$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3230332e3133352e3131322e302f32312d3231203d3e203538343631.roa File: 3230332e3133352e3131322e302f32312d3231203d3e203538343631.roa (raw, json) Hash identifier: NUO1nMO021I1S5c1sJbtenOhmN0TKvnC956i0tIBsG4= Subject key identifier: 29:04:72:42:95:AE:AC:6C:75:E3:E0:BB:6F:66:C5:4E:E1:0E:30:D3 Certificate issuer: /CN=709E5125176627846677AF908E76CAE21FB95460 Certificate serial: 34C8789CBDEAB4A34659459B697F51F28DC5E9CA Authority key identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3230332e3133352e3131322e302f32312d3231203d3e203538343631.roa Signing time: Tue 14 Apr 2026 07:29:25 +0000 ROA not before: Tue 14 Apr 2026 07:24:25 +0000 ROA not after: Tue 13 Apr 2027 07:29:25 +0000 asID: 58461 IP address blocks: 203.135.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 00:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:c8:78:9c:bd:ea:b4:a3:46:59:45:9b:69:7f:51:f2:8d:c5:e9:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709E5125176627846677AF908E76CAE21FB95460 Validity Not Before: Apr 14 07:24:25 2026 GMT Not After : Apr 13 07:29:25 2027 GMT Subject: CN=2904724295AEAC6C75E3E0BB6F66C54EE10E30D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:22:62:1c:a2:fd:66:d7:c9:4d:2c:89:be:e2: 59:3b:3f:5f:34:4d:ad:ca:44:8f:10:57:5d:fa:18: 70:c9:2d:d9:c6:f7:41:55:bd:1a:fb:ca:76:c1:43: b2:c1:91:19:00:c2:1b:4c:a3:4b:db:89:5d:35:02: 5a:eb:fc:51:7f:79:f7:8d:86:95:51:00:a0:46:c4: 5d:f6:ef:ab:9c:b5:e0:bf:bb:0a:c8:60:28:d2:0d: ed:0b:b0:fa:7d:26:67:7c:46:ef:d3:9c:85:7a:59: a2:f0:e3:a5:00:57:fe:fc:ec:b7:a8:ab:e8:2c:0b: b1:62:72:b9:2d:c8:b4:7c:6a:dd:b7:25:8e:33:54: 16:19:0c:95:50:99:0c:64:65:40:b4:58:e0:11:aa: e2:d4:a7:22:94:8c:2f:61:93:dc:ac:c4:eb:ff:c5: 16:43:ec:d7:80:b2:0e:24:fa:2e:c3:2b:02:88:06: f2:a4:52:ec:09:ff:52:5a:be:96:6f:d3:0a:6d:cb: 14:8b:fb:fa:0d:10:7c:ad:51:e3:17:f7:b3:51:f9: 60:4a:5a:8a:46:3f:e8:8f:2a:63:74:b9:86:7e:67: 8a:f1:45:5a:92:ba:52:e1:b8:77:2d:19:5b:4c:d8: 28:9b:70:79:eb:23:60:d0:27:7a:3c:76:08:c9:44: 44:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:04:72:42:95:AE:AC:6C:75:E3:E0:BB:6F:66:C5:4E:E1:0E:30:D3 X509v3 Authority Key Identifier: keyid:70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3230332e3133352e3131322e302f32312d3231203d3e203538343631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.135.112.0/21 Signature Algorithm: sha256WithRSAEncryption 97:99:40:54:3d:d4:ee:8f:34:2b:d4:4f:e2:34:4f:f8:1a:06: 