$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096979629178093570/0/3230322e3137302e3132382e302f31392d3230203d3e203137363233.roa File: 3230322e3137302e3132382e302f31392d3230203d3e203137363233.roa (raw, json) Hash identifier: RYq7ANwiqA0OP0VLo5jGu73J0A7WVOnB31b45oovMGg= Subject key identifier: 88:3A:50:04:7B:98:30:4A:2B:91:A6:F6:D5:DA:E3:53:5B:7D:3D:91 Certificate issuer: /CN=0491F42A3990BD60D32248583741F141AC61F0EE Certificate serial: 363E23DD1F34A791B546507124FF681364B62DB6 Authority key identifier: 04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/3230322e3137302e3132382e302f31392d3230203d3e203137363233.roa Signing time: Thu 16 Apr 2026 02:26:40 +0000 ROA not before: Thu 16 Apr 2026 02:21:40 +0000 ROA not after: Thu 15 Apr 2027 02:26:40 +0000 asID: 17623 IP address blocks: 202.170.128.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:3e:23:dd:1f:34:a7:91:b5:46:50:71:24:ff:68:13:64:b6:2d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0491F42A3990BD60D32248583741F141AC61F0EE Validity Not Before: Apr 16 02:21:40 2026 GMT Not After : Apr 15 02:26:40 2027 GMT Subject: CN=883A50047B98304A2B91A6F6D5DAE3535B7D3D91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b5:d3:e3:ff:24:25:5a:d7:92:82:49:82:3c: f9:49:8a:d9:c6:69:d0:f9:77:64:0c:9a:f1:5a:9b: 6c:1c:77:56:a5:27:43:1a:74:e4:46:79:14:38:8d: b8:79:74:e5:cd:15:44:77:55:2c:48:ed:80:02:46: 57:02:d9:cf:10:86:54:61:71:e1:9a:d5:de:4b:54: 73:d0:db:7f:96:71:7d:18:f2:64:39:cf:e3:84:d3: 24:c5:44:46:4b:56:51:42:43:4f:ff:e5:65:9e:63: ae:f6:e0:ae:f7:56:5b:c2:3c:02:25:9a:33:ea:e7: cc:0d:01:7e:af:f0:9d:e0:e7:78:b7:4f:24:a8:35: b4:79:45:59:fc:f7:64:e4:97:1a:c4:13:3e:00:03: 1a:8e:51:15:cf:0d:07:6c:43:bb:ad:2e:bd:47:ca: a5:a7:a8:65:32:61:b6:ae:8e:4f:77:5d:25:ba:8e: 50:26:64:41:67:1c:3f:9c:51:7c:82:a4:29:33:4e: 3c:b3:de:5c:11:e7:c0:52:94:67:bf:7e:17:e0:d0: e9:26:7b:f6:6d:b0:e2:aa:f4:65:76:29:6f:d7:07: 38:51:54:bd:22:ca:60:7f:57:b1:38:7a:d5:e4:7c: 2d:84:83:3a:85:a5:98:48:2e:f2:58:92:be:13:be: cb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3A:50:04:7B:98:30:4A:2B:91:A6:F6:D5:DA:E3:53:5B:7D:3D:91 X509v3 Authority Key Identifier: keyid:04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/3230322e3137302e3132382e302f31392d3230203d3e203137363233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.170.128.0/19 Signature Algorithm: sha256WithRSAEncryption 42:62:93:2c:64:0f:3d:f9:09:cc:eb:0b:8f:e7:ad:d6:d3:8c: 