$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096241666697854979/0/AS18241.roa File: AS18241.roa (raw, json) Hash identifier: KghwJGsdAFwKKaHyAzU5cWOTx1CTSMYVyT97Iq5hIVw= Subject key identifier: C0:D6:4D:F1:3C:B3:F0:E3:58:4E:AE:25:2C:D4:DC:E7:63:C3:AE:A8 Certificate issuer: /CN=21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8 Certificate serial: 6E796D8B25A49DDB2A668D7CDD4E5ABBEBC78248 Authority key identifier: 21:E2:A7:0B:05:78:C6:74:B0:BF:1F:D7:BE:B3:B9:B2:A6:2A:2D:D8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/AS18241.roa Signing time: Tue 14 Apr 2026 08:00:56 +0000 ROA not before: Tue 14 Apr 2026 07:55:56 +0000 ROA not after: Tue 13 Apr 2027 08:00:56 +0000 asID: 18241 IP address blocks: 210.72.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 09:55:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:79:6d:8b:25:a4:9d:db:2a:66:8d:7c:dd:4e:5a:bb:eb:c7:82:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8 Validity Not Before: Apr 14 07:55:56 2026 GMT Not After : Apr 13 08:00:56 2027 GMT Subject: CN=C0D64DF13CB3F0E3584EAE252CD4DCE763C3AEA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:dc:2a:8c:d6:d2:59:d7:68:6f:f7:88:de:2d: cc:19:62:7b:0c:f1:93:1a:7c:85:2e:22:d8:79:47: cd:99:8c:49:58:23:b6:f3:73:43:f7:40:c0:17:2a: 1b:d5:89:10:1f:2a:00:96:42:f9:28:f7:7b:f6:6a: 63:0b:09:ba:7e:51:ac:3f:93:bc:53:65:a9:f8:c5: e7:8b:d8:75:29:b8:2e:cd:61:7b:af:64:b7:4e:9f: 67:fc:0c:9f:ac:b8:5e:d7:5e:c5:a1:61:fc:f1:b3: 70:f9:6a:f7:30:10:ce:b7:6f:3a:97:b4:9e:59:2a: 13:3e:98:9d:66:24:b9:14:38:59:5c:d1:c5:b4:7e: e3:6a:c8:a3:ac:92:d4:f0:a9:04:7e:33:e5:12:83: 53:94:22:d0:a8:b8:e4:6a:33:38:c2:30:74:1a:7d: 59:e2:d5:b4:6b:54:ed:46:0c:c7:54:27:b4:d3:f1: db:a0:64:41:0e:fa:dd:44:89:21:98:9c:99:d0:3f: 5a:28:c4:75:6b:36:74:73:23:d3:f4:24:78:e4:a0: 7b:13:a3:07:c1:28:61:3c:71:ca:c2:ae:1c:a4:b1: ac:2d:31:b8:17:50:e9:f2:bc:d9:8b:08:47:f2:82: 28:87:6d:e7:d1:e8:c1:08:cb:52:16:40:2f:af:67: 9c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D6:4D:F1:3C:B3:F0:E3:58:4E:AE:25:2C:D4:DC:E7:63:C3:AE:A8 X509v3 Authority Key Identifier: keyid:21:E2:A7:0B:05:78:C6:74:B0:BF:1F:D7:BE:B3:B9:B2:A6:2A:2D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/AS18241.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.72.237.