9a:83:e1:2a:26:37:0f:23:85:cd:19:be:5c:96:33:74:59:c1: 84:15:53:5c:ed:13:9e:f1:70:c7:e2:c3:85:3c:95:c0:f9:ec: c7:46:1b:89:0d:3c:77:73:b6:bd:63:a0:43:b0:54:89:06:78: f8:1f:bc:73:55:2a:8e:c6:7a:6c:02:6a:3b:fc:c6:ee:9f:3c: e6:ba:0c:60:fe:eb:0c:da:18:7e:19:28:21:b3:53:9b:d6:ae: 5a:50:03:4b:70:7d:28:f1:1b:45:64:6a:94:dd:06:4f:92:88: 2c:d2:84:e1:10:6f:ad:7b:a4:01:49:28:7e:d7:2e:27:ec:4e: f5:ff:44:d9:1d:02:7c:11:c5:c7:eb:af:a7:6c:a0:9c:18:39: a2:c0:18:37:90:07:dc:4f:d0:a7:b6:4a:b5:4c:aa:1c:73:2d: c2:59:20:01:2e:83:3a:7c:4e:1b:98:85:93:f3:02:0d:bd:ad: ef:cd:27:47:6f:87:5f:e8:89:4d:48:dc:89:59:ab:97:38:1e: 7f:8a:03:c4:9f:37:3c:da:5d:f6:ea:58:0a:13:07:65:78:85: dd:5e:ae:8a:04:2a:03:4e:0a:04:02:7b:cd:84:01:5b:37:81: e6:dd:ed:6f -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUNMh4nL3qtKNGWUWbaX9R8o3F6cowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIx RkI5NTQ2MDAeFw0yNjA0MTQwNzI0MjVaFw0yNzA0MTMwNzI5MjVaMDMxMTAvBgNV BAMTKDI5MDQ3MjQyOTVBRUFDNkM3NUUzRTBCQjZGNjZDNTRFRTEwRTMwRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSImIcov1m18lNLIm+4lk7P180 Ta3KRI8QV136GHDJLdnG90FVvRr7ynbBQ7LBkRkAwhtMo0vbiV01Alrr/FF/efeN hpVRAKBGxF3276ucteC/uwrIYCjSDe0LsPp9Jmd8Ru/TnIV6WaLw46UAV/787Leo q+gsC7FicrktyLR8at23JY4zVBYZDJVQmQxkZUC0WOARquLUpyKUjC9hk9ysxOv/ xRZD7NeAsg4k+i7DKwKIBvKkUuwJ/1JavpZv0wptyxSL+/oNEHytUeMX97NR+WBK WopGP+iPKmN0uYZ+Z4rxRVqSulLhuHctGVtM2CibcHnrI2DQJ3o8dgjJRET/AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUKQRyQpWurGx14+C7b2bFTuEOMNMwHwYDVR0j BBgwFoAUcJ5RJRdmJ4Rmd6+QjnbK4h+5VGAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjM3NzYwMS8wLzcwOUU1MTI1MTc2NjI3ODQ2Njc3QUY5MDhFNzZD QUUyMUZCOTU0NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIxRkI5NTQ2MC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTYzMzA4NTkwOTIzNzc2MDEvMC8zMjMwMzMyZTMx MzMzNTJlMzEzMTMyMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzUzODM0MzYzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA8uHcDANBgkqhkiG9w0BAQsFAAOCAQEAl5lAVD3U7o80K9RP4jRP +BoGmoPhKiY3DyOFzRm+XJYzdFnBhBVTXO0TnvFwx+LDhTyVwPnsx0YbiQ08d3O2 vWOgQ7BUiQZ4+B+8c1UqjsZ6bAJqO/zG7p885roMYP7rDNoYfhkoIbNTm9auWlAD S3B9KPEbRWRqlN0GT5KILNKE4RBvrXukAUkoftcuJ+xO9f9E2R0CfBHFx+uvp2yg nBg5osAYN5AH3E/Qp7ZKtUyqHHMtwlkgAS6DOnxOG5iFk/MCDb2t780nR2+HX+iJ TUjciVmrlzgef4oDxJ83PNpd9upYChMHZXiF3V6uigQqA04KBAJ7zYQBWzeB5t3t bw== -----END CERTIFICATE-----Generated at Fri Apr 17 18:24:41 2026 by rpki-client