$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3230332e3137342e3131322e302f32312d3231203d3e2034383437.roa File: 3230332e3137342e3131322e302f32312d3231203d3e2034383437.roa (raw, json) Hash identifier: st2/amX1wgVuhQO5TDf7aPH9NHEogiqwCQ79Wtvcf3E= Subject key identifier: 59:21:8A:C6:5D:A5:14:8C:25:A1:0E:91:EF:FD:46:F9:D6:B9:9B:64 Certificate issuer: /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398 Certificate serial: 2CCEF43CF49615FAA9649C94AF6E44FFC0A6DB36 Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3230332e3137342e3131322e302f32312d3231203d3e2034383437.roa Signing time: Mon 13 Apr 2026 08:15:03 +0000 ROA not before: Mon 13 Apr 2026 08:10:03 +0000 ROA not after: Mon 12 Apr 2027 08:15:03 +0000 asID: 4847 IP address blocks: 203.174.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 07:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ce:f4:3c:f4:96:15:fa:a9:64:9c:94:af:6e:44:ff:c0:a6:db:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398 Validity Not Before: Apr 13 08:10:03 2026 GMT Not After : Apr 12 08:15:03 2027 GMT Subject: CN=59218AC65DA5148C25A10E91EFFD46F9D6B99B64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:29:e4:07:e4:bf:35:da:73:9a:22:39:e5:74: 33:3d:d8:3a:19:bc:d7:c2:a0:8a:fa:f9:b6:61:de: 87:02:eb:b0:98:f5:b5:12:c4:45:02:55:fb:8b:01: 10:f1:75:58:84:1b:dc:fc:a0:de:cf:49:04:2e:24: 62:32:0e:6a:85:50:45:ce:59:97:43:cd:d3:96:e9: b3:43:d0:90:d3:a6:28:df:01:e4:4a:f3:6c:ef:27: bb:15:f8:a9:9e:d2:8b:28:13:33:d9:c2:c1:a8:19: cf:c5:26:a2:c1:51:50:56:20:17:7b:70:95:36:98: a0:4f:4a:06:0c:ff:81:18:eb:1f:38:b1:35:0b:f1: b7:2f:f9:ed:53:36:64:76:f3:2e:e9:a1:96:0a:79: d8:b0:12:50:bd:a0:6b:db:c8:8c:a6:1a:da:c8:b2: 36:66:85:d1:47:50:8c:35:ab:4a:50:e1:2d:9c:08: e0:26:82:ed:4a:6c:58:d3:22:01:8a:f3:8f:97:50: 82:af:69:9e:c3:a1:7e:37:d6:5b:f7:4c:92:70:b1: f0:5d:04:c6:56:f3:1b:56:63:b9:45:e4:49:69:bf: f6:cf:91:d4:df:8c:09:a9:ec:e7:b1:3a:c8:5e:0c: 2b:94:30:80:66:cb:0f:af:1a:cf:64:64:49:c8:63: a6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:21:8A:C6:5D:A5:14:8C:25:A1:0E:91:EF:FD:46:F9:D6:B9:9B:64 X509v3 Authority Key Identifier: keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3230332e3137342e3131322e302f32312d3231203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.174.112.0/21 Signature Algorithm: sha256WithRSAEncryption b8:94:d2:fa:a0:fc:35:cf:a4:0e:f3:a8:00:8f:53:8e:5b:00: 