$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3230332e3133352e3130382e302f32342d3234203d3e203536303436.roa File: 3230332e3133352e3130382e302f32342d3234203d3e203536303436.roa (raw, json) Hash identifier: 38TgIBqQHAA96dS2lwsMRBNdMfnRErFfNMHETSVGQx4= Subject key identifier: 6B:1C:58:C4:2C:2C:7F:2B:DA:7A:D4:E9:03:A4:EC:E4:E6:88:D7:BB Certificate issuer: /CN=709E5125176627846677AF908E76CAE21FB95460 Certificate serial: 30BB64429326F4956870C09C66B6D7DAB293FE5E Authority key identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3230332e3133352e3130382e302f32342d3234203d3e203536303436.roa Signing time: Tue 14 Apr 2026 07:29:25 +0000 ROA not before: Tue 14 Apr 2026 07:24:25 +0000 ROA not after: Tue 13 Apr 2027 07:29:25 +0000 asID: 56046 IP address blocks: 203.135.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:bb:64:42:93:26:f4:95:68:70:c0:9c:66:b6:d7:da:b2:93:fe:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709E5125176627846677AF908E76CAE21FB95460 Validity Not Before: Apr 14 07:24:25 2026 GMT Not After : Apr 13 07:29:25 2027 GMT Subject: CN=6B1C58C42C2C7F2BDA7AD4E903A4ECE4E688D7BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:78:37:d9:fc:f8:28:8a:27:06:6f:4f:ef:32: e0:70:2f:c7:72:c5:e3:4c:56:0f:ee:1b:18:87:9b: 49:3c:5c:e5:35:b3:b9:13:ec:1f:5c:fd:2e:68:ec: 98:86:c6:dd:c8:da:0c:a7:e4:88:ca:06:71:e7:4c: 0a:58:0c:b0:94:27:e9:cf:e0:a0:f1:3a:bb:92:12: 9a:a5:dd:43:a4:43:cf:26:ee:08:d8:bc:e8:8e:f2: 1e:2d:d2:96:f6:f7:81:bb:5e:de:dc:d0:05:bb:64: ac:10:49:02:51:53:6f:b5:96:cd:89:66:70:cf:75: 06:90:c7:65:22:3e:d1:a0:65:c5:5e:12:2b:6f:d5: df:60:53:49:1f:9d:f6:ca:3b:ea:60:83:23:29:38: f4:19:9f:83:06:b1:46:45:fb:a9:f4:7c:3e:3f:cc: 1e:33:d2:09:0f:db:a5:49:41:aa:2b:59:30:5b:ed: c2:39:6d:cc:74:6f:c5:b5:7e:8e:89:16:0d:40:94: aa:bd:54:e6:11:fb:70:e2:d2:e4:c4:d4:6d:4c:9c: be:17:21:d5:a4:27:22:4e:bd:18:94:4e:43:d2:9f: 05:3b:ee:f0:15:49:71:4f:96:bb:e8:1e:f0:81:ca: 79:6c:9f:6f:e5:9d:e9:dd:58:08:45:11:47:5c:c8: 94:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1C:58:C4:2C:2C:7F:2B:DA:7A:D4:E9:03:A4:EC:E4:E6:88:D7:BB X509v3 Authority Key Identifier: keyid:70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3230332e3133352e3130382e302f32342d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.135.108.0/24 Signature Algorithm: sha256WithRSAEncryption 75:a7:4f:e3:20:3a:59:12:e2:72:c7:f7:9b:09:8e:fe:94:06: 