$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096251215517384705/0/3134342e34382e3231322e302f32342d3234203d3e203536303436.roa File: 3134342e34382e3231322e302f32342d3234203d3e203536303436.roa (raw, json) Hash identifier: vMa/k2SkE13kwIrYtUhiwDEePOtjyHoHk4K6TQSSm1E= Subject key identifier: 3C:A4:92:FC:9D:DC:C9:86:A4:2B:3B:62:D4:5A:99:A4:CF:7A:82:1B Certificate issuer: /CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D Certificate serial: 1F0E49235BCB6AB9296028BEC70FD72E6F911DB5 Authority key identifier: D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/3134342e34382e3231322e302f32342d3234203d3e203536303436.roa Signing time: Tue 14 Apr 2026 02:00:12 +0000 ROA not before: Tue 14 Apr 2026 01:55:12 +0000 ROA not after: Tue 13 Apr 2027 02:00:12 +0000 asID: 56046 IP address blocks: 144.48.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 07:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:0e:49:23:5b:cb:6a:b9:29:60:28:be:c7:0f:d7:2e:6f:91:1d:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D Validity Not Before: Apr 14 01:55:12 2026 GMT Not After : Apr 13 02:00:12 2027 GMT Subject: CN=3CA492FC9DDCC986A42B3B62D45A99A4CF7A821B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:da:25:09:06:2c:4a:c8:b7:ca:aa:4c:10:49: f7:29:c8:19:21:86:93:e8:d1:74:4c:75:12:3e:34: 26:98:b0:c7:4e:c2:b1:19:cb:63:4c:ab:06:14:89: 7e:90:0f:ff:93:4b:34:8f:82:13:99:04:d3:7a:44: ad:35:84:92:57:ba:fe:6c:fd:23:78:0f:cc:f5:f8: 51:f2:be:ef:95:72:21:63:33:a7:30:8f:a6:6a:ff: 42:b5:02:2e:0f:8d:49:55:32:79:5a:59:eb:ca:26: 0d:06:d7:8e:38:e5:27:b4:a3:2a:77:d4:3b:1e:73: 4a:51:96:e4:ae:60:3a:c3:64:5d:6c:7a:d5:9f:20: 50:4b:7d:ba:90:63:38:d7:53:a8:c6:69:38:17:d7: de:f8:15:27:62:ed:ee:90:94:d8:2b:7c:9d:00:18: 76:a7:fc:ef:38:e6:17:d2:f1:57:dd:94:02:10:b3: a4:6d:cb:cb:10:8b:d3:bf:a1:40:19:1c:32:f0:52: 95:42:5b:53:d0:17:79:f2:f1:bd:70:06:bf:5e:27: 4b:b0:a9:d5:1b:b1:a5:7d:e8:e5:26:b7:36:56:0d: e3:71:06:ce:35:c8:50:f3:08:66:a9:aa:91:e7:64: fa:cd:1e:8b:79:36:32:a0:ff:d2:18:65:93:53:5a: 01:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A4:92:FC:9D:DC:C9:86:A4:2B:3B:62:D4:5A:99:A4:CF:7A:82:1B X509v3 Authority Key Identifier: keyid:D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/3134342e34382e3231322e302f32342d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.48.212.