$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3230392e302f32342d3234203d3e20313436383431.roa File: 3231382e39382e3230392e302f32342d3234203d3e20313436383431.roa (raw, json) Hash identifier: R2FUehBztHdIvg3EWxnn9vSmNq2pxzwjM3Saq/Q0+P4= Subject key identifier: EA:B7:4E:B2:BA:28:21:DD:73:9C:57:5E:15:80:34:2D:61:9B:7A:B1 Certificate issuer: /CN=727633DA248F6AC4626E0DF9B33145B74FD58F03 Certificate serial: 2E05DD043D83E7C2D0A1E6D2D441E794A8B00272 Authority key identifier: 72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3230392e302f32342d3234203d3e20313436383431.roa Signing time: Tue 14 Apr 2026 01:45:27 +0000 ROA not before: Tue 14 Apr 2026 01:40:27 +0000 ROA not after: Tue 13 Apr 2027 01:45:27 +0000 asID: 146841 IP address blocks: 218.98.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 10:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:05:dd:04:3d:83:e7:c2:d0:a1:e6:d2:d4:41:e7:94:a8:b0:02:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03 Validity Not Before: Apr 14 01:40:27 2026 GMT Not After : Apr 13 01:45:27 2027 GMT Subject: CN=EAB74EB2BA2821DD739C575E1580342D619B7AB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:eb:cd:57:25:2e:61:3b:36:32:ec:b5:62:80: 66:a2:1c:6f:7f:c1:22:8b:24:33:b2:16:46:f9:22: b8:23:af:07:4c:e0:41:e8:13:be:e7:94:49:79:6c: 5a:31:ac:f1:fc:3d:86:1d:ff:36:06:8c:70:e3:58: cb:57:7d:96:ab:64:1f:4d:bf:67:29:74:cd:4a:0b: fc:e9:73:17:40:4e:56:4f:fb:01:41:2f:be:be:3a: 00:2b:07:39:86:88:86:eb:6c:80:94:51:a8:b5:9e: 7d:6a:38:59:f9:c8:24:2c:2e:d9:49:df:6b:5b:3f: 62:03:30:6d:7b:fe:ba:53:a8:82:4a:86:23:e3:91: d9:02:0a:31:cc:04:1e:2b:ac:73:15:f6:34:1d:a0: 35:a1:86:68:82:52:fb:8b:73:78:48:34:08:ba:35: 23:26:fc:dd:b8:dc:c8:d6:04:de:92:42:4c:65:63: aa:bf:a6:d0:10:8a:62:22:26:c0:b7:fc:e0:32:b8: 6f:86:c2:10:16:75:98:54:10:e8:ad:41:2a:69:29: f4:94:56:1c:e6:d9:8b:ab:0f:8d:01:f4:60:84:e2: b9:31:2a:6f:a3:48:f9:07:e1:d6:6c:86:0c:a2:63: 26:52:09:bb:32:0a:47:f1:8b:bd:4f:5d:e7:d9:cf: 77:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B7:4E:B2:BA:28:21:DD:73:9C:57:5E:15:80:34:2D:61:9B:7A:B1 X509v3 Authority Key Identifier: keyid:72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3230392e302f32342d3234203d3e20313436383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.98.209.0/24 Signature Algorithm: sha256WithRSAEncryption 29:d4:ad:79:05:bf:68:3a:b0:cd:80:fc:a5:bc:d2:21:d3:0c: 6b:a5:0d:69:2c:e1:76:1f:a2:89:86:fd:0e:cf:ca:13:98:28: 