$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095966185683419139/0/3136302e3139312e302e302f32342d3234203d3e2034383038.roa File: 3136302e3139312e302e302f32342d3234203d3e2034383038.roa (raw, json) Hash identifier: edLxyl2ii3sEkVs34LHXdis/3sCK01AMTd29uv6dR74= Subject key identifier: 95:D4:44:7C:E0:85:90:82:2E:BA:4F:BD:E5:DF:0C:30:E7:79:F7:81 Certificate issuer: /CN=D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF Certificate serial: 27EBCEC3DBB8F0CAF5C75E7617A2ECF82F70AC0E Authority key identifier: D0:78:9A:D5:AD:54:B8:4B:9B:AA:37:F7:D9:64:D5:A8:A2:C2:87:DF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/3136302e3139312e302e302f32342d3234203d3e2034383038.roa Signing time: Mon 13 Apr 2026 07:01:01 +0000 ROA not before: Mon 13 Apr 2026 06:56:01 +0000 ROA not after: Mon 12 Apr 2027 07:01:01 +0000 asID: 4808 IP address blocks: 160.191.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:eb:ce:c3:db:b8:f0:ca:f5:c7:5e:76:17:a2:ec:f8:2f:70:ac:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF Validity Not Before: Apr 13 06:56:01 2026 GMT Not After : Apr 12 07:01:01 2027 GMT Subject: CN=95D4447CE08590822EBA4FBDE5DF0C30E779F781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cd:51:1d:90:d0:8a:82:6b:6c:ab:26:42:2a: 4c:e8:9a:3b:6c:2b:09:67:83:2b:9a:0b:26:4b:f0: 13:6d:f6:07:e6:b0:a0:bd:58:72:8d:85:d7:6b:76: 5a:52:98:b3:71:bc:98:54:fe:93:f0:39:3c:cc:cb: 1f:1c:6f:c7:00:44:12:46:ad:f4:fe:9a:65:fe:83: bf:10:e2:27:80:5f:a9:b2:3e:15:df:ff:ed:23:87: d5:cc:fc:65:47:2b:e3:bf:73:72:35:14:cc:05:d5: a6:a1:40:39:a8:ba:32:b0:81:a2:44:4b:e4:d1:2f: 33:02:79:34:fb:d9:e8:89:75:b8:61:a5:ad:15:f0: ec:d0:33:f1:1d:f2:4a:f3:40:3d:95:77:ff:84:6d: 1c:58:84:73:59:f0:82:86:0d:7b:96:26:17:d0:43: ef:d5:af:d5:52:57:02:bf:21:c2:2a:87:24:81:71: f4:f1:65:2f:fe:d9:17:1a:7a:6d:70:03:c3:a0:6f: fe:5c:b6:71:dc:9f:a8:db:d9:cb:b3:61:bb:f7:bf: 21:81:a5:c1:52:2d:22:e7:70:98:a7:e0:a7:d7:bc: f1:b1:28:84:ef:bd:2a:25:5d:9c:c9:4b:82:ff:cd: 00:c7:6c:04:44:81:91:f9:81:fb:18:b7:5d:a1:b5: 82:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D4:44:7C:E0:85:90:82:2E:BA:4F:BD:E5:DF:0C:30:E7:79:F7:81 X509v3 Authority Key Identifier: keyid:D0:78:9A:D5:AD:54:B8:4B:9B:AA:37:F7:D9:64:D5:A8:A2:C2:87:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/3136302e3139312e302e302f32342d3234203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.0.