$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3230332e3133352e39362e302f32312d3231203d3e203536303436.roa File: 3230332e3133352e39362e302f32312d3231203d3e203536303436.roa (raw, json) Hash identifier: ngkUFhfKIFc0bNmMAHJtN3/FFcR4TkGzTWuBHXq/6mo= Subject key identifier: 46:4C:C4:C7:1A:BD:9C:CC:62:37:A2:16:B9:D7:53:64:48:2D:12:0A Certificate issuer: /CN=709E5125176627846677AF908E76CAE21FB95460 Certificate serial: 31DFDB5EE1EBB9854B25D0A9B1C61C1B4AC09DBA Authority key identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3230332e3133352e39362e302f32312d3231203d3e203536303436.roa Signing time: Tue 14 Apr 2026 07:29:26 +0000 ROA not before: Tue 14 Apr 2026 07:24:26 +0000 ROA not after: Tue 13 Apr 2027 07:29:26 +0000 asID: 56046 IP address blocks: 203.135.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 00:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:df:db:5e:e1:eb:b9:85:4b:25:d0:a9:b1:c6:1c:1b:4a:c0:9d:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709E5125176627846677AF908E76CAE21FB95460 Validity Not Before: Apr 14 07:24:26 2026 GMT Not After : Apr 13 07:29:26 2027 GMT Subject: CN=464CC4C71ABD9CCC6237A216B9D75364482D120A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8d:c2:ad:12:a0:07:4e:13:a7:f5:ae:fd:a8: 3c:bc:68:f3:d2:10:b2:d9:23:61:8c:a4:ad:f4:1a: 22:a1:40:34:f0:5b:20:e8:42:7b:91:b3:c4:c3:d0: c1:51:fd:0a:96:8b:49:f5:33:69:1b:87:1e:8d:61: d3:10:06:51:0a:e2:9f:ec:02:7e:ae:f0:01:16:f5: bd:2d:37:03:e4:61:19:f2:bb:72:d5:8b:e1:48:66: 35:e6:bc:5e:c5:79:c0:e6:d3:68:56:db:9d:51:54: ab:61:85:7e:27:99:38:53:a9:dd:9b:fc:67:36:8e: e9:e4:c2:cd:f1:ca:14:f4:d3:98:7d:d7:6e:5e:a1: a8:50:70:82:64:3b:ec:ff:c2:2e:3b:6b:44:16:53: 48:9d:81:a5:58:67:2b:12:d6:ba:ee:63:56:71:d6: 93:f6:ef:1c:1a:96:fb:77:79:8d:55:05:9d:0d:8b: eb:c2:a3:48:e8:80:98:cf:f8:2b:90:a2:55:f8:3d: 1d:f7:4a:26:c2:39:4e:53:36:6b:a7:f0:b0:ed:cd: 67:5e:b1:67:ab:89:16:0e:d4:57:2b:3d:b9:5a:f6: 3c:81:b9:9e:7b:ca:14:43:24:e7:49:ec:ba:cd:27: 94:68:d9:6f:21:2d:f8:d0:80:67:6e:a9:d2:a5:7e: 15:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:4C:C4:C7:1A:BD:9C:CC:62:37:A2:16:B9:D7:53:64:48:2D:12:0A X509v3 Authority Key Identifier: keyid:70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3230332e3133352e39362e302f32312d3231203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.135.96.0/21 Signature Algorithm: sha256WithRSAEncryption 