$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3230332e3133352e3130342e302f32312d3231203d3e203538343631.roa File: 3230332e3133352e3130342e302f32312d3231203d3e203538343631.roa (raw, json) Hash identifier: fM1A18suRK8WzD9z99Lh+YXreBGdtCI+wFi/OQZ2QYY= Subject key identifier: C1:32:FF:78:ED:EA:ED:BF:81:B2:E4:24:C2:0F:E9:5C:FE:F2:AE:2D Certificate issuer: /CN=709E5125176627846677AF908E76CAE21FB95460 Certificate serial: 6128F7C802770AFFC419B4E24F06DFC9E4629FB6 Authority key identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3230332e3133352e3130342e302f32312d3231203d3e203538343631.roa Signing time: Tue 14 Apr 2026 07:29:25 +0000 ROA not before: Tue 14 Apr 2026 07:24:25 +0000 ROA not after: Tue 13 Apr 2027 07:29:25 +0000 asID: 58461 IP address blocks: 203.135.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 00:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:28:f7:c8:02:77:0a:ff:c4:19:b4:e2:4f:06:df:c9:e4:62:9f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709E5125176627846677AF908E76CAE21FB95460 Validity Not Before: Apr 14 07:24:25 2026 GMT Not After : Apr 13 07:29:25 2027 GMT Subject: CN=C132FF78EDEAEDBF81B2E424C20FE95CFEF2AE2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ff:8c:52:1c:1c:16:f0:4e:7d:da:94:9f:10: 16:98:8e:5a:a8:89:2f:18:9c:ee:48:c9:8f:98:a9: 00:ef:ca:46:47:cc:8c:92:69:25:17:57:c1:a4:4c: 74:18:62:b5:c3:b8:0c:69:2b:e2:4f:f4:d1:e6:d3: 2c:2b:bd:16:90:4e:df:fb:46:19:ef:1b:85:9d:0e: 2a:31:84:cb:6e:d1:43:11:43:b2:a6:26:97:f5:82: 3c:f3:85:84:a1:bb:21:41:7d:b9:ad:6c:46:83:81: 21:64:3a:4b:3f:02:67:21:08:43:3c:e9:0e:42:66: 9d:5b:17:8a:f9:66:c6:b2:75:98:e8:a2:87:ed:f6: 4d:08:77:ea:a6:20:f0:46:53:01:6a:e9:99:d1:81: cc:65:1d:71:21:b9:5d:40:70:a1:30:4d:de:da:c9: c8:0f:4f:3e:af:dd:20:bc:62:6f:44:1a:52:1d:64: 87:eb:f2:8e:0f:82:0a:27:9e:a4:2a:f4:14:9d:7d: 25:47:b5:c7:bb:e2:a0:e9:19:ca:2d:61:27:0e:98: e0:ea:6c:e2:53:b7:40:5a:c7:05:1f:9f:26:bc:10: df:38:31:11:2e:80:e5:89:85:51:b4:f4:7a:b5:83: a8:15:fb:fe:56:fc:42:28:2b:03:85:b8:d4:2b:fe: bb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:32:FF:78:ED:EA:ED:BF:81:B2:E4:24:C2:0F:E9:5C:FE:F2:AE:2D X509v3 Authority Key Identifier: keyid:70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3230332e3133352e3130342e302f32312d3231203d3e203538343631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.135.104.0/21 Signature Algorithm: sha256WithRSAEncryption 9a:fc:1e:24:07:69:32:9a:61:ca:69:f4:d1:30:cf:44:24:fc: 