$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3231332e302f32342d3234203d3e20313436383431.roa File: 3231382e39382e3231332e302f32342d3234203d3e20313436383431.roa (raw, json) Hash identifier: BQ36hCBywhGt28SwU89T+JTovsJVAPR6cNm45te4lfA= Subject key identifier: 09:57:0A:BE:8B:A3:C2:F8:AB:6D:91:E8:F5:6B:09:D3:57:F0:C5:04 Certificate issuer: /CN=727633DA248F6AC4626E0DF9B33145B74FD58F03 Certificate serial: 5C1C89288AD6A78FB76A7AD6C225FC78DB0B067E Authority key identifier: 72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3231332e302f32342d3234203d3e20313436383431.roa Signing time: Tue 14 Apr 2026 01:45:26 +0000 ROA not before: Tue 14 Apr 2026 01:40:26 +0000 ROA not after: Tue 13 Apr 2027 01:45:26 +0000 asID: 146841 IP address blocks: 218.98.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 10:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:1c:89:28:8a:d6:a7:8f:b7:6a:7a:d6:c2:25:fc:78:db:0b:06:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03 Validity Not Before: Apr 14 01:40:26 2026 GMT Not After : Apr 13 01:45:26 2027 GMT Subject: CN=09570ABE8BA3C2F8AB6D91E8F56B09D357F0C504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c4:fa:0b:b8:d1:69:55:39:0f:31:63:49:da: ae:24:f5:c0:b3:e2:41:e2:d3:b2:ac:cc:e0:30:48: 68:fe:a9:cd:e0:94:49:15:bc:ae:5f:2a:b9:ab:0b: 6e:1d:c5:c1:5e:e7:58:23:de:23:bd:ee:9e:33:15: 14:96:bf:28:fa:ff:9b:16:ed:ab:66:0e:d6:b7:50: 71:a6:67:e5:30:1a:f7:73:b9:1f:42:e3:8c:06:31: 62:10:5e:c3:c6:22:b4:8c:df:d5:6e:86:7d:92:6a: 72:ce:6e:01:1d:4b:9b:af:b7:fe:77:83:af:cd:e5: 75:ff:ed:64:cf:aa:a9:75:db:bc:26:d9:85:13:4c: 29:bf:47:33:a4:e4:e7:94:89:fd:fe:53:f7:58:b8: 69:5d:d3:5d:81:fa:c8:15:72:25:97:d6:22:38:9e: 22:2b:99:be:e1:9d:42:3c:18:db:eb:3f:db:63:00: 78:2c:0a:ef:28:d2:4e:88:2e:48:73:18:01:01:f7: fa:ab:d3:0f:3b:f7:0f:b0:6e:2b:a5:0c:a6:b3:f7: eb:fe:e5:e0:a6:68:5a:03:05:ac:31:45:dc:e8:85: 8a:0b:2c:0f:57:30:de:f9:12:cb:0d:d0:84:75:b7: 66:32:03:d9:bd:95:7a:c4:73:ee:73:22:a3:bc:37: eb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:57:0A:BE:8B:A3:C2:F8:AB:6D:91:E8:F5:6B:09:D3:57:F0:C5:04 X509v3 Authority Key Identifier: keyid:72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3231332e302f32342d3234203d3e20313436383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.98.213.0/24 Signature Algorithm: sha256WithRSAEncryption 65:60:f3:f4:6f:52:fe:a2:f8:f5:5e:1a:69:37:2b:fb:bf:b6: 04:5d:e6:7f:d1:75:c2:82:e8:1a:5d:8f:3c:cb:f1:32:3f:f7: 