$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e39362e302f32302d3234203d3e203231383539.roa File: 3131342e3131342e39362e302f32302d3234203d3e203231383539.roa (raw, json) Hash identifier: Ah1hAptQgQx/TDu32iuzbvTZnvkTCVkVVLy9/9WPaaU= Subject key identifier: CC:7D:DD:DD:43:81:97:2E:7F:00:87:37:1D:27:29:F0:D7:BD:FB:31 Certificate issuer: /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8 Certificate serial: 2010C3219DD52FCC17DF433F7DBAA04E3AC2C166 Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e39362e302f32302d3234203d3e203231383539.roa Signing time: Thu 16 Apr 2026 00:19:21 +0000 ROA not before: Thu 16 Apr 2026 00:14:21 +0000 ROA not after: Thu 15 Apr 2027 00:19:21 +0000 asID: 21859 IP address blocks: 114.114.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 12:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:10:c3:21:9d:d5:2f:cc:17:df:43:3f:7d:ba:a0:4e:3a:c2:c1:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8 Validity Not Before: Apr 16 00:14:21 2026 GMT Not After : Apr 15 00:19:21 2027 GMT Subject: CN=CC7DDDDD4381972E7F0087371D2729F0D7BDFB31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:36:58:9d:61:47:b9:b6:ed:ae:f1:08:0a:d9: c3:43:be:7a:48:0b:93:0e:97:f3:92:89:8b:18:70: b7:50:e5:17:2f:bd:d1:6a:20:8d:60:9f:c2:03:60: 60:f5:52:e0:4c:8e:21:c1:8f:4a:01:76:c7:39:90: ee:72:d4:0b:bd:92:fa:3d:3c:69:a5:52:8c:75:2d: e6:6f:84:d6:d7:cc:a3:84:12:07:91:47:45:61:86: 07:51:5c:63:ff:0f:a5:24:27:89:bf:15:cd:04:f5: 91:f8:04:7e:db:60:b7:95:17:0b:ac:a2:6b:c3:ac: af:b6:c5:03:85:e2:1f:93:69:89:7b:2a:3b:50:a1: 0b:5b:ac:2e:09:d2:b7:2a:19:f4:0d:4a:e0:a8:6b: ec:3c:1b:15:d2:85:01:8a:e2:87:c6:0c:75:7e:64: 3c:00:15:e2:df:3a:e1:04:59:9e:e9:da:8f:c8:9c: 37:e2:22:31:eb:52:71:2a:ba:e7:be:48:34:24:34: 37:8f:af:bb:4d:a4:a2:b3:a3:ff:3a:93:d7:55:95: 36:c3:c5:97:30:5c:cc:fe:41:c5:94:9a:a7:3d:ed: a9:ed:d3:84:35:3c:7e:14:92:03:11:7e:90:ca:09: 6c:0a:6b:b6:d2:11:0c:0e:b4:97:43:3c:2f:67:46: 0d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:7D:DD:DD:43:81:97:2E:7F:00:87:37:1D:27:29:F0:D7:BD:FB:31 X509v3 Authority Key Identifier: keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e39362e302f32302d3234203d3e203231383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.114.96.0/20 Signature Algorithm: sha256WithRSAEncryption 4b:a0:ab:a2:9a:2a:55:2d:94:c0:67:e8:d2:41:ea:61:1d:b2: 45:c8:8a:83:e0:5d:5d:6d:c7:35:38:9f:b2:77:84:52:fc:af: 