36:d2:62:e1:1c:8d:2e:ec:53:3f:60:f2:28:9f:07:37:a5:6d: e9:3b:db:c2:fc:77:3e:a0:40:83:5e:74:98:f2:8f:e7:18:ec: fe:6f:06:96:ce:7c:70:a0:68:01:61:89:9d:3e:aa:bf:5f:f0: 07:8e:37:13:16:38:fa:4d:60:03:68:9e:20:c0:fd:91:53:8e: 63:49:84:d2:af:d2:bc:d5:a9:fe:16:dd:88:bc:29:82:9d:07: 47:12:02:18:de:19:f6:59:5b:5e:cd:72:ca:59:7f:59:12:fe: 4a:9e:3e:7d:54:bf:47:64:18:7c:b4:13:13:89:7e:e6:e6:d9: 1c:7c:4a:0b:cc:03:80:cd:17:cd:5b:20:66:64:b0:3b:05:02: 4c:f3:ec:6d:3d:00:86:cc:49:52:08:be:a3:e8:81:73:f7:6f: 75:35:44:8f:a2:de:0e:6b:32:53:bd:fb:29:4e:69:14:99:34: 05:04:17:f9:2f:96:06:57:7b:e5:8f:52:cc:16:ce:58:f0:26: 48:5c:58:2a:a3:9c:81:f4:a9:d7:c3:bd:d1:97:94:ac:5c:66: 53:00:b1:f4:2e:70:dd:4b:02:17:d3:a0:0b:7d:fa:e6:d4:5a: 0d:ec:96:e5 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUNj4j3R80p5G1RlBxJP9oE2S2LbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ5MUY0MkEzOTkwQkQ2MEQzMjI0ODU4Mzc0MUYxNDFB QzYxRjBFRTAeFw0yNjA0MTYwMjIxNDBaFw0yNzA0MTUwMjI2NDBaMDMxMTAvBgNV BAMTKDg4M0E1MDA0N0I5ODMwNEEyQjkxQTZGNkQ1REFFMzUzNUI3RDNEOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCstdPj/yQlWteSgkmCPPlJitnG adD5d2QMmvFam2wcd1alJ0MadORGeRQ4jbh5dOXNFUR3VSxI7YACRlcC2c8QhlRh ceGa1d5LVHPQ23+WcX0Y8mQ5z+OE0yTFREZLVlFCQ0//5WWeY6724K73VlvCPAIl mjPq58wNAX6v8J3g53i3TySoNbR5RVn892TklxrEEz4AAxqOURXPDQdsQ7utLr1H yqWnqGUyYbaujk93XSW6jlAmZEFnHD+cUXyCpCkzTjyz3lwR58BSlGe/fhfg0Okm e/ZtsOKq9GV2KW/XBzhRVL0iymB/V7E4etXkfC2EgzqFpZhILvJYkr4TvsvhAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUiDpQBHuYMEorkab21drjU1t9PZEwHwYDVR0j BBgwFoAUBJH0KjmQvWDTIkhYN0HxQaxh8O4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk3OTYyOTE3ODA5MzU3MC8wLzA0OTFGNDJBMzk5MEJENjBEMzIyNDg1ODM3NDFG MTQxQUM2MUYwRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDQ5MUY0MkEzOTkwQkQ2MEQzMjI0ODU4Mzc0MUYxNDFBQzYxRjBFRS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTY5Nzk2MjkxNzgwOTM1NzAvMC8zMjMwMzIyZTMx MzczMDJlMzEzMjM4MmUzMDJmMzEzOTJkMzIzMDIwM2QzZTIwMzEzNzM2MzIzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBcqqgDANBgkqhkiG9w0BAQsFAAOCAQEAQmKTLGQPPfkJzOsLj+et 1tOMNtJi4RyNLuxTP2DyKJ8HN6Vt6Tvbwvx3PqBAg150mPKP5xjs/m8Gls58cKBo AWGJnT6qv1/wB443ExY4+k1gA2ieIMD9kVOOY0mE0q/SvNWp/hbdiLwpgp0HRxIC GN4Z9llbXs1yyll/WRL+Sp4+fVS/R2QYfLQTE4l+5ubZHHxKC8wDgM0XzVsgZmSw OwUCTPPsbT0AhsxJUgi+o+iBc/dvdTVEj6LeDmsyU737KU5pFJk0BQQX+S+WBld7 5Y9SzBbOWPAmSFxYKqOcgfSp18O90ZeUrFxmUwCx9C5w3UsCF9OgC3365tRaDeyW 5Q== -----END CERTIFICATE-----Generated at Fri Apr 17 20:17:09 2026 by rpki-client