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:a4:87:c9:77:e6:4a:77:ab:3e:0d:02:8c:50:4c:88:51:19: a6:ac:41:4f:a1:8b:41:a7:d8:d2:21:9c:9f:06:cb:20:6c:ba: 7d:69:ce:cd:45:ac:10:31:a0:66:74:13:21:08:54:bd:b0:ed: 3d:1d:87:67:63:9a:c2:85:8b:7b:48:22:00:a9:14:02:f0:ff: 62:05:32:5e:94:e5:a1:9a:6b:59:eb:3e:d6:03:23:1c:98:36: 88:44:bb:70:08:ed:f5:76:f9:1e:23:9a:29:00:df:8d:fe:72: 36:03:fb:0f:24:7c:35:b0:73:1b:27:35:a9:11:ad:bc:d0:3a: 7d:38:35:c0:4c:b0:be:da:1f:5c:45:6a:04:73:c3:ca:89:6e: df:20:6c:53:df:7e:26:6d:4b:63:bb:0d:c1:25:7a:0f:e9:92: a9:4c:a0:95:1d:88:a4:af:66:b6:fd:ad:c3:2e:98:64:2a:ff: 37:d6:39:18:ca:2b:ea:01:c5:58:00:22:fd:df:ec:44:86:f6: 80:df:69:cb:04:1e:16:12:38:a0:7b:3f:1b:57:85:0e:3a:f5: 45:a0:f9:30:87:39:ff:4e:79:9f:74:ba:49:af:66:6e:e7:43: b8:a9:e5:2c:69:50:02:a3:f2:19:2c:bf:f5:6f:0d:9b:bd:28: c7:82:15:d0 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUbnltiyWkndsqZo183U5au+vHgkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFMkE3MEIwNTc4QzY3NEIwQkYxRkQ3QkVCM0I5QjJB NjJBMkREODAeFw0yNjA0MTQwNzU1NTZaFw0yNzA0MTMwODAwNTZaMDMxMTAvBgNV BAMTKEMwRDY0REYxM0NCM0YwRTM1ODRFQUUyNTJDRDREQ0U3NjNDM0FFQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX3CqM1tJZ12hv94jeLcwZYnsM 8ZMafIUuIth5R82ZjElYI7bzc0P3QMAXKhvViRAfKgCWQvko93v2amMLCbp+Uaw/ k7xTZan4xeeL2HUpuC7NYXuvZLdOn2f8DJ+suF7XXsWhYfzxs3D5avcwEM63bzqX tJ5ZKhM+mJ1mJLkUOFlc0cW0fuNqyKOsktTwqQR+M+USg1OUItCouORqMzjCMHQa fVni1bRrVO1GDMdUJ7TT8dugZEEO+t1EiSGYnJnQP1ooxHVrNnRzI9P0JHjkoHsT owfBKGE8ccrCrhyksawtMbgXUOnyvNmLCEfygiiHbefR6MEIy1IWQC+vZ5wzAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUwNZN8Tyz8ONYTq4lLNTc52PDrqgwHwYDVR0j BBgwFoAUIeKnCwV4xnSwvx/XvrO5sqYqLdgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI0MTY2NjY5Nzg1NDk3OS8wLzIxRTJBNzBCMDU3OEM2NzRCMEJGMUZEN0JFQjNC OUIyQTYyQTJERDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjFFMkE3MEIwNTc4QzY3NEIwQkYxRkQ3QkVCM0I5QjJBNjJBMkREOC5jZXIw XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNDE2NjY2OTc4NTQ5NzkvMC9BUzE4MjQxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQA0kjtMA0GCSqGSIb3DQEBCwUAA4IBAQBqpIfJd+ZKd6s+DQKMUEyIURmm rEFPoYtBp9jSIZyfBssgbLp9ac7NRawQMaBmdBMhCFS9sO09HYdnY5rChYt7SCIA qRQC8P9iBTJelOWhmmtZ6z7WAyMcmDaIRLtwCO31dvkeI5opAN+N/nI2A/sPJHw1 sHMbJzWpEa280Dp9ODXATLC+2h9cRWoEc8PKiW7fIGxT334mbUtjuw3BJXoP6ZKp TKCVHYikr2a2/a3DLphkKv831jkYyivqAcVYACL93+xEhvaA32nLBB4WEjigez8b V4UOOvVFoPkwhzn/TnmfdLpJr2Zu50O4qeUsaVACo/IZLL/1bw2bvSjHghXQ -----END CERTIFICATE-----Generated at Fri Apr 17 02:19:39 2026 by rpki-client