95:ed:58:59:d1:56:a0:8f:1a:13:3c:7c:e0:c1:d8:98:ce:c7: 9d:44:43:a6:94:45:36:8f:c4:fc:b3:1f:aa:cc:5c:91:d8:e8: 6c:9d:76:c9:05:08:38:b0:bf:50:1f:d1:72:5f:7d:1d:cd:ff: e5:24:66:98:07:b8:04:b9:4e:ec:31:4d:35:ae:40:d8:bb:c0: db:29:05:8e:f3:f7:cb:c4:5b:b1:25:5f:0f:a0:e4:d0:78:09: aa:95:6c:99:88:8b:33:85:36:63:ff:8b:79:d9:11:b6:4a:c2: 49:b2:97:cb:6e:c1:f9:c9:b3:aa:02:53:e2:b8:84:ea:b1:5f: 7e:ce:66:f5:b3:c5:1c:ef:44:56:72:61:fa:c2:0a:20:c0:fe: 7e:87:dd:a0:12:d0:d6:99:fb:83:b3:9a:7b:ff:cb:c8:da:c0: 96:9a:65:60:1b:0f:07:e9:a0:66:19:8c:d0:64:e0:c9:a4:4b: 8a:7b:2d:c0:20:e6:05:0d:3d:1f:af:78:12:dc:a7:de:2a:98: 99:73:e8:24:36:c2:5c:04:85:ae:6c:3d:ac:70:6b:65:85:60: 92:bd:d7:92:f9:e1:e5:98:61:51:d2:c1:1e:86:45:f6:6e:19: fa:19:a4:2e -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIULM70PPSWFfqpZJyUr25E/8Cm2zYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1 QUQzRjM5ODAeFw0yNjA0MTMwODEwMDNaFw0yNzA0MTIwODE1MDNaMDMxMTAvBgNV BAMTKDU5MjE4QUM2NURBNTE0OEMyNUExMEU5MUVGRkQ0NkY5RDZCOTlCNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCKeQH5L812nOaIjnldDM92DoZ vNfCoIr6+bZh3ocC67CY9bUSxEUCVfuLARDxdViEG9z8oN7PSQQuJGIyDmqFUEXO WZdDzdOW6bND0JDTpijfAeRK82zvJ7sV+Kme0osoEzPZwsGoGc/FJqLBUVBWIBd7 cJU2mKBPSgYM/4EY6x84sTUL8bcv+e1TNmR28y7poZYKediwElC9oGvbyIymGtrI sjZmhdFHUIw1q0pQ4S2cCOAmgu1KbFjTIgGK84+XUIKvaZ7DoX431lv3TJJwsfBd BMZW8xtWY7lF5Elpv/bPkdTfjAmp7OexOsheDCuUMIBmyw+vGs9kZEnIY6ZJAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUWSGKxl2lFIwloQ6R7/1G+da5m2QwHwYDVR0j BBgwFoAUwcSPlZPWoZ29P6ypxu+ltVrT85gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk3ODMxNjg4NTY1NTU1NS8wL0MxQzQ4Rjk1OTNENkExOURCRDNGQUNBOUM2RUZB NUI1NUFEM0YzOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1QUQzRjM5OC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTk3ODMxNjg4NTY1NTU1NS8wLzMyMzAzMzJlMzEz NzM0MmUzMTMxMzIyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDM4MzQzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA8uucDANBgkqhkiG9w0BAQsFAAOCAQEAuJTS+qD8Nc+kDvOoAI9TjlsA le1YWdFWoI8aEzx84MHYmM7HnURDppRFNo/E/LMfqsxckdjobJ12yQUIOLC/UB/R cl99Hc3/5SRmmAe4BLlO7DFNNa5A2LvA2ykFjvP3y8RbsSVfD6Dk0HgJqpVsmYiL M4U2Y/+LedkRtkrCSbKXy27B+cmzqgJT4riE6rFffs5m9bPFHO9EVnJh+sIKIMD+ fofdoBLQ1pn7g7Oae//LyNrAlpplYBsPB+mgZhmM0GTgyaRLinstwCDmBQ09H694 Etyn3iqYmXPoJDbCXASFrmw9rHBrZYVgkr3Xkvnh5ZhhUdLBHoZF9m4Z+hmkLg== -----END CERTIFICATE-----Generated at Fri Apr 17 20:16:44 2026 by rpki-client