$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3230382e302f32342d3234203d3e20313436383431.roa File: 3231382e39382e3230382e302f32342d3234203d3e20313436383431.roa (raw, json) Hash identifier: V5WFXW8smGcHXMjpvp9LaOkbL4/Ei94lNvyV8nVmaL0= Subject key identifier: D5:0C:32:D8:A9:2C:85:81:81:6C:70:4D:96:BA:BA:0A:D3:9C:27:A6 Certificate issuer: /CN=727633DA248F6AC4626E0DF9B33145B74FD58F03 Certificate serial: 2B37CD87848724B4A526FD8CF5C2DA62F316FCE5 Authority key identifier: 72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3230382e302f32342d3234203d3e20313436383431.roa Signing time: Tue 14 Apr 2026 01:45:27 +0000 ROA not before: Tue 14 Apr 2026 01:40:27 +0000 ROA not after: Tue 13 Apr 2027 01:45:27 +0000 asID: 146841 IP address blocks: 218.98.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 10:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:37:cd:87:84:87:24:b4:a5:26:fd:8c:f5:c2:da:62:f3:16:fc:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03 Validity Not Before: Apr 14 01:40:27 2026 GMT Not After : Apr 13 01:45:27 2027 GMT Subject: CN=D50C32D8A92C8581816C704D96BABA0AD39C27A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:27:f2:66:59:48:4d:39:ab:87:3e:c3:b2:64: 91:ed:0a:d1:a1:4b:14:a0:e6:f7:d0:bf:19:03:d0: 54:06:60:a5:1b:78:bd:04:79:ee:7a:ee:f0:4d:12: 05:ba:be:fe:c2:98:42:89:06:13:d3:28:46:a2:d6: d2:ad:b5:91:9b:16:32:1a:cf:9b:49:cb:12:8f:8d: df:88:7b:e0:4e:cc:5e:71:d1:76:2c:9f:ec:21:b7: 38:33:4b:36:9e:91:3e:1d:b7:9f:01:19:aa:84:17: ea:a7:f0:75:a4:86:f7:7e:2b:a7:59:c5:82:f2:df: 7d:17:b7:dc:40:36:c9:c7:60:44:21:ef:aa:b3:1f: 3a:17:01:db:3a:c4:8d:b6:8a:dc:49:b5:83:ab:0e: 3e:8d:19:33:80:86:a0:74:2c:34:97:be:1c:a9:98: 57:52:84:99:f1:47:34:3e:65:29:a5:ec:09:3d:19: 38:00:88:e9:68:e5:52:75:de:62:0f:2e:70:d5:f6: 38:17:15:33:d5:f2:9a:40:0b:f3:fa:d2:72:30:3b: c0:cd:e5:70:fd:7f:66:9d:a1:9e:cd:10:63:d2:d4: 95:56:f9:dd:a1:27:f0:7c:51:9b:b0:87:56:40:6f: 18:9a:00:e4:76:07:ee:6f:f4:37:6d:2a:fd:54:5d: 04:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0C:32:D8:A9:2C:85:81:81:6C:70:4D:96:BA:BA:0A:D3:9C:27:A6 X509v3 Authority Key Identifier: keyid:72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3230382e302f32342d3234203d3e20313436383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.98.208.