66:42:9c:3c:b2:83:c9:74:a7:75:56:f7:23:44:87:23:ec:93: 36:29:71:4b:a4:b7:25:9a:bb:2f:a6:a0:6c:fa:11:55:97:a0: b2:29:f6:62:b3:69:ce:ac:4f:5a:bb:88:e6:ed:bf:79:78:97: 72:6d:25:25:9d:cd:4d:09:63:2e:9d:65:73:a4:a1:41:02:1b: 9b:7b:ab:a5:3b:f5:4d:84:6b:7e:20:a0:38:c6:8e:b5:4b:34: 98:f4:36:46:3a:3b:42:68:ad:ab:de:60:d6:87:89:de:6e:71: b1:e5:29:68:ef:a9:8a:e8:98:b6:0d:a9:08:9d:4b:0c:fa:98: ca:a4:da:ce:55:e9:ac:23:3d:3f:15:cc:6a:83:c4:25:08:97: a3:a7:43:71:a5:53:af:65:75:88:86:e9:71:9f:c4:61:35:07: 44:3e:d0:ee:ba:9e:8e:e7:0a:32:21:26:94:e2:cc:3d:50:b7: ea:f5:09:53:d8:16:89:08:3b:d1:ab:f0:f3:b9:bd:a7:61:09: 13:57:c3:ba:2e:3a:71:92:39:d0:bb:f3:3b:65:e8:18:d9:f3: be:2d:88:2d -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUXByJKIrWp4+3anrWwiX8eNsLBn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI3NjMzREEyNDhGNkFDNDYyNkUwREY5QjMzMTQ1Qjc0 RkQ1OEYwMzAeFw0yNjA0MTQwMTQwMjZaFw0yNzA0MTMwMTQ1MjZaMDMxMTAvBgNV BAMTKDA5NTcwQUJFOEJBM0MyRjhBQjZEOTFFOEY1NkIwOUQzNTdGMEM1MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzxPoLuNFpVTkPMWNJ2q4k9cCz 4kHi07KszOAwSGj+qc3glEkVvK5fKrmrC24dxcFe51gj3iO97p4zFRSWvyj6/5sW 7atmDta3UHGmZ+UwGvdzuR9C44wGMWIQXsPGIrSM39Vuhn2SanLObgEdS5uvt/53 g6/N5XX/7WTPqql127wm2YUTTCm/RzOk5OeUif3+U/dYuGld012B+sgVciWX1iI4 niIrmb7hnUI8GNvrP9tjAHgsCu8o0k6ILkhzGAEB9/qr0w879w+wbiulDKaz9+v+ 5eCmaFoDBawxRdzohYoLLA9XMN75EssN0IR1t2YyA9m9lXrEc+5zIqO8N+tNAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUCVcKvoujwvirbZHo9WsJ01fwxQQwHwYDVR0j BBgwFoAUcnYz2iSPasRibg35szFFt0/VjwMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU0Mzc4NzUzMjc0Njc1NS8wLzcyNzYzM0RBMjQ4RjZBQzQ2MjZFMERGOUIzMzE0 NUI3NEZENThGMDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzI3NjMzREEyNDhGNkFDNDYyNkUwREY5QjMzMTQ1Qjc0RkQ1OEYwMy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTQ1NDM3ODc1MzI3NDY3NTUvMC8zMjMxMzgyZTM5 MzgyZTMyMzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzQzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEANpi1TANBgkqhkiG9w0BAQsFAAOCAQEAZWDz9G9S/qL49V4aaTcr +7+2BF3mf9F1woLoGl2PPMvxMj/3ZkKcPLKDyXSndVb3I0SHI+yTNilxS6S3JZq7 L6agbPoRVZegsin2YrNpzqxPWruI5u2/eXiXcm0lJZ3NTQljLp1lc6ShQQIbm3ur pTv1TYRrfiCgOMaOtUs0mPQ2Rjo7Qmitq95g1oeJ3m5xseUpaO+piuiYtg2pCJ1L DPqYyqTazlXprCM9PxXMaoPEJQiXo6dDcaVTr2V1iIbpcZ/EYTUHRD7Q7rqejucK MiEmlOLMPVC36vUJU9gWiQg70avw87m9p2EJE1fDui46cZI50LvzO2XoGNnzvi2I LQ== -----END CERTIFICATE-----Generated at Sat Apr 18 03:54:35 2026 by rpki-client