6f:bc:b7:4c:8f:bf:59:10:da:8a:5e:86:c7:64:63:9b:d2:cf: 1c:c0:2e:58:26:6f:f3:c2:81:72:ed:74:aa:b6:5b:b0:59:e5: fe:b0:d0:60:5d:47:00:1f:79:ed:c6:49:c7:12:77:d0:ff:4c: f7:9e:a3:17:2f:91:3a:74:70:e2:d9:88:61:0f:b6:10:5d:9f: 01:81:6b:70:0e:5b:53:2b:85:29:8f:e8:26:7b:fe:9c:30:6b: c1:61:35:94:42:1b:2c:6f:fd:80:80:99:2a:6c:b2:f5:4a:a9: a1:c9:d3:1c:e1:5a:8b:87:9a:ac:2a:50:af:b6:d4:91:4c:0e: 27:a2:4b:cf:f0:bc:09:36:28:e0:ea:e5:a6:db:bc:8c:9a:22: 7a:e5:ef:35:e9:6d:fe:76:be:c5:04:cc:b1:69:e1:13:94:ae: ef:63:2c:76:87:d7:38:1c:95:f4:43:34:a1:d5:92:e8:11:00: c9:42:b9:12:b5:90:6e:ed:c7:04:41:6e:aa:47:be:5c:b7:c5: ac:17:83:41:d2:e6:61:72:a8:bf:b4:43:ed:85:1d:7a:62:7c: 84:ba:0b:38 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUIBDDIZ3VL8wX30M/fbqgTjrCwWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhCNEZDMjlGRUYyMEFERkFGQjI0QTZEQUY1RjQ0MTUy MjZFRjhBODAeFw0yNjA0MTYwMDE0MjFaFw0yNzA0MTUwMDE5MjFaMDMxMTAvBgNV BAMTKENDN0RERERENDM4MTk3MkU3RjAwODczNzFEMjcyOUYwRDdCREZCMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuNlidYUe5tu2u8QgK2cNDvnpI C5MOl/OSiYsYcLdQ5RcvvdFqII1gn8IDYGD1UuBMjiHBj0oBdsc5kO5y1Au9kvo9 PGmlUox1LeZvhNbXzKOEEgeRR0VhhgdRXGP/D6UkJ4m/Fc0E9ZH4BH7bYLeVFwus omvDrK+2xQOF4h+TaYl7KjtQoQtbrC4J0rcqGfQNSuCoa+w8GxXShQGK4ofGDHV+ ZDwAFeLfOuEEWZ7p2o/InDfiIjHrUnEquue+SDQkNDePr7tNpKKzo/86k9dVlTbD xZcwXMz+QcWUmqc97ant04Q1PH4UkgMRfpDKCWwKa7bSEQwOtJdDPC9nRg2BAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUzH3d3UOBly5/AIc3HScp8Ne9+zEwHwYDVR0j BBgwFoAU+LT8Kf7yCt+vskptr19EFSJu+KgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjU4Njc2NDAxNDg0NTk1NS8wL0Y4QjRGQzI5RkVGMjBBREZBRkIyNEE2REFGNUY0 NDE1MjI2RUY4QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjhCNEZDMjlGRUYyMEFERkFGQjI0QTZEQUY1RjQ0MTUyMjZFRjhBOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjU4Njc2NDAxNDg0NTk1NS8wLzMxMzEzNDJlMzEz MTM0MmUzOTM2MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzMTM4MzUzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBHJyYDANBgkqhkiG9w0BAQsFAAOCAQEAS6CropoqVS2UwGfo0kHqYR2y RciKg+BdXW3HNTifsneEUvyvb7y3TI+/WRDail6Gx2Rjm9LPHMAuWCZv88KBcu10 qrZbsFnl/rDQYF1HAB957cZJxxJ30P9M956jFy+ROnRw4tmIYQ+2EF2fAYFrcA5b UyuFKY/oJnv+nDBrwWE1lEIbLG/9gICZKmyy9UqpocnTHOFai4earCpQr7bUkUwO J6JLz/C8CTYo4Orlptu8jJoieuXvNelt/na+xQTMsWnhE5Su72MsdofXOByV9EM0 odWS6BEAyUK5ErWQbu3HBEFuqke+XLfFrBeDQdLmYXKov7RD7YUdemJ8hLoLOA== -----END CERTIFICATE-----Generated at Fri Apr 17 17:27:57 2026 by rpki-client