4d:9f:f7:ef:ae:08:1e:d4:d6:45:9f:89:b9:44:05:75:8a:fd: 6a:90:3a:d2:3b:bf:6e:7c:0d:a8:c0:f8:0e:30:5f:1b:5f:16: ab:18:44:3f:32:b6:77:fa:db:3d:01:06:c4:95:57:bb:79:ce: d1:15:bd:07:5a:6f:44:5c:9a:d1:65:58:7f:a4:4c:f7:61:06: af:2c:90:dc:b2:94:09:75:e5:17:3a:8a:6d:cc:3b:a8:d0:c8: 54:ae:4b:c7:b1:65:0d:11:a2:cb:e2:04:b7:46:5f:3f:86:eb: a3:eb:90:cd:18:26:55:55:5e:1f:75:8d:7d:ff:0d:7f:56:bb: bf:f9:e0:c1:cb:ea:db:de:cb:26:06:ce:84:32:1d:d7:7c:d7: 6c:0a:d7:1e:7a:de:7c:b7:25:47:b1:41:17:f1:b0:99:0c:5a: 5d:8f:33:b9:9c:48:b2:0a:06:fc:26:3c:56:94:51:b0:47:ef: 16:eb:fc:08:bc:51:c8:90:a9:b3:38:75:46:f6:6c:a7:24:7e: f1:89:37:b7:d6:65:f0:dc:a5:f0:77:b0:ce:36:ac:46:a0:74: 71:75:20:e0:35:74:bc:49:4f:bb:71:47:a9:65:22:0b:25:f8: f2:7d:fb:c9 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUMLtkQpMm9JVocMCcZrbX2rKT/l4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIx RkI5NTQ2MDAeFw0yNjA0MTQwNzI0MjVaFw0yNzA0MTMwNzI5MjVaMDMxMTAvBgNV BAMTKDZCMUM1OEM0MkMyQzdGMkJEQTdBRDRFOTAzQTRFQ0U0RTY4OEQ3QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqeDfZ/PgoiicGb0/vMuBwL8dy xeNMVg/uGxiHm0k8XOU1s7kT7B9c/S5o7JiGxt3I2gyn5IjKBnHnTApYDLCUJ+nP 4KDxOruSEpql3UOkQ88m7gjYvOiO8h4t0pb294G7Xt7c0AW7ZKwQSQJRU2+1ls2J ZnDPdQaQx2UiPtGgZcVeEitv1d9gU0kfnfbKO+pggyMpOPQZn4MGsUZF+6n0fD4/ zB4z0gkP26VJQaorWTBb7cI5bcx0b8W1fo6JFg1AlKq9VOYR+3Di0uTE1G1MnL4X IdWkJyJOvRiUTkPSnwU77vAVSXFPlrvoHvCBynlsn2/lnendWAhFEUdcyJQxAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUaxxYxCwsfyvaetTpA6Ts5OaI17swHwYDVR0j BBgwFoAUcJ5RJRdmJ4Rmd6+QjnbK4h+5VGAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjM3NzYwMS8wLzcwOUU1MTI1MTc2NjI3ODQ2Njc3QUY5MDhFNzZD QUUyMUZCOTU0NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIxRkI5NTQ2MC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTYzMzA4NTkwOTIzNzc2MDEvMC8zMjMwMzMyZTMx MzMzNTJlMzEzMDM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMuHbDANBgkqhkiG9w0BAQsFAAOCAQEAdadP4yA6WRLicsf3mwmO /pQGTZ/3764IHtTWRZ+JuUQFdYr9apA60ju/bnwNqMD4DjBfG18WqxhEPzK2d/rb PQEGxJVXu3nO0RW9B1pvRFya0WVYf6RM92EGryyQ3LKUCXXlFzqKbcw7qNDIVK5L x7FlDRGiy+IEt0ZfP4bro+uQzRgmVVVeH3WNff8Nf1a7v/ngwcvq297LJgbOhDId 13zXbArXHnrefLclR7FBF/GwmQxaXY8zuZxIsgoG/CY8VpRRsEfvFuv8CLxRyJCp szh1RvZspyR+8Yk3t9Zl8Nyl8HewzjasRqB0cXUg4DV0vElPu3FHqWUiCyX48n37 yQ== -----END CERTIFICATE-----Generated at Fri Apr 17 19:18:02 2026 by rpki-client