$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3231312e302f32342d3234203d3e20313436383431.roa File: 3231382e39382e3231312e302f32342d3234203d3e20313436383431.roa (raw, json) Hash identifier: DKgvwB10v2KlhQb9PUhUx7Cu1QGaNp7YFa9x57886nA= Subject key identifier: 20:04:14:6B:F9:2D:D7:44:48:2B:72:BB:3E:60:D1:90:99:A9:5A:28 Certificate issuer: /CN=727633DA248F6AC4626E0DF9B33145B74FD58F03 Certificate serial: 655CADA962DBF279B1796BD6F44FF90E591E3C31 Authority key identifier: 72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3231312e302f32342d3234203d3e20313436383431.roa Signing time: Tue 14 Apr 2026 01:45:28 +0000 ROA not before: Tue 14 Apr 2026 01:40:28 +0000 ROA not after: Tue 13 Apr 2027 01:45:28 +0000 asID: 146841 IP address blocks: 218.98.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:5c:ad:a9:62:db:f2:79:b1:79:6b:d6:f4:4f:f9:0e:59:1e:3c:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03 Validity Not Before: Apr 14 01:40:28 2026 GMT Not After : Apr 13 01:45:28 2027 GMT Subject: CN=2004146BF92DD744482B72BB3E60D19099A95A28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:23:05:1a:bf:b7:de:87:15:c7:2b:5b:03:77: e2:d2:45:e1:7f:a0:43:50:1c:2b:0b:01:1b:cf:82: 4b:4c:3e:78:9a:0b:35:17:bb:c5:62:51:61:02:56: 64:71:a9:5e:05:49:1b:5a:f0:71:42:c7:2a:ec:ac: 0e:fd:72:96:b2:2c:39:4d:4b:09:df:aa:b7:79:4d: cf:06:a5:e4:2b:61:80:40:55:62:18:96:57:27:30: 3b:bb:88:38:fa:f4:eb:53:83:c8:fb:3c:84:d9:be: ad:54:3d:62:1f:07:4b:f2:98:ce:ba:d5:90:f0:da: 5c:c3:d2:c6:9d:3e:98:0f:ca:8f:23:d4:d3:0b:cf: 57:0c:ad:ff:d4:52:30:9f:9f:2a:b9:d9:e1:2d:8b: f3:50:22:16:1c:45:92:55:0b:55:d3:ba:c1:cd:63: 7e:4d:81:40:2a:f3:25:c4:b5:f8:16:b7:ad:4d:f9: a7:2d:00:73:cc:81:e5:13:db:f3:9f:c7:d7:06:5e: be:55:5e:8c:6e:6d:86:92:5b:1c:04:6e:c9:07:a5: 71:08:1d:94:0b:23:16:11:44:e7:c5:d4:96:98:30: 60:a6:86:da:5e:25:4d:08:6c:64:65:53:9d:58:c7: 4b:03:c4:40:07:6b:c9:49:ac:4e:1c:ea:3f:b9:03: 70:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:04:14:6B:F9:2D:D7:44:48:2B:72:BB:3E:60:D1:90:99:A9:5A:28 X509v3 Authority Key Identifier: keyid:72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3231312e302f32342d3234203d3e20313436383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.98.211.0/24 Signature Algorithm: sha256WithRSAEncryption 11:92:1c:2a:69:a7:37:9f:50:00:c3:ca:05:c5:05:2c:33:3c: ca:b6:df:86:0d:c9:b7:7a:3d:86:79:a1:46:fd:9f:97:4c:bb: 