$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096251215517384705/0/3134342e34382e3231352e302f32342d3234203d3e203536303436.roa File: 3134342e34382e3231352e302f32342d3234203d3e203536303436.roa (raw, json) Hash identifier: X/rH+wR1KcaMHhlzNkauvL5xmiAl3VL+zPN+vf8IkYo= Subject key identifier: 8D:38:EB:ED:57:95:A1:13:DB:8C:1C:31:E9:A5:F0:03:F7:2C:72:95 Certificate issuer: /CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D Certificate serial: 269C2B6F58FD9537C55B9B4A962AFBA3EC395E5B Authority key identifier: D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/3134342e34382e3231352e302f32342d3234203d3e203536303436.roa Signing time: Tue 14 Apr 2026 02:00:13 +0000 ROA not before: Tue 14 Apr 2026 01:55:13 +0000 ROA not after: Tue 13 Apr 2027 02:00:13 +0000 asID: 56046 IP address blocks: 144.48.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 07:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:9c:2b:6f:58:fd:95:37:c5:5b:9b:4a:96:2a:fb:a3:ec:39:5e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D Validity Not Before: Apr 14 01:55:13 2026 GMT Not After : Apr 13 02:00:13 2027 GMT Subject: CN=8D38EBED5795A113DB8C1C31E9A5F003F72C7295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8e:af:0e:9a:f4:5b:bb:3a:9c:56:97:b4:1f: c7:c5:b4:16:86:fa:d7:71:5e:13:b7:15:d9:0c:17: 73:d3:30:5d:ea:b0:61:d7:99:39:2f:04:bf:7c:54: 0d:ee:91:85:e9:03:06:c6:2d:e9:79:7a:9f:f2:0d: 78:61:ba:04:5b:b6:45:df:14:ce:43:af:ec:61:bf: 4e:26:09:40:b3:1a:96:5e:4b:b1:f3:ba:32:5c:22: 06:15:5d:bd:59:35:e8:15:44:54:12:f8:26:e9:6c: ff:d4:86:57:22:54:56:32:e3:4b:c9:94:b8:0c:a0: 1c:42:43:75:f8:c0:8a:14:8e:17:56:31:34:a8:66: 5e:9d:9b:e7:8f:fc:80:18:0d:68:66:04:a4:90:3e: 3a:0c:a6:4b:8a:9c:ae:30:63:46:70:f4:f5:85:7b: 18:b4:ec:cd:37:13:6a:b8:4a:e7:7e:09:f6:73:7b: 78:bd:56:7e:c4:09:f5:54:0c:e7:b7:fd:1e:91:3f: ef:ae:8d:aa:52:49:43:a5:66:9f:eb:c9:c9:ef:ad: 43:c3:6e:1e:55:71:1d:28:71:93:14:fd:10:e7:19: 1a:ca:d3:6d:22:80:dc:ef:1f:0b:de:6a:ce:48:77: 3a:ce:f2:ae:6f:c5:4e:f4:ec:d6:8a:1c:3e:f5:c9: 5a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:38:EB:ED:57:95:A1:13:DB:8C:1C:31:E9:A5:F0:03:F7:2C:72:95 X509v3 Authority Key Identifier: keyid:D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/3134342e34382e3231352e302f32342d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.48.215.0/24 Signature Algorithm: sha256WithRSAEncryption ac:e2:5c:ab:ed:ec:4a:75:cc:47:26:14:4e:f6:7a:bf:c9:e4: 