$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3231342e302f32342d3234203d3e20313436383431.roa File: 3231382e39382e3231342e302f32342d3234203d3e20313436383431.roa (raw, json) Hash identifier: INioRRkxf3xa+grpqxBw9dO54uDwmH9qAz6YD6mDzno= Subject key identifier: E0:A6:56:71:95:EB:04:FD:02:62:A5:0E:4D:EE:97:8E:C7:47:11:42 Certificate issuer: /CN=727633DA248F6AC4626E0DF9B33145B74FD58F03 Certificate serial: 26965E63A47204D72896034CF713704DD23A672A Authority key identifier: 72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3231342e302f32342d3234203d3e20313436383431.roa Signing time: Tue 14 Apr 2026 01:45:27 +0000 ROA not before: Tue 14 Apr 2026 01:40:27 +0000 ROA not after: Tue 13 Apr 2027 01:45:27 +0000 asID: 146841 IP address blocks: 218.98.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 10:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:96:5e:63:a4:72:04:d7:28:96:03:4c:f7:13:70:4d:d2:3a:67:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03 Validity Not Before: Apr 14 01:40:27 2026 GMT Not After : Apr 13 01:45:27 2027 GMT Subject: CN=E0A6567195EB04FD0262A50E4DEE978EC7471142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:bf:a1:ac:f3:05:fd:ac:7c:25:ae:ce:b5:29: 27:eb:f3:d2:3e:73:e3:b8:78:6a:70:ae:ec:7d:9c: cf:31:83:4d:84:70:54:46:09:89:8f:30:ad:54:97: cc:12:2f:d3:f1:eb:98:77:4a:b0:62:57:53:5b:16: 35:7c:23:36:f9:5f:5a:e8:dc:80:2f:b0:19:79:23: 21:8d:5e:f0:97:9e:20:e2:ec:ae:d9:89:a8:ed:aa: 93:eb:17:26:9f:7b:5c:d1:22:86:38:51:16:00:05: f5:2e:63:ca:df:99:05:74:4b:11:08:52:49:ef:1b: 9a:b2:fa:6c:ac:66:4f:c1:32:91:eb:e1:0a:72:ff: c8:88:80:c5:42:6d:00:31:79:52:53:4a:03:02:c5: bd:78:87:d1:16:35:65:18:37:e9:51:d1:71:08:e6: f1:e7:c6:00:01:39:73:67:7c:0c:16:48:a8:e5:c2: 1e:30:9a:57:fa:a7:43:3b:74:df:50:7a:87:55:ad: 39:3e:7a:90:8b:1a:eb:c7:84:ce:17:17:5b:2c:5e: f5:07:9d:75:59:48:84:13:46:32:1b:8a:c2:e4:72: 7c:5f:df:09:d1:a7:ef:f3:ae:59:36:72:7e:fa:25: 24:ca:86:a8:30:3b:12:fa:2b:62:51:db:d5:59:64: 23:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A6:56:71:95:EB:04:FD:02:62:A5:0E:4D:EE:97:8E:C7:47:11:42 X509v3 Authority Key Identifier: keyid:72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3231342e302f32342d3234203d3e20313436383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.98.214.0/24 Signature Algorithm: sha256WithRSAEncryption 92:a2:79:8f:c7:2b:86:4d:73:7a:90:9d:02:f5:af:b7:d7:48: ac:8d:47:7f:21:c0:b2:5c:73:83:98:bc:3b:9c:17:55:cc:a8: ec:fb:45:ed:88:37:fe:98:ce:8f:66:2a:c2:8a:19:e2:47:46: e3:95:1e:73:da:e1:19:fa:54:54:4c:d2:63:45:ce:44:b5:be: f8:5a:5c:fc:8a:3a:7c:99:2a:a9:d5:4c:c8:89:46:7d:67:a9: 5e:0a:5f:0d:a4:17:0d:7e:b5:97:5f:ef:5a:5c:4d:c2:fd:6a: c6:43:d5:48:bf:12:e6:68:a7:fd:88:7b:c9:2c:f8:d8:da:ea: a6:5a:71:d2:31:16:cd:33:c3:5e:da:89:7e:8e:69:d1:1f:30: e6:a3:e5:24:18:4d:6e:6d:b8:20:d2:61:9d:49:67:2d:cf:25: 52:b9:60:84:58:ba:48:03:5c:52:f8:b4:ad:32:d5:ba:72:75: 76:04:30:d9:af:35:b8:2b:b7:a6:52:de:2e:40:9e:d6:a9:91: d9:b9:57:8a:be:04:ea:65:bd:10:3a:e3:7b:7f:68:72:a6:61: d9:9b:83:58:cf:8e:9d:0f:bf:cc:f3:f1:c3:be:a1:e1:bd:40: 56:32:b5:e1:0f:45:42:b0:cb:31:fd:4c:50:0e:67:e6:2a:aa: 9e:1e:25:52 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUJpZeY6RyBNcolgNM9xNwTdI6ZyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI3NjMzREEyNDhGNkFDNDYyNkUwREY5QjMzMTQ1Qjc0 RkQ1OEYwMzAeFw0yNjA0MTQwMTQwMjdaFw0yNzA0MTMwMTQ1MjdaMDMxMTAvBgNV BAMTKEUwQTY1NjcxOTVFQjA0RkQwMjYyQTUwRTRERUU5NzhFQzc0NzExNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnv6Gs8wX9rHwlrs61KSfr89I+ c+O4eGpwrux9nM8xg02EcFRGCYmPMK1Ul8wSL9Px65h3SrBiV1NbFjV8Izb5X1ro 3IAvsBl5IyGNXvCXniDi7K7ZiajtqpPrFyafe1zRIoY4URYABfUuY8rfmQV0SxEI UknvG5qy+mysZk/BMpHr4Qpy/8iIgMVCbQAxeVJTSgMCxb14h9EWNWUYN+lR0XEI 5vHnxgABOXNnfAwWSKjlwh4wmlf6p0M7dN9QeodVrTk+epCLGuvHhM4XF1ssXvUH nXVZSIQTRjIbisLkcnxf3wnRp+/zrlk2cn76JSTKhqgwOxL6K2JR29VZZCP5AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU4KZWcZXrBP0CYqUOTe6XjsdHEUIwHwYDVR0j BBgwFoAUcnYz2iSPasRibg35szFFt0/VjwMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU0Mzc4NzUzMjc0Njc1NS8wLzcyNzYzM0RBMjQ4RjZBQzQ2MjZFMERGOUIzMzE0 NUI3NEZENThGMDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzI3NjMzREEyNDhGNkFDNDYyNkUwREY5QjMzMTQ1Qjc0RkQ1OEYwMy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTQ1NDM3ODc1MzI3NDY3NTUvMC8zMjMxMzgyZTM5 MzgyZTMyMzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzQzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEANpi1jANBgkqhkiG9w0BAQsFAAOCAQEAkqJ5j8crhk1zepCdAvWv t9dIrI1HfyHAslxzg5i8O5wXVcyo7PtF7Yg3/pjOj2YqwooZ4kdG45Uec9rhGfpU VEzSY0XORLW++Fpc/Io6fJkqqdVMyIlGfWepXgpfDaQXDX61l1/vWlxNwv1qxkPV SL8S5min/Yh7ySz42Nrqplpx0jEWzTPDXtqJfo5p0R8w5qPlJBhNbm24INJhnUln Lc8lUrlghFi6SANcUvi0rTLVunJ1dgQw2a81uCu3plLeLkCe1qmR2blXir4E6mW9 EDrje39ocqZh2ZuDWM+OnQ+/zPPxw76h4b1AVjK14Q9FQrDLMf1MUA5n5iqqnh4l Ug== -----END CERTIFICATE-----Generated at Sat Apr 18 03:53:06 2026 by rpki-client