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:da:4d:52:51:5d:e6:d6:c4:ee:4f:df:cd:bd:dd:f1:2f:7c: ad:6d:b7:e0:48:fb:0d:71:d7:dd:74:27:44:ab:51:a7:62:7b: 16:98:0e:9a:c2:21:2c:27:61:6a:74:66:2d:f0:8f:2a:76:1e: fb:1e:47:2d:da:d2:cd:10:01:6c:17:83:8f:85:1a:e0:22:4f: 24:4e:f9:53:fc:33:be:72:37:57:4b:9e:3b:fd:82:ae:d5:fc: e2:9d:3c:9f:62:a4:6d:a0:44:90:4d:65:4e:52:cc:47:5c:f9: be:f2:fe:eb:86:be:c7:d8:30:ba:7d:5a:89:aa:0a:a3:21:40: d2:05:e7:6a:eb:1b:73:0e:87:b2:15:5e:0a:13:78:60:5a:b4: 56:8f:f8:13:54:a6:27:ba:a3:59:cb:25:58:29:e9:cf:b7:75: 9b:60:dc:26:22:68:df:7a:17:1c:15:a1:c6:6d:b0:ae:df:64: 49:7a:ac:c6:f3:99:a5:86:c7:3b:d0:da:1b:e3:61:cd:2c:ba: d1:4c:58:17:5e:78:03:b5:81:2a:02:e7:6f:02:07:2b:e0:17: e5:3c:42:a9:a4:54:80:55:38:e9:22:88:3b:cb:d5:61:0c:fd: 1a:a6:f0:52:5a:67:17:b4:12:b4:67:57:a7:6a:27:a8:60:8d: 69:8b:e4:64 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUJ+vOw9u48Mr1x152F6Ls+C9wrA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA3ODlBRDVBRDU0Qjg0QjlCQUEzN0Y3RDk2NEQ1QThB MkMyODdERjAeFw0yNjA0MTMwNjU2MDFaFw0yNzA0MTIwNzAxMDFaMDMxMTAvBgNV BAMTKDk1RDQ0NDdDRTA4NTkwODIyRUJBNEZCREU1REYwQzMwRTc3OUY3ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkzVEdkNCKgmtsqyZCKkzomjts KwlngyuaCyZL8BNt9gfmsKC9WHKNhddrdlpSmLNxvJhU/pPwOTzMyx8cb8cARBJG rfT+mmX+g78Q4ieAX6myPhXf/+0jh9XM/GVHK+O/c3I1FMwF1aahQDmoujKwgaJE S+TRLzMCeTT72eiJdbhhpa0V8OzQM/Ed8krzQD2Vd/+EbRxYhHNZ8IKGDXuWJhfQ Q+/Vr9VSVwK/IcIqhySBcfTxZS/+2Rcaem1wA8Ogb/5ctnHcn6jb2cuzYbv3vyGB pcFSLSLncJin4KfXvPGxKITvvSolXZzJS4L/zQDHbAREgZH5gfsYt12htYJlAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUldREfOCFkIIuuk+95d8MMOd594EwHwYDVR0j BBgwFoAU0Hia1a1UuEubqjf32WTVqKLCh98wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2NjE4NTY4MzQxOTEzOS8wL0QwNzg5QUQ1QUQ1NEI4NEI5QkFBMzdGN0Q5NjRE NUE4QTJDMjg3REYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDA3ODlBRDVBRDU0Qjg0QjlCQUEzN0Y3RDk2NEQ1QThBMkMyODdERi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1OTY2MTg1NjgzNDE5MTM5LzAvMzEzNjMwMmUzMTM5 MzEyZTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgvwAwDQYJKoZIhvcNAQELBQADggEBAG7aTVJRXebWxO5P38293fEvfK1tt+BI +w1x1910J0SrUadiexaYDprCISwnYWp0Zi3wjyp2HvseRy3a0s0QAWwXg4+FGuAi TyRO+VP8M75yN1dLnjv9gq7V/OKdPJ9ipG2gRJBNZU5SzEdc+b7y/uuGvsfYMLp9 WomqCqMhQNIF52rrG3MOh7IVXgoTeGBatFaP+BNUpie6o1nLJVgp6c+3dZtg3CYi aN96FxwVocZtsK7fZEl6rMbzmaWGxzvQ2hvjYc0sutFMWBdeeAO1gSoC528CByvg F+U8QqmkVIBVOOkiiDvL1WEM/Rqm8FJaZxe0ErRnV6dqJ6hgjWmL5GQ= -----END CERTIFICATE-----Generated at Fri Apr 17 21:00:41 2026 by rpki-client