3d:10:c4:56:38:f2:5b:7c:9e:46:aa:a2:cd:af:4e:15:d3:03: 67:4e:85:68:f3:b6:8a:e8:93:44:04:26:3b:f1:72:e1:c4:8f: f7:41:59:73:e0:dd:a5:2b:9f:da:57:2d:52:b3:6b:6d:27:dd: ee:ad:09:9d:53:27:c8:2a:20:09:e2:f2:1e:92:ec:84:1f:63: da:8a:d0:bb:dc:9d:0f:7b:fe:0d:22:ba:ee:c0:59:e1:19:ea: bc:a4:85:7f:00:09:63:9a:91:d8:37:6f:15:7e:f2:28:cc:d4: e3:ec:29:6c:26:04:97:cb:ba:a9:b4:82:d7:38:c1:22:d0:cd: e5:33:52:0c:c4:81:99:49:11:df:96:e8:4a:f5:26:f2:9a:43: e0:c6:3c:d6:0c:36:82:38:04:a4:b5:37:c0:30:48:ff:ed:74: 48:f0:7c:c3:c9:1e:cf:1f:89:06:45:6e:e5:d5:de:f9:95:39: 8c:83:e6:e7:70:00:52:7c:0a:8a:c3:79:9f:a5:70:d2:47:2d: 60:8f:e8:04:e9:42:01:18:8c:02:8f:36:7d:ed:c5:66:3c:8e: 5b:d6:85:6a:c8:83:6f:63:ef:5d:2b:70:c9:05:c8:5e:98:85: 61:b8:e2:7b -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUJpwrb1j9lTfFW5tKlir7o+w5XlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDEzNThFOTZBNTI3OEFDMjE4QUZCNzE4RTJBMUJCRUY1 NEI5MTQ5RDAeFw0yNjA0MTQwMTU1MTNaFw0yNzA0MTMwMjAwMTNaMDMxMTAvBgNV BAMTKDhEMzhFQkVENTc5NUExMTNEQjhDMUMzMUU5QTVGMDAzRjcyQzcyOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBjq8OmvRbuzqcVpe0H8fFtBaG +tdxXhO3FdkMF3PTMF3qsGHXmTkvBL98VA3ukYXpAwbGLel5ep/yDXhhugRbtkXf FM5Dr+xhv04mCUCzGpZeS7HzujJcIgYVXb1ZNegVRFQS+CbpbP/UhlciVFYy40vJ lLgMoBxCQ3X4wIoUjhdWMTSoZl6dm+eP/IAYDWhmBKSQPjoMpkuKnK4wY0Zw9PWF exi07M03E2q4Sud+CfZze3i9Vn7ECfVUDOe3/R6RP++ujapSSUOlZp/rycnvrUPD bh5VcR0ocZMU/RDnGRrK020igNzvHwveas5IdzrO8q5vxU707NaKHD71yVr9AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUjTjr7VeVoRPbjBwx6aXwA/cscpUwHwYDVR0j BBgwFoAU0TWOlqUnisIYr7cY4qG771S5FJ0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1MTIxNTUxNzM4NDcwNS8wL0QxMzU4RTk2QTUyNzhBQzIxOEFGQjcxOEUyQTFC QkVGNTRCOTE0OUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDEzNThFOTZBNTI3OEFDMjE4QUZCNzE4RTJBMUJCRUY1NEI5MTQ5RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjI1MTIxNTUxNzM4NDcwNS8wLzMxMzQzNDJlMzQz ODJlMzIzMTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAJAw1zANBgkqhkiG9w0BAQsFAAOCAQEArOJcq+3sSnXMRyYUTvZ6v8nk PRDEVjjyW3yeRqqiza9OFdMDZ06FaPO2iuiTRAQmO/Fy4cSP90FZc+DdpSuf2lct UrNrbSfd7q0JnVMnyCogCeLyHpLshB9j2orQu9ydD3v+DSK67sBZ4RnqvKSFfwAJ Y5qR2DdvFX7yKMzU4+wpbCYEl8u6qbSC1zjBItDN5TNSDMSBmUkR35boSvUm8ppD 4MY81gw2gjgEpLU3wDBI/+10SPB8w8kezx+JBkVu5dXe+ZU5jIPm53AAUnwKisN5 n6Vw0kctYI/oBOlCARiMAo82fe3FZjyOW9aFasiDb2PvXStwyQXIXpiFYbjiew== -----END CERTIFICATE-----Generated at Fri Apr 17 22:11:48 2026 by rpki-client