$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3230332e3133352e3130352e302f32342d3234203d3e203536303436.roa File: 3230332e3133352e3130352e302f32342d3234203d3e203536303436.roa (raw, json) Hash identifier: TBO7Oh9i58dQeUdge/BLgLnPJuK+BHqgb8xkTX7by9A= Subject key identifier: 55:DD:B1:15:EB:87:7F:A5:98:11:44:68:89:EA:64:05:D8:D1:7B:D0 Certificate issuer: /CN=709E5125176627846677AF908E76CAE21FB95460 Certificate serial: 24C45CEA0F5AEB38BE91D58F15EFE8F7B7BE822B Authority key identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3230332e3133352e3130352e302f32342d3234203d3e203536303436.roa Signing time: Tue 14 Apr 2026 07:29:24 +0000 ROA not before: Tue 14 Apr 2026 07:24:24 +0000 ROA not after: Tue 13 Apr 2027 07:29:24 +0000 asID: 56046 IP address blocks: 203.135.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:c4:5c:ea:0f:5a:eb:38:be:91:d5:8f:15:ef:e8:f7:b7:be:82:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709E5125176627846677AF908E76CAE21FB95460 Validity Not Before: Apr 14 07:24:24 2026 GMT Not After : Apr 13 07:29:24 2027 GMT Subject: CN=55DDB115EB877FA59811446889EA6405D8D17BD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:18:c7:6b:9d:ca:6f:9f:75:fb:60:17:54:cc: 65:90:b5:c9:f7:85:98:28:2f:91:83:01:dd:d5:24: 4c:a2:f0:ef:a6:ff:28:7c:93:3a:3d:a7:5e:94:89: 90:80:f8:9c:b5:35:b7:2c:3f:44:c4:2a:3c:12:4c: 58:08:e5:4d:78:15:43:02:dd:4d:5b:91:07:52:04: ae:5d:b8:94:d5:24:4d:3a:6f:36:1f:5b:e9:00:47: 46:85:c9:e1:d8:a7:32:c5:e1:9e:4c:17:a3:04:99: e6:76:6c:02:ca:cf:c7:ff:f4:20:8a:9d:6d:3a:78: dc:3a:b4:a7:0c:0d:20:cd:0f:1f:a1:f0:d4:19:d1: 0e:ad:08:26:3f:0e:1b:a9:06:33:c7:5a:c0:32:2d: c6:dd:10:56:eb:07:8d:64:44:10:ee:27:d2:b2:d0: c0:de:bd:45:ae:d1:da:a8:c0:f2:13:9d:3f:8c:cf: 67:d7:2a:a3:3e:15:77:3b:29:14:b7:11:b9:43:1e: 9c:09:eb:58:9d:62:89:62:0e:9b:b1:e3:02:83:c5: 56:4c:26:0a:3e:a1:77:fb:db:40:b1:aa:61:05:dd: 99:1f:d5:af:7f:c4:09:e0:e2:03:2d:d0:2d:0d:35: ed:3f:6d:53:9e:d7:3d:96:4f:a6:a2:4d:70:01:bb: bd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:DD:B1:15:EB:87:7F:A5:98:11:44:68:89:EA:64:05:D8:D1:7B:D0 X509v3 Authority Key Identifier: keyid:70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3230332e3133352e3130352e302f32342d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.135.105.0/24 Signature Algorithm: sha256WithRSAEncryption 92:49:57:87:a3:86:7c:af:02:e0:e9:8b:d9:11:30:84:27:e6: cb:bc:e6:13:e0:3e:62:4c:5e:2e:72:3c:eb:20:40:61:4d:b6: 8b:8b:0e:cc:b2:1a:5e:9c:8a:85:b4:7f:63:00:97:f5:a4:45: 90:2d:09:bc:f6:03:16:e6:25:df:d2:be:ab:42:2c:04:08:bc: 55:e9:65:b0:58:1c:80:48:e8:cb:b5:83:65:ff:94:87:50:90: ef:55:7d:b5:43:24:c5:3a:80:43:22:aa:bb:72:57:c7:a8:39: 1e:aa:ff:19:8a:a7:82:90:30:fa:49:e8:d3:33:a7:71:ac:b3: 31:82:88:2a:cc:1b:36:ad:c1:b4:b2:aa:a5:44:32:6a:27:96: 62:4c:92:88:33:02:c2:04:22:de:f2:38:90:a0:df:e1:f0:71: b3:55:6c:6c:d2:bd:18:d0:3f:ed:17:8b:5c:8d:af:6e:3b:c3: 9a:b2:dd:e3:cf:96:39:74:c5:d1:76:21:90:cc:ee:30:ff:25: 8a:bb:67:42:70:c0:38:9c:41:4c:07:80:11:8a:4e:8b:46:77: 0c:f4:65:8b:39:5a:40:9c:60:12:6f:02:f5:4d:7e:55:5d:fc: 7e:3f:39:15:ee:17:4c:85:80:b3:80:2b:d7:9e:ce:41:73:24: 71:5c:aa:3c -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUJMRc6g9a6zi+kdWPFe/o97e+giswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIx RkI5NTQ2MDAeFw0yNjA0MTQwNzI0MjRaFw0yNzA0MTMwNzI5MjRaMDMxMTAvBgNV BAMTKDU1RERCMTE1RUI4NzdGQTU5ODExNDQ2ODg5RUE2NDA1RDhEMTdCRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUGMdrncpvn3X7YBdUzGWQtcn3 hZgoL5GDAd3VJEyi8O+m/yh8kzo9p16UiZCA+Jy1NbcsP0TEKjwSTFgI5U14FUMC 3U1bkQdSBK5duJTVJE06bzYfW+kAR0aFyeHYpzLF4Z5MF6MEmeZ2bALKz8f/9CCK nW06eNw6tKcMDSDNDx+h8NQZ0Q6tCCY/DhupBjPHWsAyLcbdEFbrB41kRBDuJ9Ky 0MDevUWu0dqowPITnT+Mz2fXKqM+FXc7KRS3EblDHpwJ61idYoliDpux4wKDxVZM Jgo+oXf720CxqmEF3Zkf1a9/xAng4gMt0C0NNe0/bVOe1z2WT6aiTXABu73TAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUVd2xFeuHf6WYEURoiepkBdjRe9AwHwYDVR0j BBgwFoAUcJ5RJRdmJ4Rmd6+QjnbK4h+5VGAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjM3NzYwMS8wLzcwOUU1MTI1MTc2NjI3ODQ2Njc3QUY5MDhFNzZD QUUyMUZCOTU0NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIxRkI5NTQ2MC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTYzMzA4NTkwOTIzNzc2MDEvMC8zMjMwMzMyZTMx MzMzNTJlMzEzMDM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMuHaTANBgkqhkiG9w0BAQsFAAOCAQEAkklXh6OGfK8C4OmL2REw hCfmy7zmE+A+YkxeLnI86yBAYU22i4sOzLIaXpyKhbR/YwCX9aRFkC0JvPYDFuYl 39K+q0IsBAi8VellsFgcgEjoy7WDZf+Uh1CQ71V9tUMkxTqAQyKqu3JXx6g5Hqr/ GYqngpAw+kno0zOncayzMYKIKswbNq3BtLKqpUQyaieWYkySiDMCwgQi3vI4kKDf 4fBxs1VsbNK9GNA/7ReLXI2vbjvDmrLd48+WOXTF0XYhkMzuMP8lirtnQnDAOJxB TAeAEYpOi0Z3DPRlizlaQJxgEm8C9U1+VV38fj85Fe4XTIWAs4Ar157OQXMkcVyq PA== -----END CERTIFICATE-----Generated at Fri Apr 17 18:50:21 2026 by rpki-client