$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/3230332e3139362e302e302f32312d3332203d3e2039333038.roa File: 3230332e3139362e302e302f32312d3332203d3e2039333038.roa (raw, json) Hash identifier: tvwl3DcgCV9l/4jaEFN1UorROJ4f3fpDK+rUoX0f/4g= Subject key identifier: 09:3E:0C:18:30:88:4C:F8:AC:1E:56:55:A2:B5:9D:CA:8F:91:2F:3E Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Certificate serial: 787CBF19EF907D202C75A2B5379FEF60E8405C5D Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/3230332e3139362e302e302f32312d3332203d3e2039333038.roa Signing time: Tue 14 Apr 2026 03:00:09 +0000 ROA not before: Tue 14 Apr 2026 02:55:09 +0000 ROA not after: Tue 13 Apr 2027 03:00:09 +0000 asID: 9308 IP address blocks: 203.196.0.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 05:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:7c:bf:19:ef:90:7d:20:2c:75:a2:b5:37:9f:ef:60:e8:40:5c:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B Validity Not Before: Apr 14 02:55:09 2026 GMT Not After : Apr 13 03:00:09 2027 GMT Subject: CN=093E0C1830884CF8AC1E5655A2B59DCA8F912F3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e5:af:28:f9:92:3b:1f:5c:84:cb:4b:11:34: 7f:65:5c:2e:70:b6:e7:f0:80:43:b4:e4:e8:18:2a: df:a0:f7:0a:9f:36:65:88:66:92:a3:eb:5c:3d:44: b6:d5:07:56:bb:9f:e8:f4:2a:0e:82:a6:64:ab:a8: 9d:84:88:ee:26:a3:6b:ea:8e:e0:9c:c6:14:c7:09: 40:bd:c0:4e:34:b1:9d:48:e5:ce:61:84:52:58:53: ac:b3:1a:2b:fc:47:3f:bb:03:01:c5:31:b7:f4:3d: 26:a9:5e:34:cd:48:f0:c2:59:55:01:43:6a:86:0f: 58:e8:98:5e:d6:5b:65:2f:33:2f:8f:84:5c:1c:19: 3e:b0:6b:23:d9:26:ba:e3:74:73:d4:bc:7b:0b:23: 6b:2d:92:c9:55:5f:db:de:b8:1d:85:2e:c6:cc:6f: 82:1e:72:0b:96:d2:65:2d:8b:0f:87:d9:6b:60:21: e1:7f:97:d8:cc:81:f2:73:91:00:81:88:df:86:0f: 40:0f:ac:c6:35:26:de:5b:78:1c:51:93:95:54:13: e0:de:5c:db:f5:a2:2a:63:03:fd:9e:a9:32:6e:ca: c2:a8:b9:b3:e3:c9:23:d1:b4:2b:34:6c:b0:1d:88: 40:7f:13:90:26:5d:61:ae:c7:8b:bd:21:80:6b:b1: a2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3E:0C:18:30:88:4C:F8:AC:1E:56:55:A2:B5:9D:CA:8F:91:2F:3E X509v3 Authority Key Identifier: keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/3230332e3139362e302e302f32312d3332203d3e2039333038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.196.0.0/21 Signature Algorithm: sha256WithRSAEncryption 50:5d:6c:f8:c3:5c:59:ea:51:35:44:3b:6e:af:f2:79:d4:e9: fd:de:de:86:4b:80:60:59:9e:f1:8e:a2:6c:a2:05:41:1f:f5: c9:b4:6e:b0:ce:c1:bb:78:61:fe:2c:b7:f8:1f:26:7f:01:31: 7b:3d:98:be:c0:27:5a:a6:cc:f2:71:03:66:42:01:a9:8b:d9: 7c:1c:60:ef:01:01:54:db:8e:cc:96:ea:81:b9:40:ba:92:35: b3:5a:5a:af:b1:1b:2e:42:c4:3e:e5:f9:01:52:a5:c2:2d:c8: 8f:08:ec:24:4a:f1:8c:ba:36:7f:a0:00:7b:a1:4a:4d:ac:15: 1c:95:eb:9b:30:23:9d:36:46:0e:4a:b7:29:c7:6c:6d:f8:59: 3d:5a:a1:3f:ff:8c:af:7c:3e:34:aa:16:e4:d8:2d:d2:f0:ba: 49:af:9b:53:83:f9:13:d1:3f:4f:30:fe:a6:c0:38:5d:4d:26: f0:97:29:21:c5:a6:02:49:db:fc:41:dc:4b:8a:66:cf:df:16: 3d:3f:cf:6d:85:e4:96:b9:cd:dc:13:28:6a:1a:75:69:a0:c2: 92:5b:bc:8d:4a:97:f6:6b:c1:0d:ea:f2:52:1a:ae:63:df:47: 3c:5b:7a:bb:60:1a:6b:1b:f0:ce:24:82:09:73:a0:70:92:a6: 62:a3:c7:31 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUeHy/Ge+QfSAsdaK1N5/vYOhAXF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVD NTQ0Qzc0QjAeFw0yNjA0MTQwMjU1MDlaFw0yNzA0MTMwMzAwMDlaMDMxMTAvBgNV BAMTKDA5M0UwQzE4MzA4ODRDRjhBQzFFNTY1NUEyQjU5RENBOEY5MTJGM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt5a8o+ZI7H1yEy0sRNH9lXC5w tufwgEO05OgYKt+g9wqfNmWIZpKj61w9RLbVB1a7n+j0Kg6CpmSrqJ2EiO4mo2vq juCcxhTHCUC9wE40sZ1I5c5hhFJYU6yzGiv8Rz+7AwHFMbf0PSapXjTNSPDCWVUB Q2qGD1jomF7WW2UvMy+PhFwcGT6wayPZJrrjdHPUvHsLI2stkslVX9veuB2FLsbM b4IecguW0mUtiw+H2WtgIeF/l9jMgfJzkQCBiN+GD0APrMY1Jt5beBxRk5VUE+De XNv1oipjA/2eqTJuysKoubPjySPRtCs0bLAdiEB/E5AmXWGux4u9IYBrsaJBAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUCT4MGDCITPisHlZVorWdyo+RLz4wHwYDVR0j BBgwFoAUHFGc0cQVkl5/zpL9og/xjsVEx0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NTQ1OTM0ODUzNzM0Ni8xLzFDNTE5Q0QxQzQxNTkyNUU3RkNFOTJGREEyMEZG MThFQzU0NEM3NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVDNTQ0Qzc0Qi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2MjY1NDU5MzQ4NTM3MzQ2LzEvMzIzMDMzMmUzMTM5 MzYyZTMwMmUzMDJmMzIzMTJkMzMzMjIwM2QzZTIwMzkzMzMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAPLxAAwDQYJKoZIhvcNAQELBQADggEBAFBdbPjDXFnqUTVEO26v8nnU6f3e3oZL gGBZnvGOomyiBUEf9cm0brDOwbt4Yf4st/gfJn8BMXs9mL7AJ1qmzPJxA2ZCAamL 2XwcYO8BAVTbjsyW6oG5QLqSNbNaWq+xGy5CxD7l+QFSpcItyI8I7CRK8Yy6Nn+g AHuhSk2sFRyV65swI502Rg5KtynHbG34WT1aoT//jK98PjSqFuTYLdLwukmvm1OD +RPRP08w/qbAOF1NJvCXKSHFpgJJ2/xB3EuKZs/fFj0/z22F5Ja5zdwTKGoadWmg wpJbvI1Kl/ZrwQ3q8lIarmPfRzxbertgGmsb8M4kgglzoHCSpmKjxzE= -----END CERTIFICATE-----Generated at Fri Apr 17 19:26:33 2026 by rpki-client