65:55:8e:61:38:3a:e4:56:e3:5b:31:00:8a:bc:1b:54:8d:8e: 1b:9c:ee:bb:8a:bd:60:e1:6a:a2:d9:fe:35:a3:89:e3:3d:88: fd:cb:c0:47:4e:bf:2b:51:20:88:b1:c2:1a:24:da:27:ed:bf: fb:1a:f8:11:86:ea:d3:56:56:10:32:b3:73:69:a4:33:84:5b: 32:40:67:78:b5:e1:0d:6c:d6:77:61:7a:88:5f:ba:b6:9b:1f: 09:b8:b4:55:5f:73:45:05:38:38:73:fc:10:91:5e:7a:b4:0a: e3:f6:d3:31:6b:30:e2:ff:02:95:1f:de:9c:86:d9:a6:94:b7: 2e:7a:05:50:79:70:3d:09:7e:06:40:42:dc:36:7d:4b:3b:6d: a7:41:97:8c:aa:bd:7d:43:08:13:87:b9:ef:41:8b:3d:15:b1: a8:cc:10:ca:65:a0:09:c2:2c:36:e7:9d:5b:9e:88:36:f6:08: 1e:d1:ce:93:37:90:a2:eb:3f:f4:b0:4c:85:0e:3a:3d:ea:5c: f5:23:6d:e1:0e:e6:27:7b:b3:b4:f0:9b:d6:92:7f:af:7f:9e: 15:5f:15:83:26:d5:05:1f:1d:e3:40:96:6b:2b:4a:f6:79:20: a0:20:0d:b0 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUYSj3yAJ3Cv/EGbTiTwbfyeRin7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIx RkI5NTQ2MDAeFw0yNjA0MTQwNzI0MjVaFw0yNzA0MTMwNzI5MjVaMDMxMTAvBgNV BAMTKEMxMzJGRjc4RURFQUVEQkY4MUIyRTQyNEMyMEZFOTVDRkVGMkFFMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG/4xSHBwW8E592pSfEBaYjlqo iS8YnO5IyY+YqQDvykZHzIySaSUXV8GkTHQYYrXDuAxpK+JP9NHm0ywrvRaQTt/7 RhnvG4WdDioxhMtu0UMRQ7KmJpf1gjzzhYShuyFBfbmtbEaDgSFkOks/AmchCEM8 6Q5CZp1bF4r5ZsaydZjoooft9k0Id+qmIPBGUwFq6ZnRgcxlHXEhuV1AcKEwTd7a ycgPTz6v3SC8Ym9EGlIdZIfr8o4PggonnqQq9BSdfSVHtce74qDpGcotYScOmODq bOJTt0BaxwUfnya8EN84MREugOWJhVG09Hq1g6gV+/5W/EIoKwOFuNQr/rtNAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUwTL/eO3q7b+BsuQkwg/pXP7yri0wHwYDVR0j BBgwFoAUcJ5RJRdmJ4Rmd6+QjnbK4h+5VGAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjM3NzYwMS8wLzcwOUU1MTI1MTc2NjI3ODQ2Njc3QUY5MDhFNzZD QUUyMUZCOTU0NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIxRkI5NTQ2MC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTYzMzA4NTkwOTIzNzc2MDEvMC8zMjMwMzMyZTMx MzMzNTJlMzEzMDM0MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzUzODM0MzYzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA8uHaDANBgkqhkiG9w0BAQsFAAOCAQEAmvweJAdpMpphymn00TDP RCT8ZVWOYTg65FbjWzEAirwbVI2OG5zuu4q9YOFqotn+NaOJ4z2I/cvAR06/K1Eg iLHCGiTaJ+2/+xr4EYbq01ZWEDKzc2mkM4RbMkBneLXhDWzWd2F6iF+6tpsfCbi0 VV9zRQU4OHP8EJFeerQK4/bTMWsw4v8ClR/enIbZppS3LnoFUHlwPQl+BkBC3DZ9 Szttp0GXjKq9fUMIE4e570GLPRWxqMwQymWgCcIsNuedW56INvYIHtHOkzeQous/ 9LBMhQ46Pepc9SNt4Q7mJ3uztPCb1pJ/r3+eFV8VgybVBR8d40CWaytK9nkgoCAN sA== -----END CERTIFICATE-----Generated at Fri Apr 17 17:51:46 2026 by rpki-client