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:22:20:50:a8:4b:d9:2b:6d:02:05:9a:e3:ef:e6:4a:ab:c7: fe:1d:dc:a3:f8:09:cd:7e:68:bf:a9:8d:20:55:71:d3:6f:2c: 63:43:a8:d1:f4:42:a5:94:84:d6:34:d2:6e:fe:0f:f5:55:41: 44:a1:27:ac:5a:6a:c9:72:eb:73:71:78:bb:4e:b3:0a:e0:f3: 13:31:d8:7d:aa:ce:7d:e8:0d:38:4d:bf:03:66:c3:71:4f:f0: da:81:eb:4c:24:56:8f:f2:03:70:36:89:a7:e6:0f:3e:71:72: 7a:d3:30:b0:b6:c4:d9:bb:37:c8:49:0d:44:40:4c:2c:58:86: 29:b8:69:e9:4a:fc:85:d0:f2:73:f3:2d:c8:e9:65:62:ee:d7: 46:0c:e6:53:5c:41:8f:f9:4d:ce:ee:e0:4b:ac:e3:e3:c7:fe: f9:7f:75:65:a0:80:7d:56:80:3f:a0:43:24:1d:63:d9:1d:79: 72:51:d7:af:c6:12:64:c8:12:b5:9d:e6:15:f7:72:4e:7a:14: f0:14:2e:37:a1:d4:ba:26:cf:74:cc:31:a4:f3:b6:09:8f:e0: 8a:fd:3e:e9:a5:78:36:aa:aa:94:d6:c9:5c:13:22:64:b7:9b: 54:a0:88:1e:70:be:d6:c5:47:b2:7e:34:15:05:9a:1c:65:67: 4c:7e:a2:95 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUHw5JI1vLarkpYCi+xw/XLm+RHbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDEzNThFOTZBNTI3OEFDMjE4QUZCNzE4RTJBMUJCRUY1 NEI5MTQ5RDAeFw0yNjA0MTQwMTU1MTJaFw0yNzA0MTMwMjAwMTJaMDMxMTAvBgNV BAMTKDNDQTQ5MkZDOUREQ0M5ODZBNDJCM0I2MkQ0NUE5OUE0Q0Y3QTgyMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt2iUJBixKyLfKqkwQSfcpyBkh hpPo0XRMdRI+NCaYsMdOwrEZy2NMqwYUiX6QD/+TSzSPghOZBNN6RK01hJJXuv5s /SN4D8z1+FHyvu+VciFjM6cwj6Zq/0K1Ai4PjUlVMnlaWevKJg0G14445Se0oyp3 1Dsec0pRluSuYDrDZF1setWfIFBLfbqQYzjXU6jGaTgX1974FSdi7e6QlNgrfJ0A GHan/O845hfS8VfdlAIQs6Rty8sQi9O/oUAZHDLwUpVCW1PQF3ny8b1wBr9eJ0uw qdUbsaV96OUmtzZWDeNxBs41yFDzCGapqpHnZPrNHot5NjKg/9IYZZNTWgHBAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUPKSS/J3cyYakKzti1FqZpM96ghswHwYDVR0j BBgwFoAU0TWOlqUnisIYr7cY4qG771S5FJ0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1MTIxNTUxNzM4NDcwNS8wL0QxMzU4RTk2QTUyNzhBQzIxOEFGQjcxOEUyQTFC QkVGNTRCOTE0OUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDEzNThFOTZBNTI3OEFDMjE4QUZCNzE4RTJBMUJCRUY1NEI5MTQ5RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjI1MTIxNTUxNzM4NDcwNS8wLzMxMzQzNDJlMzQz ODJlMzIzMTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAJAw1DANBgkqhkiG9w0BAQsFAAOCAQEAjCIgUKhL2SttAgWa4+/mSqvH /h3co/gJzX5ov6mNIFVx028sY0Oo0fRCpZSE1jTSbv4P9VVBRKEnrFpqyXLrc3F4 u06zCuDzEzHYfarOfegNOE2/A2bDcU/w2oHrTCRWj/IDcDaJp+YPPnFyetMwsLbE 2bs3yEkNREBMLFiGKbhp6Ur8hdDyc/MtyOllYu7XRgzmU1xBj/lNzu7gS6zj48f+ +X91ZaCAfVaAP6BDJB1j2R15clHXr8YSZMgStZ3mFfdyTnoU8BQuN6HUuibPdMwx pPO2CY/giv0+6aV4NqqqlNbJXBMiZLebVKCIHnC+1sVHsn40FQWaHGVnTH6ilQ== -----END CERTIFICATE-----Generated at Fri Apr 17 17:52:20 2026 by rpki-client