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:07:33:f4:b0:b3:a7:ea:ce:51:61:5b:53:15:3c:27:40:ee: 43:17:b2:1d:07:89:89:b5:6c:92:0e:80:37:bc:2e:4a:8b:44: ea:a5:b0:aa:d6:1b:65:d3:f4:fd:12:ef:af:03:98:21:f1:84: de:a4:f1:62:b7:28:99:04:be:04:d5:b0:e1:3e:ae:85:77:42: d4:06:6e:99:fa:a0:fa:4e:70:41:1c:f6:a8:5e:e8:c0:8e:9a: 58:ae:9d:b2:4d:2b:f9:93:86:a7:53:56:e6:4f:28:28:cd:be: 95:57:59:cb:22:ee:2d:40:7c:10:04:2e:98:13:9d:7e:38:63: e6:53:b4:17:fc:4e:d7:ca:98:04:35:59:c2:d1:52:41:f5:7b: 03:96:91:98:d5:d1:2a:03:5c:49:3c:1c:a6:b1:ee:71:61:9f: bd:c1:85:1d:8d:ca:4d:b7:be:12:ea:bc:5a:3d:d4:76:36:e6: e0:32:a3:56:3d:81:68:bb:36:ca:9b:d0:f2:c7:2e:96:17:04: cb:fb:84:31:a0:fe:b6:c3:a7:04:67:cf:e5:da:2f:d5:6c:31: b0:b4:a3:ff:81:18:6f:b5:97:c3:a9:29:08:02:be:23:f1:ed: 87:5a:dc:f8:3e:74:59:79:a5:3d:32:20:32:5b:1d:10:c2:3e: 1c:da:41:ab -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUKzfNh4SHJLSlJv2M9cLaYvMW/OUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI3NjMzREEyNDhGNkFDNDYyNkUwREY5QjMzMTQ1Qjc0 RkQ1OEYwMzAeFw0yNjA0MTQwMTQwMjdaFw0yNzA0MTMwMTQ1MjdaMDMxMTAvBgNV BAMTKEQ1MEMzMkQ4QTkyQzg1ODE4MTZDNzA0RDk2QkFCQTBBRDM5QzI3QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMJ/JmWUhNOauHPsOyZJHtCtGh SxSg5vfQvxkD0FQGYKUbeL0Eee567vBNEgW6vv7CmEKJBhPTKEai1tKttZGbFjIa z5tJyxKPjd+Ie+BOzF5x0XYsn+whtzgzSzaekT4dt58BGaqEF+qn8HWkhvd+K6dZ xYLy330Xt9xANsnHYEQh76qzHzoXAds6xI22itxJtYOrDj6NGTOAhqB0LDSXvhyp mFdShJnxRzQ+ZSml7Ak9GTgAiOlo5VJ13mIPLnDV9jgXFTPV8ppAC/P60nIwO8DN 5XD9f2adoZ7NEGPS1JVW+d2hJ/B8UZuwh1ZAbxiaAOR2B+5v9DdtKv1UXQRhAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU1Qwy2KkshYGBbHBNlrq6CtOcJ6YwHwYDVR0j BBgwFoAUcnYz2iSPasRibg35szFFt0/VjwMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU0Mzc4NzUzMjc0Njc1NS8wLzcyNzYzM0RBMjQ4RjZBQzQ2MjZFMERGOUIzMzE0 NUI3NEZENThGMDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzI3NjMzREEyNDhGNkFDNDYyNkUwREY5QjMzMTQ1Qjc0RkQ1OEYwMy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTQ1NDM3ODc1MzI3NDY3NTUvMC8zMjMxMzgyZTM5 MzgyZTMyMzAzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzQzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEANpi0DANBgkqhkiG9w0BAQsFAAOCAQEASgcz9LCzp+rOUWFbUxU8 J0DuQxeyHQeJibVskg6AN7wuSotE6qWwqtYbZdP0/RLvrwOYIfGE3qTxYrcomQS+ BNWw4T6uhXdC1AZumfqg+k5wQRz2qF7owI6aWK6dsk0r+ZOGp1NW5k8oKM2+lVdZ yyLuLUB8EAQumBOdfjhj5lO0F/xO18qYBDVZwtFSQfV7A5aRmNXRKgNcSTwcprHu cWGfvcGFHY3KTbe+Euq8Wj3Udjbm4DKjVj2BaLs2ypvQ8sculhcEy/uEMaD+tsOn BGfP5dov1WwxsLSj/4EYb7WXw6kpCAK+I/Hth1rc+D50WXmlPTIgMlsdEMI+HNpB qw== -----END CERTIFICATE-----Generated at Sat Apr 18 03:54:41 2026 by rpki-client