$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3230332e3133352e3131312e302f32342d3234203d3e203536303436.roa File: 3230332e3133352e3131312e302f32342d3234203d3e203536303436.roa (raw, json) Hash identifier: +34kw5HV2z2eHoWYV+KhRIwd91Ghwjh0gUsrg/w4kQs= Subject key identifier: E5:BD:18:2A:B0:D9:BB:E5:0E:68:F5:13:31:33:70:1A:1E:24:E6:EA Certificate issuer: /CN=709E5125176627846677AF908E76CAE21FB95460 Certificate serial: 04C05FAD48D553EEDBC4F1930C91542A48F5F7B1 Authority key identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3230332e3133352e3131312e302f32342d3234203d3e203536303436.roa Signing time: Tue 14 Apr 2026 07:29:24 +0000 ROA not before: Tue 14 Apr 2026 07:24:24 +0000 ROA not after: Tue 13 Apr 2027 07:29:24 +0000 asID: 56046 IP address blocks: 203.135.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 00:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c0:5f:ad:48:d5:53:ee:db:c4:f1:93:0c:91:54:2a:48:f5:f7:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709E5125176627846677AF908E76CAE21FB95460 Validity Not Before: Apr 14 07:24:24 2026 GMT Not After : Apr 13 07:29:24 2027 GMT Subject: CN=E5BD182AB0D9BBE50E68F5133133701A1E24E6EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:84:63:ce:d7:68:05:37:b3:63:c3:91:28:f5: 05:b3:3b:1f:cb:27:fc:59:f8:c7:0c:8f:7d:f6:fe: b1:34:61:d8:b6:5a:e8:12:ca:9a:34:94:2e:fc:b8: d6:61:5d:42:40:b3:0e:d0:4e:43:f1:0e:97:4e:2c: ed:09:22:a1:db:77:15:51:63:a7:94:fb:d3:bb:a1: 87:9e:d0:a3:13:d6:0d:ce:0e:e7:4c:93:44:3f:92: 17:66:77:55:09:7b:01:3d:f4:e3:f9:a1:d1:65:dd: 31:d7:4c:0d:c8:bd:5e:99:8d:d2:af:67:1d:dd:d2: 34:41:dc:fa:30:10:7e:6a:db:c1:c6:bf:e3:cb:87: 8f:49:b3:ed:2f:2c:2a:dd:5d:70:70:5a:5c:9e:2a: df:58:32:93:6e:20:9f:31:39:19:1a:8d:e6:9e:63: 8d:e9:54:8e:d8:a0:96:35:44:15:3b:a4:73:d4:f7: 3c:8c:d0:e9:fd:2d:2d:02:db:8c:99:f4:34:6d:96: 25:6a:bf:63:8c:96:27:2e:1c:6b:fc:ee:75:66:4e: d8:31:2c:d7:66:ba:b6:d4:4a:20:ec:2a:0b:89:4a: 1a:5b:97:18:ba:31:94:16:dc:07:68:6a:00:94:a9: ad:1e:6c:ae:70:44:c2:ef:24:64:0b:7a:00:7a:11: 48:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:BD:18:2A:B0:D9:BB:E5:0E:68:F5:13:31:33:70:1A:1E:24:E6:EA X509v3 Authority Key Identifier: keyid:70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3230332e3133352e3131312e302f32342d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.135.111.0/24 Signature Algorithm: sha256WithRSAEncryption 