$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e3130302e302f32322d3332203d3e2034383038.roa File: 3131342e3131322e3130302e302f32322d3332203d3e2034383038.roa (raw, json) Hash identifier: QYqVyQxOV3dVX1DrcYiAKU92G8FRWBSKvmNjUchGNcw= Subject key identifier: 4B:89:73:6E:10:80:EA:6D:FF:8D:BD:57:11:2D:C0:2E:D0:25:81:6E Certificate issuer: /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315 Certificate serial: 5D669C1EECD2555DC90FC10FC0E47E415FE2C8A7 Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e3130302e302f32322d3332203d3e2034383038.roa Signing time: Wed 15 Apr 2026 08:03:05 +0000 ROA not before: Wed 15 Apr 2026 07:58:05 +0000 ROA not after: Wed 14 Apr 2027 08:03:05 +0000 asID: 4808 IP address blocks: 114.112.100.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:66:9c:1e:ec:d2:55:5d:c9:0f:c1:0f:c0:e4:7e:41:5f:e2:c8:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315 Validity Not Before: Apr 15 07:58:05 2026 GMT Not After : Apr 14 08:03:05 2027 GMT Subject: CN=4B89736E1080EA6DFF8DBD57112DC02ED025816E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3d:39:28:23:7b:70:6c:24:bb:51:0f:e9:10: b1:a9:58:45:82:a7:a9:ea:77:c0:1a:0b:1f:51:63: bd:18:9e:87:be:96:c9:9e:f7:ea:27:32:7c:58:06: ad:a0:67:df:cf:bf:ce:19:c8:7f:ce:c4:4a:a0:19: b1:72:01:65:3c:1c:b7:c9:80:31:83:d7:e4:8f:15: c6:cd:5d:83:2f:23:6a:7d:96:c5:ff:68:b1:42:54: 7f:4f:96:a7:22:6b:b0:23:5e:7b:56:a7:cc:9e:aa: 9a:38:d7:e0:32:4a:d9:82:db:38:3e:ae:e9:6a:06: 8d:e8:9e:7d:76:e4:7d:1c:24:a6:a3:e1:75:02:21: 3f:58:5d:01:71:c5:b2:fb:68:25:12:e9:28:4a:3d: 31:48:f8:80:2a:ae:e4:11:95:8b:9d:6e:b9:02:ea: da:b0:54:ed:af:6f:a2:68:db:97:f8:9d:6e:e4:36: 62:3b:b7:81:de:24:ab:84:77:dd:3f:b9:1c:f4:b4: 6a:48:ec:da:e0:df:0c:86:a5:81:77:36:37:a4:68: d3:54:ac:e8:02:c9:7b:3c:4a:f1:be:03:67:e0:5f: d1:eb:38:48:d1:0c:a3:06:47:fc:8e:aa:1d:be:aa: 00:e6:00:f1:c1:64:6c:58:8b:d0:63:06:61:02:bc: e4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:89:73:6E:10:80:EA:6D:FF:8D:BD:57:11:2D:C0:2E:D0:25:81:6E X509v3 Authority Key Identifier: keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e3130302e302f32322d3332203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.112.100.0/22 Signature Algorithm: sha256WithRSAEncryption 29:04:1a:c2:ae:b9:68:17:23:0d:f5:73:24:37:12:47:a1:80: 2a:5b:6b:8b:01:bb:3f:6b:4b:9a:cb:d2:57:11:1d:09:bf:24: 0f:08:aa:c7:14:8b:af:4a:d9:57:ac:21:e6:b2:f0:e7:b1:d6: c6:c1:99:2a:94:78:bc:b8:f8:78:d7:8d:19:93:ec:12:3f:2b: a1:46:44:7a:16:a8:e8:c7:82:83:f5:ee:2d:1c:f6:f8:8e:5e: 3b:96:24:85:c4:2a:6e:e2:f4:a1:1c:34:74:40:b0:33:c7:18: ad:3a:8f:f9:61:a1:f2:09:d9:10:49:a9:97:1f:4c:87:0a:b9: f9:00:80:de:d3:d4:fa:87:a3:45:58:a5:5a:cb:7d:26:1f:fe: 61:f4:0a:9b:ab:e6:a8:f4:14:64:f7:32:de:a9:d4:aa:5a:67: 0d:a2:38:3c:c7:29:2b:ec:b4:8b:40:7b:f2:49:ce:18:34:c8: bf:c3:ac:18:b0:4e:d5:7d:43:1e:f0:96:e2:37:f1:a0:d6:c5: ce:cf:40:da:98:37:77:97:f6:56:9f:af:18:41:29:99:fc:d5: 25:0c:cf:44:9e:9b:50:5e:4a:91:3a:49:f3:07:79:12:de:80: 74:61:d2:54:87:23:aa:46:89:40:b6:96:bf:ad:89:94:c5:e0: 82:a2:79:af -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUXWacHuzSVV3JD8EPwOR+QV/iyKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3 OEMxRTMxNTAeFw0yNjA0MTUwNzU4MDVaFw0yNzA0MTQwODAzMDVaMDMxMTAvBgNV BAMTKDRCODk3MzZFMTA4MEVBNkRGRjhEQkQ1NzExMkRDMDJFRDAyNTgxNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEPTkoI3twbCS7UQ/pELGpWEWC p6nqd8AaCx9RY70Ynoe+lsme9+onMnxYBq2gZ9/Pv84ZyH/OxEqgGbFyAWU8HLfJ gDGD1+SPFcbNXYMvI2p9lsX/aLFCVH9Plqcia7AjXntWp8yeqpo41+AyStmC2zg+ rulqBo3onn125H0cJKaj4XUCIT9YXQFxxbL7aCUS6ShKPTFI+IAqruQRlYudbrkC 6tqwVO2vb6Jo25f4nW7kNmI7t4HeJKuEd90/uRz0tGpI7Nrg3wyGpYF3NjekaNNU rOgCyXs8SvG+A2fgX9HrOEjRDKMGR/yOqh2+qgDmAPHBZGxYi9BjBmECvOT7AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUS4lzbhCA6m3/jb1XES3ALtAlgW4wHwYDVR0j BBgwFoAUIMrI5wtcswlOR/8FFiOphXjB4xUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDI5NDc2NzA5OTkwNS8wLzIwQ0FDOEU3MEI1Q0IzMDk0RTQ3RkYwNTE2MjNB OTg1NzhDMUUzMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3OEMxRTMxNS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTk4NDI5NDc2NzA5OTkwNS8wLzMxMzEzNDJlMzEz MTMyMmUzMTMwMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNDM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAnJwZDANBgkqhkiG9w0BAQsFAAOCAQEAKQQawq65aBcjDfVzJDcSR6GA KltriwG7P2tLmsvSVxEdCb8kDwiqxxSLr0rZV6wh5rLw57HWxsGZKpR4vLj4eNeN GZPsEj8roUZEehao6MeCg/XuLRz2+I5eO5YkhcQqbuL0oRw0dECwM8cYrTqP+WGh 8gnZEEmplx9Mhwq5+QCA3tPU+oejRVilWst9Jh/+YfQKm6vmqPQUZPcy3qnUqlpn DaI4PMcpK+y0i0B78knOGDTIv8OsGLBO1X1DHvCW4jfxoNbFzs9A2pg3d5f2Vp+v GEEpmfzVJQzPRJ6bUF5KkTpJ8wd5Et6AdGHSVIcjqkaJQLaWv62JlMXggqJ5rw== -----END CERTIFICATE-----Generated at Fri Apr 17 19:10:10 2026 by rpki-client