09:de:0b:41:d8:aa:3a:72:a1:fc:af:de:07:da:e5:57:cb:55: 9b:91:b1:c6:e7:8d:4d:45:40:7f:0f:60:c3:0c:7c:09:fc:3c: a7:41:bd:b0:c2:b6:c6:78:79:64:be:cc:8e:5b:84:0b:b9:a8: 22:9e:c5:45:26:62:26:94:d7:c0:4d:9d:b8:b4:bd:14:41:81: f1:9a:5e:9d:98:ff:3e:25:8a:24:e6:29:d8:8f:30:71:1f:69: 68:80:2c:4b:df:3d:bc:dd:d0:6d:32:9d:7e:da:ba:61:4c:be: 86:cb:69:31:bb:65:cb:58:3f:44:0f:c2:cf:b3:dc:eb:66:22: 71:bc:32:92:11:62:55:d5:f4:46:de:e6:ca:77:1f:b8:f1:c9: 01:07:57:b9:a2:33:d3:71:5e:c2:1e:ba:8c:0e:7c:5f:07:64: d8:86:12:7d:2e:ae:f2:df:0a:c9:b6:a4:57:f8:a2:33:2a:13: 13:e3:fd:c6:0e:b1:7d:da:8b:31:58:09:f3:93:fd:a9:07:71: 32:6d:49:f8:e3:b0:74:e1:c8:9f:aa:db:69:a4:94:34:1c:ee: 25:ff:6e:67 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUZVytqWLb8nmxeWvW9E/5DlkePDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI3NjMzREEyNDhGNkFDNDYyNkUwREY5QjMzMTQ1Qjc0 RkQ1OEYwMzAeFw0yNjA0MTQwMTQwMjhaFw0yNzA0MTMwMTQ1MjhaMDMxMTAvBgNV BAMTKDIwMDQxNDZCRjkyREQ3NDQ0ODJCNzJCQjNFNjBEMTkwOTlBOTVBMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClIwUav7fehxXHK1sDd+LSReF/ oENQHCsLARvPgktMPniaCzUXu8ViUWECVmRxqV4FSRta8HFCxyrsrA79cpayLDlN Swnfqrd5Tc8GpeQrYYBAVWIYllcnMDu7iDj69OtTg8j7PITZvq1UPWIfB0vymM66 1ZDw2lzD0sadPpgPyo8j1NMLz1cMrf/UUjCfnyq52eEti/NQIhYcRZJVC1XTusHN Y35NgUAq8yXEtfgWt61N+actAHPMgeUT2/Ofx9cGXr5VXoxubYaSWxwEbskHpXEI HZQLIxYRROfF1JaYMGCmhtpeJU0IbGRlU51Yx0sDxEAHa8lJrE4c6j+5A3AlAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUIAQUa/kt10RIK3K7PmDRkJmpWigwHwYDVR0j BBgwFoAUcnYz2iSPasRibg35szFFt0/VjwMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU0Mzc4NzUzMjc0Njc1NS8wLzcyNzYzM0RBMjQ4RjZBQzQ2MjZFMERGOUIzMzE0 NUI3NEZENThGMDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzI3NjMzREEyNDhGNkFDNDYyNkUwREY5QjMzMTQ1Qjc0RkQ1OEYwMy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTQ1NDM3ODc1MzI3NDY3NTUvMC8zMjMxMzgyZTM5 MzgyZTMyMzEzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzQzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEANpi0zANBgkqhkiG9w0BAQsFAAOCAQEAEZIcKmmnN59QAMPKBcUF LDM8yrbfhg3Jt3o9hnmhRv2fl0y7Cd4LQdiqOnKh/K/eB9rlV8tVm5GxxueNTUVA fw9gwwx8Cfw8p0G9sMK2xnh5ZL7MjluEC7moIp7FRSZiJpTXwE2duLS9FEGB8Zpe nZj/PiWKJOYp2I8wcR9paIAsS989vN3QbTKdftq6YUy+hstpMbtly1g/RA/Cz7Pc 62YicbwykhFiVdX0Rt7myncfuPHJAQdXuaIz03Fewh66jA58Xwdk2IYSfS6u8t8K ybakV/iiMyoTE+P9xg6xfdqLMVgJ85P9qQdxMm1J+OOwdOHIn6rbaaSUNBzuJf9u Zw== -----END CERTIFICATE-----Generated at Sat Apr 18 05:29:21 2026 by rpki-client