87:d9:8c:ce:00:61:7a:8a:d8:7d:5c:97:9e:b4:9f:43:46:73: 36:68:90:fd:c9:08:cd:6e:91:e6:77:dd:c0:d4:6d:13:27:c4: 02:10:6f:33:10:27:6a:8a:85:dd:8f:c0:ff:ac:a0:57:a9:7c: 8f:89:ff:33:7c:bb:a2:d0:ca:9a:50:8d:30:e7:47:93:9b:7a: 78:64:06:3c:29:b6:e0:1c:89:ea:90:2b:b9:d8:39:2f:a5:c8: 60:8d:fc:66:78:e1:21:dc:79:ae:0b:df:a2:73:0e:9f:1c:40: 8d:65:b1:43:58:b4:a2:bb:36:da:29:f7:95:a1:69:8c:1e:f9: 71:59:59:ee:d7:5c:28:40:cc:20:4f:b0:38:52:05:65:ce:5d: 9b:de:87:4b:07:4a:cb:25:b1:f4:56:32:70:4d:30:93:f9:8b: 0e:19:2a:b1:aa:85:04:d4:5b:4c:f8:4b:7d:c4:3f:f0:cb:02: c2:57:90:bb:16:f6:de:96:d4:2e:65:98:d2:de:73:00:b0:1c: f9:7a:c4:15:c4:a0:f5:e7:c7:9e:f3:cb:47:10:37:d9:42:55: 27:cf:19:35:c5:44:ef:29:5c:c4:95:d0:ea:58:70:a6:6b:0f: d9:48:ec:26:cb:61:b1:88:93:7e:5f:30:62:d4:b7:30:b8:a2: a3:c9:f1:db -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUBMBfrUjVU+7bxPGTDJFUKkj197EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIx RkI5NTQ2MDAeFw0yNjA0MTQwNzI0MjRaFw0yNzA0MTMwNzI5MjRaMDMxMTAvBgNV BAMTKEU1QkQxODJBQjBEOUJCRTUwRTY4RjUxMzMxMzM3MDFBMUUyNEU2RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCShGPO12gFN7Njw5Eo9QWzOx/L J/xZ+McMj332/rE0Ydi2WugSypo0lC78uNZhXUJAsw7QTkPxDpdOLO0JIqHbdxVR Y6eU+9O7oYee0KMT1g3ODudMk0Q/khdmd1UJewE99OP5odFl3THXTA3IvV6ZjdKv Zx3d0jRB3PowEH5q28HGv+PLh49Js+0vLCrdXXBwWlyeKt9YMpNuIJ8xORkajeae Y43pVI7YoJY1RBU7pHPU9zyM0On9LS0C24yZ9DRtliVqv2OMlicuHGv87nVmTtgx LNdmurbUSiDsKguJShpblxi6MZQW3AdoagCUqa0ebK5wRMLvJGQLegB6EUgHAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU5b0YKrDZu+UOaPUTMTNwGh4k5uowHwYDVR0j BBgwFoAUcJ5RJRdmJ4Rmd6+QjnbK4h+5VGAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjM3NzYwMS8wLzcwOUU1MTI1MTc2NjI3ODQ2Njc3QUY5MDhFNzZD QUUyMUZCOTU0NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIxRkI5NTQ2MC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTYzMzA4NTkwOTIzNzc2MDEvMC8zMjMwMzMyZTMx MzMzNTJlMzEzMTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMuHbzANBgkqhkiG9w0BAQsFAAOCAQEAh9mMzgBheorYfVyXnrSf Q0ZzNmiQ/ckIzW6R5nfdwNRtEyfEAhBvMxAnaoqF3Y/A/6ygV6l8j4n/M3y7otDK mlCNMOdHk5t6eGQGPCm24ByJ6pArudg5L6XIYI38ZnjhIdx5rgvfonMOnxxAjWWx Q1i0ors22in3laFpjB75cVlZ7tdcKEDMIE+wOFIFZc5dm96HSwdKyyWx9FYycE0w k/mLDhkqsaqFBNRbTPhLfcQ/8MsCwleQuxb23pbULmWY0t5zALAc+XrEFcSg9efH nvPLRxA32UJVJ88ZNcVE7ylcxJXQ6lhwpmsP2UjsJsthsYiTfl8wYtS3MLiio8nx 2w== -----END CERTIFICATE-----Generated at Fri Apr 17 17:51:58 2026 by rpki-client