:05:64: c5:0c:b4:d8:8f:9a:42:8c:86:00:46:47:a1:1e:23: 70:5b:5e:35:78:f5:ec:99:9b:11:92:7c:74:db:66: 15:20:5e:55:c7:69:be:dd:4d:67:f8:df:af:9e:77: e7:03:01:d6:80:f4:dd:9c:67:b5:76:d2:d6:55:a1: 0a:15:1a:06:bd:2c:43:d1:43:67:ec:08:ae:51:fd: 46:40:35:35:db:1d:e2:8f:9d:33:a5:fb:bc:62:e7: ca:57:92:dd:e9:ad:71:45:17:7e:f8:6c:83:02:da: d2:01:ab:d0:e6:f9:9c:34:42:72:dc:14:da:27:3c: 58:19:8a:89:79:d4:c4:a8:24:4c:3c:f1:66:df:ed: 5f:e4:c9:5f:c7:ab:67:6e:91:6a:af:19:60:67:6b: fa:66:32:3e:cf:b7:67:20:47:82:15:ef:43:1c:a0: 45:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:26:23:1A:61:AC:99:FF:FD:B8:12:97:19:EF:53:DF:24:88:77:2B X509v3 Authority Key Identifier: keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3231392e3233392e38382e302f32312d3231203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.239.88.0/21 Signature Algorithm: sha256WithRSAEncryption 3e:85:e6:ba:51:23:a3:85:b1:87:bb:a0:9e:8b:1a:a1:be:b8: 8e:b5:ba:31:3c:80:2a:e9:09:eb:46:40:f4:46:3b:1f:c5:2a: 80:61:bf:ee:89:48:f3:80:21:c9:a9:d5:c7:4b:a9:46:95:9b: db:a6:1c:90:1c:d2:a9:28:75:3b:43:3f:4c:6a:35:9e:5e:58: f9:68:14:cb:0d:60:85:a4:be:6b:73:c5:b9:55:a5:24:2d:38: ba:22:27:19:a7:5c:40:e2:31:b3:33:eb:37:9a:ea:1c:e3:ed: c6:ee:f0:9d:a6:69:f4:4d:4b:25:d7:26:e8:0a:05:07:fe:61: 4f:be:2f:44:f0:c0:ac:50:55:9f:bc:aa:20:83:9d:a3:32:2a: 27:5a:4e:d3:2c:76:22:36:9b:f9:bd:93:b8:8a:01:be:aa:a8: ca:16:35:70:77:2d:b5:31:94:ac:c8:81:19:ec:2a:cd:ef:bb: c7:d5:a6:56:f6:0a:38:e6:75:d3:22:80:02:0c:5b:09:3f:25: 78:6b:da:25:c2:36:86:f2:c7:33:82:98:54:9d:2b:3e:82:43: 4a:63:14:16:4d:8b:94:f0:a1:12:fa:a3:3c:8d:e7:94:cb:8c: e6:2b:a2:28:d5:ae:d9:30:bf:37:72:52:2c:65:bb:ad:ce:94: ba:1f:69:6b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUTTjGp59xduwkpHdbLjc1zu1HT1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDky MjJFOEY5RjAeFw0yNjA0MTUwNDAwMDNaFw0yNzA0MTQwNDA1MDNaMDMxMTAvBgNV BAMTKDhBMjYyMzFBNjFBQzk5RkZGREI4MTI5NzE5RUY1M0RGMjQ4ODc3MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpxdsA+scxowKcrrzcRUXJz/c4 Pf9vQhTjQmH5sNkzNm6MQZvbj13CiBvRIasEZ4AytE7Zc+uJoQoUgGnS3y6RCyoF sjlUcv8fsFXNSxjgj8sShJIlzq8FZMUMtNiPmkKMhgBGR6EeI3BbXjV49eyZmxGS fHTbZhUgXlXHab7dTWf436+ed+cDAdaA9N2cZ7V20tZVoQoVGga9LEPRQ2fsCK5R /UZANTXbHeKPnTOl+7xi58pXkt3prXFFF374bIMC2tIBq9Dm+Zw0QnLcFNonPFgZ iol51MSoJEw88Wbf7V/kyV/Hq2dukWqvGWBna/pmMj7Pt2cgR4IV70McoEVPAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUiiYjGmGsmf/9uBKXGe9T3ySIdyswHwYDVR0j BBgwFoAUGyfCb49+zlOXLYCTP1A8CSIuj58wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 MDk1NTkyNDA3MzU0NTczMS8wLzFCMjdDMjZGOEY3RUNFNTM5NzJEODA5MzNGNTAz QzA5MjIyRThGOUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDkyMjJFOEY5Ri5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDcwOTU1OTI0MDczNTQ1NzMxLzAvMzIzMTM5MmUzMjMz MzkyZTM4MzgyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA9vvWDANBgkqhkiG9w0BAQsFAAOCAQEAPoXmulEjo4Wxh7ugnosaob64jrW6 MTyAKukJ60ZA9EY7H8UqgGG/7olI84AhyanVx0upRpWb26YckBzSqSh1O0M/TGo1 nl5Y+WgUyw1ghaS+a3PFuVWlJC04uiInGadcQOIxszPrN5rqHOPtxu7wnaZp9E1L Jdcm6AoFB/5hT74vRPDArFBVn7yqIIOdozIqJ1pO0yx2Ijab+b2TuIoBvqqoyhY1 cHcttTGUrMiBGewqze+7x9WmVvYKOOZ10yKAAgxbCT8leGvaJcI2hvLHM4KYVJ0r PoJDSmMUFk2LlPChEvqjPI3nlMuM5iuiKNWu2TC/N3JSLGW7rc6Uuh9paw== -----END CERTIFICATE-----Generated at Fri Apr 17 17:20:30 2026 by rpki-client