79:d6:b8:18:07:60:98:68:d5:88:e8:cd:ea:0f:08:a5:33:6e: 65:15:e2:a2:41:0b:ce:7e:8b:5c:7d:a9:45:87:d8:25:3c:1b: b8:f4:cc:91:c8:fc:f4:8d:0c:7b:61:e0:7b:89:fe:81:18:fc: 06:50:8f:33:9a:0e:30:a4:0a:ad:b0:07:a4:27:d8:f6:f6:e2: 37:a0:22:3f:62:84:c7:7a:dd:aa:30:97:78:75:64:34:92:6c: 92:e5:f6:51:46:ad:87:f4:6d:be:ea:54:97:a8:7a:f4:9e:4c: f2:f4:a2:b0:ba:c5:25:52:54:ae:ad:85:e3:ff:4f:b6:fc:d4: 53:33:1f:1f:f7:3b:cc:43:39:e3:9e:92:47:e4:c1:6a:30:55: ff:2e:2f:33:f1:0b:44:3d:c6:82:42:04:55:4a:e5:5e:af:c1: fd:07:7c:34:75:8b:bd:d4:b9:3c:d7:8f:c8:c5:52:2e:65:a9: 8a:eb:e9:6f:f9:5d:b8:06:d4:62:d3:7f:5e:72:49:04:d2:f9: 8d:5b:28:27:e4:24:74:3e:e1:85:d7:eb:a3:de:0a:61:0e:72: 86:ee:f6:97 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIULgXdBD2D58LQoebS1EHnlKiwAnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI3NjMzREEyNDhGNkFDNDYyNkUwREY5QjMzMTQ1Qjc0 RkQ1OEYwMzAeFw0yNjA0MTQwMTQwMjdaFw0yNzA0MTMwMTQ1MjdaMDMxMTAvBgNV BAMTKEVBQjc0RUIyQkEyODIxREQ3MzlDNTc1RTE1ODAzNDJENjE5QjdBQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU681XJS5hOzYy7LVigGaiHG9/ wSKLJDOyFkb5IrgjrwdM4EHoE77nlEl5bFoxrPH8PYYd/zYGjHDjWMtXfZarZB9N v2cpdM1KC/zpcxdATlZP+wFBL76+OgArBzmGiIbrbICUUai1nn1qOFn5yCQsLtlJ 32tbP2IDMG17/rpTqIJKhiPjkdkCCjHMBB4rrHMV9jQdoDWhhmiCUvuLc3hINAi6 NSMm/N243MjWBN6SQkxlY6q/ptAQimIiJsC3/OAyuG+GwhAWdZhUEOitQSppKfSU Vhzm2YurD40B9GCE4rkxKm+jSPkH4dZshgyiYyZSCbsyCkfxi71PXefZz3dzAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU6rdOsrooId1znFdeFYA0LWGberEwHwYDVR0j BBgwFoAUcnYz2iSPasRibg35szFFt0/VjwMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU0Mzc4NzUzMjc0Njc1NS8wLzcyNzYzM0RBMjQ4RjZBQzQ2MjZFMERGOUIzMzE0 NUI3NEZENThGMDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzI3NjMzREEyNDhGNkFDNDYyNkUwREY5QjMzMTQ1Qjc0RkQ1OEYwMy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTQ1NDM3ODc1MzI3NDY3NTUvMC8zMjMxMzgyZTM5 MzgyZTMyMzAzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzQzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEANpi0TANBgkqhkiG9w0BAQsFAAOCAQEAKdSteQW/aDqwzYD8pbzS IdMMa6UNaSzhdh+iiYb9Ds/KE5goeda4GAdgmGjViOjN6g8IpTNuZRXiokELzn6L XH2pRYfYJTwbuPTMkcj89I0Me2Hge4n+gRj8BlCPM5oOMKQKrbAHpCfY9vbiN6Ai P2KEx3rdqjCXeHVkNJJskuX2UUath/RtvupUl6h69J5M8vSisLrFJVJUrq2F4/9P tvzUUzMfH/c7zEM5456SR+TBajBV/y4vM/ELRD3GgkIEVUrlXq/B/Qd8NHWLvdS5 PNePyMVSLmWpiuvpb/lduAbUYtN/XnJJBNL5jVsoJ+QkdD7hhdfro94KYQ5yhu72 lw== -----END CERTIFICATE-----Generated at Sat Apr 18 03:54:37 2026 by rpki-client