$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3231322e302f32342d3234203d3e20313436383431.roa File: 3231382e39382e3231322e302f32342d3234203d3e20313436383431.roa (raw, json) Hash identifier: mh4howHx2myQ3DM1H8Q4i0fqcnXhCL5MgENCUx3z93s= Subject key identifier: FF:2A:A2:06:6B:6C:9F:E8:3F:1F:6E:0F:A4:64:AF:F5:A9:B8:F1:54 Certificate issuer: /CN=727633DA248F6AC4626E0DF9B33145B74FD58F03 Certificate serial: 076012F287E8CBF675FC945B6DE4814414B85B99 Authority key identifier: 72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3231322e302f32342d3234203d3e20313436383431.roa Signing time: Tue 14 Apr 2026 01:45:28 +0000 ROA not before: Tue 14 Apr 2026 01:40:28 +0000 ROA not after: Tue 13 Apr 2027 01:45:28 +0000 asID: 146841 IP address blocks: 218.98.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:60:12:f2:87:e8:cb:f6:75:fc:94:5b:6d:e4:81:44:14:b8:5b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03 Validity Not Before: Apr 14 01:40:28 2026 GMT Not After : Apr 13 01:45:28 2027 GMT Subject: CN=FF2AA2066B6C9FE83F1F6E0FA464AFF5A9B8F154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4a:95:18:a1:9b:ad:47:9d:af:76:7e:e2:3e: b3:85:bb:98:f9:45:57:86:75:7d:e8:87:7e:9c:36: 9e:a0:1b:94:29:a7:4c:84:ec:93:92:a5:ca:3e:bc: 82:a2:ad:64:37:94:28:d1:00:73:89:37:d1:68:b3: a0:35:56:b4:20:07:e8:30:30:c5:fb:10:ad:7f:25: 87:89:a3:03:d4:3b:2c:82:bb:2b:bc:b0:68:58:ba: b4:bd:51:24:ba:6e:ee:f5:22:c6:a5:71:8b:5d:e9: d0:cb:bb:37:8e:50:fe:7d:75:06:9a:ab:5a:cf:20: fa:7a:9b:23:d6:39:b5:dd:41:67:0b:ff:00:65:92: 23:67:f7:a7:b7:7a:b1:6f:2b:bd:ef:53:41:ac:d0: 2e:a5:0c:df:63:d3:d0:ed:2d:59:f0:59:50:4c:4a: 72:68:53:bf:d5:c2:69:e0:e2:95:b1:49:db:d8:7b: 2d:e4:bf:c4:83:c4:ce:c5:21:5b:a2:4d:15:e1:b0: 00:f5:1d:ab:0e:8e:f7:be:0b:ee:38:67:68:6d:b4: 0e:48:3d:1e:47:8f:8c:42:64:c7:63:d9:aa:56:7c: eb:d3:6a:24:c5:9b:76:a5:41:cf:c3:cc:10:34:dd: 2f:fd:cf:52:14:df:48:02:c1:c1:91:73:e0:61:6f: 04:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2A:A2:06:6B:6C:9F:E8:3F:1F:6E:0F:A4:64:AF:F5:A9:B8:F1:54 X509v3 Authority Key Identifier: keyid:72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3231322e302f32342d3234203d3e20313436383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.98.212.0/24 Signature Algorithm: sha256WithRSAEncryption bb:33:50:3a:ab:f2:ae:ca:e5:98:4b:12:5d:f0:63:40:ee:61: de:80:e8:9d:07:34:12:d4:81:6d:97:34:7a:21:eb:10:2a:07: ae:77:a9:60:84:39:02:db:4e:e4:f4:41:18:45:e0:89:a4:69: 23:78:02:d2:c2:b8:6b:87:fa:8d:19:61:86:cf:12:d1:84:0c: 09:40:71:f9:4c:d1:77:5f:a4:db:90:49:78:34:00:d1:05:31: 96:26:c4:6b:98:66:70:7e:46:27:f1:d9:75:f0:69:1d:53:0f: fe:28:bb:ad:3e:2d:f7:90:33:ba:43:4c:b0:db:bf:9c:f0:c3: 3d:e7:1d:2a:66:f9:a9:65:6d:36:7b:d0:89:87:d2:13:45:3b: 22:52:05:ab:7e:29:b3:79:9e:2e:35:24:1e:c1:59:38:0d:86: 0c:94:41:11:81:0a:92:18:ed:7b:b1:15:60:69:95:4a:98:dc: 64:b7:a8:0a:93:95:d7:15:df:aa:18:dd:e1:c9:4a:63:44:4d: ad:24:73:4a:d6:db:2a:27:d4:e3:eb:e1:75:9d:8d:1e:30:d4: df:59:17:be:07:bd:ac:43:ad:93:0f:cc:05:bf:fb:d7:7a:61: cf:26:ba:7f:6a:ff:06:30:cc:ca:12:d5:bd:9f:b4:5c:28:8f: 93:70:38:69 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUB2AS8ofoy/Z1/JRbbeSBRBS4W5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI3NjMzREEyNDhGNkFDNDYyNkUwREY5QjMzMTQ1Qjc0 RkQ1OEYwMzAeFw0yNjA0MTQwMTQwMjhaFw0yNzA0MTMwMTQ1MjhaMDMxMTAvBgNV BAMTKEZGMkFBMjA2NkI2QzlGRTgzRjFGNkUwRkE0NjRBRkY1QTlCOEYxNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDASpUYoZutR52vdn7iPrOFu5j5 RVeGdX3oh36cNp6gG5Qpp0yE7JOSpco+vIKirWQ3lCjRAHOJN9Fos6A1VrQgB+gw MMX7EK1/JYeJowPUOyyCuyu8sGhYurS9USS6bu71IsalcYtd6dDLuzeOUP59dQaa q1rPIPp6myPWObXdQWcL/wBlkiNn96e3erFvK73vU0Gs0C6lDN9j09DtLVnwWVBM SnJoU7/Vwmng4pWxSdvYey3kv8SDxM7FIVuiTRXhsAD1HasOjve+C+44Z2httA5I PR5Hj4xCZMdj2apWfOvTaiTFm3alQc/DzBA03S/9z1IU30gCwcGRc+BhbwSjAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU/yqiBmtsn+g/H24PpGSv9am48VQwHwYDVR0j BBgwFoAUcnYz2iSPasRibg35szFFt0/VjwMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU0Mzc4NzUzMjc0Njc1NS8wLzcyNzYzM0RBMjQ4RjZBQzQ2MjZFMERGOUIzMzE0 NUI3NEZENThGMDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzI3NjMzREEyNDhGNkFDNDYyNkUwREY5QjMzMTQ1Qjc0RkQ1OEYwMy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTQ1NDM3ODc1MzI3NDY3NTUvMC8zMjMxMzgyZTM5 MzgyZTMyMzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzQzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEANpi1DANBgkqhkiG9w0BAQsFAAOCAQEAuzNQOqvyrsrlmEsSXfBj QO5h3oDonQc0EtSBbZc0eiHrECoHrnepYIQ5AttO5PRBGEXgiaRpI3gC0sK4a4f6 jRlhhs8S0YQMCUBx+UzRd1+k25BJeDQA0QUxlibEa5hmcH5GJ/HZdfBpHVMP/ii7 rT4t95AzukNMsNu/nPDDPecdKmb5qWVtNnvQiYfSE0U7IlIFq34ps3meLjUkHsFZ OA2GDJRBEYEKkhjte7EVYGmVSpjcZLeoCpOV1xXfqhjd4clKY0RNrSRzStbbKifU 4+vhdZ2NHjDU31kXvge9rEOtkw/MBb/713phzya6f2r/BjDMyhLVvZ+0XCiPk3A4 aQ== -----END CERTIFICATE-----Generated at Sat Apr 18 05:30:46 2026 by rpki-client