9b:e6:2b:2e:3d:20:1a:34:17:36:47:53:d4:22:4a:09:5b:76: 3e:72:4d:30:a4:a4:52:cb:c7:7a:90:3a:fd:87:61:d1:be:88: 21:28:1f:69:a7:c6:b4:01:02:db:a0:90:70:d7:92:a4:18:d3: 04:fb:0e:d8:d1:44:3a:d1:4c:b0:34:7a:38:b8:2b:44:a1:5e: 18:20:33:c1:cd:1c:5b:fd:ab:bd:68:1d:e4:d2:58:2c:9a:db: e9:82:74:a0:63:e5:ff:af:f9:3f:31:b7:a7:a4:c5:bb:a4:42: 61:36:8b:79:b0:0f:41:d3:ad:f4:65:6b:4a:85:49:9a:14:96: 00:bd:7c:63:02:09:51:42:c4:15:5b:bc:bb:f3:04:89:3c:c5: 66:00:bf:c9:91:89:4f:d1:2d:32:12:ae:8b:a3:d3:4a:da:54: 25:7b:80:cb:82:1e:02:3c:2b:b6:69:0d:17:68:d3:45:09:de: b3:c2:44:0e:cc:43:c2:e4:f3:19:d9:4c:e5:04:56:dc:8f:3e: 24:b6:4e:f9:10:17:36:af:57:87:d1:64:c4:c8:e6:50:35:5e: 74:d7:a4:64:75:32:a7:22:5e:c0:7c:78:42:f6:fd:ea:31:6f: 78:cf:ec:16:b7:32:2c:13:80:66:13:df:de:06:d9:e6:5e:f3: 41:1c:b1:b7 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUMd/bXuHruYVLJdCpscYcG0rAnbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIx RkI5NTQ2MDAeFw0yNjA0MTQwNzI0MjZaFw0yNzA0MTMwNzI5MjZaMDMxMTAvBgNV BAMTKDQ2NENDNEM3MUFCRDlDQ0M2MjM3QTIxNkI5RDc1MzY0NDgyRDEyMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxjcKtEqAHThOn9a79qDy8aPPS ELLZI2GMpK30GiKhQDTwWyDoQnuRs8TD0MFR/QqWi0n1M2kbhx6NYdMQBlEK4p/s An6u8AEW9b0tNwPkYRnyu3LVi+FIZjXmvF7FecDm02hW251RVKthhX4nmThTqd2b /Gc2junkws3xyhT005h9125eoahQcIJkO+z/wi47a0QWU0idgaVYZysS1rruY1Zx 1pP27xwalvt3eY1VBZ0Ni+vCo0jogJjP+CuQolX4PR33SibCOU5TNmun8LDtzWde sWeriRYO1FcrPbla9jyBuZ57yhRDJOdJ7LrNJ5Ro2W8hLfjQgGduqdKlfhWRAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQURkzExxq9nMxiN6IWuddTZEgtEgowHwYDVR0j BBgwFoAUcJ5RJRdmJ4Rmd6+QjnbK4h+5VGAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjM3NzYwMS8wLzcwOUU1MTI1MTc2NjI3ODQ2Njc3QUY5MDhFNzZD QUUyMUZCOTU0NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIxRkI5NTQ2MC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjMzMDg1OTA5MjM3NzYwMS8wLzMyMzAzMzJlMzEz MzM1MmUzOTM2MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA8uHYDANBgkqhkiG9w0BAQsFAAOCAQEAm+YrLj0gGjQXNkdT1CJKCVt2 PnJNMKSkUsvHepA6/Ydh0b6IISgfaafGtAEC26CQcNeSpBjTBPsO2NFEOtFMsDR6 OLgrRKFeGCAzwc0cW/2rvWgd5NJYLJrb6YJ0oGPl/6/5PzG3p6TFu6RCYTaLebAP QdOt9GVrSoVJmhSWAL18YwIJUULEFVu8u/MEiTzFZgC/yZGJT9EtMhKui6PTStpU JXuAy4IeAjwrtmkNF2jTRQnes8JEDsxDwuTzGdlM5QRW3I8+JLZO+RAXNq9Xh9Fk xMjmUDVedNekZHUypyJewHx4Qvb96jFveM/sFrcyLBOAZhPf3gbZ5l7zQRyxtw== -----END CERTIFICATE-----Generated at Fri Apr 17 16:47:59 2026 by rpki-client