$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3231392e3233322e3132382e302f31392d3332203d3e20313337373935.roa File: 3231392e3233322e3132382e302f31392d3332203d3e20313337373935.roa (raw, json) Hash identifier: tVD4bz8KmaurUHu/A7Es1Bli7Y3sTy5tzURf1uPAf1g= Subject key identifier: 87:33:3C:4A:E9:FA:33:4F:B7:90:4D:2C:93:D9:1B:DD:EF:55:2D:DE Certificate issuer: /CN=94A04007C18934EEFD779445BA5349A8FBDB19DF Certificate serial: 767BBA2EA971F10A2672BF8AF1B6113529DBDB85 Authority key identifier: 94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3231392e3233322e3132382e302f31392d3332203d3e20313337373935.roa Signing time: Wed 15 Apr 2026 07:40:58 +0000 ROA not before: Wed 15 Apr 2026 07:35:58 +0000 ROA not after: Wed 14 Apr 2027 07:40:58 +0000 asID: 137795 IP address blocks: 219.232.128.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:7b:ba:2e:a9:71:f1:0a:26:72:bf:8a:f1:b6:11:35:29:db:db:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94A04007C18934EEFD779445BA5349A8FBDB19DF Validity Not Before: Apr 15 07:35:58 2026 GMT Not After : Apr 14 07:40:58 2027 GMT Subject: CN=87333C4AE9FA334FB7904D2C93D91BDDEF552DDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2e:5d:90:b5:83:e3:b4:86:a0:9b:e8:53:63: 48:bf:37:42:b5:b2:6d:9c:0a:c6:08:b3:9a:57:4d: ce:fa:0a:cc:e0:a3:16:6e:90:98:32:df:dd:9e:2e: ba:be:e5:fa:6f:ef:41:8b:0f:10:80:ce:e9:7c:ce: 5f:12:57:06:55:0b:b9:08:66:10:b6:4c:9d:dc:ff: ea:41:92:a9:d5:bf:4d:aa:92:02:cb:d7:e1:41:69: 85:69:cc:bd:f6:5c:2d:c3:35:74:6d:bb:15:5b:e2: 9f:59:e4:21:6a:2e:39:96:a2:17:ed:59:d7:a1:f8: 0a:bd:cd:b4:0a:2c:3f:77:0e:e0:2b:29:9f:71:be: 90:11:58:7d:f4:d5:94:df:95:eb:13:c0:ec:bd:4d: 15:c1:75:32:2a:70:a6:6d:01:ce:96:86:5c:f6:9f: 4c:69:12:ac:7d:f7:11:ee:03:55:37:82:df:bf:c4: ac:95:a6:16:55:18:bc:1e:6a:c9:bd:05:95:a8:03: 03:c4:7e:68:d2:bb:30:1e:61:3b:3d:14:ec:33:47: b2:d2:da:bf:46:43:b1:98:f4:cd:fe:5f:5f:26:7b: a9:ff:1c:75:e7:fc:ee:22:3f:55:48:7c:c1:ef:0f: 44:0b:cf:cb:cd:97:7c:f1:ed:33:71:7d:40:e8:1d: 20:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:33:3C:4A:E9:FA:33:4F:B7:90:4D:2C:93:D9:1B:DD:EF:55:2D:DE X509v3 Authority Key Identifier: keyid:94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3231392e3233322e3132382e302f31392d3332203d3e20313337373935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.232.128.0/19 Signature Algorithm: sha256WithRSAEncryption a6:01:61:1a:ba:dd:2e:a5:f6:70:bd:52:89:2a:87:3a:a3:7a: 06:2e:96:88:54:6c:74:0a:5a:71:7e:11:64:d3:9c:c7:1a:29: ae:16:ac:0e:b7:0a:25:ec:7a:d4:1a:cd:20:9f:08:fb:5c:66: 47:2a:20:33:a6:13:59:36:b6:14:a6:b7:ab:2b:a9:3a:cd:11: 0d:2d:fd:4c:f7:33:c3:05:77:2c:06:51:99:9e:32:a7:27:16: 60:a3:f7:dc:7e:d5:bb:72:9a:87:95:98:a0:45:71:64:f1:f6: b4:3c:88:3e:55:bb:57:9f:ee:ad:76:e7:5c:f7:3d:96:82:57: 96:a3:8f:e5:22:8a:e8:cf:6a:bf:2b:64:52:a5:d1:52:85:c2: df:50:16:3b:3a:e0:ae:a1:ca:0a:2e:be:ab:e2:e9:ef:41:c4: b5:c2:8c:ee:8b:66:52:88:0d:ae:ba:6d:26:07:fa:42:0d:05: ee:f1:bc:be:f6:43:43:ed:da:3d:9d:0d:33:bf:f8:60:9b:9f: 4c:f9:d5:36:41:25:14:c5:9a:d7:2f:f6:f8:c9:68:f2:1a:23: 1a:c6:2c:a3:ea:1d:d1:12:fa:3f:62:eb:90:98:d3:09:56:b7: 9f:92:c6:58:8a:40:f1:6f:60:be:6d:03:85:d5:7c:27:fb:f7: 43:f8:53:28 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUdnu6Lqlx8Qomcr+K8bYRNSnb24UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRBMDQwMDdDMTg5MzRFRUZENzc5NDQ1QkE1MzQ5QThG QkRCMTlERjAeFw0yNjA0MTUwNzM1NThaFw0yNzA0MTQwNzQwNThaMDMxMTAvBgNV BAMTKDg3MzMzQzRBRTlGQTMzNEZCNzkwNEQyQzkzRDkxQkRERUY1NTJEREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Ll2QtYPjtIagm+hTY0i/N0K1 sm2cCsYIs5pXTc76CszgoxZukJgy392eLrq+5fpv70GLDxCAzul8zl8SVwZVC7kI ZhC2TJ3c/+pBkqnVv02qkgLL1+FBaYVpzL32XC3DNXRtuxVb4p9Z5CFqLjmWohft Wdeh+Aq9zbQKLD93DuArKZ9xvpARWH301ZTflesTwOy9TRXBdTIqcKZtAc6Whlz2 n0xpEqx99xHuA1U3gt+/xKyVphZVGLweasm9BZWoAwPEfmjSuzAeYTs9FOwzR7LS 2r9GQ7GY9M3+X18me6n/HHXn/O4iP1VIfMHvD0QLz8vNl3zx7TNxfUDoHSCFAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUhzM8Sun6M0+3kE0sk9kb3e9VLd4wHwYDVR0j BBgwFoAUlKBAB8GJNO79d5RFulNJqPvbGd8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcwMDQwMDIwNTAzNzU3MC8wLzk0QTA0MDA3QzE4OTM0RUVGRDc3OTQ0NUJBNTM0 OUE4RkJEQjE5REYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTRBMDQwMDdDMTg5MzRFRUZENzc5NDQ1QkE1MzQ5QThGQkRCMTlERi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk2NzAwNDAwMjA1MDM3NTcwLzAvMzIzMTM5MmUz MjMzMzIyZTMxMzIzODJlMzAyZjMxMzkyZDMzMzIyMDNkM2UyMDMxMzMzNzM3Mzkz NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEBdvogDANBgkqhkiG9w0BAQsFAAOCAQEApgFhGrrdLqX2cL1S iSqHOqN6Bi6WiFRsdApacX4RZNOcxxoprhasDrcKJex61BrNIJ8I+1xmRyogM6YT WTa2FKa3qyupOs0RDS39TPczwwV3LAZRmZ4ypycWYKP33H7Vu3Kah5WYoEVxZPH2 tDyIPlW7V5/urXbnXPc9loJXlqOP5SKK6M9qvytkUqXRUoXC31AWOzrgrqHKCi6+ q+Lp70HEtcKM7otmUogNrrptJgf6Qg0F7vG8vvZDQ+3aPZ0NM7/4YJufTPnVNkEl FMWa1y/2+Mlo8hojGsYso+od0RL6P2LrkJjTCVa3n5LGWIpA8W9gvm0DhdV8J/v3 Q/hTKA== -----END CERTIFICATE-----Generated at Sat Apr 18 04:14:29 2026 by rpki-client